last executing test programs: 1m25.108824092s ago: executing program 1 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r2 = socket$igmp6(0xa, 0x3, 0x2) clock_gettime(0x7, &(0x7f0000000340)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0x26) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x11c, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb7, 0x3, "b0aabe0a0bbe4e43fd955eaa058d3f807bc429a9e64b0708f28634ce5fea12e0e66ce614081cc037ac8f8012ef0083fe686ed9d93e8ba172652cb93c9be5654f6a0ec9f2760311ace6a1d60f63126eb952e9fcbcc6eec28f0edaa74cda345b5ad5decfdb577ec1a4721a2504e031122c2f196e60e626095861a3f24e4da9e99cee1c36f89ab8e0b5d5b20dbacf8302bd4d61f45ef840115a30812c452cdabbf22605fe656e0a110b67f8579d6e04be7d183659"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "bf6e3d7de75ff33db593e9d8f49fe88f12c6ede04a74fc7e872f1a8fa14bf788c9914c00"}}]}]}, 0x11c}}, 0x0) 1m24.880128898s ago: executing program 1 (id=1785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x22) 1m24.411074407s ago: executing program 1 (id=1790): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'ip6gretap0\x00', @remote}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x0) sendmmsg(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="313f7ac12164f7", 0x7}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m24.282966785s ago: executing program 1 (id=1792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004000000000700000000000000ffffffffff0800074001000001240006801400040000000000000000000000000000000001"], 0xb8}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd29, 0x25dffbff, {}, [{@nsim={{0xfcab}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x81}, 0x1, 0x0, 0x0, 0x800}, 0x6b9d46f36f6b28f7) 1m24.146366045s ago: executing program 1 (id=1793): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) 1m23.916323016s ago: executing program 1 (id=1799): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={0x0, &(0x7f00000014c0)=""/229, 0x0, 0xe5, 0x0, 0x10}, 0x28) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) (rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) (rerun: 64) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="0810010062d748f8a832c1961621fdc175a86df60c69ac9d5ae63f18890135edbbf9148402e07f24fd5e16813f576f449ffb08d12b43635aa936a19ce0bafceafca2bff900703d059f9789a5175df926c8006dba662321f7fc21f976c4b2caa9456bdcf4fb7586349e19fd388f397748f6ae0409b37d7c660dd460490c2cb064ef0f248c884f83864b9bdb15b38c2039a3de9c273e084fa661234f15e112aee23d51381a3933b3b4354687778fd8dc66a3344ea62d48a93991e29a2d8c90586d1cc49f9774b7d575352f4bfac9652e", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4881) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) (async) recvfrom$rxrpc(r0, &(0x7f0000000300)=""/70, 0x46, 0x1, 0x0, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="58000013558fac9d0b34ec38958300", @ANYRES16=r13, @ANYBLOB="010000000080000000003e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500820000000000"], 0x58}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000002ac0), 0x1, 0x50008000) (async) sendmmsg(r11, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="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", 0xbee}, {&(0x7f00000014c0)}], 0x4}}], 0x1, 0x0) 1m8.852999701s ago: executing program 32 (id=1799): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={0x0, &(0x7f00000014c0)=""/229, 0x0, 0xe5, 0x0, 0x10}, 0x28) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) (rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) (rerun: 64) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="0810010062d748f8a832c1961621fdc175a86df60c69ac9d5ae63f18890135edbbf9148402e07f24fd5e16813f576f449ffb08d12b43635aa936a19ce0bafceafca2bff900703d059f9789a5175df926c8006dba662321f7fc21f976c4b2caa9456bdcf4fb7586349e19fd388f397748f6ae0409b37d7c660dd460490c2cb064ef0f248c884f83864b9bdb15b38c2039a3de9c273e084fa661234f15e112aee23d51381a3933b3b4354687778fd8dc66a3344ea62d48a93991e29a2d8c90586d1cc49f9774b7d575352f4bfac9652e", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4881) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) (async) recvfrom$rxrpc(r0, &(0x7f0000000300)=""/70, 0x46, 0x1, 0x0, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="58000013558fac9d0b34ec38958300", @ANYRES16=r13, @ANYBLOB="010000000080000000003e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500820000000000"], 0x58}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000002ac0), 0x1, 0x50008000) (async) sendmmsg(r11, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f00000004c0)="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", 0xbee}, {&(0x7f00000014c0)}], 0x4}}], 0x1, 0x0) 26.312344566s ago: executing program 5 (id=2455): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) (async) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000040) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x44044) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xb7b628a9c36e8ccb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c4) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c000010}, 0x0) (async) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) sendmsg$kcm(r7, &(0x7f00000004c0)={&(0x7f0000000740)=@llc={0x1a, 0x110, 0xaf, 0x9, 0x7, 0xfc, @remote}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) 25.91449552s ago: executing program 0 (id=2461): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14154e6d70a11c5749bd7002fadbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14154e6d70a11c5749bd7002fadbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) (async) 25.640123102s ago: executing program 0 (id=2465): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) accept(r0, 0x0, 0x0) 25.540630768s ago: executing program 5 (id=2467): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d285f29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d285f29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x17}, @mcast2, 0x0, 0x9, 0x0, 0x600, 0xf, 0x800000c0, r2}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000002180)=ANY=[], 0x20) (async) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000002180)=ANY=[], 0x20) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000380)=""/194, &(0x7f0000000480)=0xc2) r6 = socket$inet(0x2, 0x1, 0x6) connect(r6, &(0x7f0000000200)=@in={0x2, 0x1500, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005700000095000000000000005e13d5885ee831eaf66694c985e38055dc949232768069fb7b88c19cca6ba56a063985095342a268460ed7efb34ebadb57c7dd53619d15b7aad644dc3af415d334ee2687b808931542990693f7c5056481c888ac2b3a2c1d3f02dd4d0e66ec3ef4466fde01cbfaac7dfa96b872a0549bba190896d612c2434939cccbbabe1a6cd4c1eb0dde8ee810f5c9b4f1c7db8b07906d780a824455cbb9cb2d442c1a5697c777187dbe8b"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005700000095000000000000005e13d5885ee831eaf66694c985e38055dc949232768069fb7b88c19cca6ba56a063985095342a268460ed7efb34ebadb57c7dd53619d15b7aad644dc3af415d334ee2687b808931542990693f7c5056481c888ac2b3a2c1d3f02dd4d0e66ec3ef4466fde01cbfaac7dfa96b872a0549bba190896d612c2434939cccbbabe1a6cd4c1eb0dde8ee810f5c9b4f1c7db8b07906d780a824455cbb9cb2d442c1a5697c777187dbe8b"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x4, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x4, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c) 25.124649096s ago: executing program 2 (id=2471): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @empty, @dev={0xac, 0x14, 0x14, 0x15}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a80)='Z8', 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x74, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) 25.03610444s ago: executing program 2 (id=2472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2503"], 0x114}], 0x1}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000000)=0x4a3, 0x4) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000240)=0xc8, 0x4) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) (async, rerun: 32) getsockopt$sock_timeval(r3, 0x1, 0x42, 0x0, &(0x7f0000000080)) (async, rerun: 32) recvmmsg(r1, &(0x7f0000000040), 0x3fffdf2, 0x45833af92e4b39ff, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, r4, 0x5, 0x70bd26, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x10000}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x90}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x200}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xfffffffb}]}]}, 0x4c}}, 0x0) (rerun: 32) 25.035753525s ago: executing program 3 (id=2473): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="000000e400000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.950731095s ago: executing program 3 (id=2474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) 24.892865998s ago: executing program 2 (id=2475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c0000440000000000069078ac141400ac1e00018307dfac1414aa440c05030000000600000000860600"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0200000000000000"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000ffdbdf2572000000080003009a389bd392aef996e39f9aa72514d01e93c8f0ef2db5e65008bae84e5c404bb49ff613cf00248a586f6432d87142a6d36902cd81b49e08cff0773a", @ANYRES32=r2, @ANYBLOB="0c009900040000005a000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r3 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000080)=0x7, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0x890) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000000), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf253500000008000300", @ANYRES32=r8, @ANYBLOB="14005500ac90fd2dcfe2fb252b6c0385f0af50de"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c0000440000000000069078ac141400ac1e00018307dfac1414aa440c05030000000600000000860600"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0200000000000000"], 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000ffdbdf2572000000080003009a389bd392aef996e39f9aa72514d01e93c8f0ef2db5e65008bae84e5c404bb49ff613cf00248a586f6432d87142a6d36902cd81b49e08cff0773a", @ANYRES32=r2, @ANYBLOB="0c009900040000005a000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) (async) socket$unix(0x1, 0x1, 0x0) (async) recvmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000080)=0x7, 0x4) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0x890) (async) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000240)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000000), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf253500000008000300", @ANYRES32=r8, @ANYBLOB="14005500ac90fd2dcfe2fb252b6c0385f0af50de"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20000044) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) 24.892501715s ago: executing program 3 (id=2476): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2020000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$phonet(0x23, 0x2, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff200000000000000000000000000000000000000000000000000a000000000000fd8c000000000000020000000000000800000000000000000000ac141424000000000000000000000000000000003c000000000000000000000000000000000000000000000100000000040100000200"/180], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@empty=0xac141424, @in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x4, 0x0, 0x2, 0x8, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x0) 24.811711893s ago: executing program 2 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2004c004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x8, 0x80, 0x2, 0x0, {{0xe, 0x4, 0x2, 0x9, 0x38, 0x64, 0x0, 0xfc, 0x4, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x3, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x1ff}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r4, 0x7800, 0x40, 0x3, 0x3ff, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x67, 0x0, 0xb8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@noop, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x700, 0xb6, 0x4, 0x100, {{0x2d, 0x4, 0x1, 0x22, 0xb4, 0x67, 0x3, 0x5b, 0x29, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x6}, {@remote, 0xffff}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0x34, 0xe5, 0x3, 0x7, [{@local, 0x2}, {@multicast1, 0x7}, {@broadcast, 0x1}, {@private=0xa010101, 0xa905}, {@local, 0x80}, {@broadcast, 0x5}]}, @ssrr={0x89, 0xb, 0x26, [@broadcast, @remote]}, @timestamp_prespec={0x44, 0x44, 0x72, 0x3, 0x7, [{@loopback, 0x9}, {@empty, 0x7}, {@multicast2}, {@local, 0xffffff18}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0x1b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x400}]}]}}}}}) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r5, @ANYBLOB="46000600000000002400128009000100626f6e640005000014000280050001000200000005000e0005000000d1f8fdf2cf126ff30feeeb7ba2180c003121929db6e4e11770ac7ad3c89d58a4e3abf809bc12d9e667e41e35344aedca90acb15552e47ce7c744628da6607b40f1441883c387e546bfd4295bf272a8f8457279afcda0d86be462a37156030bab888146e89e955737b91b8ef591459519d4046b680e773db5ebfd9bee6bf63eacf7d02225f147d08d71a92aedd60b"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r5, @ANYBLOB="08001b"], 0x30}}, 0x0) 24.787688496s ago: executing program 3 (id=2478): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r5}, 0x8) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000001000)={&(0x7f0000000300)=@hci={0x1f, 0x4, 0x6}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000380)="b5fbc5a8a85e27782b1801df499d0b252d6b043efba0446c5b8f6d24abe47c46c47f99f86c45932d3726c146b957a120e7440af559a2c5bb8a301b", 0x3b}, {&(0x7f00000003c0)="64df55c0dc8a4958a9c669e516020ea0a97aab889559f7c30be73795955dd20a397ee12de4165941d0b5ed59320d2fc7443cf673446bd5fc7d19306faee2ee2d41883a4d3f1d77b4093e1c1a8e777a1b290be7dc8d11698045ac1369ac875e65376ff04162cfff6dbe75bcf97ad1fe2abc3437544a6ade3f0f963514ea181161aff8486cf968d058c441536490a01c72404e35e702cdfd60b629219ae3a88dfe73b31a7d946459fd5f81d376ffcb2290af8dcb467f4bb0b92d2a98d29de691d709f2844f98750754", 0xc8}, {&(0x7f0000000b00)="0f1f3990d3508c9d45bb603e656fbd85b9e3a940ec70a87f8b327c5f38a2433deb3fe5940f5b797cc8f07991bc9359620dd51462f6adb4a49372df137592e2ed6eba82d294514f7d9878ea089e7f9a27f18f9861b4af96709157f580c0223ec845451a38098403e3ca4e38fa91", 0x6d}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="0b6e7721cfd1b9912aed18aa7a04417c2d80ab296c6e48d4dd0db008c6c3141a8351f4cec18bafe9e0b280afa64f4ab390dc015d9dbc17f217c9958a13986b859d100178e921000f0945ad2e440a8e73178bfc0c6f1225e592b8179129f4da123dc35e6a09f4ac8c7f701d082e5f2afeb7e959663a3a5b6b6db4732af45a624b7e2a1a161e481052a1330bc1288b50773965b61b663832c3fbb5ba101dd25f81e8beee77", 0xa4}, {&(0x7f0000000c80)="ca4ae6dfb28550ba99fff4b4b924e20ea4f3a0260dead642a682c8254736b3c366ba67572837d3da3ee40fa3785210f5d32c14b116d0480c9f4690d0074b434120483016aab229d1d8356ddadd0174d05396c52d7dce3569f0ffb55049827dc3bb7e8dbfa19b3b74b9fbad8f5f66d9c71333efa9a2da96111b45915f01e949f9912d87d31aeeddc623ba2dcba05756e5a6acec9ab7443bac1cbdca5ae28b82d27134e87e83e345a59b4ce24df8ec2d8dd50c865fdd9df2ed7da05814375aaf30", 0xc0}, {&(0x7f0000000d40)="f634abb76b542d67ce45479705150dc41c3072dae68963ef5849a79c095bd92b2930246e2c60763b5f526a69b2ee92b0ca40d513a462d8e95dff885fa1021cbff60d74ad737bf3290d245fdc11be2a010f004d68f8479773a8cf37b94767a25322fa84eaa165363255f18eb5fe7420e891effad5ba6c16ee0228c7ea85fd28ccd91f26ef819d72971c6d4c07a47f86b8ee9b6396d312c5a515596834", 0x9c}], 0x7, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x168}, 0x0) writev(r7, &(0x7f0000001140)=[{&(0x7f0000001040)="963a5ac240fa33269ce55f992369f691b8f2a76cc70b70f4fab3ac5d4d6bc99f33b1947e64939abde48c1d71c28de7b69d2dd16245b9ff2cd94c41c048d879d830c30aa3f299826e2b40acbe70a07600408643931d7b0039e12614020d4f7c424adecfb168fdd76da4ed180d97dbae1d", 0x70}, {&(0x7f00000010c0)="4c797b194601cb9f8a3a807f12eefee04545a2858146ac5cefa2b3deec8d9a50726c7fcd1fae25dd2fcc92c801fdcb40a9ef51a46501649369856dd4c2cbfcf17565b8dbe465c745ae4996f384de7a38f2adcadde2", 0x55}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newchain={0x51c, 0x64, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc8b94d7ec1ee5514}, {0x7, 0x1a}, {0x4, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x8001}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x9}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xf}}, @filter_kind_options=@f_matchall={{0xd}, {0x46c, 0x2, [@TCA_MATCHALL_ACT={0x158, 0x2, [@m_sample={0x154, 0x5, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xa8e}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xccc00000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}, {0xfe, 0x6, "2e8c287a47031a45426b19e117f7b99a44d4b16bcc9e3fd6fb1138831ca220703eda27aaed252ebb4440c0abfc04684a3e7576e6c8d51acf6a3254173e95652489fb06d66044010d5f8797cab58ab60a27842cdc2ffe3421c346f77d5939c75b14663067d191ca8d0b03dec1fa2c54dc3b29a36e51f1099a13fafcee423377119d79b8f52a260606456c2c2e5ec2ea651a790968288cf275f45f626b5acebe5224824e2b891e1a39ada01f0a49e99422b29748f542827a56e176d8ae955e4bd4a933e98af04b998228a55c7646d4d8422e546d7f15f88158d88dfdc18c7dd7a20909e0c1e6ec2634e296027d6ee928e91f175d70ae2dbd39f6b1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xa}}, @TCA_MATCHALL_ACT={0x308, 0x2, [@m_xt={0xe0, 0x1a, 0x0, 0x0, {{0x7}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x9b, 0x6, {0x0, 'filter\x00', 0x8, 0x1000, "6fa273c65e03079b168e7586ac8db38ed1506adf1626066207301ac4f30292f94f5214eb8071a5f7f541d685e9ba46759a64a4199d98b6781cd87b18decd81f36569bb8dbe3beee44db01182ce3c1dd8a4d69308cc6bd7341e3247ade535d2401851a920887ba40ad6bfe6c760c0ae53fe"}}]}, {0x19, 0x6, "8394440382fff8b1883cbd0bb05300659af2fa9cda"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_csum={0xec, 0x17, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x8db662df5e1e6ef5, 0x8, 0x10001}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xcdb, 0x5, 0x0, 0x3ff, 0x9}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x31, 0x5, 0x5, 0x0, 0xd22a}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x200, 0x4, 0x200, 0x9f}, 0x2b}}]}, {0x4f, 0x6, "f1aff40d81fd0513e4a3e13867761a145506a36e03ba3807fa194dd7d8f7574fc3e9306de68d5c13159da3d2e3dfb524673d9e372a9b21f1032f004407b64a82b188ebc58d9431bdbc7729"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x138, 0x16, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xfffffffa, 0x3, 0x2, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x5, 0x20000000, 0x8, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0xe, 0x9, 0x10000000, 0xce13, 0x6}}, @TCA_DEF_DATA={0x9, 0x3, 'syz0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x6, 0xffffffffffffffff, 0x63, 0xffffffff}}, @TCA_DEF_DATA={0xa, 0x3, '-\\(&[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x6, 0x0, 0x400, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'socket\x00'}, @TCA_DEF_DATA={0x7, 0x3, '.