last executing test programs: 10.090131292s ago: executing program 3 (id=1319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) close(r1) socket$unix(0x1, 0x1, 0x0) 9.688442387s ago: executing program 3 (id=1324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) 9.399298876s ago: executing program 3 (id=1326): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000040)={{r1}, "63bd81969588b61ba3cfed0dd44cbb39f387440c4282fce1221865c173f1741bab92f1438549b6d4a5659f8ef78953e7d9ea0c2833a68b93e5f26f58a86804ca0db1f78680385e73e979aa3705f98920f02412d24fe2d5a875ccb36194bc06a81b8e566fa679537d5709a9bf01a9a700e375731ae35064a7957e9c2bdc7aef8b83b3baa63d11168a773339ef9fee21d578c9947e2feabd724acb0cac6e92e6bdb32f62fac7fad52a1cb3d15f181e8ecaec2a216ad16d5f4b5dc8a9fc772d7bc44e01a5f94de7333afb0f951e5fcac8b652b97be794b327e1007565ba6e8363d6f9f1263c10a5341832f26005bb6070a47a697ec33f9046a4cb3994064968de7056da0edaeb067723bc1f10ad9b685318a9fedbfdc7d3a87b5cfcc9e096a200722c6a65617d15c5d258ab2694f5c24dd92541407843ead73690751862cd45bc6e2fab558d4270adb3cbc221bf3a9282d54cf40356c1d614ec8ce8de0a1e1d201b19e974b6c1472acb6eb25341dec17f7c6ced6ae08407d50ad8206d0a784eea9945a4cb789cbcb9d4bb7e4c5afd84b89300f50579cdd9bd85379fc2cfc5804233cbdb2ac105cb837780b1e889777c0356b0c8388ef3ae88543a1f08b4b19ef765a7d351bfa52b04b840f43b87aedffd13456daa4e61ce3500c8d6fff13636cd4902105e3d6ff2625c23fb7840a3b76c35d9dc64e3624c34ca575e5278ae7665d7846aac8ce9bcd2a2757cc854faa0fb13a1d662ce3a29056e6e659c780064eb91635041248fc0d3a43a4cde1f12b723d674174fcd3a3cfa83eb2434bedd1b16dab296f58d0c8f4bb7f78dd7f22f09909dced8c2c979505fda8cfe80e5ea8332e592cd8b99df77f2b7bc79f6b357d95613a35ef5b739be284de3d473c63352dd2b0f5d31ef2a3adb7b6f78af6493cb36c48451ccff1f274f9ec72ad6f5c3024ec644f87c85b12b4ca6ffe1d7c7c84fa03257dead7aa3db74f94433137d467e241ee50738de07472cdf5de3de095e599fdbda1bed34100ad29a36dc1f18029e6b81c60014e8607759ac3401c59edf580c4613968e8e272d65ad282fa7e7d28a751f643cd72bdd3876507d28bd6a973d415101a6d47ef949072f6a1f78408276644a1546d0b0b66e63017e0384fb43c91b3e4adf37d6d8b6a2d319a0064da2758e1dc89b5460736e552c754c29f01e4dc090443059351d533417f18c93215b0e7ae677ddb2aed0f1741cfa9cab1b4e3d9cdce36eca526c87f34eb3865a8c55584b837d08c073cdfe9081f809696989802b036c4fd575da02716cf087da7ca950396670d9df0f6fccda1b60e9e9118745d79abb484e3d5bc618d88fddecf5e4e86aba1ccc956fc1cea6e2ab9774f13ec5fa900c4fe8bce6dd520400caee575748f2e47fa69489f1c9df8d1883371d9cbb316c77cb79e1c21dfd904bf6d18b1f218bd8213d58945aaaa5e55e10b81f64d6e125e89dcacbda658cb17086dd6f098ea2e92452657aa9fe024824a6a7271f808aaab8c094317eeb6e2cd87df4ba3211131e4fa91ca7c93b13c5ce92e0aa050faa68fa2d7eb6aca838ad8ac7c5d767832544faf1bd43f1f0f5aa93b9e08ec157221bbdd9acedd7d65fe2829614ac7f3acfff2c24935913402c2e9b91a56c43792fc09acdd6faafc7817ca52dc846849f5bde9961dde20425b968f9c77a0a853aed083e32a35860cfa7661ae0cfd495ba2a6a6846e12db54d7dd452859044cf3bfc0d181283ce2eea1c89b71f5ea8431cf10aed3d3f13f7c258c17caf2f81238e0d77364ca6b4b04168a7b8ef78fb1fea817664f3512b0d0ec4fc7223be99dac054e2b7cfb7fb70cea3e918718dfe9d88f5c62c207bd1130645ea954f8f3bc9a8697d05128776847c98392544beaac58b0150abcca8f4a9d797a22e9d1cd4123f5726b4de3843d42ee83bf4767ab3347a2f0fa4d1595cef23f9b6d548325c14a8d526eacf70b78df82060c90bf9630526a237628d89625b3bd7dee6069258759b791ade64fb6b10b51346cea2df48e1d296f85bef2d496805f3f6c8cf1de6934530a00ff296fa35383cabf48ce9d619ff2064e6f0e17449d4eba202c5fc1d1231960ed932984eb5a89c315bac11e69c1bbe7916d88551cdbe6c15932089e8296f1f5d59c3b31915692e4849572cd9d25df57d50155b15818b5cc990a1000040f6853cbfb230acf126e753d95f18a381457a70af4c3e79ca16b14f818d63ccc49819011515dd62ae650b45b583a6e784bc8ce9239a9c783f640ab1bc5d615a65f7f7781c25ae6b12a668e399ff293bf69d1778630d7392ed7914474bac95de89159f18ac6e9c33c27bd4693cb3b83bebb792fa79504919b58f404407713319e38fd05af8f7be084dca67af5cdbc1c46988b9c8c3fa0bc4a6237ae2d8af4ce4588c3a9025daa5daf1a0b27ebe8ea6846ab8892b91cc3688eb2be2d064d51bab2d3b1bde3d92deb94aa9b66e3817727b58e131c3336c8cab8ee2d638c30119555fccdb5847ecd235184f3b12425b660e88844eb8bf36a5b73fcfd12810c462b213bf6533b0f46ebce428f277aa5f7696ba6b61ed83a1e0e5fa6ffb3ad96aa3e7de7d539382321b6d64e69f686fe035a6e8b5a2073f5528d524062688f5e505ca759133c235ca4e4db9a70bc2a135588045e76d5b6c6d50bb79d6a2da06579804fb4a80ce471b09e36191632db8d9ab32667fdccc39283faf39076669b8ccef81e45535970c01c6ce964ec86588c61bf9a5e5e07c27a1ec67dfe56c964d78afd403c0ae6ea6fc3ee0f28e5f6f585262805e879cde627e3694fdeb5788c7f1eabb2d40df73fa0184c3800b8cacdc5e3820d1cf727e6bc7f539f422889d74cb6fe817d1fb10282ed79c61a228a5daa249fa27f6c4374874363a3a0c4604e16042fa53b8245dab5631daf07c7ac6b5f99a7bb234234c249168b890d0caf43da67d88c751793a201cef968e97a056e6eb5040029cf7696c0883e82bd1fc3388f8c85f160713fccaf26f3d3e534f70e021bed7276a0e84d891dfcfd816719b64a2359977ca242c0e9c1a42e1612a7c391ffa1a4a76bb2f1b8695d3f912e0e5ba1ca56fca8080f2e1178aee14454d1bed5fb3733e703e5931a8790632a00085c2e92081f09c5efda1d50cfe0e48c9069577b3a5721b39127b1a8f2c5907d5ab1cee30ec96fe9f484cffb1f910d254943b7f2cd673bf3a59c3441b3a52c150931e0f771cafa22a6b752acf43035cd2e4783590d971d09abf0b33f27ec0dc8501542686a1876187ea12ee4e28dbec8a049288e4adb3dce4b62ae1de1c06d34cdf9cd0a5c7b7cd1261df024ab362473e030caf22d569f914aca7acc87e7865cf63570041b00cdef53e563e3d9c3767e43e8eef0650e464bfd23370aaaf0c107b5f3442d3d2968d9ebf78464dc4f8ca8d1bfbda38f004d9b8a7cdee8215b2dc9b04e7dd06d8989d093e6236f3faba997a50c5f0c28d256d87c0470aecaff53bcd4200f22928057133732380f532ae3e63a1ba1b6a66695df8ca6af29185d5b023d05e2e7caef0f2ea812e84fdf0bdbd348e84c720976b73cbd8718caeeb00763c0d602a01112ba857475a8a12b1881a26d8593a081c02901e510c6192af2970f2205c280a9399203f41bb4913e50c204bde54b6a7e4292440e96849834c13327451f57d4412ed9350dfb7aea45f28927f283dd5f076972a4c7e29d43c3fd6eae4b3cf7c9739a765093ddb7e492921a00aa905a1fb68a7d1163db38c7977a87d6bc69ed0e95a0908c26a28644b9a2b87d73059cebe8606bad9c350e1ffdd95c3bfcac1786300417e13d8c3bd8411ac523382f0381d09748f077546e61f1fcbb6cc02488e4fd995386952b3b6472b0244abad64bfca509313f50c04024fce491fdac743f0b4e1318d8a0767853473e7002d5def5848c625ab220507c358f7029ea2efaa2a37eb18ec65adeffb7bc3304d92296d139e3f82690188efd4904551889fe9c27abbf8b9608dbf261860a0f7f276889710cd7cafd233ba5b4a756dece2cb68cc85a23ee3c86d8ce81a42931e67c7b0d12253b8d127ec1423d2e8f72078269e37b5f1a019c195c1a9f817409ba8ce5de95f55090a41241470cdfc0a05a7a25ed08c4382ca2ebb282b02b455643382fd4e837e9c36eebfec4c0781516e78667300fe967554191cb9c69b946125d3c7cc7ae34ecdf9562bba848b3cfd767cb68a8231e82ae869ce5db483825786b0f55bf14fde333e540b9cc35e65543c7ea4dff0389161de31d36d5352c74799d63ad5a27be0b9bae93558f6e99ae64f8204143af631e0642ee9853cfbbe12907cee68df6db75d58a0acacb7dcab71fffe90931c963ca3b1b5dd2409e5073f83b42a5a052ce12456b22af7b1b79d36511bc3d4b613bfbe6f9954613f593b332b2071502fed1d0eb1aea1de199705420a5a7427dad3337f60286e479e3684711247517fd840d2f3303813a1233ba840b18ec82b85f3f3ef294982e05e84b2092a5185f61577716ca70a182371ae4ec788d885777a93956b3087cd769bf166aae3eea0a348f1742da0a097458d02da6a4b09879648121cf53203930639ceb55e9e8026bb2c7d998ffbfea781e92efb2bd5f176932cdba9e83c00bf33010ef891db14aefdaeafbe981cb7f5244f522f5c0a59a1fb4e057b2237cec2f8167bfb47398305f44c5800a6706ba42f6b5c1a89c95d7f37f62f474c95c2f26063fe08adb5aaacf453e7e7cfb7a6c2e22758b4505e5e7c6d4bb90e12b2e0b9917de62a85367f78b22dfedae469919f5b2597503dd2cd0f1c7a67d935fa165b91da945b36909d84e23a7812b5e962b15e1b2f7cd5fab23014fa94388b54bdf839b983dca0332716603b536fa2c25c04de2bd4f29fecf6b9527cb8b654351497003eb3426d2e4f89569ace4b66921c9bf14983e886220a8cd8583a928eef3561403ea54376131a6670f59e1b2737571804d436d8ba0540dff6476f0064beb626d2849e835f5e57efc517aa78dfd6fced0c3b825f66094187affb442512b13870bbbfe3b3552fd1251bdf9dd2757862894784527871c4ef0d88253582e8103ec959b3eeb4a139beb87186d56386a1a05eb6bec853452c5a8a9c2ce448c5018a141534eea04d2699341ee92b72c8fce738af7b18cd7a073b93b2a95fdf3e135317dc57e3aae1bac136ef8a32c431d5a7c3136d85055a352131a078761cc36bc686ba44226e008a240c3641dbb88f3e7eb5aaf157b92ebbf6fccc74fb11de3c16be443766071dc05e46e94099c76703d7f2b09844f64dc7a3766329cd4dac8f01643928cdf5facd748964192a2dc2c602d6857ce6e6f404dc46ec63e98d4471b9377688873f030c8b37f56eb8dca76ed6da9881d3650b38e3cf6958ac15a866a47388fda12d4354aae5cfa17071c5b2487efebe9a4eff5fb6686d2dfc9305780b69c21539b016f1eaab3905bfc57ee7b7c0b387ae1a8993af52e44c2fbda08661d45fc4b75a2e59da57384beb7c647df6ae6368644aaaa6c8958224654eaa97bfdf4e2a765f07fe0d30df0baa054faab7838338716d743e3af82c1fd27f5af4c80826117633bb05e11584876046d36a2da9ae13f872cc5e079257ef4fee6b6ff81032911cdcf0ad33a92aca4edf7b70dc71e3db87a4daebd07bc15019cfc17d5e68cc45f47b87eb4c85b1dc3c83370e41607f68a4a3efadfe8884f851b68180bf3c900958861a1c1b3c823fd28c4fa17698624a7b262cf9c5deb3ae240d11bc06d7194bc340945bc13a69"}) socketpair(0x2, 0x2, 0x1, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001080)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x36, 0x0, "f9eef4b656d1e1f2a9062383350d8a45510a0e78e18275698fc40f949c746d10e2231e6370e08a537c70fd2d9deeb16e471bb97a7ccbe37420f7dac60d200664a1a3e823f60b9556158d93168e731036"}, 0xd8) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000001180)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'geneve0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001200)={0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4e0, 0x17}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000811}, 0x20000000) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000013c0)) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r5, 0x8, 0x41c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x53}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000001500)=[@window={0x3, 0x1, 0x6}, @window={0x3, 0x3ff, 0x1}, @sack_perm, @sack_perm, @window={0x3, 0x607, 0x4}, @window={0x3, 0x96, 0xbb9f}, @sack_perm, @mss={0x2, 0x9}, @window={0x3, 0x4, 0x401}, @mss={0x2, 0x6}], 0xa) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000001580)={0x74f85960, 0x401, 0x2, 0xffffffff, 0x4}, 0x14) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x4000094) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) getsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f00000016c0)={@rand_addr, @empty, @multicast2}, &(0x7f0000001700)=0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x6d}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40040c5) ioctl$int_out(r2, 0x2, &(0x7f0000001840)) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000018c0), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000001a00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0xb4, r8, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x22000041) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001a80), r4) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r11, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x58, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "aa200a38d1944d075ffcddb542c62f9a"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xddf}, @NL80211_ATTR_PMK={0x14, 0xfe, "7960b37a823f5ec718351de33d90627a"}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x80) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000001fc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001d00)={0x250, r5, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x218, 0x2a, [@chsw_timing={0x68, 0x4, {0x2, 0x280}}, @measure_req={0x26, 0xee, {0xc0, 0xf7, 0x6, "cccb9c02dd6fb4772f2c29194405ac6e42b814faf2541a48074e7d386ced2930c3faa2cff1f525e81ab12e0e29a3efd0efd562407c189869c741fbb6f7903c7e3d26b90ea8d89dc4db7a03fb9ad60001238bfa6ac05519f86295bae86df6f6ff712a3bb5221a90b14ed2f7e40408ef89a1c9ea336575fb20ad674c1279a578e0dcc44efa15a7fb09a3e13d346a16ceaa6ed1b6c28bd4b68d01521666006d70f174e4d0fb55b55de6f365df3d290dfe79ed52a3cf37a2ff91433038cbf3b085cc8f179b9d6883dec9bba5d4573fdfe30dd24b16cd271dc031177cae9d6eb33398a7f622afee14b361af7f62"}}, @random_vendor={0xdd, 0x43, "d5d02983368d393e4433bab6d9babc79ad55cc26d06a3f645e6c730e5208190245b3dc56a676b44207e638801e4cf780e92f513c24102f9949fda7cb9c58f79b025fb3"}, @fast_bss_trans={0x37, 0xa9, {0x44, 0x4, "5096d4566a43221e08010a2400745131", "997d7d08968beb9f1a916a62f6c956e58a11bc99d1077e6db6e5c2029db0ac1c", "7b84547ffdaef10477b1623dbaa9d609363189e339ba8067f3ea15420d9bd27d", [{0x2, 0x6, "2218f2c1fa5c"}, {0x2, 0x22, "f4ab57b8b5d57a639f029bf3d7940afe6edc8a0601f6e9f3b12ca62b080ceedfb4d2"}, {0x2, 0x25, "bfcbc2cc56d1331298df661cf8d8e065d56da5d6537d5a48b00d0e1c84e4c654cc1b2417ae"}, {0x1, 0x2, "c0b2"}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xe, 0xad, 0x9}}, @tim={0x5, 0x26, {0x9, 0x9f, 0x6, "9015b9b6bf8aa9d8bb047409cd8575a4337e955619f5b45690df97511b8e731df25526"}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x250}, 0x1, 0x0, 0x0, 0x800}, 0x40040) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x1) 9.0990993s ago: executing program 3 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x278, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x3b0, 0x20a, 0x278, 0x3b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x0, 0x238, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private0, [], @ipv4=@multicast1}, {@ipv6=@ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0x0, 0x0, 0xff000000], @ipv6=@mcast2, [], 0x0, 0x3502}, {@ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], 0x0, 0x0, 0x84}, {@ipv4=@dev, [], @ipv4=@broadcast, [], 0x0, 0x0, 0xff}], 0xf}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0xe775, 0x14b2f, 0x0, 0x0, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "bab250709f46abd5bde532173c6746623ee609e386a0905c3ef0f3051738"}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x3c, r5, 0x101, 0x2, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x278, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x3b0, 0x20a, 0x278, 0x3b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x0, 0x238, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private0, [], @ipv4=@multicast1}, {@ipv6=@ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0x0, 0x0, 0xff000000], @ipv6=@mcast2, [], 0x0, 0x3502}, {@ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], 0x0, 0x0, 0x84}, {@ipv4=@dev, [], @ipv4=@broadcast, [], 0x0, 0x0, 0xff}], 0xf}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0xe775, 0x14b2f, 0x0, 0x0, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "bab250709f46abd5bde532173c6746623ee609e386a0905c3ef0f3051738"}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x3c, r5, 0x101, 0x2, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async) 4.948644435s ago: executing program 0 (id=1336): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @multicast1, 0x0}, &(0x7f0000000200)=0xc) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) getsockopt(r1, 0x6, 0x3e74753a, &(0x7f0000000380)=""/192, &(0x7f0000000440)=0xc0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f000000cc80)={0xffffffffffffffff}) splice(r6, &(0x7f000000ccc0)=0xffffffff, r5, 0x0, 0x5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x11, &(0x7f0000000080)=@raw=[@ldst={0x3, 0x1, 0x1, 0xb, 0x3, 0x30}, @alu={0x7, 0x1, 0x6, 0x3, 0xe, 0xfffffffffffffff4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000140)='GPL\x00', 0x9, 0x1d, &(0x7f0000000180)=""/29, 0x41000, 0x58, '\x00', r3, @fallback=0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000280)=[r6], 0x0, 0x10, 0x9, @void, @value}, 0x94) 4.817979144s ago: executing program 3 (id=1337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000000)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) 4.756241833s ago: executing program 1 (id=1339): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000010000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0xa8, 0x0, 0xfbffffff, 0x0, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x3, @empty, @local, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) 4.283022231s ago: executing program 1 (id=1340): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0xc, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x25}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xfbfb}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22f0}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}]}]}], {0x14}}, 0xa4}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x10000000004e20, 0x2, @remote, 0x7fffffff}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) unshare(0x22020600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events.local\x00', 0x275a, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r5, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 4.202016791s ago: executing program 4 (id=1341): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000040)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB="08001f006800000082714dff4178d88f3144ffed22e3d6933b310c5e51194eaa6d24bd6eb22771c6c0cfbf2f5c42b340793a466c455661064fe004be401ef4b4715505c66f654be0f358b481dedc1df68fa47d6816bee526c3325122d817bd58824410942dc1ca41bdf66d84b31894b93e7d4a092cfe3932f75a10d87f78e17b04a5d454a0ce510dd831bcf64a33ef4c620e9d7aad652f703df93dde3e2bb905225d21d2ac5831fed741db19c2e862f950c156675cfae5b369ee36329c768361e1275c3668deb561726d9a1dd3bd28d97f093bbf36505506646d8aa278ba"], 0x44}}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x1) 3.834143843s ago: executing program 1 (id=1342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r5, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000090000000c00800800010000000000"], 0x20}}, 0x0) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xffffffffffff5294) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0080001a00010000000000000000000a000000000000000000000005000b000000000006001c0000000000"], 0x2c}}, 0x0) 3.819711922s ago: executing program 0 (id=1343): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r0, &(0x7f0000007600)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000780)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f00000000c0)=""/185, 0xb9}, {&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f00000006c0)=""/187, 0xbb}, {&(0x7f0000000640)=""/29, 0x1d}], 0x9, &(0x7f0000000840)=""/8, 0x8}, 0x4}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000880)=""/83, 0x53}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000a00)=""/25, 0x19}, {&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000000c00)=""/211, 0xd3}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/240, 0xf0}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x9, &(0x7f0000002ec0)=""/102, 0x66}, 0x10001}, {{&(0x7f0000002f40)=@isdn, 0x80, &(0x7f0000004340)=[{&(0x7f0000002fc0)=""/146, 0x92}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/11, 0xb}, {&(0x7f00000040c0)=""/246, 0xf6}, {&(0x7f00000041c0)=""/50, 0x32}, {&(0x7f0000004200)=""/229, 0xe5}, {&(0x7f0000004300)}], 0x7, &(0x7f00000043c0)=""/26, 0x1a}, 0x8}, {{&(0x7f0000004400)=@tipc, 0x80, &(0x7f0000004580)=[{&(0x7f0000004480)=""/161, 0xa1}, {&(0x7f0000004540)=""/61, 0x3d}], 0x2, &(0x7f00000045c0)=""/195, 0xc3}, 0x4}, {{&(0x7f00000046c0)=@nl, 0x80, &(0x7f0000005b40)=[{&(0x7f0000004740)=""/65, 0x41}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)=""/251, 0xfb}, {&(0x7f00000058c0)=""/195, 0xc3}, {&(0x7f00000059c0)=""/87, 0x57}, {&(0x7f0000005a40)=""/241, 0xf1}], 0x6, &(0x7f0000005bc0)=""/64, 0x40}}, {{&(0x7f0000005c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000006140)=[{&(0x7f0000005c80)=""/240, 0xf0}, {&(0x7f0000005d80)=""/94, 0x5e}, {&(0x7f0000005e00)=""/234, 0xea}, {&(0x7f0000005f00)=""/99, 0x63}, {&(0x7f0000005f80)=""/243, 0xf3}, {&(0x7f0000006080)=""/171, 0xab}], 0x6}, 0x7fff}, {{&(0x7f00000061c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000007580)=[{&(0x7f0000006240)=""/158, 0x9e}, {&(0x7f0000006300)=""/81, 0x51}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/197, 0xc5}, {&(0x7f0000007480)=""/60, 0x3c}, {&(0x7f00000074c0)=""/181, 0xb5}], 0x6}, 0x81}], 0x7, 0x1, &(0x7f00000077c0)={0x0, 0x3938700}) 3.634184309s ago: executing program 4 (id=1344): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x2}, 0x38) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @random="233ecf722892"}, 0x0, {0x2, 0x4e22, @rand_addr=0x64010101}, 'bond_slave_1\x00'}) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x11, 0x4) listen(r3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @multicast1}}}}) 3.544923071s ago: executing program 0 (id=1345): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x88, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1780}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x67}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_TTL={0x5, 0x8, 0x35}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x88}}, 0x0) 3.062024238s ago: executing program 2 (id=1347): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x110, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0xc0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xa4, 0x6, [@m_nat={0x6c, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @dev={0xac, 0x14, 0x14, 0x31}}}]}, {0x19, 0x6, "3ea6d48212417e7c0e7c09619f3e2af20800021ab7"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x4) accept(r4, 0x0, 0x0) shutdown(r4, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) 1.627315813s ago: executing program 1 (id=1348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_opts(r1, 0x29, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000000, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.626799753s ago: executing program 2 (id=1349): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r2, &(0x7f0000000080)={0x2c, 0x6, r3}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0xe088}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.625668969s ago: executing program 4 (id=1350): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r2}, 0x20) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e20, @dev}, 0xfffffffe}}, 0x2e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x180, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x0, 0x0, 0x80000000, 0xed, 0x7, 0x0, 0x78}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) accept4(r1, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0xc00) 1.55400704s ago: executing program 0 (id=1351): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x3ff, 0x4) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/4091, 0xffb}], 0x1}, 0x28}], 0x1, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}]}, 0x3c}}, 0x0) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000780a"], 0x80}}, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) close(0x3) 1.264195156s ago: executing program 0 (id=1352): r0 = socket$inet(0x2, 0x6, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x2, 'nicvf0\x00', {0xb5}, 0xfe}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0xfffffffd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x26b9ffe36856e205, 0x2f}, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) r3 = socket(0x1e, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0086dd", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) 1.243344422s ago: executing program 4 (id=1353): ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0xfffffffb) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ppoll(&(0x7f0000000840)=[{0xffffffffffffffff, 0x91}, {0xffffffffffffffff, 0xa08e}, {r2, 0x14c8}, {r1, 0x4734}], 0x4, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r5, @ANYRES16=0x0, @ANYRES8], 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x10) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf255c0000000c009900020000001f00000008006b003e02000008006b007800000008006b001400000008016b00f000000008006b006801000008006b005a00000088006b005800000008006b005a00000008006b005501000008006b00e0010000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) sendmsg$nl_route_sched(r4, &(0x7f0000000880)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x34, 0x26, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xf}, {0x10, 0x2}, {0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c01}, 0x814) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000480)={@bcast, @default, 0x2, 0x56}) close(r9) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f83e1d6af6ebebc4dd04ef25c9f6a8740b50be1fd7a27b954d0ca7b7a6264d76a66baa2999e95f7842a2644a3ced887e1b09e98ec65a314f4eef6953a537595d7fab64562800fc3ddc9ed8a7496f33d35fb50435fa2e9d9235ca785b2c1c67cc13069c941c37ef7fd762366ede3b1c39fc3a11d555d80ec2699917d15abfd633715f2775b67a143e0632c146b05585e7341bf25bade0d053c218277143813d9c2b09a524ef050f41b504d995dddd776ddf8b2b93b90e91c7b364a09f9ea202e8df704e9bf5f248f49922b489e04908247956e5b5363ff81865c2977695bb8e778bca9d97e1cc9272", @ANYRESHEX=r0, @ANYBLOB="050001000000fddbdf252100000004002d80"], 0x18}}, 0x404c000) 1.174071847s ago: executing program 1 (id=1354): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x404c080}, 0x8041) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="08000a00e1", @ANYRESHEX=r0, @ANYBLOB="fcf07fd8033d3e1cd5980e019b616254feef08f0b2b9636183c03910a8293185a03bf6b48dca7461e448a503e717ce7e90f88987"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x404c080}, 0x8041) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="08000a00e1", @ANYRESHEX=r0, @ANYBLOB="fcf07fd8033d3e1cd5980e019b616254feef08f0b2b9636183c03910a8293185a03bf6b48dca7461e448a503e717ce7e90f88987"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) 1.172330849s ago: executing program 2 (id=1355): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x27, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x8, 0x2c, &(0x7f00000001c0)=""/44, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0xc, 0x280, 0x800}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x2, 0x1, 0x0, 0x6}, {0x5, 0x3, 0x5}, {0x2, 0x5, 0x6, 0xb}], 0x10, 0x995, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='mem_connect\x00', r1, 0x0, 0xb}, 0x18) (async) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0x0, 0x9000}, @val={0x2, 0x0, 0x3e, 0x8, 0x2, 0x5}, @ipv4=@tipc={{0xb, 0x4, 0x0, 0x7, 0x54, 0x68, 0x0, 0xd, 0x6, 0x0, @private=0xa010100, @local, {[@generic={0x44, 0x12, "6e7cb58373f19e9b0c5142265e8c057b"}, @generic={0x7, 0x2}, @ra={0x94, 0x4, 0x1}]}}, @payload_named={{{{{0x28, 0x0, 0x1, 0x0, 0x1, 0xa, 0x2, 0x2, 0x66, 0x0, 0x0, 0xb, 0x2, 0x2, 0x6, 0x4, 0x0, 0x4e20, 0x4e21}, 0x4}, 0x2, 0x1}}}}}, 0x62) 1.021158996s ago: executing program 1 (id=1356): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="f408797dd53b71622ab702cf1a6e4175076da54553f1f1c4448cb5559e5eb078a74ceffd969430201c2f1f53b31d53c02dadde28e089a7826b3a70019a94c3904e886e9db630c31da4cd334add90a591a69918218a1cd15350d65dedd5f6f52adf57614c62eccb0054b456b28339cbacc915527d1d7690ae0690e7e53a1e8591f30d82b121285daeef50ac7e8a8ca3ce4bfa581c3e16c3ccf2c873f33552f0a20f0b372b02964a6c60d29b7c0863bf39f698cd64fcd9a15c0040e35909a1a5e3f5433f1ab771a630f0fff3ce1101f2c36f7a7f49dc9cf4d5398fdf00598216dad8df5e00816d7cf52c3a8ae6c112c289a18a97dca3c47be92b91544d9c6e8bc947de075c5b4378701f73aaec03dcab35979fefab31ff8ea47576a974e81045b2e5f9397dedd3fe70a5094a73f1a833b5720ed3065762508a4dee9ad42e48ef93cf03c6c80a64bccff5b3a52a9a718f87e5037bd7a9cc30e911e46049b35852fc55d79f8c5ab21ac345f06127bfe434197eca6b762c13967f105508bf0da040240d81e90a4f94a27b", 0x188}], 0x1}, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x188}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680200000005010c02010000000000000000000000000000000000178a157c245bc15b2b4ba68df815881fb219699f0855fc7a498442c944edb4194151bb767a1a618d6c0cc83105e9bebe5e33"], 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket(0x2b, 0x80801, 0x1) (async) r4 = socket(0x2b, 0x80801, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x247d, 0x4, @remote, @mcast1, 0x700, 0x8, 0x3a, 0xe9f4}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x4, 0x247d, 0x4, @remote, @mcast1, 0x700, 0x8, 0x3a, 0xe9f4}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000040)={0xbc, r6, 0xf2d305b368e1711f, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x1c}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_PROTOCOL_VERSION]}]}]}, 0xbc}}, 0x80) (async) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000040)={0xbc, r6, 0xf2d305b368e1711f, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x1c}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_PROTOCOL_VERSION]}]}]}, 0xbc}}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r9) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000006d00010000", @ANYRES32=0x0, @ANYBLOB="80000000000100004258b76e08784b2ded3d4024b31b077d5bb5fc525264c3823c1e19ce519687714bf641d3bf114d00"], 0x20}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) r11 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x8a, &(0x7f0000000040)=0x7e, 0x4) (async) setsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x8a, &(0x7f0000000040)=0x7e, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000083195578eb47cd46000000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000083195578eb47cd46000000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x3c}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 939.952409ms ago: executing program 2 (id=1357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/161, 0xa1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000004000000010000000000000000000000000000e4ffffb2a21d0a749b697652be4c210a7a002c4f7b8a324c3affa4f215d7a79cd13b1c7294159c1e27259746689b18f5c4b28dacf0554a679806d53578e849a3d4887ccd7d04733965ca7a6d0c785bb80099b1e3ac94f9758928f257488f8970f4b93e24b8530f2c0933f6328f99b2a2bf7bec423ca726916b7768e4c16fb6533d5ec6424ebfd2d4e6160cf1201c863508a8b3d00b9729470eaa61b8f2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r2) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}]}, 0x140}}, 0x0) 758.152337ms ago: executing program 4 (id=1358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_type(0xffffffffffffffff, 0xfffffffffffffffc, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @wg=@data={0x4, 0xe, 0xfaac, "dce0b827723a2929fcb986facfba7af71c14cfe3cdd179ab"}}}}}}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x20, 0x0, 0x1, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0x0, @in=@rand_addr=0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x102}}, 0xe8) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 435.635089ms ago: executing program 0 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000000)='.'}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000000)='.'