}\x00'}]}, {0x65, 0x6, "87aa815ea50eecf6e6ce6027c95f32e00eb085db3779c965e92153e33829a4c440a672fe3eafdd93db454dbe181b2c61d4d2ce4a917ee7e433fa94bf95fcff88a6fa8b0cd6d9a5b5a4d35bce49006af93be007097d9c262ecbd69048c928cb9ddb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x51}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x5}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x2}}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}]}}]}, 0x51c}}, 0x4c840) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000300000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x10}, 0x4008094) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @rand_addr=0x2}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r9, 0x111, 0x4, 0x1, 0x4) 24.681148782s ago: executing program 2 (id=2479): socket$netlink(0x10, 0x3, 0x12) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @remote, @link_local, @dev={0xac, 0x14, 0x14, 0xe}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x36, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 24.657354221s ago: executing program 0 (id=2480): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x3f, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@typed={0x4, 0x110}, @generic="5322a0ae22452709e55036dea2251c23dc3012"]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) 24.562369464s ago: executing program 3 (id=2481): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000380)) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000180)=[{&(0x7f0000000080)="ff428c730fca627af9e1947083d0ef82", 0x10}, {&(0x7f00000003c0)="a5cd4c9b153432f968a1b18bd0ad76e06c03d3d61f57c5e5cfc7c6ea85e463b2252356c16f920fddccba04699bcdd8aa0e4eec0df8378c6baf9f0a44178df245a9c71dc2509b0ec61551634106dfe74278367f5d7d9264277043b2cbe4e13e6d13880b45b308113d7d339e2daa405554c3971310182f5cfefce286094affb6195f2b500262ffc44f", 0x88}], 0x2}, 0x2000c044) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_BUCKETS_LOG={0x0, 0x8, 0xf}]}}]}, 0x48}}, 0x20008000) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0xf) socket$pppl2tp(0x18, 0x1, 0x1) 24.477259224s ago: executing program 4 (id=2482): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x4, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) close(r0) 24.418973924s ago: executing program 0 (id=2483): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 24.398375701s ago: executing program 5 (id=2484): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xdf, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x6, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 24.256833375s ago: executing program 4 (id=2485): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="000000fd00000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.240369808s ago: executing program 5 (id=2486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e62, 0x4, @empty}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x124, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xcf20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x333}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4b7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x4c800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 24.209128517s ago: executing program 4 (id=2487): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffb0b7030000000000008500000005000a00bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.096563984s ago: executing program 4 (id=2488): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000080)=0xffffffff, 0x4) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc081) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000400)={0x9, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) (async, rerun: 64) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) (async, rerun: 64) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x178, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_EXP={0xec, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7f}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0xbc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}, @NFQA_PAYLOAD={0x34, 0xa, "83cd9c8850f5afee4d2f2cddaa7381037c6eeb4ce3c1afc8f596aa19f391dc42b8e26a4d501f84d6668e4de370436525"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x60}}]}, 0x178}, 0x1, 0x0, 0x0, 0x41}, 0x4000010) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000008c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000900)={'wg2\x00'}) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000940)=0x1a, 0x4) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000e80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f00000009c0)={0x450, r2, 0x308, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x66}}}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a0}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x320}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x282}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd1}, @NL80211_ATTR_CSA_IES={0x3d8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x8000, 0x10, 0x2, 0x3, 0x101]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x0, 0xb, 0x9, 0x9, 0x224]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x7ff, 0x5, 0x1, 0x401, 0xa, 0x7]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x15, 0x7f, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x10, 0x8}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe0, 0x80, [@tim={0x5, 0x6e, {0x58, 0x3e, 0xce, "acf9955a02bf4423f1b7f5336c151b61b7e46e1f493023814f6c961e9b0ea51845101573ccf85468a47ff0649a432bc511917be6d732daca8ff0b5e6bbfc24e3d3f7d3eeb1ec8c70554c8adff14ff65f193d044a3e12e4c61910fa6e66baaecd4b91e797624fb27b4ec088"}}, @dsss={0x3, 0x1, 0x95}, @channel_switch={0x25, 0x3, {0x0, 0xac}}, @measure_req={0x26, 0x62, {0x0, 0x3, 0x30, "a3d3f45b550bebdf5ca7414b0e190ffceac955614efd09228c620afb859436fade483914ab13dace247844dabbb826816850c51e572ee04ffee0c30cf982da52467a39a85bac21f8502df2bd9ea2744b2e5d91246399b0d4eb362353d8104a"}}]}, @NL80211_ATTR_BEACON_TAIL={0x120, 0xf, [@tim={0x5, 0x88, {0x9, 0xe8, 0x8, "a25e043fa2f71e17fa7a784497ec38909eda9b177065b82ac9d46edb0833bcdc89e6e1fd976e35eaeb4fd04e4c0199d24a30ca09a107a520f14170793fea4f04f357dc81f0dd05e34486ae1788df461ef7d698ef8154c585a4cacba643441a2bd1c61d54956e3e5a156465e488421766fce131d604d3c39f5dd11e9fae93d7aa6e61993956"}}, @dsss={0x3, 0x1, 0x28}, @random_vendor={0xdd, 0x87, "addc0eb6f8d04f47505e6a587b50c92c8266b73a2bb3702a11117a075ff6999efcfc4a14da545adc853b43855a26cfe26706dc502f2478c81fcde8ef7b0e718311884df190e2bf0625087a12f815bd703cebad57ee0df583dda4fc4e0a4eda4de68f1b5adc00c07c3936e189c46237bf56593c6125ee5bad8d7d89ac1147966c9f7c4838d37614"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0x34, 0x10}}]}, @NL80211_ATTR_BEACON_HEAD={0x12e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @initial, {0x4, 0x4}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x3, @default, 0x40c8, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xf8, "60c39be8206507774457c274612c83adb7219573d409dedb3e775b19f33048cba10bac746a278c4397db4213de3cc4bb5c001a51388a937f8e7766c8dc6f6e4d21a84f9893eea2fd270480c86d51b0594ce46f72f225556295f776177f1a9e6f76128e7ad2813ce0a6812ff6cd4fca687677bb9e5c0c44cdf8ee0a04482e19e22aee449ed8fc040e133b8cf8495ec2565261cf1df3ed042c41caa6b4f59ab9e617a6376104dce9dc802a327149d33364badeb713de1e7019809a9d32811acc418c070eb18ecf29a8b58d1b3de324a3534ecfb6eb9c1b7476d29a96cd5b23b8190bfd4bf0e27431474a0da0abdb42b0db99de686dea831535"}]}}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@ibss={0x6, 0x2, 0xc}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x1, 0x0, 0x7}}, @measure_req={0x26, 0x9, {0x0, 0xd, 0xfa, "e0e2ae0117b9"}}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0xf, 0x1}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @gcr_ga={0xbd, 0x6, @device_b}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x24, 0x5}}]}]]}]}, 0x450}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000ec0)={"c9d05a5aff4bb29584d13e6892a20899", 0x0, 0x0, {0x7, 0x399}, {0x9, 0x6}, 0x3ff, [0x1ff, 0x7, 0x3ec, 0x7, 0x5708, 0x9, 0x7fff, 0x6, 0x9a0, 0xffffffff00000000, 0x100000000, 0xffff, 0x2, 0x5732, 0x4, 0x9]}) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000fc0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001000)={"f1e0884754ad9da338f1ea78d0eec4a9", r4, r5, {0x6, 0x1}, {0x6, 0xed}, 0xffffffffffffffff, [0x91c97e0, 0x1, 0x10000, 0xfff, 0xfffffffffffffff9, 0x4, 0x6, 0x2, 0x0, 0x1, 0xff, 0xab29, 0x7, 0x9, 0xef2, 0xb8a]}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001140), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x804) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001340)={&(0x7f0000001280), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x3c, r6, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4008841) (async, rerun: 64) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, &(0x7f0000001380)=""/21, &(0x7f00000013c0)=0x15) (async) readv(r0, &(0x7f0000001900)=[{&(0x7f0000001400)=""/90, 0x5a}, {&(0x7f0000001480)=""/146, 0x92}, {&(0x7f0000001540)=""/99, 0x63}, {&(0x7f00000015c0)=""/80, 0x50}, {&(0x7f0000001640)=""/157, 0x9d}, {&(0x7f0000001700)=""/253, 0xfd}, {&(0x7f0000001800)=""/242, 0xf2}], 0x7) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000001cc0)={0x2c, 0x0, 0x0, 0x25bb, r0}, 0x10) 24.095684576s ago: executing program 0 (id=2489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x800}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c"], 0x6a) 23.975031597s ago: executing program 3 (id=2490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket(0x10, 0x803, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x10, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) ioctl$sock_ifreq(r3, 0x8943, &(0x7f0000000100)={'syzkaller1\x00', @ifru_ivalue=0x1}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0xa90, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9c0, 0xffffffff, 0xffffffff, 0x9c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xffffffff], [0xffffffff], 'bridge_slave_1\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x8c0, 0x8e8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0xe, 0x5, {0x2}}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x2, 0x3}, {0x80}, {0x4, 0x3}, {0x6, 0x2}, {0x250, 0x3}, {0x80, 0x2}, {0x800, 0x2}, {0x4}, {}, {0x2, 0x2}, {0x0, 0x2}], [{0x92, 0x5}, {0x7, 0x7}, {0xffffffff, 0x1}, {0x9, 0x98}, {0x9, 0x6}, {0xeb, 0x6}, {0x683f}, {0x0, 0xffff7d1d}, {0x36, 0x28000000}, {0x2}, {0x4, 0x400}], 0x0, 0x8}, {[{0x1a, 0x2}, {0x9a4c, 0x3}, {}, {0xfffffffd}, {0x4, 0x3}, {0x7, 0x2}, {0x9, 0x1}, {0x8, 0x3}, {0x26}, {0x8, 0x2}, {0x9, 0x3}], [{0x0, 0x443}, {0x4, 0x3}, {0x8, 0x7}, {0x7fffffff, 0x6}, {0x0, 0x5}, {0x4, 0x6}, {0xa5d, 0x7}, {0x22cd, 0x5}, {0xc0a5, 0x1}, {0x3, 0x8}, {0x8, 0xffff5503}], 0x8, 0x7}, {[{0xc5cf, 0x1}, {0x20000000, 0x2}, {0x4}, {0x2, 0x2}, {0xc, 0x3}, {0x40, 0x1}, {0x3, 0x2}, {0x1000}, {0x200, 0x3}, {0x3}, {0x6302}], [{0x61d, 0x2}, {0x81, 0x4}, {0x6, 0x10}, {0xfe, 0x7efb46fd}, {0x7ff, 0xd}, {0xfffffffb, 0x5}, {0x8, 0x7fffffff}, {0xa, 0x2}, {0xf978, 0x6cd}, {0x20fe6746, 0x6}, {0x0, 0x9}], 0xb, 0x9}, {[{0x6, 0x3}, {0x10, 0x3}, {0x1, 0x2}, {0x5, 0x1}, {0x8a, 0x3}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x1}, {0x3}, {0xd, 0x2}, {0x0, 0x2}], [{0x0, 0x1}, {0x1, 0x572}, {0x3, 0x1}, {0x4, 0x8}, {0x2, 0x7}, {0x1000, 0x6}, {0x7, 0x7b}, {0xa, 0x8}, {0x2, 0x2}, {0x7, 0x6}, {0xfffffffd, 0x7}], 0x1}, {[{0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x400, 0x1}, {0x7, 0x2}, {0x0, 0x1}, {0x5}, {0xffff, 0x2}, {0x6, 0x1}, {0x8}, {0x2, 0x1}], [{0x8, 0x6}, {0x8001, 0xfffffff6}, {0x4, 0x4}, {0x0, 0x7819a7b5}, {0x101, 0x2}, {0xb1, 0x9}, {}, {0x0, 0x3}, {0x0, 0x9}, {0x1ff}, {0xc, 0x9}], 0x2, 0x1}, {[{0x7fffffff, 0x3}, {0x1000}, {0x4, 0x2a2c5dee0a026e93}, {0x401, 0x3}, {0x3, 0x1}, {0x10001, 0x1}, {0x81, 0x3}, {0x6, 0x3}, {0x8, 0x3}, {0xffeff000}, {0x216, 0x2}], [{0x81, 0x4}, {0x7f, 0x3}, {0x4}, {0xfffffff7}, {0x99, 0x81}, {0x479, 0x3}, {0x3, 0x5}, {0xfffffffc, 0x80000001}, {0xa, 0x8}, {0x8, 0x2}, {0x7, 0x7fffffff}], 0x7, 0xb}, {[{0x7fffffff}, {0xfffffb5c, 0x2}, {0xfff}, {0x3, 0x3}, {0x101, 0x1}, {0x7f, 0x1}, {0x6, 0x3}, {0x8}, {0x9, 0x3}, {0x6, 0x2}, {0x6, 0x3}], [{0x4, 0x200}, {0x100, 0x20cc}, {0xc, 0x3}, {0x6f1c, 0xa0a}, {0x8, 0xfb}, {0x36, 0x1}, {0xc8, 0xe}, {0x2, 0x3}, {0x1}, {0x2, 0x6}, {0x2, 0x5}], 0x6, 0x9}, {[{0x101, 0x2}, {0x9, 0x2}, {0x2, 0x3}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0x1}, {}, {0x4}, {0x3, 0x2}, {0xfffffff4, 0x3}, {0x1, 0x2}], [{0x80000000, 0x9}, {0x3, 0x4}, {0x7, 0x7ff}, {0x2, 0x6}, {0x10000, 0x3}, {0xb, 0xa1}, {0x6, 0x25b}, {0x6, 0xe}, {0x8, 0xffff}, {0x52c3cc9b, 0x6}, {0x80000000, 0x80}], 0xb, 0x8}, {[{0x7fff, 0x2}, {0xd5}, {0x3ff, 0x1}, {0xfffff87e, 0x1}, {0x7fff, 0x2}, {0xd, 0x2}, {0x8000}, {0x1}, {0x2, 0x1}, {0xf72, 0x3}, {0xfff, 0x3}], [{0x7fffffff, 0x18d}, {0x7, 0x4}, {0x5, 0x7}, {0x9, 0x9543}, {0x9, 0x2}, {0xb51a, 0x401}, {0x4, 0x5}, {0x4, 0xe26f}, {0x0, 0x80}, {0x1, 0x6}, {0x60, 0x100}], 0x9, 0x2}, {[{0x1, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x5, 0x2}, {0x80}, {0x3, 0x2}, {0x9, 0x3}, {0x1, 0x2}, {0x6, 0x3}, {0x5}, {0xfffffff8, 0x3}], [{0x9, 0x80}, {0x4d6, 0x6}, {0x1, 0x3}, {0xd3, 0xfcf}, {0x3, 0x4}, {0xbd36, 0xca26}, {0x2, 0x102}, {0xed40, 0x5}, {0x5}, {0x1, 0x401}, {0x2a1c1ca8, 0x3}], 0x5, 0x7}, {[{0x1ee, 0x2}, {0x8}, {0x3, 0x1}, {0xa0000, 0x3}, {0x4, 0x3}, {0x4}, {0xfffffff7}, {0x4}, {0xfffffffa, 0x3}, {0x8600, 0x2}, {0xead4, 0x1}], [{0x3, 0x8001}, {0x4, 0x5}, {0x0, 0x1}, {0xa333, 0x5}, {0x5, 0x8}, {0x6, 0x37e9}, {0x2, 0xfffffffd}, {0x1, 0xa2d6}, {0x4, 0x2}, {0x4, 0x7}, {0x8001, 0x7}], 0x3, 0xb}], 0x8, 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', '\x00', {}, {}, 0x0, 0xf7, 0x3}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xaf0) 23.908517557s ago: executing program 5 (id=2491): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1bf8ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000064000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00010074"], 0xec}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a}) socket(0x11, 0xa, 0x0) (async) r2 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r2) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xcc, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_PAYLOAD={0x40, 0xa, "d0e0a33b4ae058cb4409216c3102862a0aba864c7aaea7b96a77c4958cf3b541962b6ba6a1fed8912fbd47ab69c3858eb8a69e77100f04bed95e4c2f"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x2}}, @NFQA_PAYLOAD={0x21, 0xa, "bc825cee49ccb47114270c36d6cc48de4a4b7130fa939208f8c70a563a"}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfffe}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000004}, 0x14) 23.824306516s ago: executing program 4 (id=2492): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000000}, 0x8800) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180806a"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_delvlan={0x3c, 0x71, 0x1, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x7a, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x450) 23.717185179s ago: executing program 2 (id=2493): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x8}, 0x8) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8) 23.564814165s ago: executing program 4 (id=2494): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x11, 0x2, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x1000000}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x80}}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x80}}, 0x2404c800) 23.513222406s ago: executing program 0 (id=2495): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x80}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}}, {0xa, 0x1b, [0x0, 0x0, 0x4f3b]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x33, 0x1, 0x0, 0x3504, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000000)={0x2d, 0x0, 0x0, 0x12, r6}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r7, @ANYBLOB="000127bd7000fcdbdf25060000000500010001000000080005000000000008000500640101002800070073797374656d5f753a6f626a6563745f723a696e69745f7661725f72756e5f743a73300014000300fc01000000000000000000000000000114000200fc010000000000000000000000000000080005000a0101012a00070073797374656d5f753a6f626a6563745f723a6c64636f6e6669675f63616368655f743a7330000000"], 0xb0}, 0x1, 0x0, 0x0, 0x200080c4}, 0x40000) 23.201833295s ago: executing program 5 (id=2496): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x800000, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000001800200000000000000000000000600120002"], 0x24}}, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x3fff}, 0x80, 0x0}, 0x0) close(0x4) 0s ago: executing program 33 (id=2495): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x80}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}}, {0xa, 0x1b, [0x0, 0x0, 0x4f3b]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x33, 0x1, 0x0, 0x3504, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000000)={0x2d, 0x0, 0x0, 0x12, r6}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r7, @ANYBLOB="000127bd7000fcdbdf25060000000500010001000000080005000000000008000500640101002800070073797374656d5f753a6f626a6563745f723a696e69745f7661725f72756e5f743a73300014000300fc01000000000000000000000000000114000200fc010000000000000000000000000000080005000a0101012a00070073797374656d5f753a6f626a6563745f723a6c64636f6e6669675f63616368655f743a7330000000"], 0xb0}, 0x1, 0x0, 0x0, 0x200080c4}, 0x40000) kernel console output (not intermixed with test programs): : 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 340.732311][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 340.762888][T11399] veth0: entered promiscuous mode [ 340.792688][T11402] netlink: 'syz.2.1459': attribute type 3 has an invalid length. [ 340.792848][T11402] netlink: 'syz.2.1459': attribute type 3 has an invalid length. [ 340.815621][T11399] veth0: left promiscuous mode [ 340.926913][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 341.030583][T11414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.503002][T11431] netlink: 'syz.2.1468': attribute type 4 has an invalid length. [ 341.527491][T11438] netlink: 'syz.1.1470': attribute type 1 has an invalid length. [ 341.555475][T11438] bond18: entered promiscuous mode [ 341.555851][T11438] 8021q: adding VLAN 0 to HW filter on device bond18 [ 341.573595][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1470'. [ 341.573671][T11438] bond18: entered allmulticast mode [ 341.600440][T11438] bond18: (slave bridge15): making interface the new active one [ 341.600462][T11438] bridge15: entered promiscuous mode [ 341.600628][T11438] bridge15: entered allmulticast mode [ 341.609532][T11438] bond18: (slave bridge15): Enslaving as an active interface with an up link [ 342.249896][T11470] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 7, id = 0 [ 342.275068][T11468] IPVS: stopping backup sync thread 11470 ... [ 342.349615][T11474] netlink: 'syz.1.1480': attribute type 1 has an invalid length. [ 342.517930][T11474] 8021q: adding VLAN 0 to HW filter on device bond19 [ 342.539977][T11482] sit0: entered promiscuous mode [ 342.567767][T11482] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 342.567788][T11482] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1475'. [ 342.619932][T11488] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 342.755538][T11491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1483'. [ 342.841757][T11488] bond8: entered promiscuous mode [ 342.842106][T11488] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.842952][T11491] bond8: entered allmulticast mode [ 342.953481][T11488] bond8: (slave bridge6): making interface the new active one [ 342.953505][T11488] bridge6: entered promiscuous mode [ 342.953671][T11488] bridge6: entered allmulticast mode [ 342.975501][T11488] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 343.093863][T11512] netlink: 'syz.1.1489': attribute type 12 has an invalid length. [ 343.098084][T11513] netlink: 'syz.1.1489': attribute type 12 has an invalid length. [ 343.170102][T11519] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1492'. [ 343.187470][T11517] tipc: Enabling of bearer rejected, already enabled [ 343.239058][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 343.342338][T11529] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1496'. [ 343.346403][T11525] netlink: 'syz.2.1495': attribute type 10 has an invalid length. [ 343.370226][T11525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.378516][T11525] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 343.573783][T11526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.611321][T11526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.644662][T11526] bond0 (unregistering): (slave team0): Releasing backup interface [ 343.668407][T11526] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 343.689629][T11526] bond0 (unregistering): Released all slaves [ 343.846622][T11548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.972906][T11554] syzkaller1: entered allmulticast mode [ 344.037723][T11573] block nbd0: Unsupported socket: should be TCP or UNIX. [ 344.037836][T11574] block nbd0: Unsupported socket: should be TCP or UNIX. [ 344.119639][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1507'. [ 344.256334][T11585] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 344.257072][T11585] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 344.655018][T11595] hsr0 speed is unknown, defaulting to 1000 [ 344.655586][T11595] hsr0 speed is unknown, defaulting to 1000 [ 344.682270][T11595] hsr0 speed is unknown, defaulting to 1000 [ 344.685331][T11595] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 344.685363][T11595] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 344.685400][T11595] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 344.763658][T11595] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 344.836163][T11595] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 345.051894][T11595] hsr0 speed is unknown, defaulting to 1000 [ 345.117420][T11595] hsr0 speed is unknown, defaulting to 1000 [ 345.155980][T11595] hsr0 speed is unknown, defaulting to 1000 [ 345.196018][T11595] hsr0 speed is unknown, defaulting to 1000 [ 345.225006][T11595] hsr0 speed is unknown, defaulting to 1000 [ 345.518902][T11636] tipc: Enabling of bearer rejected, failed to enable media [ 345.663401][T11654] nbd: socks must be embedded in a SOCK_ITEM attr [ 345.803610][T11672] __nla_validate_parse: 2 callbacks suppressed [ 345.803629][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'. [ 345.925744][T11679] lo speed is unknown, defaulting to 1000 [ 345.925804][T11679] lo speed is unknown, defaulting to 1000 [ 345.928775][T11679] lo speed is unknown, defaulting to 1000 [ 345.956056][T11679] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 345.956091][T11679] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 345.956127][T11679] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 346.009443][T11680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1529'. [ 346.025697][T11679] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 346.096102][T11679] lo speed is unknown, defaulting to 1000 [ 346.101141][T11679] lo speed is unknown, defaulting to 1000 [ 346.113091][T11679] lo speed is unknown, defaulting to 1000 [ 346.121107][T11679] lo speed is unknown, defaulting to 1000 [ 346.143883][T11679] lo speed is unknown, defaulting to 1000 [ 346.406287][T11701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.609678][T11712] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 346.729279][T11717] netlink: 'syz.0.1539': attribute type 2 has an invalid length. [ 346.746204][T11712] 8021q: adding VLAN 0 to HW filter on device bond20 [ 346.748915][T11722] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 346.752363][T11724] syz_tun: entered allmulticast mode [ 346.755333][T11711] syz_tun: left allmulticast mode [ 346.825968][T11732] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 346.866933][T11722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.900878][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1543'. [ 347.008054][T11732] bond11: entered promiscuous mode [ 347.023677][T11748] netlink: 'syz.2.1546': attribute type 3 has an invalid length. [ 347.024007][T11732] 8021q: adding VLAN 0 to HW filter on device bond11 [ 347.059432][T11735] bond11: entered allmulticast mode [ 347.083482][T11746] bridge0: port 5(vlan2) entered blocking state [ 347.083664][T11746] bridge0: port 5(vlan2) entered disabled state [ 347.083789][T11746] vlan2: entered allmulticast mode [ 347.083803][T11746] geneve0: entered allmulticast mode [ 347.086938][T11746] vlan2: entered promiscuous mode [ 347.086962][T11746] geneve0: entered promiscuous mode [ 347.140263][ T2005] block nbd0: Possible stuck request ffff888026a55080: control (read@1024,1024B). Runtime 120 seconds [ 347.141485][ T2005] block nbd0: Possible stuck request ffff888026a55240: control (read@2048,1024B). Runtime 120 seconds [ 347.141512][ T2005] block nbd0: Possible stuck request ffff888026a55400: control (read@3072,1024B). Runtime 120 seconds [ 347.141536][ T2005] block nbd0: Possible stuck request ffff888026a47000: control (read@0,1024B). Runtime 120 seconds [ 347.148483][T11752] bond11: (slave bridge5): making interface the new active one [ 347.148500][T11752] bridge5: entered promiscuous mode [ 347.148641][T11752] bridge5: entered allmulticast mode [ 347.216822][T11752] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 347.489998][T11770] netlink: Conntrack attr has 1 unknown bytes [ 347.490030][T11770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.501524][T11770] netlink: Conntrack attr has 1 unknown bytes [ 347.501552][T11770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.688932][T11783] netlink: 'syz.2.1557': attribute type 1 has an invalid length. [ 347.805160][T11783] 8021q: adding VLAN 0 to HW filter on device bond12 [ 347.869219][T11776] bond13: entered allmulticast mode [ 347.869585][T11776] 8021q: adding VLAN 0 to HW filter on device bond13 [ 347.898333][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1563'. [ 347.979531][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1566'. [ 348.262919][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 348.336576][T11820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.336594][T11820] IPv6: NLM_F_CREATE should be set when creating new route [ 348.401570][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'. [ 348.450859][T11827] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1574'. [ 348.533863][T11831] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 348.678875][T11831] 8021q: adding VLAN 0 to HW filter on device bond21 [ 348.703453][T11843] batman_adv: batadv0: Adding interface: veth0 [ 348.703470][T11843] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.703499][T11843] batman_adv: batadv0: Interface activated: veth0 [ 348.703816][T11848] GUP no longer grows the stack in syz.0.1580 (11848): 200000003000-20000000a000 (200000001000) [ 348.703841][T11848] CPU: 1 UID: 0 PID: 11848 Comm: syz.0.1580 Not tainted syzkaller #0 PREEMPT(full) [ 348.703862][T11848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 348.703883][T11848] Call Trace: [ 348.703891][T11848] [ 348.703898][T11848] dump_stack_lvl+0xe8/0x150 [ 348.703932][T11848] __get_user_pages+0x23b6/0x2750 [ 348.703961][T11848] ? lock_acquire+0x115/0x350 [ 348.703997][T11848] ? __gup_longterm_locked+0xc3b/0x15c0 [ 348.704032][T11848] __gup_longterm_locked+0xd52/0x15c0 [ 348.704060][T11848] ? lock_acquire+0x115/0x350 [ 348.704096][T11848] gup_fast_fallback+0x1d92/0x20e0 [ 348.704154][T11848] ? __pfx_gup_fast_fallback+0x10/0x10 [ 348.704182][T11848] ? lock_acquire+0x115/0x350 [ 348.704199][T11848] ? is_valid_gup_args+0x11f/0x200 [ 348.704226][T11848] ? get_user_pages_fast+0x4d/0xb0 [ 348.704253][T11848] __iov_iter_get_pages_alloc+0x378/0xa40 [ 348.704284][T11848] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 348.704308][T11848] iov_iter_get_pages2+0x5e/0xa0 [ 348.704344][T11848] __se_sys_vmsplice+0x7b5/0x1660 [ 348.704393][T11848] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 348.704422][T11848] ? __pfx_futex_wait+0x10/0x10 [ 348.704520][T11848] do_syscall_64+0x166/0x520 [ 348.704543][T11848] ? trace_irq_disable+0x3b/0x140 [ 348.704563][T11848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.704583][T11848] ? clear_bhb_loop+0x70/0xc0 [ 348.704608][T11848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.704627][T11848] RIP: 0033:0x7f355159e159 [ 348.704645][T11848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.704661][T11848] RSP: 002b:00007f354f7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 348.704682][T11848] RAX: ffffffffffffffda RBX: 00007f3551826090 RCX: 00007f355159e159 [ 348.704697][T11848] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 348.704710][T11848] RBP: 00007f355163506b R08: 0000000000000000 R09: 0000000000000000 [ 348.704722][T11848] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 348.704734][T11848] R13: 00007f3551826128 R14: 00007f3551826090 R15: 00007ffc3f4981b8 [ 348.704767][T11848] [ 348.728279][T11843] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 348.776461][T11843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1580'. [ 349.041852][T11857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1584'. [ 349.167037][T11859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.296092][T11873] sch_tbf: peakrate 4294967233 is lower than or equals to rate 4209328309216940581 ! [ 349.446915][T11881] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 349.533364][T11883] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 349.536824][T11884] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 349.577053][T11892] syzkaller1: entered allmulticast mode [ 349.723072][T11899] netlink: 'syz.4.1595': attribute type 1 has an invalid length. [ 349.808266][T11901] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.818982][T11901] bond9: (slave bond10): making interface the new active one [ 349.826425][T11901] bond9: (slave bond10): Enslaving as an active interface with an up link [ 349.865505][T11899] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 349.880863][T11906] 8021q: adding VLAN 0 to HW filter on device bond9 [ 349.933455][T11912] netlink: 'syz.2.1597': attribute type 1 has an invalid length. [ 349.983789][T11912] bond13: option mode: invalid value (8) [ 349.985826][T11912] bond13 (unregistering): Released all slaves [ 350.148743][T11913] bond13: option mode: invalid value (8) [ 350.161967][T11913] bond13 (unregistering): Released all slaves [ 350.446994][T11939] bond13: entered promiscuous mode [ 351.042657][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.042674][T11966] IPv6: NLM_F_CREATE should be set when creating new route [ 351.042914][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.043176][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.043409][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.046340][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.048161][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.106741][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.106992][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.107245][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.107481][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.107888][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.108131][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.108366][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.108618][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.108933][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.109194][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.109433][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.109674][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.125136][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.125384][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.125626][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.125937][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.126187][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.144429][T11972] 8021q: adding VLAN 0 to HW filter on device bond22 [ 351.235276][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.235521][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.235757][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.235983][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.236272][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.236505][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.236779][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.237002][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.237364][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.237594][T11966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.401381][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.401771][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.402163][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.402500][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.434008][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.434377][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.434745][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.435114][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.435455][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.435804][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.636325][T11999] validate_nla: 2 callbacks suppressed [ 351.636343][T11999] netlink: 'syz.2.1621': attribute type 11 has an invalid length. [ 351.636354][T11999] __nla_validate_parse: 7 callbacks suppressed [ 351.636364][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 351.638765][T11999] netlink: 'syz.2.1621': attribute type 11 has an invalid length. [ 351.638781][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 351.757385][T12009] netlink: 'syz.2.1621': attribute type 11 has an invalid length. [ 351.757404][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 351.758253][T12009] netlink: 'syz.2.1621': attribute type 11 has an invalid length. [ 351.758268][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 351.868594][T12015] netlink: 'syz.1.1626': attribute type 1 has an invalid length. [ 351.938326][T12015] 8021q: adding VLAN 0 to HW filter on device bond23 [ 352.175206][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 352.342072][T12046] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 352.438800][T12048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1634'. [ 352.464855][T12046] bond12: entered promiscuous mode [ 352.465741][T12046] 8021q: adding VLAN 0 to HW filter on device bond12 [ 352.466445][T12048] bond12: entered allmulticast mode [ 352.483588][T12046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1634'. [ 352.691675][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 352.767975][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 353.400758][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 353.963574][T12123] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 354.251862][T12153] netlink: 'syz.3.1665': attribute type 1 has an invalid length. [ 354.353762][T12153] 8021q: adding VLAN 0 to HW filter on device bond16 [ 354.367850][T12153] bond15: (slave bond16): Enslaving as an active interface with a down link [ 354.387139][T12153] netlink: 'syz.3.1665': attribute type 1 has an invalid length. [ 354.708491][T12190] netlink: 'syz.3.1671': attribute type 3 has an invalid length. [ 354.761786][T12187] netlink: 'syz.2.1672': attribute type 1 has an invalid length. [ 354.901606][T12197] syzkaller1: entered promiscuous mode [ 354.901626][T12197] syzkaller1: entered allmulticast mode [ 354.903458][T12197] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 354.903474][T12197] syzkaller1: Linktype set failed because interface is up [ 355.024440][T12203] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 355.893645][T12241] bond24: entered promiscuous mode [ 355.894043][T12241] 8021q: adding VLAN 0 to HW filter on device bond24 [ 355.925334][T12241] bond24: entered allmulticast mode [ 356.502394][T12285] vlan3: entered promiscuous mode [ 356.835302][T12306] validate_nla: 3 callbacks suppressed [ 356.835320][T12306] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 356.877678][T12306] bond13: entered promiscuous mode [ 356.878081][T12306] 8021q: adding VLAN 0 to HW filter on device bond13 [ 356.901753][T12306] __nla_validate_parse: 18 callbacks suppressed [ 356.901768][T12306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1705'. [ 356.928787][T12306] bond13: entered allmulticast mode [ 356.942763][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1705'. [ 356.966366][T12309] syzkaller1: entered promiscuous mode [ 356.966386][T12309] syzkaller1: entered allmulticast mode [ 357.202681][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1709'. [ 357.202711][T12320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1709'. [ 357.238887][T12320] gretap3: entered promiscuous mode [ 357.238909][T12320] gretap3: entered allmulticast mode [ 357.253698][T12317] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1709'. [ 357.403107][T12333] netlink: 'syz.3.1713': attribute type 9 has an invalid length. [ 357.438369][T12333] netlink: 'syz.3.1713': attribute type 9 has an invalid length. [ 357.470445][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 357.738908][T12348] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 357.760239][T12344] net_ratelimit: 28 callbacks suppressed [ 357.760255][T12344] ip_tables: iptables: counters copy to user failed while replacing table [ 357.877053][T12348] 8021q: adding VLAN 0 to HW filter on device bond14 [ 357.937913][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 358.352694][T12367] syzkaller1: entered promiscuous mode [ 358.352716][T12367] syzkaller1: entered allmulticast mode [ 358.516485][T12374] xt_hashlimit: size too large, truncated to 1048576 [ 358.576688][T12376] bridge_slave_0: left allmulticast mode [ 358.576713][T12376] bridge_slave_0: left promiscuous mode [ 358.578315][T12376] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.624588][T12376] bridge_slave_1: left allmulticast mode [ 358.624613][T12376] bridge_slave_1: left promiscuous mode [ 358.624893][T12376] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.650128][T12376] bond0: (slave bond_slave_0): Releasing backup interface [ 358.662480][T12376] bond0: (slave bond_slave_1): Releasing backup interface [ 358.703783][T12376] team0: Port device team_slave_0 removed [ 358.719074][T12376] team0: Port device team_slave_1 removed [ 358.737642][T12376] bond0: (slave netdevsim1): Releasing backup interface [ 358.758209][T12379] xt_HMARK: spi-set and port-set can't be combined [ 358.777937][T12376] bond1: (slave bridge1): Releasing backup interface [ 358.835609][T12376] bond2: (slave bridge2): Releasing backup interface [ 358.835637][T12376] bridge2: left promiscuous mode [ 358.858716][T12376] bond4: (slave bridge3): Releasing backup interface [ 358.858731][T12376] bridge3: left promiscuous mode [ 358.859500][T12376] bridge3: left allmulticast mode [ 358.894215][T12376] bond5: (slave geneve3): Releasing active interface [ 358.915941][T12376] bond6: (slave bridge4): Releasing backup interface [ 358.916494][T12376] bridge4: left promiscuous mode [ 358.916773][T12376] bridge4: left allmulticast mode [ 358.938533][T12376] bond7: (slave bridge5): Releasing backup interface [ 358.938554][T12376] bridge5: left promiscuous mode [ 358.938707][T12376] bridge5: left allmulticast mode [ 358.957690][T12376] bond8: (slave bridge6): Releasing backup interface [ 358.957705][T12376] bridge6: left promiscuous mode [ 358.957833][T12376] bridge6: left allmulticast mode [ 358.977277][T12376] bond9: (slave bond10): Releasing backup interface [ 358.977290][T12376] bond9: (slave bond10): the permanent HWaddr of slave - 2a:a5:b6:2f:3a:4b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 358.977394][T12376] bond9: (slave gretap1): making interface the new active one [ 359.022289][T12376] bond9: (slave gretap1): Releasing backup interface [ 359.059586][T12389] dvmrp8: entered allmulticast mode [ 359.119416][T12376] syz.4.1725 (12376) used greatest stack depth: 17536 bytes left [ 359.269007][T12397] netlink: 'syz.4.1730': attribute type 1 has an invalid length. [ 359.364773][T12397] 8021q: adding VLAN 0 to HW filter on device bond11 [ 359.417352][T12405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1731'. [ 359.477265][T12409] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1735'. [ 359.670451][T12421] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1737'. [ 359.673869][T12419] netlink: 'syz.0.1738': attribute type 2 has an invalid length. [ 359.833355][T12428] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 359.836049][T12416] syzkaller1: entered promiscuous mode [ 359.836069][T12416] syzkaller1: entered allmulticast mode [ 360.335772][T12451] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.339019][T12454] netlink: 'syz.4.1746': attribute type 1 has an invalid length. [ 360.386111][T12454] bond12: entered promiscuous mode [ 360.386549][T12454] 8021q: adding VLAN 0 to HW filter on device bond12 [ 360.392739][T12454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1746'. [ 360.392845][T12454] bond12: entered allmulticast mode [ 360.512915][T12465] netlink: 'syz.2.1749': attribute type 1 has an invalid length. [ 360.633102][T12465] bond14: entered promiscuous mode [ 360.633614][T12465] 8021q: adding VLAN 0 to HW filter on device bond14 [ 360.738836][T12465] 8021q: adding VLAN 0 to HW filter on device bond14 [ 360.748631][T12465] bond14: (slave xfrm2): The slave device specified does not support setting the MAC address [ 360.748654][T12465] bond14: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 360.774008][T12465] bond14: (slave xfrm2): making interface the new active one [ 360.774029][T12465] xfrm2: entered promiscuous mode [ 360.788162][T12465] xfrm2: left promiscuous mode [ 360.887779][T12482] syzkaller1: entered promiscuous mode [ 360.887801][T12482] syzkaller1: entered allmulticast mode [ 360.963944][T12484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.105011][T12490] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 361.105029][T12490] netlink: 'syz.3.1756': attribute type 2 has an invalid length. [ 361.404150][T12505] bond15: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 361.409247][T12505] bond15 (unregistering): Released all slaves [ 361.866266][T12539] openvswitch: netlink: Message has 4 unknown bytes. [ 361.879399][T12536] syzkaller1: entered promiscuous mode [ 361.879419][T12536] syzkaller1: entered allmulticast mode [ 362.122406][T12561] validate_nla: 1 callbacks suppressed [ 362.122424][T12561] netlink: 'syz.1.1773': attribute type 1 has an invalid length. [ 362.192503][T12565] __nla_validate_parse: 7 callbacks suppressed [ 362.192521][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1773'. [ 362.264398][T12561] bond25: entered promiscuous mode [ 362.264845][T12561] 8021q: adding VLAN 0 to HW filter on device bond25 [ 362.267576][T12565] bond25: entered allmulticast mode [ 362.384329][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 362.626946][T12589] netlink: 'syz.3.1778': attribute type 5 has an invalid length. [ 364.994052][T12562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.385415][T12610] syzkaller1: entered promiscuous mode [ 365.385438][T12610] syzkaller1: entered allmulticast mode [ 365.404877][T12612] netlink: 'syz.0.1784': attribute type 4 has an invalid length. [ 365.404896][T12612] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1784'. [ 365.405171][T12612] netlink: 'syz.0.1784': attribute type 4 has an invalid length. [ 365.405183][T12612] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1784'. [ 365.405451][T12612] netlink: 'syz.0.1784': attribute type 4 has an invalid length. [ 365.405463][T12612] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1784'. [ 365.405741][T12612] netlink: 'syz.0.1784': attribute type 4 has an invalid length. [ 365.405753][T12612] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1784'. [ 365.406021][T12612] netlink: 'syz.0.1784': attribute type 4 has an invalid length. [ 365.406034][T12612] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1784'. [ 365.603064][T12621] sctp: [Deprecated]: syz.2.1786 (pid 12621) Use of int in maxseg socket option. [ 365.603064][T12621] Use struct sctp_assoc_value instead [ 365.604903][T12623] sctp: [Deprecated]: syz.2.1786 (pid 12623) Use of int in maxseg socket option. [ 365.604903][T12623] Use struct sctp_assoc_value instead [ 365.830263][T12631] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 365.914924][T12626] netlink: 'syz.3.1787': attribute type 3 has an invalid length. [ 365.914945][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 365.943197][T12631] bond15: entered promiscuous mode [ 365.943618][T12631] 8021q: adding VLAN 0 to HW filter on device bond15 [ 365.944753][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1788'. [ 365.944855][T12639] bond15: entered allmulticast mode [ 365.956930][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 366.196241][T12654] bond0 (unregistering): Released all slaves [ 366.764266][T12685] netlink: 'syz.0.1804': attribute type 1 has an invalid length. [ 366.835032][T12685] bond0: entered promiscuous mode [ 366.835436][T12685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.917956][T12692] bond13: entered promiscuous mode [ 366.919300][T12692] 8021q: adding VLAN 0 to HW filter on device bond13 [ 366.939222][T12685] bond0: entered allmulticast mode [ 367.017412][T12692] 8021q: adding VLAN 0 to HW filter on device bond13 [ 367.017804][T12692] bond13: (slave xfrm0): The slave device specified does not support setting the MAC address [ 367.017825][T12692] bond13: (slave xfrm0): Setting fail_over_mac to active for active-backup mode [ 367.047564][T12692] bond13: (slave xfrm0): making interface the new active one [ 367.047587][T12692] xfrm0: entered promiscuous mode [ 367.078198][T12692] xfrm0: left promiscuous mode [ 367.328339][T12690] __nla_validate_parse: 40 callbacks suppressed [ 367.328359][T12690] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1805'. [ 367.328373][T12690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1805'. [ 367.328388][T12690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1805'. [ 367.482699][T12690] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1805'. [ 367.482721][T12690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1805'. [ 367.482736][T12690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1805'. [ 367.483245][T12690] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1805'. [ 367.483260][T12690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1805'. [ 367.483273][T12690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1805'. [ 367.483719][T12690] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1805'. [ 367.913744][T12737] validate_nla: 1 callbacks suppressed [ 367.913763][T12737] netlink: 'syz.2.1816': attribute type 7 has an invalid length. [ 367.913776][T12737] netlink: 'syz.2.1816': attribute type 8 has an invalid length. [ 367.916223][T12739] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 368.046623][T12739] bond16: entered promiscuous mode [ 368.057838][T12739] 8021q: adding VLAN 0 to HW filter on device bond16 [ 368.076715][T12742] bond16: entered allmulticast mode [ 368.234748][T12732] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 368.238519][T12732] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 368.238820][T12732] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 368.239098][T12732] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 368.245170][T12732] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 368.245543][T12732] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 368.245826][T12732] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 368.246099][T12732] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 368.246359][T12732] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 368.253903][T12732] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 369.008356][T12779] Bluetooth: hci0: unsupported parameter 5134 [ 369.008378][T12779] Bluetooth: hci0: unsupported parameter 8192 [ 369.008389][T12779] Bluetooth: hci0: unsupported parameter 5134 [ 369.008399][T12779] Bluetooth: hci0: unsupported parameter 8192 [ 369.073763][T12783] IPVS: set_ctl: invalid protocol: 51 172.30.0.4:20003 [ 369.529265][T12807] netlink: 'syz.0.1827': attribute type 1 has an invalid length. [ 369.529285][T12807] netlink: 'syz.0.1827': attribute type 2 has an invalid length. [ 369.808418][T12821] netlink: 'syz.4.1829': attribute type 1 has an invalid length. [ 369.947391][T12821] bond14: entered promiscuous mode [ 369.955280][T12821] 8021q: adding VLAN 0 to HW filter on device bond14 [ 369.974103][T12771] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 369.975911][T12824] bond14: entered allmulticast mode [ 370.030738][T12830] ip6gre1: entered promiscuous mode [ 370.030758][T12830] ip6gre1: entered allmulticast mode [ 370.647333][T12859] nbd: must specify a device to reconfigure [ 371.177525][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069b41c00: rx timeout, send abort [ 371.177740][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888069b41c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 371.916877][T12919] netlink: 'syz.2.1851': attribute type 1 has an invalid length. [ 371.952213][T12919] ip6t_ah: unknown flags 5 [ 372.003979][T12922] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 372.256212][T12930] netlink: 'syz.3.1853': attribute type 10 has an invalid length. [ 372.711434][T12945] netlink: 'syz.3.1859': attribute type 1 has an invalid length. [ 372.748398][T12945] bond17: entered promiscuous mode [ 372.748824][T12945] 8021q: adding VLAN 0 to HW filter on device bond17 [ 372.801542][T12945] __nla_validate_parse: 125 callbacks suppressed [ 372.801562][T12945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1859'. [ 372.801634][T12945] bond17: entered allmulticast mode [ 372.854242][T12945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1859'. [ 373.044538][T12965] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1864'. [ 373.064018][T12964] 8021q: VLANs not supported on ip6tnl0 [ 373.172206][T12971] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1865'. [ 373.206084][T12970] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1865'. [ 373.218522][T12971] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1865'. [ 373.229457][T12970] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1865'. [ 373.263853][T12976] xt_hashlimit: size too large, truncated to 1048576 [ 373.296433][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1868'. [ 373.599283][T13002] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 373.661740][T13007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1874'. [ 373.691472][T13002] bond15: entered promiscuous mode [ 373.692753][T13002] 8021q: adding VLAN 0 to HW filter on device bond15 [ 373.698048][T13007] bond15: entered allmulticast mode [ 373.742563][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1873'. [ 374.331413][T13046] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 374.382760][T13046] bond16: option mode: invalid value (12) [ 374.393522][T13046] bond16 (unregistering): Released all slaves [ 374.478522][T13051] netlink: 'syz.4.1888': attribute type 1 has an invalid length. [ 374.671031][T13051] bond16: entered promiscuous mode [ 374.671575][T13051] 8021q: adding VLAN 0 to HW filter on device bond16 [ 374.672201][T13052] bond16: entered allmulticast mode [ 375.161582][T13079] netlink: 'syz.2.1895': attribute type 1 has an invalid length. [ 375.775752][T13113] netlink: 'syz.4.1901': attribute type 1 has an invalid length. [ 375.810719][T13113] bond17: entered promiscuous mode [ 375.811133][T13113] 8021q: adding VLAN 0 to HW filter on device bond17 [ 375.817495][T13113] bond17: entered allmulticast mode [ 376.374112][T13144] netlink: 'syz.4.1910': attribute type 39 has an invalid length. [ 376.491432][T13144] netlink: 'syz.4.1910': attribute type 39 has an invalid length. [ 376.491616][T13144] netlink: 'syz.4.1910': attribute type 39 has an invalid length. [ 376.491778][T13144] netlink: 'syz.4.1910': attribute type 39 has an invalid length. [ 376.492134][T13144] netlink: 'syz.4.1910': attribute type 39 has an invalid length. [ 376.761261][T13168] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 377.237414][ T2005] block nbd0: Possible stuck request ffff888026a55080: control (read@1024,1024B). Runtime 150 seconds [ 377.237454][ T2005] block nbd0: Possible stuck request ffff888026a55240: control (read@2048,1024B). Runtime 150 seconds [ 377.237477][ T2005] block nbd0: Possible stuck request ffff888026a55400: control (read@3072,1024B). Runtime 150 seconds [ 377.237498][ T2005] block nbd0: Possible stuck request ffff888026a47000: control (read@0,1024B). Runtime 150 seconds [ 377.458556][T13203] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 377.947842][T13215] hsr0 speed is unknown, defaulting to 1000 [ 377.957572][T13215] lo speed is unknown, defaulting to 1000 [ 378.131778][T13226] hsr0 speed is unknown, defaulting to 1000 [ 378.176052][T13226] lo speed is unknown, defaulting to 1000 [ 378.398601][T10146] wlan1: Trigger new scan to find an IBSS to join [ 378.510750][ T1311] net_ratelimit: 61 callbacks suppressed [ 378.510770][ T1311] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 378.697450][T13260] tipc: Enabling of bearer rejected, failed to enable media [ 378.714168][T13260] netlink: 'syz.2.1944': attribute type 11 has an invalid length. [ 378.797888][T13271] __nla_validate_parse: 68 callbacks suppressed [ 378.797907][T13271] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1945'. [ 378.817878][T13270] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1945'. [ 378.874438][T13260] xt_CT: No such helper "netbios-ns" [ 379.055977][T13282] validate_nla: 30 callbacks suppressed [ 379.055996][T13282] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 379.202419][T13280] bond17: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 379.204121][T13280] bond17 (unregistering): Released all slaves [ 379.230343][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1949'. [ 379.297453][T13290] bond17: (slave bridge7): making interface the new active one [ 379.299451][T13290] bond17: (slave bridge7): Enslaving as an active interface with an up link [ 379.589554][T13302] syzkaller0: entered promiscuous mode [ 379.589576][T13302] syzkaller0: entered allmulticast mode [ 379.672135][T13297] openvswitch: netlink: IPv4 tunnel dst address is zero [ 379.708312][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 379.717435][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 380.145279][T13326] bridge_slave_0: left allmulticast mode [ 380.145302][T13326] bridge_slave_0: left