}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7c, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x4, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x7b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xd, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x7b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x200}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0x9, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0x1, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x0, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x4}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0xe, 0x101, 0x2, 0xc88}], [{}, {0x5}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) 390.147347ms ago: executing program 4 (id=1360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdb252100110008000300", @ANYRES32=r4, @ANYBLOB="30002d8004"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711222000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdb252100110008000300", @ANYRES32=r4, @ANYBLOB="30002d8004"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r6, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711222000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 186.007724ms ago: executing program 2 (id=1361): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x6, 0xad7, 0x200, 0x3db, 0x3}) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0180fbff0e0009000080456d0020009c70d39a118878ac1414aaac1414bb4e2234f1000c907841100001"], 0xfee) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0xa1, @remote, 0x4e24, 0x4, 'ovf\x00', 0x1a, 0xfffffffe, 0x27}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e24, 0x3, 0x6, 0xfffffc00, 0x6}}, 0x44) connect$pppoe(r2, &(0x7f00000002c0)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, 'wlan0\x00'}}, 0x1e) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0xf7}], 0x1, 0x40002050, 0x0) 256.112µs ago: executing program 2 (id=1362): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x3ff, 0x4) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/4091, 0xffb}], 0x1}, 0x28}], 0x1, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}]}, 0x3c}}, 0x0) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000780a"], 0x80}}, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10) close(0x3) 0s ago: executing program 3 (id=1363): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x40000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x9, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x5, 0x4, 0x7, 0x1}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x3e) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000340)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xc}, @broadcast, @device_a, @from_mac=@device_b, {0xe, 0x8}, "", @void, @value=@ver_80211n={0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @random="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"}, 0x688) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) kernel console output (not intermixed with test programs): 86.933896][ T6308] netlink: 32 bytes leftover after parsing attributes in process `syz.3.101'. [ 87.290410][ T6326] netlink: 'syz.3.106': attribute type 9 has an invalid length. [ 87.331339][ T6326] netlink: 244 bytes leftover after parsing attributes in process `syz.3.106'. [ 87.379787][ T6329] netlink: 108 bytes leftover after parsing attributes in process `syz.1.108'. [ 87.522601][ T6337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.109'. [ 87.949383][ T6368] Zero length message leads to an empty skb [ 87.992993][ T6371] netlink: 104 bytes leftover after parsing attributes in process `syz.4.118'. [ 88.463239][ T6401] netlink: 'syz.4.127': attribute type 21 has an invalid length. [ 88.474391][ T5911] IPVS: starting estimator thread 0... [ 88.573084][ T6403] IPVS: using max 20 ests per chain, 48000 per kthread [ 88.780352][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'. [ 89.124688][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 89.753465][ T6465] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.950714][ T6475] __nla_validate_parse: 3 callbacks suppressed [ 89.950734][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 89.968563][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 90.002373][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.145'. [ 90.286467][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 90.321696][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 90.718756][ T35] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 90.748259][ T35] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 90.762834][ T35] bond0: active interface up! [ 90.771761][ T6514] netlink: 'syz.0.156': attribute type 2 has an invalid length. [ 90.962526][ T6527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'. [ 90.992787][ T6531] netlink: 'syz.4.160': attribute type 5 has an invalid length. [ 91.375798][ T6552] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 91.431828][ T6552] netlink: 'syz.2.164': attribute type 2 has an invalid length. [ 91.692288][ T6556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.165'. [ 91.805064][ T6576] netlink: 'syz.2.170': attribute type 2 has an invalid length. [ 92.240611][ T6586] netlink: 'syz.3.172': attribute type 178 has an invalid length. [ 92.289636][ T6592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.623246][ T6608] trusted_key: syz.1.180 sent an empty control message without MSG_MORE. [ 93.506466][ T6652] macvlan2: entered promiscuous mode [ 93.511825][ T6652] macvlan2: entered allmulticast mode [ 93.707333][ T6659] hsr0: entered promiscuous mode [ 93.714723][ T6659] macsec1: entered allmulticast mode [ 93.722688][ T6659] hsr0: entered allmulticast mode [ 93.728601][ T6659] hsr_slave_0: entered allmulticast mode [ 93.734367][ T6659] hsr_slave_1: entered allmulticast mode [ 93.754526][ T6659] hsr0: left allmulticast mode [ 93.760337][ T6659] hsr_slave_0: left allmulticast mode [ 93.767378][ T6659] hsr_slave_1: left allmulticast mode [ 93.767541][ T6669] delete_channel: no stack [ 93.995038][ T6674] netlink: 'syz.0.197': attribute type 1 has an invalid length. [ 94.013321][ T6674] netlink: 'syz.0.197': attribute type 1 has an invalid length. [ 94.101269][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 94.225303][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 94.476387][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 95.187442][ T6724] netlink: 'syz.2.213': attribute type 5 has an invalid length. [ 95.614445][ T6758] __nla_validate_parse: 2 callbacks suppressed [ 95.614467][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.223'. [ 95.677913][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 96.002901][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.228'. [ 96.216297][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.231'. [ 96.572105][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 96.594146][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 96.790341][ T5201] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1 [ 96.799978][ T5201] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22 [ 97.064667][ T6845] netlink: 'syz.4.249': attribute type 11 has an invalid length. [ 97.343239][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 97.439334][ T6862] IPVS: persistence engine module ip_vs_pe_À not found [ 98.037522][ T6871] netlink: 'syz.1.255': attribute type 2 has an invalid length. [ 98.044227][ T6872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.257'. [ 98.090304][ T6870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.132648][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 98.275368][ T6880] netlink: 'syz.3.261': attribute type 12 has an invalid length. [ 98.559981][ T6893] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 99.135645][ T6918] netlink: 'syz.0.272': attribute type 2 has an invalid length. [ 99.152588][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 99.970314][ T6956] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 100.002385][ T6963] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 100.022198][ T6963] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 100.424721][ T6980] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 100.442318][ T6984] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 100.585282][ T6994] C: renamed from lo (while UP) [ 100.619214][ T6994] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 100.862193][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.191726][ T7023] __nla_validate_parse: 5 callbacks suppressed [ 101.191749][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 101.247121][ T7023] gretap0: entered promiscuous mode [ 101.271816][ T7023] macvtap1: entered promiscuous mode [ 101.305208][ T7023] macvtap1: entered allmulticast mode [ 101.310648][ T7023] gretap0: entered allmulticast mode [ 101.839269][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 102.089561][ T7062] vlan2: entered allmulticast mode [ 102.452877][ T7090] netlink: 176 bytes leftover after parsing attributes in process `syz.0.314'. [ 102.680028][ T7108] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 102.683722][ T7101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.711305][ T7101] bond0: (slave bond1): Enslaving as an active interface with an up link [ 102.713463][ T7107] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 102.935121][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.682209][ T7155] netlink: 72 bytes leftover after parsing attributes in process `syz.2.329'. [ 103.878622][ T7181] Cannot find add_set index 0 as target [ 103.947784][ T7183] xt_TPROXY: Can be used only with -p tcp or -p udp [ 103.962056][ T7183] netlink: 100 bytes leftover after parsing attributes in process `syz.4.334'. [ 104.218352][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 104.528752][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.342'. [ 105.014937][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.735480][ T5841] Bluetooth: hci4: command tx timeout [ 106.076153][ T7258] netlink: 72 bytes leftover after parsing attributes in process `syz.2.355'. [ 106.109298][ T7259] sctp: [Deprecated]: syz.3.354 (pid 7259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.109298][ T7259] Use struct sctp_sack_info instead [ 106.135708][ T7258] netlink: 72 bytes leftover after parsing attributes in process `syz.2.355'. [ 106.199080][ T7263] netlink: 'syz.4.357': attribute type 1 has an invalid length. [ 106.238305][ T7263] netlink: 'syz.4.357': attribute type 2 has an invalid length. [ 107.097412][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.173873][ T7316] syz.3.368[7316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.174000][ T7316] syz.3.368[7316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.280237][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.368'. [ 107.295090][ T7316] syz.3.368[7316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.373116][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.368'. [ 107.435323][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 107.444686][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.368'. [ 107.463381][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 107.499395][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.368'. [ 107.526549][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.368'. [ 107.571939][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.368'. [ 107.606340][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.368'. [ 107.675174][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.3.368'. [ 107.849163][ T7358] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 108.478701][ T7381] netlink: 'syz.3.385': attribute type 21 has an invalid length. [ 108.801847][ T7412] netlink: 'syz.3.388': attribute type 5 has an invalid length. [ 109.176333][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.766426][ T7463] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 110.032401][ T7463] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 110.598100][ T7504] erspan0: entered promiscuous mode [ 110.615082][ T7504] macvtap1: entered promiscuous mode [ 110.620559][ T7504] macvtap1: entered allmulticast mode [ 110.649657][ T7504] erspan0: entered allmulticast mode [ 110.924138][ T7518] netlink: 'syz.4.417': attribute type 2 has an invalid length. [ 111.201570][ T7532] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 111.233081][ T7536] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 111.263606][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.069054][ T7579] netlink: 'syz.1.437': attribute type 11 has an invalid length. [ 112.080420][ T7580] netlink: 'syz.1.437': attribute type 11 has an invalid length. [ 112.153216][ T7583] netlink: 'syz.1.441': attribute type 9 has an invalid length. [ 112.390008][ T7597] workqueue: name exceeds WQ_NAME_LEN. Truncating to: þÜ»}ÆÓž»räءÑV§ïj×ì·Pbô [ 112.453657][ T7599] __nla_validate_parse: 47 callbacks suppressed [ 112.453678][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 112.692238][ T7613] syz.0.448: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 112.734230][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.0.448 Not tainted 6.13.0-rc1-syzkaller-00210-g51a00be6a099 #0 [ 112.744908][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.755024][ T7613] Call Trace: [ 112.758339][ T7613] [ 112.761314][ T7613] dump_stack_lvl+0x241/0x360 [ 112.766051][ T7613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.771299][ T7613] ? __pfx__printk+0x10/0x10 [ 112.775938][ T7613] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 112.782400][ T7613] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 112.788956][ T7613] warn_alloc+0x278/0x410 [ 112.793322][ T7613] ? stack_depot_save_flags+0x29/0x830 [ 112.798815][ T7613] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 112.804920][ T7613] ? __pfx_warn_alloc+0x10/0x10 [ 112.809813][ T7613] ? kasan_save_track+0x3f/0x80 [ 112.814704][ T7613] ? __kasan_kmalloc+0x98/0xb0 [ 112.819514][ T7613] ? xsk_setsockopt+0x4ea/0x950 [ 112.824398][ T7613] ? do_sock_setsockopt+0x3af/0x720 [ 112.829635][ T7613] ? __x64_sys_setsockopt+0x1ee/0x280 [ 112.835128][ T7613] ? do_syscall_64+0xf3/0x230 [ 112.839863][ T7613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.845979][ T7613] __vmalloc_node_range_noprof+0x126/0x1380 [ 112.851945][ T7613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.858312][ T7613] ? __kasan_kmalloc+0x98/0xb0 [ 112.863143][ T7613] vmalloc_user_noprof+0x74/0x80 [ 112.868145][ T7613] ? xskq_create+0xb6/0x170 [ 112.872682][ T7613] xskq_create+0xb6/0x170 [ 112.877051][ T7613] xsk_init_queue+0xa1/0x100 [ 112.881683][ T7613] xsk_setsockopt+0x4ea/0x950 [ 112.886405][ T7613] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.891641][ T7613] ? __pfx_aa_sk_perm+0x10/0x10 [ 112.896544][ T7613] ? aa_sock_opt_perm+0x79/0x120 [ 112.901518][ T7613] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.906750][ T7613] do_sock_setsockopt+0x3af/0x720 [ 112.911822][ T7613] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 112.917537][ T7613] ? __fget_files+0x395/0x410 [ 112.922250][ T7613] ? __fget_files+0x2a/0x410 [ 112.926887][ T7613] __x64_sys_setsockopt+0x1ee/0x280 [ 112.932125][ T7613] do_syscall_64+0xf3/0x230 [ 112.936683][ T7613] ? clear_bhb_loop+0x35/0x90 [ 112.941412][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.947352][ T7613] RIP: 0033:0x7fb77ab7ff19 [ 112.951809][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.971449][ T7613] RSP: 002b:00007fb77ba37058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.979913][ T7613] RAX: ffffffffffffffda RBX: 00007fb77ad46080 RCX: 00007fb77ab7ff19 [ 112.987923][ T7613] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 112.995932][ T7613] RBP: 00007fb77abf3cc8 R08: 0000000000000004 R09: 0000000000000000 [ 113.003944][ T7613] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.011953][ T7613] R13: 