promiscuous mode [ 380.145503][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.175103][T13326] bond0: (slave bond_slave_0): Releasing backup interface [ 380.199659][T13326] bond0: (slave bond_slave_1): Releasing backup interface [ 380.243218][T13326] team0: Port device team_slave_0 removed [ 380.304353][T13326] team0: Port device team_slave_1 removed [ 380.306640][T13326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.306654][T13326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.316078][T13326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.316097][T13326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.334092][T13326] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.526721][T13334] syzkaller0: entered promiscuous mode [ 380.526745][T13334] syzkaller0: entered allmulticast mode [ 380.666161][T13355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1968'. [ 380.697515][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 380.777018][T13360] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 380.841348][T13360] bond17: entered promiscuous mode [ 380.841800][T13360] 8021q: adding VLAN 0 to HW filter on device bond17 [ 380.855058][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 380.856988][T13360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1969'. [ 380.892866][T13360] bond17: entered allmulticast mode [ 380.980774][ T5623] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 380.982717][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 381.033641][T13372] veth0_to_bridge: entered promiscuous mode [ 381.034999][T13369] veth0_to_bridge: left promiscuous mode [ 381.080947][T13375] netlink: 'syz.3.1974': attribute type 1 has an invalid length. [ 381.243089][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'. [ 381.277427][T13387] netlink: 'syz.2.1978': attribute type 1 has an invalid length. [ 381.471928][ T9611] wlan1: Trigger new scan to find an IBSS to join [ 381.495312][T13399] dummy0: MTU too low for tipc bearer [ 381.495346][T13399] tipc: Enabling of bearer rejected, failed to enable media [ 381.495852][T13392] bond0: invalid NS target ff00:: specified for addition [ 381.497905][T13392] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 381.520108][T13392] batadv_slave_0: entered allmulticast mode [ 381.551102][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.554820][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.555545][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.556437][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.557011][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.628981][ T30] lo speed is unknown, defaulting to 1000 [ 381.745673][T13412] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 381.815888][T13412] bond19: entered promiscuous mode [ 381.826373][T13412] 8021q: adding VLAN 0 to HW filter on device bond19 [ 381.866474][T13412] bond19: entered allmulticast mode [ 381.918353][T13424] ip_tables: iptables: counters copy to user failed while replacing table [ 381.957031][T13428] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 382.080550][T13420] netlink: 'syz.4.1985': attribute type 29 has an invalid length. [ 382.289241][T13436] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 382.305326][ T9612] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.417225][T13443] netlink: 'syz.3.1989': attribute type 1 has an invalid length. [ 382.477728][T13453] bridge0: port 3(veth1_to_bridge) entered blocking state [ 382.479487][T13453] bridge0: port 3(veth1_to_bridge) entered disabled state [ 382.479632][T13453] veth1_to_bridge: entered allmulticast mode [ 382.494659][T13453] veth1_to_bridge: entered promiscuous mode [ 382.494808][T13453] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 382.495097][T13453] bridge0: port 3(veth1_to_bridge) entered blocking state [ 382.495197][T13453] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 382.510239][T10144] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.511267][T10144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.511309][T10144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.556681][T13404] hsr0 speed is unknown, defaulting to 1000 [ 382.604518][T13404] lo speed is unknown, defaulting to 1000 [ 382.671716][T13458] netlink: 'syz.4.1996': attribute type 1 has an invalid length. [ 382.824038][T13458] bond18: entered promiscuous mode [ 382.825905][T13458] 8021q: adding VLAN 0 to HW filter on device bond18 [ 382.847499][T13463] bond18: entered allmulticast mode [ 382.868012][T13462] netlink: 'syz.2.1994': attribute type 29 has an invalid length. [ 383.245000][T13487] openvswitch: netlink: Flow key attr not present in new flow. [ 383.288636][T13497] x_tables: duplicate underflow at hook 2 [ 383.289502][T13497] x_tables: duplicate underflow at hook 2 [ 383.313669][ T9406] wlan1: Creating new IBSS network, BSSID 86:23:8b:2d:a9:27 [ 383.460220][T13505] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 383.460248][T13505] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 383.568352][T13511] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 383.620894][ T4932] Bluetooth: hci5: command tx timeout [ 383.674673][T13511] bond18: entered promiscuous mode [ 383.675122][T13511] 8021q: adding VLAN 0 to HW filter on device bond18 [ 383.737844][T13515] bond18: entered allmulticast mode [ 383.869864][T13404] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.870023][T13404] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.870138][T13404] bridge_slave_0: entered allmulticast mode [ 383.872276][T13404] bridge_slave_0: entered promiscuous mode [ 383.905209][T13404] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.905371][T13404] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.905502][T13404] bridge_slave_1: entered allmulticast mode [ 383.907565][T13404] bridge_slave_1: entered promiscuous mode [ 383.975755][T13404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.979298][T13404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.109455][T13510] bond18: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 384.135013][T13510] bond18 (unregistering): Released all slaves [ 384.392382][T13404] team0: Port device team_slave_0 added [ 384.405941][T13404] team0: Port device team_slave_1 added [ 384.539299][T13404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.539315][T13404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.539336][T13404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.574738][T13404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.574753][T13404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.574775][T13404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.813215][T13551] bond0: invalid NS target :: specified for addition [ 384.813243][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 384.813522][T13551] bond0: invalid NS target :: specified for addition [ 384.813540][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 384.813754][T13551] bond0: invalid NS target :: specified for addition [ 384.813770][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 384.813980][T13551] bond0: invalid NS target :: specified for addition [ 384.813997][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 384.947898][T13551] bond0: invalid NS target :: specified for addition [ 384.947933][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 384.948226][T13551] bond0: invalid NS target :: specified for addition [ 384.948244][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 384.981446][T13558] __nla_validate_parse: 19 callbacks suppressed [ 384.981464][T13558] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2021'. [ 384.987881][T13404] hsr_slave_0: entered promiscuous mode [ 384.993252][T13404] hsr_slave_1: entered promiscuous mode [ 385.001047][T13404] debugfs: 'hsr0' already exists in 'hsr' [ 385.001066][T13404] Cannot create hsr debugfs directory [ 385.093790][T13551] bond0: invalid NS target :: specified for addition [ 385.093815][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.094103][T13551] bond0: invalid NS target :: specified for addition [ 385.094121][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.094337][T13551] bond0: invalid NS target :: specified for addition [ 385.094353][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.094619][T13551] bond0: invalid NS target :: specified for addition [ 385.094636][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.094846][T13551] bond0: invalid NS target :: specified for addition [ 385.094862][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.095083][T13551] bond0: invalid NS target :: specified for addition [ 385.095099][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.095309][T13551] bond0: invalid NS target :: specified for addition [ 385.095324][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.198860][T13551] bond0: invalid NS target :: specified for addition [ 385.198885][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.199145][T13551] bond0: invalid NS target :: specified for addition [ 385.199162][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.199364][T13551] bond0: invalid NS target :: specified for addition [ 385.199380][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.225604][T13561] netlink: 'syz.4.2022': attribute type 1 has an invalid length. [ 385.283445][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2022'. [ 385.303987][T13551] bond0: invalid NS target :: specified for addition [ 385.304013][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.304314][T13551] bond0: invalid NS target :: specified for addition [ 385.304332][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.304551][T13551] bond0: invalid NS target :: specified for addition [ 385.304568][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.304835][T13551] bond0: invalid NS target :: specified for addition [ 385.304851][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.305070][T13551] bond0: invalid NS target :: specified for addition [ 385.305086][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.305297][T13551] bond0: invalid NS target :: specified for addition [ 385.305313][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.308765][T13551] bond0: invalid NS target :: specified for addition [ 385.308788][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.374365][T13561] bond19: entered promiscuous mode [ 385.374957][T13561] 8021q: adding VLAN 0 to HW filter on device bond19 [ 385.375777][T13556] syzkaller1: entered promiscuous mode [ 385.375793][T13556] syzkaller1: entered allmulticast mode [ 385.516172][T13562] bond19: entered allmulticast mode [ 385.530581][T13551] bond0: invalid NS target :: specified for addition [ 385.530606][T13551] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 385.700561][ T4932] Bluetooth: hci5: command tx timeout [ 385.971685][T13579] nbd: must specify an index to disconnect [ 386.043125][T13585] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 386.111762][T13589] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 386.126811][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 386.134189][T13592] netlink: 4208 bytes leftover after parsing attributes in process `syz.4.2027'. [ 386.514260][T13404] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 386.533338][T13404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.536265][T13404] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 386.550712][T13404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.563545][T13404] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 386.587858][T13404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.598948][T13404] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 386.637978][T13404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.181924][T13404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.245298][T13640] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2035'. [ 387.303252][T13404] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.331425][T10146] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.331563][T10146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.383244][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.383360][T10146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.407874][T13650] netlink: 'syz.4.2036': attribute type 1 has an invalid length. [ 387.511212][T13659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2036'. [ 387.528907][T13650] bond20: entered promiscuous mode [ 387.529252][T13650] 8021q: adding VLAN 0 to HW filter on device bond20 [ 387.555245][T13659] bond20: entered allmulticast mode [ 387.790572][ T4932] Bluetooth: hci5: command tx timeout [ 387.831811][T13676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.833104][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'. [ 387.833120][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2037'. [ 387.899270][T13673] netlink: 'syz.2.2037': attribute type 4 has an invalid length. [ 387.899290][T13673] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2037'. [ 387.914589][T13682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.935628][T13682] bond20: (slave bond0): Enslaving as an active interface with a down link [ 387.977694][T13682] bond20: option mode: unable to set because the bond device has slaves [ 387.981572][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'. [ 387.985727][T13687] netlink: 'syz.2.2037': attribute type 4 has an invalid length. [ 388.325163][T13701] netlink: zone id is out of range [ 388.325178][T13701] netlink: zone id is out of range [ 388.325186][T13701] netlink: zone id is out of range [ 388.325193][T13701] netlink: zone id is out of range [ 388.325201][T13701] netlink: zone id is out of range [ 388.325207][T13701] netlink: zone id is out of range [ 388.325388][T13701] netlink: zone id is out of range [ 388.325397][T13701] netlink: zone id is out of range [ 388.325404][T13701] netlink: zone id is out of range [ 388.466232][T13705] veth0: entered promiscuous mode [ 388.653079][T13713] syzkaller1: entered promiscuous mode [ 388.653101][T13713] syzkaller1: entered allmulticast mode [ 388.804162][T13702] veth0: left promiscuous mode [ 388.983447][T13727] netlink: 'syz.4.2049': attribute type 1 has an invalid length. [ 389.122720][T13727] bond21: entered promiscuous mode [ 389.146796][T13727] 8021q: adding VLAN 0 to HW filter on device bond21 [ 389.162863][T13732] bond21: entered allmulticast mode [ 389.181301][T13404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.765931][T13762] syzkaller1: entered promiscuous mode [ 389.765954][T13762] syzkaller1: entered allmulticast mode [ 389.869828][ T4932] Bluetooth: hci5: command tx timeout [ 389.924553][T13773] netlink: 'syz.3.2062': attribute type 30 has an invalid length. [ 390.091013][T13404] veth0_vlan: entered promiscuous mode [ 390.117193][T13782] netlink: 'syz.2.2065': attribute type 1 has an invalid length. [ 390.190825][T13782] bond21: entered promiscuous mode [ 390.192549][T13782] 8021q: adding VLAN 0 to HW filter on device bond21 [ 390.193506][T13404] veth1_vlan: entered promiscuous mode [ 390.240504][T13782] __nla_validate_parse: 12 callbacks suppressed [ 390.240523][T13782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2065'. [ 390.240592][T13782] bond21: entered allmulticast mode [ 390.262052][T13790] block nbd0: Unsupported socket: should be TCP or UNIX. [ 390.288710][T13404] veth0_macvtap: entered promiscuous mode [ 390.305460][T13404] veth1_macvtap: entered promiscuous mode [ 390.363066][T13796] vcan0: entered allmulticast mode [ 390.415500][T13404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.428343][T13798] netlink: 'syz.2.2070': attribute type 4 has an invalid length. [ 390.453555][T13404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.530857][T12064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.530898][T12064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.530929][T12064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.530959][T12064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.590745][T13805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2071'. [ 390.590916][T13805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2071'. [ 390.591056][T13805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2071'. [ 390.591154][T13805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2071'. [ 390.591273][T13805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2071'. [ 390.591411][T13805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2071'. [ 390.591507][T13805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2071'. [ 390.591601][T13805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2071'. [ 390.591731][T13805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2071'. [ 390.827559][T12060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.827579][T12060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.847249][T13813] syzkaller1: entered promiscuous mode [ 390.847272][T13813] syzkaller1: entered allmulticast mode [ 390.851928][T13817] netlink: 'syz.2.2075': attribute type 16 has an invalid length. [ 390.851958][T13817] veth0_macvtap: entered allmulticast mode [ 390.969046][ T9612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.969068][ T9612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.214009][T13829] netlink: 'syz.3.2078': attribute type 1 has an invalid length. [ 391.266449][T13829] bond19: entered promiscuous mode [ 391.266847][T13829] 8021q: adding VLAN 0 to HW filter on device bond19 [ 391.355040][T13829] bond19: entered allmulticast mode [ 391.468953][T13846] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 391.666490][T13852] syzkaller0: entered promiscuous mode [ 391.666512][T13852] syzkaller0: entered allmulticast mode [ 391.766474][T13860] netlink: 'syz.0.2088': attribute type 21 has an invalid length. [ 391.772639][T13864] xt_limit: Overflow, try lower: 536871034/127 [ 391.774703][T13864] netlink: 'syz.3.2090': attribute type 2 has an invalid length. [ 391.881184][T13868] syzkaller1: entered promiscuous mode [ 391.881207][T13868] syzkaller1: entered allmulticast mode [ 391.929336][T13866] bridge8: entered promiscuous mode [ 391.929400][T13866] bridge8: entered allmulticast mode [ 392.103722][T13870] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 392.189234][T13870] bond22: entered promiscuous mode [ 392.192808][T13870] 8021q: adding VLAN 0 to HW filter