0000000000000000 R14: 00007fb77ad46080 R15: 00007fff8f9a5808 [ 113.019981][ T7613] [ 113.048452][ T7613] Mem-Info: [ 113.051731][ T7613] active_anon:4560 inactive_anon:0 isolated_anon:0 [ 113.051731][ T7613] active_file:1126 inactive_file:38214 isolated_file:0 [ 113.051731][ T7613] unevictable:768 dirty:72 writeback:0 [ 113.051731][ T7613] slab_reclaimable:9949 slab_unreclaimable:99890 [ 113.051731][ T7613] mapped:28645 shmem:1440 pagetables:830 [ 113.051731][ T7613] sec_pagetables:0 bounce:0 [ 113.051731][ T7613] kernel_misc_reclaimable:0 [ 113.051731][ T7613] free:1343548 free_pcp:468 free_cma:0 [ 113.052193][ T7612] netlink: 'syz.0.448': attribute type 3 has an invalid length. [ 113.108714][ T7612] netlink: 36 bytes leftover after parsing attributes in process `syz.0.448'. [ 113.118710][ T7613] Node 0 active_anon:18240kB inactive_anon:0kB active_file:4504kB inactive_file:152784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114580kB dirty:284kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11160kB pagetables:3320kB sec_pagetables:0kB all_unreclaimable? no [ 113.251811][ T7613] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 113.305464][ T7613] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.336797][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.373866][ T7613] lowmem_reserve[]: 0 2465 2466 0 0 [ 113.379497][ T7613] Node 0 DMA32 free:1456864kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:17704kB inactive_anon:0kB active_file:4504kB inactive_file:151952kB unevictable:1536kB writepending:284kB present:3129332kB managed:2552844kB mlocked:0kB bounce:0kB free_pcp:2928kB local_pcp:1588kB free_cma:0kB [ 113.449011][ T7613] lowmem_reserve[]: 0 0 0 0 0 [ 113.468536][ T7613] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 113.523680][ T7613] lowmem_reserve[]: 0 0 0 0 0 [ 113.571239][ T7613] Node 1 Normal free:3902544kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.631621][ T7613] lowmem_reserve[]: 0 0 0 0 0 [ 113.653258][ T7613] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.670245][ T7652] netlink: 'syz.3.454': attribute type 2 has an invalid length. [ 113.691524][ T7613] Node 0 DMA32: 3*4kB (UME) 38*8kB (UME) 179*16kB (UM) 97*32kB (UME) 78*64kB (UME) 25*128kB (UME) 9*256kB (UM) 12*512kB (UM) 7*1024kB (UM) 5*2048kB (UM) 346*4096kB (M) = 1457548kB [ 113.707430][ T7652] netlink: 244 bytes leftover after parsing attributes in process `syz.3.454'. [ 113.720034][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 113.745478][ T7613] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 113.767058][ T7613] Node 1 Normal: 238*4kB (U) 61*8kB (UME) 39*16kB (UME) 226*32kB (UME) 96*64kB (UME) 28*128kB (UME) 14*256kB (UM) 8*512kB (UME) 5*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3902544kB [ 113.788823][ T7613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.839268][ T7613] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.889759][ T7640] xt_CT: No such helper "syz1" [ 113.938852][ T7662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.946429][ T7662] IPv6: NLM_F_CREATE should be set when creating new route [ 113.953764][ T7662] IPv6: NLM_F_CREATE should be set when creating new route [ 113.962529][ T7613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.994633][ T7613] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.036156][ T7667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.460'. [ 114.046549][ T7613] 40785 total pagecache pages [ 114.051286][ T7613] 0 pages in swap cache [ 114.091475][ T7613] Free swap = 124996kB [ 114.100566][ T7667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.460'. [ 114.112809][ T7613] Total swap = 124996kB [ 114.120055][ T7613] 2097051 pages RAM [ 114.123896][ T7613] 0 pages HighMem/MovableOnly [ 114.145006][ T7613] 426990 pages reserved [ 114.159861][ T7613] 0 pages cma reserved [ 114.289473][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 114.409800][ T7665] infiniband syz2: set down [ 114.437864][ T7665] infiniband syz2: added ipvlan1 [ 114.644114][ T7665] RDS/IB: syz2: added [ 114.675738][ T7665] smc: adding ib device syz2 with port count 1 [ 114.682283][ T7665] smc: ib device syz2 port 1 has pnetid [ 114.810731][ T7694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.121680][ T7709] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 115.163430][ T7709] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 115.193297][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 115.267945][ T7717] netlink: 108 bytes leftover after parsing attributes in process `syz.0.473'. [ 115.330423][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.473'. [ 115.442683][ T7728] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 115.451458][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.813489][ T7730] bond2: entered allmulticast mode [ 115.820599][ T7730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.836749][ T7730] bond1: (slave bond2): making interface the new active one [ 115.859793][ T7730] bond1: (slave bond2): Enslaving as an active interface with an up link [ 115.884459][ T7733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.736341][ T7780] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 116.744325][ T7780] netlink: 'syz.1.484': attribute type 4 has an invalid length. [ 116.960064][ T7782] veth1: entered promiscuous mode [ 116.969584][ T7782] veth1: left promiscuous mode [ 116.989985][ T7793] gretap1: entered promiscuous mode [ 117.005560][ T7793] gretap1: entered allmulticast mode [ 117.135513][ T7797] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 117.495147][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.759952][ T7836] __nla_validate_parse: 8 callbacks suppressed [ 117.759970][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 117.899590][ T7840] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.207740][ T7859] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 118.686295][ T7895] netlink: 'syz.2.510': attribute type 13 has an invalid length. [ 118.747030][ T7894] netlink: 'syz.2.510': attribute type 13 has an invalid length. [ 118.762025][ T7894] netlink: 'syz.2.510': attribute type 58 has an invalid length. [ 118.770207][ T7895] netlink: 'syz.2.510': attribute type 58 has an invalid length. [ 118.778382][ T7894] netlink: 152 bytes leftover after parsing attributes in process `syz.2.510'. [ 118.789263][ T7895] netlink: 152 bytes leftover after parsing attributes in process `syz.2.510'. [ 118.878442][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 119.081034][ T7923] netlink: 152 bytes leftover after parsing attributes in process `syz.3.517'. [ 119.212481][ T7927] netlink: 44 bytes leftover after parsing attributes in process `syz.3.519'. [ 119.238298][ T7928] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.519'. [ 119.287978][ T7928] openvswitch: netlink: Flow actions attr not present in new flow. [ 119.493948][ T7939] netlink: 48 bytes leftover after parsing attributes in process `syz.0.521'. [ 119.560172][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.521'. [ 119.575215][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.654044][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 119.695445][ T7947] ip6gre1: entered allmulticast mode [ 119.871359][ T7957] netlink: 'syz.2.526': attribute type 11 has an invalid length. [ 119.918872][ T7958] netlink: 'syz.2.526': attribute type 15 has an invalid length. [ 120.312473][ T5883] IPVS: starting estimator thread 0... [ 120.328382][ T7982] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 120.349496][ T7985] netlink: 'syz.1.531': attribute type 24 has an invalid length. [ 120.426613][ T7986] IPVS: using max 24 ests per chain, 57600 per kthread [ 120.648480][ T7976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.714542][ T7976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.739447][ T7976] bond0 (unregistering): Released all slaves [ 120.780351][ T8006] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 120.805017][ T8006] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 121.197767][ T8032] pimreg: entered allmulticast mode [ 121.326065][ T8043] netlink: 'syz.2.546': attribute type 12 has an invalid length. [ 121.516440][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.524836][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.586428][ T8053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.655283][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.669734][ T8056] 0ªÃøÂFNð¡: renamed from bond_slave_0 [ 121.697683][ T8056] 0ªÃøÂFNð¡: entered allmulticast mode [ 122.151265][ T8083] xt_TCPMSS: Only works on TCP SYN packets [ 122.171976][ T8084] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 122.534675][ T8095] nbd: must specify an index to disconnect [ 122.610471][ T8102] netlink: 'syz.1.565': attribute type 11 has an invalid length. [ 122.688112][ T8102] raw_sendmsg: syz.1.565 forgot to set AF_INET. Fix it! [ 122.830095][ T8107] netlink: 'syz.4.568': attribute type 1 has an invalid length. [ 123.007309][ T8120] __nla_validate_parse: 5 callbacks suppressed [ 123.007330][ T8120] netlink: 64 bytes leftover after parsing attributes in process `syz.2.572'. [ 123.271555][ T8132] netlink: 72 bytes leftover after parsing attributes in process `syz.1.577'. [ 123.474302][ T8136] sctp: [Deprecated]: syz.2.578 (pid 8136) Use of int in maxseg socket option. [ 123.474302][ T8136] Use struct sctp_assoc_value instead [ 123.735149][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.591767][ T8187] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 125.057602][ T8209] netlink: 56 bytes leftover after parsing attributes in process `syz.0.598'. [ 125.206479][ T8210] xt_addrtype: ipv6 does not support BROADCAST matching [ 125.685748][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 125.739594][ T8243] gretap0: entered promiscuous mode [ 125.756383][ T8243] macvtap2: entered promiscuous mode [ 125.761885][ T8243] macvtap2: entered allmulticast mode [ 125.786069][ T8243] gretap0: entered allmulticast mode [ 125.814975][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.951457][ T8255] netlink: 'syz.4.611': attribute type 1 has an invalid length. [ 125.983534][ T8260] netlink: 'syz.2.612': attribute type 29 has an invalid length. [ 126.080220][ T8261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.131820][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.614'. [ 126.143184][ T8261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.615'. [ 126.193926][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 126.520569][ T8284] netlink: 'syz.2.623': attribute type 178 has an invalid length. [ 126.600069][ T8289] netlink: 'syz.3.625': attribute type 10 has an invalid length. [ 126.675023][ T8289] geneve0: entered promiscuous mode [ 126.702588][ T8289] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 126.872337][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 127.457232][ T8340] netlink: 148 bytes leftover after parsing attributes in process `syz.2.637'. [ 127.499404][ T8343] netlink: 'syz.3.640': attribute type 13 has an invalid length. [ 127.507812][ T8343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.640'. [ 127.509393][ T8339] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.525977][ T8339] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.534709][ T8339] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.543529][ T8339] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.590956][ T8343] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 127.895075][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.014145][ T8361] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 128.050803][ T8362] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 128.185987][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.207801][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.243437][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.254402][ T8373] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 128.279854][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.293875][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.313265][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.324672][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.336235][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.643675][ T8386] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 129.449268][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 129.621789][ T8438] netlink: 'syz.3.660': attribute type 21 has an invalid length. [ 129.680267][ T8438] netlink: 128 bytes leftover after parsing attributes in process `syz.3.660'. [ 129.724095][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 129.782587][ T8438] netlink: 'syz.3.660': attribute type 5 has an invalid length. [ 129.786578][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 129.790546][ T8438] netlink: 3 bytes leftover after parsing attributes in process `syz.3.660'. [ 129.890888][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 129.929998][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 129.966290][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 129.976292][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.984860][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 129.985158][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.666'. [ 130.226231][ T8454] netlink: 'syz.0.669': attribute type 5 has an invalid length. [ 130.604219][ T8478] sctp: [Deprecated]: syz.4.673 (pid 8478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.604219][ T8478] Use struct sctp_sack_info instead [ 131.020851][ T8498] openvswitch: netlink: IP tunnel dst address not specified [ 131.125219][ T8506] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 131.939959][ T8547] sit1: entered promiscuous mode [ 131.965425][ T8547] sit1: entered allmulticast mode [ 132.415997][ T8575] netlink: 'syz.3.700': attribute type 5 has an invalid length. [ 132.559804][ T8575] netlink: 'syz.3.700': attribute type 3 has an invalid length. [ 133.035860][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042244][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130966][ T8618] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 133.140699][ T8619] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 133.291675][ T8622] FAULT_INJECTION: forcing a failure. [ 133.291675][ T8622] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.354404][ T8622] CPU: 1 UID: 0 PID: 8622 Comm: syz.1.712 Not tainted 6.13.0-rc1-syzkaller-00210-g51a00be6a099 #0 [ 133.365074][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.375173][ T8622] Call Trace: [ 133.378505][ T8622] [ 133.381459][ T8622] dump_stack_lvl+0x241/0x360 [ 133.386202][ T8622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.391444][ T8622] ? __pfx__printk+0x10/0x10 [ 133.396083][ T8622] ? __pfx_lock_release+0x10/0x10 [ 133.401156][ T8622] should_fail_ex+0x3b0/0x4e0 [ 133.405860][ T8622] _copy_from_user+0x2f/0xc0 [ 133.410494][ T8622] copy_msghdr_from_user+0xae/0x680 [ 133.415745][ T8622] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 133.421596][ T8622] ? __fget_files+0x2a/0x410 [ 133.426224][ T8622] ? __fget_files+0x2a/0x410 [ 133.430852][ T8622] __sys_sendmsg+0x209/0x350 [ 133.435478][ T8622] ? __pfx_lock_release+0x10/0x10 [ 133.440557][ T8622] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.445719][ T8622] ? __pfx_vfs_write+0x10/0x10 [ 133.450541][ T8622] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.456914][ T8622] ? do_syscall_64+0x100/0x230 [ 133.461724][ T8622] ? do_syscall_64+0xb6/0x230 [ 133.466432][ T8622] do_syscall_64+0xf3/0x230 [ 133.470947][ T8622] ? clear_bhb_loop+0x35/0x90 [ 133.475633][ T8622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.481533][ T8622] RIP: 0033:0x7f84fcd7ff19 [ 133.485966][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.505608][ T8622] RSP: 002b:00007f84fdb45058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.514062][ T8622] RAX: ffffffffffffffda RBX: 00007f84fcf45fa0 RCX: 00007f84fcd7ff19 [ 133.522043][ T8622] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 133.530020][ T8622] RBP: 00007f84fdb450a0 R08: 0000000000000000 R09: 0000000000000000 [ 133.537997][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.545973][ T8622] R13: 0000000000000000 R14: 00007f84fcf45fa0 R15: 00007ffce6613f58 [ 133.553981][ T8622] [ 133.681958][ T8641] tipc: Started in network mode [ 133.687147][ T8641] tipc: Node identity 7e52b3ad39f7, cluster identity 4711 [ 133.695854][ T8641] tipc: Enabled bearer , priority 7 [ 133.727728][ T8641] ªªªªªª: renamed from syzkaller0 [ 133.827365][ T8641] tipc: Disabling bearer [ 133.916046][ T70] tipc: Subscription rejected, illegal request [ 134.069295][ T8667] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 134.193844][ T8674] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 134.223433][ T8674] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (65553) [ 134.451416][ T8681] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.497495][ T8681] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 134.831880][ T8703] netlink: 'syz.3.730': attribute type 75 has an invalid length. [ 134.981691][ T8710] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 135.485329][ T8732] __nla_validate_parse: 41 callbacks suppressed [ 135.485352][ T8732] netlink: 48 bytes leftover after parsing attributes in process `syz.4.745'. [ 135.557899][ T8736] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.585942][ T8736] netlink: 80 bytes leftover after parsing attributes in process `syz.1.744'. [ 135.709134][ T8740] sctp: [Deprecated]: syz.4.747 (pid 8740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.709134][ T8740] Use struct sctp_sack_info instead [ 135.966513][ T8758] netem: change failed [ 136.191937][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.755'. [ 136.528397][ T8782] netlink: 'syz.4.763': attribute type 9 has an invalid length. [ 136.539659][ T8782] netlink: 244 bytes leftover after parsing attributes in process `syz.4.763'. [ 136.592313][ T8780] netlink: 'syz.0.762': attribute type 7 has an invalid length. [ 136.853417][ T8794] ipvlan0: mtu less than device minimum [ 136.917877][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 137.256491][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 137.589412][ T8835] veth0_to_team: entered promiscuous mode [ 137.605597][ T8835] veth0_to_team: entered allmulticast mode [ 137.706280][ T8846] netlink: 'syz.4.780': attribute type 10 has an invalid length. [ 137.745382][ T8846] netlink: 55 bytes leftover after parsing attributes in process `syz.4.780'. [ 138.256845][ T8863] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 138.316145][ T8870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.411917][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 138.452681][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 138.462086][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.513630][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.559373][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.574980][ T8876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.726322][ T8888] Illegal XDP return value 4294967294 on prog (id 127) dev N/A, expect packet loss! [ 139.059566][ T8910] FAULT_INJECTION: forcing a failure. [ 139.059566][ T8910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.109244][ T8910] CPU: 1 UID: 0 PID: 8910 Comm: syz.3.798 Not tainted 6.13.0-rc1-syzkaller-00210-g51a00be6a099 #0 [ 139.119909][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.130003][ T8910] Call Trace: [ 139.133314][ T8910] [ 139.136278][ T8910] dump_stack_lvl+0x241/0x360 [ 139.141090][ T8910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.146333][ T8910] ? __pfx__printk+0x10/0x10 [ 139.150983][ T8910] should_fail_ex+0x3b0/0x4e0 [ 139.155702][ T8910] _copy_from_user+0x2f/0xc0 [ 139.160334][ T8910] move_addr_to_kernel+0x82/0x150 [ 139.165418][ T8910] __sys_sendto+0x268/0x4c0 [ 139.169964][ T8910] ? __pfx___sys_sendto+0x10/0x10 [ 139.175023][ T8910] ? __mutex_unlock_slowpath+0x21e/0x790 [ 139.180715][ T8910] ? __fget_files+0x2a/0x410 [ 139.185350][ T8910] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 139.191378][ T8910] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.197756][ T8910] __x64_sys_sendto+0xde/0x100 [ 139.202577][ T8910] do_syscall_64+0xf3/0x230 [ 139.207118][ T8910] ? clear_bhb_loop+0x35/0x90 [ 139.211821][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.217737][ T8910] RIP: 0033:0x7f918af7ff19 [ 139.222162][ T8910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.241782][ T8910] RSP: 002b:00007f918be55058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 139.250244][ T8910] RAX: ffffffffffffffda RBX: 00007f918b145fa0 RCX: 00007f918af7ff19 [ 139.258237][ T8910] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000003 [ 139.266223][ T8910] RBP: 00007f918be550a0 R08: 00000000200000c0 R09: 0000000000000014 [ 139.274206][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.282190][ T8910] R13: 0000000000000000 R14: 00007f918b145fa0 R15: 00007ffe0f58b0e8 [ 139.290185][ T8910] [ 139.548438][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 140.276107][ T8956] geneve2: entered promiscuous mode [ 140.333862][ T8953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.443351][ T8963] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 140.690622][ T8967] netlink: 'syz.1.811': attribute type 27 has an invalid length. [ 140.743678][ T8968] __nla_validate_parse: 3 callbacks suppressed [ 140.743698][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'. [ 140.774656][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.811'. [ 141.601217][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 141.615138][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028dcd000: rx timeout, send abort [ 141.625493][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028dcd400: rx timeout, send abort [ 141.634088][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888028dcd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 141.649517][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888028dcd400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 141.677578][ T9012] bridge0: port 3(veth0_to_bridge) entered blocking state [ 141.700058][ T9012] bridge0: port 3(veth0_to_bridge) entered disabled state [ 141.712228][ T9012] veth0_to_bridge: entered allmulticast mode [ 141.719670][ T9012] veth0_to_bridge: entered promiscuous mode [ 141.726518][ T9005] netlink: 'syz.1.822': attribute type 4 has an invalid length. [ 141.746303][ T9012] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.767116][ T9012] bridge0: port 3(veth0_to_bridge) entered blocking state [ 141.774706][ T9012] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 141.790039][ T9018] netlink: 'syz.1.822': attribute type 4 has an invalid length. [ 142.401331][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 142.739551][ T9075] netlink: 'syz.0.837': attribute type 10 has an invalid length. [ 142.766500][ T9075] netlink: 140 bytes leftover after parsing attributes in process `syz.0.837'. [ 142.843245][ T9085] xt_bpf: check failed: parse error [ 142.990456][ T9091] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 4, id = 0 [ 143.449175][ T9109] netlink: 'syz.0.847': attribute type 29 has an invalid length. [ 143.484171][ T9109] netlink: 'syz.0.847': attribute type 29 has an invalid length. [ 143.516837][ T9109] netlink: 'syz.0.847': attribute type 29 has an invalid length. [ 143.542092][ T9109] netlink: 'syz.0.847': attribute type 29 has an invalid length. [ 143.568589][ T9109] netlink: 'syz.0.847': attribute type 29 has an invalid length. [ 143.710323][ T9116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.850'. [ 143.949615][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 144.031058][ T9122] syz.1.849[9122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.031156][ T9122] syz.1.849[9122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.043318][ T9122] syz.1.849[9122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.303287][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.855'. [ 144.383855][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.546132][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.860'. [ 144.755288][ T9155] netlink: 52 bytes leftover after parsing attributes in process `syz.0.864'. [ 145.533481][ T9195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.627725][ T9198] validate_nla: 2 callbacks suppressed [ 145.627744][ T9198] netlink: 'syz.1.878': attribute type 2 has an invalid length. [ 145.691541][ T9206] netlink: 'syz.4.880': attribute type 6 has an invalid length. [ 145.951190][ T9210] __nla_validate_parse: 2 callbacks suppressed [ 145.951211][ T9210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.881'. [ 146.041419][ T9206] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.880'. [ 146.285638][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 146.301394][ T9214] openvswitch: netlink: Flow actions attr not present in new flow. [ 146.717285][ T9240] netlink: 144 bytes leftover after parsing attributes in process `syz.3.892'. [ 146.733235][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.892'. [ 146.779485][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.892'. [ 146.805209][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.892'. [ 146.855560][ T9247] tipc: Started in network mode [ 146.888820][ T9247] tipc: Node identity 7f000001, cluster identity 4711 [ 146.907757][ T9247] tipc: Enabled bearer , priority 10 [ 146.942254][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.892'. [ 146.957079][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.892'. [ 146.966425][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.892'. [ 147.518323][ T9281] tipc: Started in network mode [ 147.555055][ T9281] tipc: Node identity a25f1eaa38a9, cluster identity 4711 [ 147.562922][ T9281] tipc: Enabled bearer , priority 10 [ 147.849008][ T9300] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 147.864991][ T9300] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 148.037270][ T5201] tipc: Node number set to 2130706433 [ 148.507829][ T9339] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 148.537304][ T9339] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 148.676118][ T5883] tipc: Node number set to 2599820970 [ 148.974102][ T9367] FAULT_INJECTION: forcing a failure. [ 148.974102][ T9367] name failslab, interval 1, probability 0, space 0, times 1 [ 148.978196][ T9364] netlink: 'syz.3.923': attribute type 5 has an invalid length. [ 149.002254][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz.2.924 Not tainted 6.13.0-rc1-syzkaller-00210-g51a00be6a099 #0 [ 149.013046][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.023146][ T9367] Call Trace: [ 149.026457][ T9367] [ 149.029421][ T9367] dump_stack_lvl+0x241/0x360 [ 149.034183][ T9367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.039434][ T9367] ? __pfx__printk+0x10/0x10 [ 149.044088][ T9367] should_fail_ex+0x3b0/0x4e0 [ 149.048812][ T9367] should_failslab+0xac/0x100 [ 149.053558][ T9367] ? skb_clone+0x20c/0x390 [ 149.058016][ T9367] kmem_cache_alloc_noprof+0x70/0x380 [ 149.063447][ T9367] skb_clone+0x20c/0x390 [ 149.067742][ T9367] __netlink_deliver_tap+0x3cc/0x7f0 [ 149.073078][ T9367] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.078308][ T9367] netlink_deliver_tap+0x19d/0x1b0 [ 149.083457][ T9367] netlink_unicast+0x7c4/0x990 [ 149.088270][ T9367] ? __pfx_netlink_unicast+0x10/0x10 [ 149.093605][ T9367] ? __virt_addr_valid+0x183/0x530 [ 149.098758][ T9367] ? __check_object_size+0x48e/0x900 [ 149.104099][ T9367] netlink_sendmsg+0x8e4/0xcb0 [ 149.108916][ T9367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.114240][ T9367] ? aa_sock_msg_perm+0x91/0x160 [ 149.119219][ T9367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.124541][ T9367] __sock_sendmsg+0x221/0x270 [ 149.129268][ T9367] ____sys_sendmsg+0x52a/0x7e0 [ 149.134090][ T9367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.139420][ T9367] ? __fget_files+0x2a/0x410 [ 149.144056][ T9367] ? __fget_files+0x2a/0x410 [ 149.148700][ T9367] __sys_sendmsg+0x269/0x350 [ 149.153333][ T9367] ? __pfx_lock_release+0x10/0x10 [ 149.158405][ T9367] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.163571][ T9367] ? __pfx_vfs_write+0x10/0x10 [ 149.168405][ T9367] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.174778][ T9367] ? do_syscall_64+0x100/0x230 [ 149.179592][ T9367] ? do_syscall_64+0xb6/0x230 [ 149.184324][ T9367] do_syscall_64+0xf3/0x230 [ 149.188878][ T9367] ? clear_bhb_loop+0x35/0x90 [ 149.193602][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.199539][ T9367] RIP: 0033:0x7fa70cb7ff19 [ 149.204011][ T9367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.223663][ T9367] RSP: 002b:00007fa70da71058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.225485][ T9377] netlink: 'syz.3.926': attribute type 10 has an invalid length. [ 149.232098][ T9367] RAX: ffffffffffffffda RBX: 00007fa70cd45fa0 RCX: 00007fa70cb7ff19 [ 149.232127][ T9367] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 149.232143][ T9367] RBP: 00007fa70da710a0 R08: 0000000000000000 R09: 0000000000000000 [ 149.263832][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.271845][ T9367] R13: 0000000000000000 R14: 00007fa70cd45fa0 R15: 00007ffd255e1ec8 [ 149.279875][ T9367] [ 149.302403][ T9377] macvlan0: entered promiscuous mode [ 149.308122][ T9377] macvlan0: entered allmulticast mode [ 149.324104][ T9327] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 149.411183][ T9377] veth1_vlan: entered allmulticast mode [ 149.520035][ T9377] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 150.191649][ T9438] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 150.749390][ T9464] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 150.839717][ T9468] team_slave_0: entered promiscuous mode [ 150.845820][ T9468] team_slave_1: entered promiscuous mode [ 150.886104][ T9468] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 151.003038][ T9474] __nla_validate_parse: 12 callbacks suppressed [ 151.003058][ T9474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.956'. [ 151.066008][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 151.107631][ T9476] netlink: 'syz.3.957': attribute type 2 has an invalid length. [ 151.111424][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 151.129578][ T9484] netlink: 'syz.4.958': attribute type 8 has an invalid length. [ 151.192625][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 151.707838][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 151.859341][ T9529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.876155][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 151.923270][ T9531] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60 [ 152.066262][ T9542] ªªªªªª: renamed from syzkaller0 [ 152.123033][ T9546] netlink: 165 bytes leftover after parsing attributes in process `syz.0.975'. [ 152.302092][ T9551] netlink: 'syz.4.976': attribute type 29 has an invalid length. [ 152.315310][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.976'. [ 152.468379][ T9558] netlink: 'syz.0.980': attribute type 3 has an invalid length. [ 152.476566][ T9558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.980'. [ 152.846389][ T9574] netlink: 'syz.3.984': attribute type 3 has an invalid length. [ 152.866084][ T9574] netlink: 224 bytes leftover after parsing attributes in process `syz.3.984'. [ 153.224677][ T9601] xt_l2tp: unknown flags: 18 [ 153.490081][ T9616] x_tables: duplicate underflow at hook 2 [ 155.331173][ T9713] vlan0: entered promiscuous mode [ 155.578201][ T9735] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 155.588850][ T9737] FAULT_INJECTION: forcing a failure. [ 155.588850][ T9737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.622580][ T9737] CPU: 0 UID: 0 PID: 9737 Comm: syz.2.1024 Not tainted 6.13.0-rc1-syzkaller-00210-g51a00be6a099 #0 [ 155.633402][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.643490][ T9737] Call Trace: [ 155.646799][ T9737] [ 155.649765][ T9737] dump_stack_lvl+0x241/0x360 [ 155.654495][ T9737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.659735][ T9737] ? __pfx__printk+0x10/0x10 [ 155.664385][ T9737] ? snprintf+0xda/0x120 [ 155.668668][ T9737] should_fail_ex+0x3b0/0x4e0 [ 155.673386][ T9737] _copy_to_user+0x31/0xb0 [ 155.677845][ T9737] simple_read_from_buffer+0xca/0x150 [ 155.683255][ T9737] proc_fail_nth_read+0x1e9/0x250 [ 155.688321][ T9737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.693910][ T9737] ? rw_verify_area+0x55e/0x6f0 [ 155.698823][ T9737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.704424][ T9737] vfs_read+0x1fc/0xb70 [ 155.708625][ T9737] ? __pfx___mutex_lock+0x10/0x10 [ 155.713709][ T9737] ? __pfx_vfs_read+0x10/0x10 [ 155.718423][ T9737] ? __fget_files+0x2a/0x410 [ 155.723065][ T9737] ? __fget_files+0x395/0x410 [ 155.727776][ T9737] ? __fget_files+0x2a/0x410 [ 155.732410][ T9737] ksys_read+0x18f/0x2b0 [ 155.736692][ T9737] ? __pfx_ksys_read+0x10/0x10 [ 155.741504][ T9737] ? do_syscall_64+0x100/0x230 [ 155.746319][ T9737] ? do_syscall_64+0xb6/0x230 [ 155.751067][ T9737] do_syscall_64+0xf3/0x230 [ 155.755632][ T9737] ? clear_bhb_loop+0x35/0x90 [ 155.760475][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.766433][ T9737] RIP: 0033:0x7fa70cb7e92c [ 155.770890][ T9737] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.790548][ T9737] RSP: 002b:00007fa70da71050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.798998][ T9737] RAX: ffffffffffffffda RBX: 00007fa70cd45fa0 RCX: 00007fa70cb7e92c [ 155.806999][ T9737] RDX: 000000000000000f RSI: 00007fa70da710b0 RDI: 0000000000000004 [ 155.815005][ T9737] RBP: 00007fa70da710a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.823026][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.831018][ T9737] R13: 0000000000000000 R14: 00007fa70cd45fa0 R15: 00007ffd255e1ec8 [ 155.839010][ T9737] [ 156.066467][ T9756] netlink: 'syz.4.1031': attribute type 4 has an invalid length. [ 156.078066][ T9756] __nla_validate_parse: 10 callbacks suppressed [ 156.078086][ T9756] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1031'. [ 156.149924][ T9756] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 156.157432][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 156.199725][ T9767] xt_l2tp: v2 doesn't support IP mode [ 156.216053][ T9766] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 156.494417][ T9778] netlink: 'syz.4.1036': attribute type 13 has an invalid length. [ 156.564702][ T9778] veth0_macvtap: left promiscuous mode [ 156.622742][ T9778] macvtap0: entered allmulticast mode [ 156.634214][ T9784] can: request_module (can-proto-3) failed. [ 156.665632][ T9778] macvtap0: refused to change device tx_queue_len [ 164.264224][ T9817] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 164.369270][ T9817] bond1: entered promiscuous mode [ 164.399327][ T9817] bond1: entered allmulticast mode [ 164.408547][ T9817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.428526][ T9820] netlink: 'syz.4.1047': attribute type 21 has an invalid length. [ 164.436715][ T9820] netlink: 'syz.4.1047': attribute type 1 has an invalid length. [ 164.531572][ T9832] bridge0: port 3(vlan3) entered blocking state [ 164.538180][ T9832] bridge0: port 3(vlan3) entered disabled state [ 164.545374][ T9832] vlan3: entered allmulticast mode [ 164.551939][ T9832] vlan3: left allmulticast mode [ 164.641357][ T9836] bond0: option resend_igmp: invalid value (7540) [ 164.649914][ T9836] bond0: option resend_igmp: allowed values 0 - 255 [ 164.794470][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 164.925495][ T9849] netlink: 'syz.0.1057': attribute type 12 has an invalid length. [ 164.980133][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'. [ 165.001273][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 165.020667][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 165.314340][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'. [ 165.452898][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 165.461414][ T9876] x_tables: duplicate underflow at hook 4 [ 165.508370][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 165.896535][ T9908] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1070'. [ 166.196085][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 166.685661][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 166.737633][ T9966] geneve2: entered promiscuous mode [ 167.245614][ T9992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.291265][ T9992] batadv_slave_1: entered promiscuous mode [ 167.305008][ T9992] batadv_slave_1: entered allmulticast mode [ 167.913528][T10034] netlink: 'syz.2.1098': attribute type 13 has an invalid length. [ 167.922367][T10034] syz_tun: refused to change device tx_queue_len [ 167.928918][T10034] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 168.217927][T10054] FAULT_INJECTION: forcing a failure. [ 168.217927][T10054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.242239][T10054] CPU: 1 UID: 0 PID: 10054 Comm: syz.4.1103 Not tainted 6.13.0-rc1-syzkaller-00210-g51a00be6a099 #0 [ 168.253072][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.263161][T10054] Call Trace: [ 168.266470][T10054] [ 168.269456][T10054] dump_stack_lvl+0x241/0x360 [ 168.274204][T10054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.279465][T10054] ? __pfx__printk+0x10/0x10 [ 168.284113][T10054] ? __pfx_lock_release+0x10/0x10 [ 168.289180][T10054] should_fail_ex+0x3b0/0x4e0 [ 168.293891][T10054] _copy_from_user+0x2f/0xc0 [ 168.298544][T10054] copy_msghdr_from_user+0xae/0x680 [ 168.303795][T10054] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 168.309644][T10054] ? __fget_files+0x2a/0x410 [ 168.314290][T10054] ? __fget_files+0x2a/0x410 [ 168.318924][T10054] __sys_sendmsg+0x209/0x350 [ 168.323548][T10054] ? __pfx_lock_release+0x10/0x10 [ 168.328607][T10054] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.333760][T10054] ? __pfx_vfs_write+0x10/0x10 [ 168.338582][T10054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.344945][T10054] ? do_syscall_64+0x100/0x230 [ 168.349762][T10054] ? do_syscall_64+0xb6/0x230 [ 168.354495][T10054] do_syscall_64+0xf3/0x230 [ 168.359044][T10054] ? clear_bhb_loop+0x35/0x90 [ 168.363778][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.369712][T10054] RIP: 0033:0x7f428937ff19 [ 168.374161][T10054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.393898][T10054] RSP: 002b:00007f428a156058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.402504][T10054] RAX: ffffffffffffffda RBX: 00007f4289545fa0 RCX: 00007f428937ff19 [ 168.410596][T10054] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000004 [ 168.418594][T10054] RBP: 00007f428a1560a0 R08: 0000000000000000 R09: 0000000000000000 [ 168.426591][T10054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.434591][T10054] R13: 0000000000000000 R14: 00007f4289545fa0 R15: 00007ffe11905a18 [ 168.442622][T10054] [ 168.501577][T10061] netlink: 'syz.2.1102': attribute type 1 has an invalid length. [ 168.773548][T10077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.756136][T10114] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 169.865452][T10114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.902145][T10151] __nla_validate_parse: 11 callbacks suppressed [ 169.902165][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1119'. [ 169.927474][T10129] bond0: (slave gretap2): making interface the new active one [ 169.937601][T10129] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 169.946724][T10149] x_tables: duplicate underflow at hook 2 [ 170.310859][T10151] team0 (unregistering): Port device team_slave_0 removed [ 170.329497][T10151] team0 (unregistering): Port device team_slave_1 removed [ 170.582090][T10181] netlink: 'syz.2.1122': attribute type 2 has an invalid length. [ 170.603403][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'. [ 170.689170][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1127'. [ 170.733289][T10194] lo speed is unknown, defaulting to 1000 [ 170.800191][T10194] lo speed is unknown, defaulting to 1000 [ 170.822526][T10194] lo speed is unknown, defaulting to 1000 [ 170.980273][T10194] infiniband syz0: set down [ 170.984950][T10194] infiniband syz0: added lo [ 170.990892][T10194] syz0: rxe_create_cq: returned err = -12 [ 171.041143][ T5883] lo speed is unknown, defaulting to 1000 [ 171.048256][T10194] infiniband syz0: Couldn't create ib_mad CQ [ 171.054468][T10194] infiniband syz0: Couldn't open port 1 [ 171.085773][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 171.109496][T10208] xt_TCPMSS: Only works on TCP SYN packets [ 171.115675][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 171.129092][T10194] RDS/IB: syz0: added [ 171.133162][T10194] smc: adding ib device syz0 with port count 1 [ 171.139735][T10194] smc: ib device syz0 port 1 has pnetid [ 171.147698][T10194] lo speed is unknown, defaulting to 1000 [ 171.164670][ T5883] lo speed is unknown, defaulting to 1000 [ 171.466844][T10218] syzkaller1: entered promiscuous mode [ 171.488251][T10218] syzkaller1: entered allmulticast mode [ 171.624981][T10194] lo speed is unknown, defaulting to 1000 [ 171.630213][T10232] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1138'. [ 171.883305][T10194] lo speed is unknown, defaulting to 1000 [ 171.897069][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'. [ 172.070206][T10194] lo speed is unknown, defaulting to 1000 [ 172.314162][T10194] lo speed is unknown, defaulting to 1000 [ 172.773934][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 173.028733][T10290] ip6t_rpfilter: unknown options [ 173.082577][T10296] smc: net device bond0 applied user defined pnetid SYZ1 [ 173.171834][T10298] x_tables: duplicate underflow at hook 2 [ 173.384487][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 173.771958][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 174.061628][T10344] netlink: 'syz.2.1176': attribute type 12 has an invalid length. [ 174.085058][T10344] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 174.261626][T10361] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 174.777328][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880285b0000: rx timeout, send abort [ 174.786127][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880285b0000: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 174.916959][T10397] netlink: 'syz.0.1192': attribute type 1 has an invalid length. [ 174.925475][T10397] netlink: 'syz.0.1192': attribute type 4 has an invalid length. [ 174.933382][T10397] __nla_validate_parse: 4 callbacks suppressed [ 174.933398][T10397] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1192'. [ 174.984586][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 176.248503][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1190'. [ 176.343848][T10408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1195'. [ 176.518105][T10409] : renamed from bond0 (while UP) [ 176.559239][T10418] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1198'. [ 176.762827][T10427] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 176.796744][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 176.842222][T10431] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1205'. [ 176.847803][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1202'. [ 176.866165][T10431] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 176.901738][T10435] netlink: 'syz.3.1202': attribute type 14 has an invalid length. [ 177.108574][T10459] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 177.117322][T10459] netlink: 'syz.2.1209': attribute type 4 has an invalid length. [ 177.131376][T10459] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1209'. [ 177.140621][T10459] NCSI netlink: No device for ifindex 458760 [ 177.272933][T10462] netlink: 'syz.1.1212': attribute type 2 has an invalid length. [ 177.479635][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 178.356508][T10532] FAULT_INJECTION: forcing a failure. [ 178.356508][T10532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.395539][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.3.1239 Not tainted 6.13.0-rc1-syzkaller-00210-g51a00be6a099 #0 [ 178.406374][T10532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.416465][T10532] Call Trace: [ 178.419772][T10532] [ 178.422731][T10532] dump_stack_lvl+0x241/0x360 [ 178.427461][T10532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.432721][T10532] ? __pfx__printk+0x10/0x10 [ 178.437359][T10532] ? __pfx_lock_release+0x10/0x10 [ 178.442432][T10532] should_fail_ex+0x3b0/0x4e0 [ 178.447152][T10532] _copy_from_user+0x2f/0xc0 [ 178.451794][T10532] csum_and_copy_from_iter_full+0x215/0x23b0 [ 178.457836][T10532] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 178.464305][T10532] ? alloc_pages_mpol_noprof+0x417/0x680 [ 178.470000][T10532] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 178.476033][T10532] ip_generic_getfrag+0x158/0x310 [ 178.481101][T10532] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 178.486681][T10532] ? raw6_getfrag+0x104/0x350 [ 178.491418][T10532] __ip6_append_data+0x221e/0x4460 [ 178.496602][T10532] ? __pfx_raw6_getfrag+0x10/0x10 [ 178.501678][T10532] ? __pfx___ip6_append_data+0x10/0x10 [ 178.507176][T10532] ? ip6_setup_cork+0x9f7/0x1080 [ 178.512159][T10532] ip6_append_data+0x264/0x3a0 [ 178.516992][T10532] ? __pfx_raw6_getfrag+0x10/0x10 [ 178.522062][T10532] rawv6_sendmsg+0x18ec/0x23d0 [ 178.526892][T10532] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 178.532069][T10532] ? sock_rps_record_flow+0x1a/0x400 [ 178.537392][T10532] ? inet_sendmsg+0x330/0x390 [ 178.542084][T10532] __sock_sendmsg+0x1a6/0x270 [ 178.546783][T10532] ____sys_sendmsg+0x52a/0x7e0 [ 178.551569][T10532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.556872][T10532] ? __fget_files+0x2a/0x410 [ 178.561486][T10532] ? __fget_files+0x2a/0x410 [ 178.566104][T10532] __sys_sendmsg+0x269/0x350 [ 178.570707][T10532] ? __pfx_lock_release+0x10/0x10 [ 178.575746][T10532] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.580887][T10532] ? __pfx_vfs_write+0x10/0x10 [ 178.585711][T10532] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.592069][T10532] ? do_syscall_64+0x100/0x230 [ 178.596849][T10532] ? do_syscall_64+0xb6/0x230 [ 178.601567][T10532] do_syscall_64+0xf3/0x230 [ 178.606085][T10532] ? clear_bhb_loop+0x35/0x90 [ 178.610779][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.616697][T10532] RIP: 0033:0x7f918af7ff19 [ 178.621119][T10532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.640813][T10532] RSP: 002b:00007f918be55058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.649237][T10532] RAX: ffffffffffffffda RBX: 00007f918b145fa0 RCX: 00007f918af7ff19 [ 178.657223][T10532] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000004 [ 178.665217][T10532] RBP: 00007f918be550a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.673207][T10532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.681181][T10532] R13: 0000000000000000 R14: 00007f918b145fa0 R15: 00007ffe0f58b0e8 [ 178.689168][T10532] [ 178.961294][T10557] syz.2.1246[10557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.961400][T10557] syz.2.1246[10557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.973687][T10557] syz.2.1246[10557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.107831][T10563] netlink: 'syz.3.1247': attribute type 5 has an invalid length. [ 179.393682][T10580] FAULT_INJECTION: forcing a failure. [ 179.393682][T10580] name failslab, interval 1, probability 0, space 0, times 0 [ 179.420068][T10580] CPU: 0 UID: 0 PID: 10580 Comm: syz.2.1253 Not tainted 6.13.0-rc1-syzkaller-00210-g51a00be6a099 #0 [ 179.430883][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.440965][T10580] Call Trace: [ 179.444271][T10580] [ 179.447228][T10580] dump_stack_lvl+0x241/0x360 [ 179.451953][T10580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.457216][T10580] ? __pfx__printk+0x10/0x10 [ 179.461859][T10580] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 179.467879][T10580] ? __pfx___might_resched+0x10/0x10 [ 179.473202][T10580] should_fail_ex+0x3b0/0x4e0 [ 179.477917][T10580] should_failslab+0xac/0x100 [ 179.482656][T10580] kmem_cache_alloc_node_noprof+0x77/0x380 [ 179.488503][T10580] ? __alloc_skb+0x1c3/0x440 [ 179.493121][T10580] __alloc_skb+0x1c3/0x440 [ 179.497565][T10580] ? ip_generic_getfrag+0x1d5/0x310 [ 179.502880][T10580] ? __pfx___alloc_skb+0x10/0x10 [ 179.507863][T10580] ? raw6_getfrag+0x104/0x350 [ 179.512576][T10580] __ip6_append_data+0x2e9f/0x4460 [ 179.517750][T10580] ? __pfx_raw6_getfrag+0x10/0x10 [ 179.522827][T10580] ? __pfx___ip6_append_data+0x10/0x10 [ 179.528323][T10580] ? ip6_setup_cork+0x9f7/0x1080 [ 179.533296][T10580] ip6_append_data+0x264/0x3a0 [ 179.538091][T10580] ? __pfx_raw6_getfrag+0x10/0x10 [ 179.543149][T10580] rawv6_sendmsg+0x18ec/0x23d0 [ 179.547980][T10580] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 179.553180][T10580] ? sock_rps_record_flow+0x1a/0x400 [ 179.558518][T10580] ? inet_sendmsg+0x330/0x390 [ 179.563244][T10580] __sock_sendmsg+0x1a6/0x270 [ 179.567989][T10580] ____sys_sendmsg+0x52a/0x7e0 [ 179.572799][T10580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.578139][T10580] ? __fget_files+0x2a/0x410 [ 179.582760][T10580] ? __fget_files+0x2a/0x410 [ 179.587391][T10580] __sys_sendmsg+0x269/0x350 [ 179.592022][T10580] ? __pfx_lock_release+0x10/0x10 [ 179.597109][T10580] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.602273][T10580] ? __pfx_vfs_write+0x10/0x10 [ 179.607102][T10580] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 179.613462][T10580] ? do_syscall_64+0x100/0x230 [ 179.618265][T10580] ? do_syscall_64+0xb6/0x230 [ 179.622990][T10580] do_syscall_64+0xf3/0x230 [ 179.627545][T10580] ? clear_bhb_loop+0x35/0x90 [ 179.632267][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.638284][T10580] RIP: 0033:0x7fa70cb7ff19 [ 179.642731][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.662372][T10580] RSP: 002b:00007fa70da71058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.670830][T10580] RAX: ffffffffffffffda RBX: 00007fa70cd45fa0 RCX: 00007fa70cb7ff19 [ 179.678838][T10580] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000004 [ 179.686843][T10580] RBP: 00007fa70da710a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.694853][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.702857][T10580] R13: 0000000000000000 R14: 00007fa70cd45fa0 R15: 00007ffd255e1ec8 [ 179.710904][T10580] [ 179.890728][T10606] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 179.925573][T10606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.954121][T10606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.961454][T10606] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 179.974642][T10606] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 180.704056][T10646] __nla_validate_parse: 6 callbacks suppressed [ 180.704077][T10646] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1272'. [ 181.198274][T10677] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1280'. [ 181.214561][T10678] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1280'. [ 181.423396][T10689] vlan3: entered promiscuous mode [ 181.436656][T10689] bond0: entered promiscuous mode [ 181.444277][T10689] bond_slave_0: entered promiscuous mode [ 181.450992][T10689] bond_slave_1: entered promiscuous mode [ 181.461007][T10689] bond0: left promiscuous mode [ 181.471387][T10689] bond_slave_0: left promiscuous mode [ 181.477708][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 181.491784][T10689] bond_slave_1: left promiscuous mode [ 181.982273][T10723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'. [ 181.994015][T10725] FAULT_INJECTION: forcing a failure. [ 181.994015][T10725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.011684][T10725] CPU: 1 UID: 0 PID: 10725 Comm: syz.0.1292 Not tainted 6.13.0-rc1-syzkaller-00210-g51a00be6a099 #0 [ 182.022500][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.032605][T10725] Call Trace: [ 182.035948][T10725] [ 182.038914][T10725] dump_stack_lvl+0x241/0x360 [ 182.043647][T10725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.048897][T10725] ? __pfx__printk+0x10/0x10 [ 182.053545][T10725] ? __pfx_lock_release+0x10/0x10 [ 182.058631][T10725] should_fail_ex+0x3b0/0x4e0 [ 182.063358][T10725] _copy_from_user+0x2f/0xc0 [ 182.068002][T10725] csum_and_copy_from_iter_full+0x215/0x23b0 [ 182.074045][T10725] ? rcu_is_watching+0x15/0xb0 [ 182.078857][T10725] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 182.085665][T10725] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 182.092327][T10725] ? __build_skb_around+0x245/0x3d0 [ 182.097568][T10725] ip_generic_getfrag+0x158/0x310 [ 182.102626][T10725] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 182.108198][T10725] ? raw6_getfrag+0x104/0x350 [ 182.112913][T10725] ? skb_put+0x114/0x1f0 [ 182.117194][T10725] __ip6_append_data+0x3356/0x4460 [ 182.122359][T10725] ? __pfx_raw6_getfrag+0x10/0x10 [ 182.127424][T10725] ? __pfx___ip6_append_data+0x10/0x10 [ 182.132900][T10725] ? ip6_setup_cork+0x9f7/0x1080 [ 182.137864][T10725] ip6_append_data+0x264/0x3a0 [ 182.142686][T10725] ? __pfx_raw6_getfrag+0x10/0x10 [ 182.147736][T10725] rawv6_sendmsg+0x18ec/0x23d0 [ 182.152536][T10725] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 182.157675][T10725] ? sock_rps_record_flow+0x1a/0x400 [ 182.162964][T10725] ? inet_sendmsg+0x330/0x390 [ 182.167660][T10725] __sock_sendmsg+0x1a6/0x270 [ 182.172378][T10725] ____sys_sendmsg+0x52a/0x7e0 [ 182.177168][T10725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.182473][T10725] ? __fget_files+0x2a/0x410 [ 182.187081][T10725] ? __fget_files+0x2a/0x410 [ 182.191697][T10725] __sys_sendmsg+0x269/0x350 [ 182.196321][T10725] ? __pfx_lock_release+0x10/0x10 [ 182.201382][T10725] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.206521][T10725] ? __pfx_vfs_write+0x10/0x10 [ 182.211334][T10725] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.217681][T10725] ? do_syscall_64+0x100/0x230 [ 182.222489][T10725] ? do_syscall_64+0xb6/0x230 [ 182.227227][T10725] do_syscall_64+0xf3/0x230 [ 182.231761][T10725] ? clear_bhb_loop+0x35/0x90 [ 182.236466][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.242408][T10725] RIP: 0033:0x7fb77ab7ff19 [ 182.246851][T10725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.266494][T10725] RSP: 002b:00007fb77ba58058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.274956][T10725] RAX: ffffffffffffffda RBX: 00007fb77ad45fa0 RCX: 00007fb77ab7ff19 [ 182.282962][T10725] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000004 [ 182.290966][T10725] RBP: 00007fb77ba580a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.298969][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.306964][T10725] R13: 0000000000000000 R14: 00007fb77ad45fa0 R15: 00007fff8f9a5808 [ 182.315004][T10725] [ 182.540471][T10738] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1295'. [ 182.590673][T10743] ebt_among: dst integrity fail: 101 [ 182.734610][T10750] dvmrp1: entered allmulticast mode [ 183.023594][T10772] xt_hashlimit: max too large, truncated to 1048576 [ 183.039854][T10765] syzkaller0: entered allmulticast mode [ 183.069167][T10765] syzkaller0 (unregistering): left allmulticast mode [ 183.106168][T10776] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1304'. [ 183.948578][T10792] netlink: 'syz.4.1312': attribute type 19 has an invalid length. [ 184.001797][T10797] netlink: 'syz.3.1313': attribute type 8 has an invalid length. [ 184.015215][T10795] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 184.043041][T10793] syzkaller0: entered promiscuous mode [ 184.091390][T10800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1314'. [ 184.094638][T10793] syzkaller0: entered allmulticast mode [ 184.219499][T10803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1316'. [ 184.254248][T10805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.633751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.654822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.667240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.680307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.692718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.706007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.718445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.732299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.744786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.757817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.388027][T10854] bridge0: port 3(vlan2) entered blocking state [ 185.501819][T10854] bridge0: port 3(vlan2) entered disabled state [ 185.510099][T10854] vlan2: entered allmulticast mode [ 185.543277][T10854] vlan2: left allmulticast mode [ 189.635396][ C1] net_ratelimit: 11615 callbacks suppressed [ 189.635419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.653858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.666541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.678884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.691670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.703994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.716774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.729063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.741758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.754077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.970958][T10929] xt_hashlimit: max too large, truncated to 1048576 [ 192.993205][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 194.503371][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.644865][ C0] net_ratelimit: 11082 callbacks suppressed [ 194.644890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.645523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.651082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.662963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.675064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.687454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.698863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.710674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.722723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.735219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.655077][ C0] net_ratelimit: 27704 callbacks suppressed [ 199.655102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 199.655586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.661261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.673450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.685405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 199.697802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.709147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.721122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.733193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 199.745656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.664837][ C0] net_ratelimit: 27517 callbacks suppressed [ 204.664861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 204.665585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.671027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.683060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.695189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 204.707606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.718956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.730936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.743044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 204.755484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.674768][ C0] net_ratelimit: 28169 callbacks suppressed [ 209.674793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.674998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.681147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 209.693503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.704916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.716867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.728987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 209.741359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.752700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.764695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.684948][ C0] net_ratelimit: 23597 callbacks suppressed [ 214.684974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 214.685856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.691179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.703967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.715279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.727785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.739124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.751594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.762949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 214.775685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.724403][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 219.694785][ C0] net_ratelimit: 21693 callbacks suppressed [ 