on device bond22 [ 392.194290][T13879] bond22: entered allmulticast mode [ 393.012217][T13931] netlink: 'syz.5.2107': attribute type 1 has an invalid length. [ 393.149083][T13931] veth0: entered promiscuous mode [ 393.149106][T13931] veth0: entered allmulticast mode [ 393.195345][T13939] net_ratelimit: 508 callbacks suppressed [ 393.195363][T13939] ip_tables: iptables: counters copy to user failed while replacing table [ 393.490723][T13956] x_tables: ip_tables: osf match: only valid for protocol 6 [ 393.548434][T13957] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 393.563251][T13956] dvmrp0: entered allmulticast mode [ 393.855574][T13969] ip_tables: iptables: counters copy to user failed while replacing table [ 394.304228][T13993] netlink: 'syz.4.2121': attribute type 1 has an invalid length. [ 394.488560][T13993] bond23: entered promiscuous mode [ 394.490902][T13993] 8021q: adding VLAN 0 to HW filter on device bond23 [ 394.502206][T13998] bond23: entered allmulticast mode [ 394.537652][T13999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.296549][T14051] netlink: 'syz.2.2135': attribute type 1 has an invalid length. [ 395.296569][T14051] __nla_validate_parse: 112 callbacks suppressed [ 395.296579][T14051] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2135'. [ 395.302734][T14051] netlink: 'syz.2.2135': attribute type 2 has an invalid length. [ 395.356515][T14051] : entered promiscuous mode [ 395.446150][T14058] validate_nla: 1 callbacks suppressed [ 395.446168][T14058] netlink: 'syz.5.2136': attribute type 178 has an invalid length. [ 395.476290][T14058] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2136'. [ 395.850981][T14083] macsec0: entered promiscuous mode [ 395.852223][T14083] macsec0: entered allmulticast mode [ 395.852241][T14083] veth1_macvtap: entered allmulticast mode [ 395.854462][T14081] TCP: TCP_TX_DELAY enabled [ 396.082263][T14092] ipvlan2: entered allmulticast mode [ 396.082285][T14092] virt_wifi0: entered allmulticast mode [ 396.083787][T14092] batman_adv: batadv0: Adding interface: ipvlan2 [ 396.083803][T14092] batman_adv: batadv0: Interface activated: ipvlan2 [ 396.225631][T14097] netlink: 'syz.2.2143': attribute type 12 has an invalid length. [ 398.797877][T14092] ipvlan3: entered allmulticast mode [ 398.807116][T14092] batman_adv: batadv0: Adding interface: ipvlan3 [ 398.807133][T14092] batman_adv: The newly added mac address (66:c3:38:13:28:02) already exists on: ipvlan2 [ 398.807147][T14092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.807158][T14092] batman_adv: batadv0: Interface activated: ipvlan3 [ 398.998010][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 399.130567][T14117] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 399.130671][T14117] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 399.192781][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2149'. [ 399.338229][T14117] hsr_slave_0: left promiscuous mode [ 399.348514][T14117] hsr_slave_1: left promiscuous mode [ 399.448355][T14131] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2154'. [ 399.638895][T14139] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2156'. [ 399.857577][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 399.857601][T14155] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2161'. [ 399.857641][T14155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2161'. [ 399.918061][T14158] netlink: 'syz.4.2163': attribute type 10 has an invalid length. [ 399.957907][T14158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.967750][T14158] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 400.027191][T14160] Bluetooth: ISO socket layer initialized [ 400.225931][T14175] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2170'. [ 400.459487][T14189] ip6t_hbh: Not strict - not implemented [ 400.577765][T14199] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 400.670058][T14189] netlink: 'syz.4.2173': attribute type 9 has an invalid length. [ 400.670077][T14189] netlink: 'syz.4.2173': attribute type 4 has an invalid length. [ 400.933870][T14216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2181'. [ 401.288706][T14230] bond8: (slave dummy0): Releasing backup interface [ 401.318358][T14230] batman_adv: batadv0: Adding interface: dummy0 [ 401.318375][T14230] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.318400][T14230] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 402.200876][T14267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.452687][T14286] openvswitch: netlink: Flow key attr not present in new flow. [ 402.672967][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2206'. [ 402.674909][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'. [ 402.818618][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2206'. [ 402.866530][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'. [ 402.896660][T14310] bond20: option xmit_hash_policy: invalid value (64) [ 402.909663][T14310] bond20 (unregistering): Released all slaves [ 403.053358][T14321] bond20: option xmit_hash_policy: invalid value (64) [ 403.096881][T14321] bond20 (unregistering): Released all slaves [ 403.135037][T14309] wg0 speed is unknown, defaulting to 1000 [ 403.136658][T14338] syzkaller1: entered promiscuous mode [ 403.136677][T14338] syzkaller1: entered allmulticast mode [ 403.157289][T14309] wg0 speed is unknown, defaulting to 1000 [ 403.158107][T14309] wg0 speed is unknown, defaulting to 1000 [ 403.186232][T14309] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 403.186264][T14309] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 403.186297][T14309] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 403.247224][T14339] ip_tables: iptables: counters copy to user failed while replacing table [ 403.263906][T14309] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 403.309454][T14309] wg0 speed is unknown, defaulting to 1000 [ 403.320983][T14309] wg0 speed is unknown, defaulting to 1000 [ 403.341391][T14309] wg0 speed is unknown, defaulting to 1000 [ 403.352195][T14309] wg0 speed is unknown, defaulting to 1000 [ 403.370344][T14309] wg0 speed is unknown, defaulting to 1000 [ 403.424218][T14309] wg0 speed is unknown, defaulting to 1000 [ 403.831437][T14348] 8021q: adding VLAN 0 to HW filter on device bond28 [ 403.834700][T14354] tc_dump_action: action bad kind [ 403.959465][T14362] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2216'. [ 403.964992][T14362] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2216'. [ 403.990266][T14364] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 404.042512][T14360] netlink: 'syz.5.2216': attribute type 5 has an invalid length. [ 404.436736][T14382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2222'. [ 404.541470][T14389] netlink: 'syz.5.2227': attribute type 12 has an invalid length. [ 404.613158][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2231'. [ 404.784163][T14409] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 404.885461][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2233'. [ 404.946672][T14420] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 405.052622][T14430] tipc: Enabling of bearer rejected, failed to enable media [ 405.053420][T14430] netlink: 'syz.5.2240': attribute type 1 has an invalid length. [ 405.126566][T14430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.162851][T14434] bond1: (slave veth0_to_bond): making interface the new active one [ 405.166055][T14434] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 405.228791][T14430] macvlan2: entered promiscuous mode [ 405.228814][T14430] macvlan2: entered allmulticast mode [ 405.229512][T14430] bond1: entered promiscuous mode [ 405.229529][T14430] veth0_to_bond: entered promiscuous mode [ 405.259057][T14430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 405.272159][T14430] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 405.275066][T14430] bond1: left promiscuous mode [ 405.275084][T14430] veth0_to_bond: left promiscuous mode [ 405.419548][T14442] bond0: (slave netdevsim1): Releasing backup interface [ 405.476750][T13655] wg0 speed is unknown, defaulting to 1000 [ 405.540228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.540487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.540754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.540995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.541240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.541497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.542483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.542794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.543072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.543359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.554739][T14454] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 405.952094][T14475] macvtap0: entered allmulticast mode [ 405.952116][T14475] veth0_macvtap: entered allmulticast mode [ 406.020802][ T4932] Bluetooth: hci5: command tx timeout [ 406.330957][T14511] __nla_validate_parse: 5 callbacks suppressed [ 406.330977][T14511] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2258'. [ 406.364930][T14515] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2258'. [ 406.365349][T14514] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2258'. [ 406.552592][T14522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2261'. [ 406.754959][T14536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2263'. [ 406.790073][T14543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2263'. [ 407.254513][T14571] x_tables: duplicate underflow at hook 3 [ 407.305182][ T2005] block nbd0: Possible stuck request ffff888026a55080: control (read@1024,1024B). Runtime 180 seconds [ 407.305222][ T2005] block nbd0: Possible stuck request ffff888026a55240: control (read@2048,1024B). Runtime 180 seconds [ 407.305247][ T2005] block nbd0: Possible stuck request ffff888026a55400: control (read@3072,1024B). Runtime 180 seconds [ 407.305271][ T2005] block nbd0: Possible stuck request ffff888026a47000: control (read@0,1024B). Runtime 180 seconds [ 407.927257][T14601] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2278'. [ 408.038397][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2279'. [ 408.259909][ T4932] Bluetooth: hci5: command 0x0405 tx timeout [ 408.331290][T14623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2285'. [ 408.544433][T14636] IPv6: Can't replace route, no match found [ 408.547516][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2290'. [ 408.797057][T14644] netlink: 'syz.0.2293': attribute type 20 has an invalid length. [ 408.797314][T14644] netlink: 'syz.0.2293': attribute type 20 has an invalid length. [ 408.918984][T14659] netlink: 'syz.5.2297': attribute type 11 has an invalid length. [ 409.085907][T14653] bond29: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 409.087089][T14653] bond29 (unregistering): Released all slaves [ 409.452178][T14693] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 409.627717][ T5623] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 409.627949][ T5623] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 409.773195][T14712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.943880][T14722] xt_l2tp: invalid flags combination: 8 [ 409.966331][T14722] ip6t_hbh: unknown flags 38 [ 410.048193][T14715] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 410.048256][T14715] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 410.085488][T14715] batman_adv: batadv0: Removing interface: ipvlan2 [ 410.134746][T14715] batman_adv: batadv0: Removing interface: ipvlan3 [ 410.329191][T14739] nbd: must specify an index to disconnect [ 410.497875][T14750] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 410.788837][T14770] netlink: 'syz.4.2329': attribute type 1 has an invalid length. [ 411.781030][T10144] wlan0: Trigger new scan to find an IBSS to join [ 413.641954][T14759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.949566][T14815] __nla_validate_parse: 15 callbacks suppressed [ 413.949586][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2340'. [ 413.949611][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2340'. [ 413.961886][T14815] erspan0: entered promiscuous mode [ 414.003157][T14815] erspan0: left promiscuous mode [ 414.095674][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2345'. [ 414.095722][T14827] net_ratelimit: 30 callbacks suppressed [ 414.095733][T14827] openvswitch: netlink: Missing key (keys=40, expected=100) [ 414.212389][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2344'. [ 414.353943][T14841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.508611][T14849] netlink: ct_mark mask cannot be 0 [ 414.508639][T14849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.628152][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2354'. [ 414.640197][T14856] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 414.648127][T14852] netlink: 'syz.2.2352': attribute type 15 has an invalid length. [ 414.648145][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2352'. [ 414.663101][T14860] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2353'. [ 414.676858][T14857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2353'. [ 414.990830][T14878] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 415.030186][T14878] 8021q: adding VLAN 0 to HW filter on device bond22 [ 415.050685][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2361'. [ 415.133086][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2363'. [ 415.134368][T14891] xt_TCPMSS: Only works on TCP SYN packets [ 415.139071][T10144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.139090][T10144] syzkaller0: tun_net_xmit 76 [ 415.178940][ T5348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.178960][ T5348] syzkaller0: tun_net_xmit 76 [ 415.179297][T10144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.179311][T10144] syzkaller0: tun_net_xmit 48 [ 415.388305][T14904] netlink: 'syz.3.2367': attribute type 4 has an invalid length. [ 415.463418][T14909] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 415.536284][T14911] bond0: entered allmulticast mode [ 415.735541][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.750464][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.768509][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.784496][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.800702][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.802021][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.804583][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.807959][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.841503][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.846114][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.849084][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.857700][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.868498][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.882542][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.885211][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.888172][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.898539][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.905324][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.944206][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.959332][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.972322][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.973824][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.975178][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.976548][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.977962][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.001893][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.011996][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.025000][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.055488][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.068583][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.090288][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.113625][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.156230][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.176207][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.177561][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.197217][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.211688][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.217100][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.230822][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.248081][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248112][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248135][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248157][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248179][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248201][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248223][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248244][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248266][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248288][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248309][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248331][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248353][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248374][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248396][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248417][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248439][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248460][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248482][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248503][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248525][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.248546][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252531][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252557][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252579][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252601][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252623][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252645][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252665][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252687][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252708][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252729][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.252751][T14939] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 416.262074][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.299420][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.311215][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.318781][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.327463][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.357005][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.372698][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.394579][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.416277][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.457943][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.464409][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.467613][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.474042][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.483336][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.491512][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.503444][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.509582][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.525777][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.532670][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.544455][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.552403][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.559195][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.566375][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.588432][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.624164][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.625550][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.821743][ T9606] wlan0: Trigger new scan to find an IBSS to join [ 417.098971][T14968] 8021q: adding VLAN 0 to HW filter on device bond29 [ 417.194595][T14968] vlan3: entered promiscuous mode [ 417.194616][T14968] bond29: entered promiscuous mode [ 417.194771][T14968] vlan3: entered allmulticast mode [ 417.194784][T14968] bond29: entered allmulticast mode [ 417.415197][T14972] bridge0: port 2(vlan2) entered blocking state [ 417.415495][T14972] bridge0: port 2(vlan2) entered forwarding state [ 417.419205][T14972] syz_tun: entered promiscuous mode [ 417.432553][T14972] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 417.507940][T14985] 8021q: adding VLAN 0 to HW filter on device bond25 [ 417.737674][T14996] netlink: 'syz.2.2397': attribute type 32 has an invalid length. [ 417.746277][T14996] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 417.746316][T14996] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 417.815120][T10146] wlan0: Creating new IBSS network, BSSID 2e:27:a5:40:38:c0 [ 418.064172][T15017] h: entered promiscuous mode [ 418.398299][T15038] tipc: MTU too low for tipc bearer [ 418.481159][T15045] syzkaller0: entered promiscuous mode [ 418.481179][T15045] syzkaller0: entered allmulticast mode [ 418.954157][T15073] __nla_validate_parse: 9 callbacks suppressed [ 418.954176][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 419.221921][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 419.294269][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 419.448165][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029802c00: rx timeout, send abort [ 419.491726][T15094] xt_CT: No such helper "syz1" [ 419.544323][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 419.544498][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 419.544875][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 419.545047][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 419.545210][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 419.545445][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 419.545607][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 419.618748][T15094] xt_CT: No such helper "syz1" [ 419.694206][T15094] xt_CT: No such helper "syz1" [ 419.792169][T15094] xt_CT: No such helper "syz1" [ 419.887887][T15094] xt_CT: No such helper "syz1" [ 419.948215][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029802c00: abort rx timeout. Force session deactivation [ 419.950664][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029800000: rx timeout, send abort [ 420.046162][T15094] xt_CT: No such helper "syz1" [ 420.069622][T15145] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 420.251326][T15156] xt_hashlimit: size too large, truncated to 1048576 [ 420.315950][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.328726][T15160] bridge_slave_0 (unregistering): left allmulticast mode [ 420.328752][T15160] bridge_slave_0 (unregistering): left promiscuous mode [ 420.328833][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.416654][ T5623] Bluetooth: hci1: unexpected event 0x0e length: 0 < 3 [ 420.450740][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029800000: abort rx timeout. Force session deactivation [ 421.178600][T15166] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 421.179102][T15167] sctp: [Deprecated]: syz.4.2438 (pid 15167) Use of int in maxseg socket option. [ 421.179102][T15167] Use struct sctp_assoc_value instead [ 421.918734][T12060] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 422.864628][T15136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.218779][T15198] netlink: 'syz.2.2446': attribute type 21 has an invalid length. [ 423.286733][T15194] netlink: 'syz.4.2445': attribute type 40 has an invalid length. [ 423.816733][T15223] netlink: 'syz.2.2452': attribute type 8 has an invalid length. [ 423.991477][T15231] tipc: Failed to remove unknown binding: 66,0,0/134418688:4012547538/4012547539 [ 423.993203][T15231] tipc: Failed to remove unknown binding: 66,0,0/134418688:4012547538/4012547539 [ 424.078209][T15233] __nla_validate_parse: 63 callbacks suppressed [ 424.078229][T15233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2456'. [ 424.683789][T15270] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2464'. [ 424.688089][T15274] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2464'. [ 424.830046][T15287] netlink: 'syz.3.2469': attribute type 2 has an invalid length. [ 425.185492][T15303] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2472'. [ 425.346749][T15313] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2476'. [ 425.414368][T15320] bond20: option mode: unable to set because the bond device has slaves [ 425.414904][T15320] bond20: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 425.414926][T15320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.494806][T15322] sctp: [Deprecated]: syz.3.2478 (pid 15322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.494806][T15322] Use struct sctp_sack_info instead [ 425.495303][T15322] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2478'. [ 425.657754][T15328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2480'. [ 425.918599][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2479'. [ 426.406370][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2491'. [ 426.406391][T15369] netlink: 'syz.5.2491': attribute type 1 has an invalid length. [ 426.761032][T15386] netlink: 'syz.0.2495': attribute type 5 has an invalid length. [ 426.761054][T15386] netlink: 'syz.0.2495': attribute type 17 has an invalid length. [ 426.761065][T15386] netlink: 'syz.0.2495': attribute type 27 has an invalid length. [ 426.895583][T15380] bond23: option downdelay: invalid value (18446744073709551615) [ 426.895611][T15380] bond23: option downdelay: allowed values 0 - 2147483647 [ 426.943533][T15380] bond23 (unregistering): Released all slaves [ 427.014658][T15386] team0: left promiscuous mode [ 427.014681][T15386] team_slave_0: left promiscuous mode [ 427.015284][T15386] team_slave_1: left promiscuous mode [ 427.024822][T15386] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.043006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.043890][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.044760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.045031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.045282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.045522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.045772][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.046013][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.046263][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.254001][T15386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.419741][ C0] net_ratelimit: 26686 callbacks suppressed [ 430.419764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.419825][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 430.420030][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.420066][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 430.420283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.420336][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 430.420533][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.420576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 430.420783][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.420818][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 435.429760][ C0] net_ratelimit: 40294 callbacks suppressed [ 435.429784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.429936][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 435.430069][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.430207][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 435.430345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.430457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 435.430616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.430702][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 435.430928][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 435.430983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.018372][ C0] sched: DL replenish lagged too much [ 440.439792][ C0] net_ratelimit: 40054 callbacks suppressed [ 440.439814][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.439874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 440.440087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.440100][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 440.440332][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 440.440347][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.440617][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 440.440636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 440.440869][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 440.440889][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.129181][ T4982] udevd[4982]: worker [8158] /devices/virtual/block/nbd0 timeout; kill it [ 441.993989][ T4982] udevd[4982]: seq 14168 '/devices/virtual/block/nbd0' killed [ 445.449838][ C1] net_ratelimit: 40524 callbacks suppressed [ 445.449860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 445.449863][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.450107][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 445.450111][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.450351][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.450351][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 445.450592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.450615][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 445.450841][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.450847][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 450.459846][ C1] net_ratelimit: 40335 callbacks suppressed [ 450.459850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.459868][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 450.460102][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.460124][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 450.460352][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.460398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 450.460597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.460650][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 450.460853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.460896][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 453.605378][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 455.067952][ T4932] Bluetooth: hci4: command 0x0405 tx timeout [ 455.480200][ C0] net_ratelimit: 40876 callbacks suppressed [ 455.480222][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.480491][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.480787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.480845][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 455.481046][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.481088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 455.481315][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.481567][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.481824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.482083][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.489830][ C0] net_ratelimit: 40937 callbacks suppressed [ 460.489851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.489876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 460.490108][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.490145][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 460.490363][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.490453][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 460.490615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.490741][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 460.490866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.491008][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 465.499800][ C1] net_ratelimit: 40368 callbacks suppressed [ 465.499822][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 465.499864][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.500070][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 465.500128][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.500303][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 465.500392][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.500536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 465.500659][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.500788][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 465.500919][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.509892][ C0] net_ratelimit: 40363 callbacks suppressed [ 470.509927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.509956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 470.510184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.510214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 470.510469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 470.510469][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.510727][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.510741][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 470.510974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.510996][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 475.519796][ C1] net_ratelimit: 40197 callbacks suppressed [ 475.519818][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 475.519833][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.520076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 475.520094][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.520354][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.520376][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 475.520617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 475.520627][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 475.520882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 475.520882][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.529864][ C0] net_ratelimit: 40675 callbacks suppressed [ 480.529873][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 480.529885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.530130][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 480.530211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.530374][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 480.530475][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.530652][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 480.530735][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.530927][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 480.531002][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.539752][ C1] net_ratelimit: 40728 callbacks suppressed [ 485.539776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 485.539861][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.540056][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 485.540140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.540336][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 485.540401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.540588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 485.540667][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 485.540843][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 485.540922][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.549762][ C0] net_ratelimit: 41049 callbacks suppressed [ 490.549784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.549804][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 490.550038][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 490.550038][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.550285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 490.550293][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.550517][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 490.550538][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.550775][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 490.550791][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.559925][ C1] net_ratelimit: 40687 callbacks suppressed [ 495.559946][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 495.559963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.560186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 495.560259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.560423][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 495.560549][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.560688][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 495.560831][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.560920][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 495.561121][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.569932][ C0] net_ratelimit: 40220 callbacks suppressed [ 500.569954][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.569987][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 500.570200][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.570279][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 500.570442][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.570671][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 500.570724][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.570932][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 500.570965][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 500.571193][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 505.579816][ C1] net_ratelimit: 40231 callbacks suppressed [ 505.579837][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 505.579866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.580118][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 505.580131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.580374][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 505.580396][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.580625][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 505.580712][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 505.580864][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 505.580986][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.589783][ C0] net_ratelimit: 40209 callbacks suppressed [ 510.589805][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.589904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 510.590070][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.590152][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 510.590334][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.590413][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 510.590635][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.590696][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 510.590892][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 510.590976][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 515.599756][ C0] net_ratelimit: 40172 callbacks suppressed [ 515.599777][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.599831][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 515.600035][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.600069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 515.600286][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.600358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 515.600529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.600626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 515.600783][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 515.600867][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 520.609897][ C0] net_ratelimit: 40473 callbacks suppressed [ 520.609899][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 520.609918][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.610160][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 520.610172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.610421][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.610438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 520.610666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.610699][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 520.610911][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 520.610950][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 525.619739][ C0] net_ratelimit: 40579 callbacks suppressed [ 525.619761][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.619876][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 525.620028][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.620113][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 525.620287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.620373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 525.620546][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.620608][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 525.620832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 525.620836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.629739][ C0] net_ratelimit: 40298 callbacks suppressed [ 530.629749][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 530.629760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.630016][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.630074][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.630262][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.630388][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 530.630505][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.630695][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.630749][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.631011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 535.639955][ C1] net_ratelimit: 40625 callbacks suppressed [ 535.639961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.639976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.640226][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.640267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 535.640498][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.640514][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.640760][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.640777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.641019][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 535.641036][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:06:f8:ae:88:a8:3a, vlan:0) [ 537.139731][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 537.271637][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15391/1:b..l [ 537.279645][ C0] rcu: (detected by 0, t=10515 jiffies, g=63785, q=1820 ncpus=2) [ 537.287557][ C0] task:syz.5.2496 state:R running task stack:24360 pid:15391 tgid:15391 ppid:13404 task_flags:0x400040 flags:0x00080002 [ 537.301136][ C0] Call Trace: [ 537.304469][ C0] [ 537.307410][ C0] __schedule+0x17db/0x58f0 [ 537.311954][ C0] ? __lock_acquire+0x747/0x2de0 [ 537.316903][ C0] ? __pfx___schedule+0x10/0x10 [ 537.321767][ C0] ? __lock_acquire+0x747/0x2de0 [ 537.326726][ C0] preempt_schedule_irq+0x4b/0x90 [ 537.331765][ C0] irqentry_exit+0x14f/0x910 [ 537.336365][ C0] ? trace_irq_disable+0x3b/0x140 [ 537.341407][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.347398][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 537.352695][ C0] Code: ff ff ff e8 50 a5 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 f0 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf a9 45 0a cc 48 8d 3d 97 4e da [ 537.372311][ C0] RSP: 0018:ffffc90004c6f1e0 EFLAGS: 00000292 [ 537.378394][ C0] RAX: 18b45c5fe6f5cb00 RBX: 0000000000000000 RCX: 0000000000000046 [ 537.386377][ C0] RDX: 00000000105209fd RSI: ffffffff8e69cb98 RDI: ffffffff8c6da080 [ 537.394358][ C0] RBP: ffff888052a40000 R08: ffffffff8177f1df R09: 0000000000000000 [ 537.402345][ C0] R10: ffffc90004c6f318 R11: ffffffff81b28ab0 R12: ffffffff8ed5c8e0 [ 537.410330][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 537.418316][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 537.424573][ C0] ? unwind_next_frame+0x8f/0x2550 [ 537.429705][ C0] ? kernel_clone+0x2d7/0x940 [ 537.434402][ C0] ? unwind_next_frame+0x8f/0x2550 [ 537.439528][ C0] unwind_next_frame+0xac/0x2550 [ 537.444480][ C0] ? unwind_next_frame+0x8f/0x2550 [ 537.449607][ C0] ? copy_process+0x820/0x43e0 [ 537.454387][ C0] ? unwind_next_frame+0x8f/0x2550 [ 537.459515][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 537.465676][ C0] arch_stack_walk+0x11b/0x150 [ 537.470458][ C0] ? kernel_clone+0x2d7/0x940 [ 537.475153][ C0] stack_trace_save+0xa9/0x100 [ 537.479923][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 537.485313][ C0] kasan_save_track+0x3e/0x80 [ 537.490001][ C0] ? kasan_save_track+0x3e/0x80 [ 537.494854][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 537.499624][ C0] ? __kmalloc_node_noprof+0x4b9/0x720 [ 537.505084][ C0] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 537.511172][ C0] ? __vmalloc_node_noprof+0xc2/0x100 [ 537.516570][ C0] ? dup_task_struct+0x2c6/0xa00 [ 537.521529][ C0] ? copy_process+0x820/0x43e0 [ 537.526309][ C0] ? kernel_clone+0x2d7/0x940 [ 537.531060][ C0] __kasan_kmalloc+0x93/0xb0 [ 537.535669][ C0] __kmalloc_node_noprof+0x4b9/0x720 [ 537.540979][ C0] ? __kmalloc_node_noprof+0x2f0/0x720 [ 537.546449][ C0] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 537.552536][ C0] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 537.558638][ C0] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 537.564565][ C0] ? percpu_ref_get_many+0x19/0x140 [ 537.569780][ C0] ? percpu_ref_get_many+0x19/0x140 [ 537.575009][ C0] ? __memcg_slab_post_alloc_hook+0x487/0xd90 [ 537.581095][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 537.587440][ C0] ? dup_task_struct+0x52/0xa00 [ 537.592299][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 537.597690][ C0] ? memcpy_and_pad+0x48/0x80 [ 537.602392][ C0] __vmalloc_node_noprof+0xc2/0x100 [ 537.607605][ C0] ? copy_process+0x820/0x43e0 [ 537.612376][ C0] ? copy_process+0x820/0x43e0 [ 537.617156][ C0] dup_task_struct+0x2c6/0xa00 [ 537.621947][ C0] copy_process+0x820/0x43e0 [ 537.626586][ C0] ? __pfx_copy_process+0x10/0x10 [ 537.631637][ C0] kernel_clone+0x2d7/0x940 [ 537.636162][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 537.641233][ C0] __se_sys_clone3+0x33c/0x360 [ 537.646016][ C0] ? __pfx___se_sys_clone3+0x10/0x10 [ 537.651335][ C0] ? _copy_to_user+0x8a/0xb0 [ 537.655973][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 537.661289][ C0] do_syscall_64+0x166/0x520 [ 537.665904][ C0] ? trace_irq_disable+0x3b/0x140 [ 537.670935][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.677008][ C0] ? clear_bhb_loop+0x70/0xc0 [ 537.681697][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.687598][ C0] RIP: 0033:0x7f7e2619ef49 [ 537.692016][ C0] RSP: 002b:00007fffcf560a48 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 537.700439][ C0] RAX: ffffffffffffffda RBX: 00007f7e2615a4e0 RCX: 00007f7e2619ef49 [ 537.708413][ C0] RDX: 00007f7e2615a4e0 RSI: 0000000000000058 RDI: 00007fffcf560aa0 [ 537.716387][ C0] RBP: 00007f7e23bd16c0 R08: 00007f7e23bd16c0 R09: 00007fffcf560b87 [ 537.724368][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 537.732349][ C0] R13: 000000000000006e R14: 00007fffcf560aa0 R15: 00007fffcf560b88 [ 537.740350][ C0] [ 537.743389][ C0] rcu: rcu_preempt kthread starved for 1321 jiffies! g63785 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 537.754330][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 537.764302][ C0] rcu: RCU grace-period kthread stack dump: [ 537.770189][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 537.783701][ C0] Call Trace: [ 537.786986][ C0] [ 537.789926][ C0] __schedule+0x17db/0x58f0 [ 537.794448][ C0] ? __lock_acquire+0x747/0x2de0 [ 537.799413][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 537.804565][ C0] ? __pfx___schedule+0x10/0x10 [ 537.809423][ C0] ? lock_acquire+0x115/0x350 [ 537.814120][ C0] ? schedule+0x90/0x2b0 [ 537.818379][ C0] schedule+0x164/0x2b0 [ 537.822551][ C0] schedule_timeout+0x152/0x2c0 [ 537.827427][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 537.832821][ C0] ? __pfx_process_timeout+0x10/0x10 [ 537.838138][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 537.843954][ C0] ? prepare_to_swait_event+0x322/0x350 [ 537.849519][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 537.854393][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 537.860559][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 537.865852][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 537.871070][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 537.876891][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 537.881505][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 537.886713][ C0] ? __kthread_parkme+0x71/0x1f0 [ 537.891668][ C0] ? __kthread_parkme+0x199/0x1f0 [ 537.896716][ C0] kthread+0x38b/0x480 [ 537.900794][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 537.906002][ C0] ? __pfx_kthread+0x10/0x10 [ 537.910600][ C0] ret_from_fork+0x514/0xb70 [ 537.915200][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 537.920324][ C0] ? __switch_to+0xc89/0x1420 [ 537.925019][ C0] ? __pfx_kthread+0x10/0x10 [ 537.929619][ C0] ret_from_fork_asm+0x1a/0x30 [ 537.934414][ C0] [ 537.937435][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 537.943824][ C0] CPU: 0 UID: 0 PID: 9601 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 537.953433][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 537.963578][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 537.970366][ C0] RIP: 0010:ip6_route_input+0x78d/0xb20 [ 537.975941][ C0] Code: e8 88 6c 37 f7 b9 84 00 00 00 4c 8b 64 24 08 48 8b 7c 24 20 48 8d 74 24 60 48 8b 54 24 10 49 c7 c0 80 54 90 8a e8 d3 bc 10 00 <49> 89 c6 48 8b 44 24 18 42 80 3c 38 00 74 08 4c 89 e7 e8 2c 74 a7 [ 537.995551][ C0] RSP: 0018:ffffc90000006ee0 EFLAGS: 00000246 [ 538.001628][ C0] RAX: ffff88807ccc4140 RBX: 1ffff92000000de4 RCX: ffff888028325dc0 [ 538.009606][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: ffff888028325dc0 [ 538.017579][ C0] RBP: ffffc90000007088 R08: 0000000000000100 R09: 0000000000000002 [ 538.025553][ C0] R10: 00000000fffffff5 R11: ffffffff8aa135f0 R12: ffff88808c29b698 [ 538.033531][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 538.041506][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 538.050440][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.057028][ C0] CR2: 000056529074a4d8 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 538.065006][ C0] Call Trace: [ 538.068291][ C0] [ 538.071145][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 538.076454][ C0] ? ip6_parse_tlv+0xae4/0x1f20 [ 538.081331][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 538.086636][ C0] ip6_rcv_finish+0x141/0x280 [ 538.091327][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 538.096541][ C0] ip_sabotage_in+0x1e1/0x270 [ 538.101235][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 538.106452][ C0] nf_hook_slow+0xc5/0x220 [ 538.110880][ C0] NF_HOOK+0x21f/0x3c0 [ 538.114964][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 538.120177][ C0] ? NF_HOOK+0x9e/0x3c0 [ 538.124351][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 538.128950][ C0] ? ip6_rcv_core+0xa1/0x1870 [ 538.133643][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 538.138863][ C0] ? netif_receive_skb+0x102/0xbf0 [ 538.143987][ C0] netif_receive_skb+0x278/0xbf0 [ 538.148932][ C0] ? lock_acquire+0x115/0x350 [ 538.153622][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 538.159096][ C0] ? br_netif_receive_skb+0x126/0x190 [ 538.164488][ C0] NF_HOOK+0xa4/0x3a0 [ 538.168486][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 538.174226][ C0] ? NF_HOOK+0xfa/0x3a0 [ 538.178401][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 538.183011][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 538.188757][ C0] ? br_pass_frame_up+0x275/0x420 [ 538.193804][ C0] br_handle_frame_finish+0x1136/0x1950 [ 538.199384][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 538.205299][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 538.210161][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 538.215288][ C0] ? nf_hook_slow+0x176/0x220 [ 538.219975][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 538.225884][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 538.230842][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 538.236061][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 538.241541][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 538.247454][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 538.252678][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 538.258677][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 538.264596][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 538.269988][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 538.275549][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 538.281462][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 538.287979][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 538.293203][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 538.298676][ C0] br_handle_frame+0x1329/0x1600 [ 538.303641][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 538.308940][ C0] ? __lock_acquire+0x747/0x2de0 [ 538.313889][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 538.319807][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 538.325106][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 538.330766][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 538.336841][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 538.341997][ C0] ? process_backlog+0x3de/0x18b0 [ 538.347027][ C0] ? process_backlog+0x3de/0x18b0 [ 538.352064][ C0] process_backlog+0x727/0x18b0 [ 538.356928][ C0] ? call_timer_fn+0xd5/0x5f0 [ 538.361620][ C0] ? process_backlog+0x3de/0x18b0 [ 538.366668][ C0] __napi_poll+0xaa/0x330 [ 538.371008][ C0] net_rx_action+0x61d/0xf50 [ 538.375624][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 538.380776][ C0] handle_softirqs+0x226/0x860 [ 538.385560][ C0] ? do_softirq+0x77/0xd0 [ 538.389918][ C0] ? __alloc_skb+0x18d/0x7a0 [ 538.394517][ C0] ? __alloc_skb+0x18d/0x7a0 [ 538.399127][ C0] do_softirq+0x77/0xd0 [ 538.403313][ C0] [ 538.406244][ C0] [ 538.409185][ C0] __local_bh_enable_ip+0x100/0x140 [ 538.414403][ C0] __alloc_skb+0x1b1/0x7a0 [ 538.418842][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 538.424512][ C0] ? process_scheduled_works+0x97a/0x1630 [ 538.430250][ C0] process_scheduled_works+0xc3d/0x1630 [ 538.435845][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 538.441872][ C0] ? assign_work+0x3cf/0x5d0 [ 538.446490][ C0] worker_thread+0xa47/0xfb0 [ 538.451121][ C0] kthread+0x38b/0x480 [ 538.455206][ C0] ? __pfx_worker_thread+0x10/0x10 [ 538.460329][ C0] ? __pfx_kthread+0x10/0x10 [ 538.464933][ C0] ret_from_fork+0x514/0xb70 [ 538.469535][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 538.474655][ C0] ? __switch_to+0xc89/0x1420 [ 538.479354][ C0] ? __pfx_kthread+0x10/0x10 [ 538.483957][ C0] ret_from_fork_asm+0x1a/0x30 [ 538.488762][ C0]