219.694810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.695400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.701165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.714222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.725081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 219.737569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.748889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.761664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.773088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.785560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.468956][ T16] sched: DL replenish lagged too much [ 224.704919][ C0] net_ratelimit: 22433 callbacks suppressed [ 224.704945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.705346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.711183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 224.723764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.735132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.747777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.759194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.772264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.783170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.795635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.727239][ T5836] Bluetooth: hci3: command tx timeout [ 227.732732][ T5836] Bluetooth: hci1: command tx timeout [ 229.714955][ C0] net_ratelimit: 22752 callbacks suppressed [ 229.714981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.715372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.721220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.733973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.745097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 229.758035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.770136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.782896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.794139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.806902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.724798][ C0] net_ratelimit: 22381 callbacks suppressed [ 234.724825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.724960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.731042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.743682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.755110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.767623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.778860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 234.791449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.802673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.815835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.734778][ C0] net_ratelimit: 23878 callbacks suppressed [ 239.734806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.735552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.741098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.753694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.764953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 239.777553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.788908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.801520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.812854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.826474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.744737][ C0] net_ratelimit: 22857 callbacks suppressed [ 244.744764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.745044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.751049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.763511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.775037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.787471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.798803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 244.811473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.822841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.835528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.754811][ C1] net_ratelimit: 23585 callbacks suppressed [ 249.754837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.754882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.761670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.773137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.785669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.797115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 249.809643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.821002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.833643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.845060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.764906][ C1] net_ratelimit: 21550 callbacks suppressed [ 254.764931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.764963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.771756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.783201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 254.796063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.807188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.819906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.831279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.844128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.855255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.774913][ C0] net_ratelimit: 21911 callbacks suppressed [ 259.774940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.775052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.781708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.793783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.805310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 259.817790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.829153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.841856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.853307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.865796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.784758][ C0] net_ratelimit: 23841 callbacks suppressed [ 264.784783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.784878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.791046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.803453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.814914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 264.827408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.838776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.852158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.862771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.875328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.794707][ C1] net_ratelimit: 24147 callbacks suppressed [ 269.794733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.794849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.812934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.825439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.836764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.849257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.860699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 269.873164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.884551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.897920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.804730][ C0] net_ratelimit: 24331 callbacks suppressed [ 274.804759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 274.805538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.810968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.823693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.835018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.847528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.859023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.871430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.882972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 274.895479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.814866][ C0] net_ratelimit: 23078 callbacks suppressed [ 279.814892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.815648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.821216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.833702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.845057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 279.857604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.868985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.881708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.893010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.905475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.824973][ C0] net_ratelimit: 22338 callbacks suppressed [ 284.825002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 284.825285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.831182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.843882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.855168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.867687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.879152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.891612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.903016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 284.915591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.834742][ C0] net_ratelimit: 23426 callbacks suppressed [ 289.834768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.835109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.841007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 289.853604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.864996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.877569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.889045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.901534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.912887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.925424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.458388][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.844846][ C1] net_ratelimit: 24017 callbacks suppressed [ 294.844872][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.845140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.851715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.863160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.875653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.886977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 294.899586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.910945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.923586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.934987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.854795][ C0] net_ratelimit: 23710 callbacks suppressed [ 299.854821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.855400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.861078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.873522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.884930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 299.897433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.908868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.921554][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.932883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.945416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.865032][ C0] net_ratelimit: 24305 callbacks suppressed [ 304.865058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.865252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.871314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 304.884059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.895565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.908247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.919575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.932833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.943526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.956025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.874730][ C1] net_ratelimit: 24085 callbacks suppressed [ 309.874755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.874936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.881531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.892954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 309.905589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.916986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.929702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.940965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.953469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.964984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.884838][ C0] net_ratelimit: 24065 callbacks suppressed [ 314.884864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.885647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.891157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.903812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.915080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 314.927616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.939035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.951665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.963025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.975585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.894840][ C0] net_ratelimit: 24065 callbacks suppressed [ 319.894866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.895289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.901102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.913618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.925165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.937744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.948926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 319.961573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.972879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.986436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.905037][ C0] net_ratelimit: 23838 callbacks suppressed [ 324.905062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.905463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.911349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 324.923994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.935309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.947950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.959389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 324.971790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.983197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.996971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.914779][ C0] net_ratelimit: 23554 callbacks suppressed [ 329.914805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.915057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.921225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.933813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.945099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 329.957708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.968947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.981581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.993061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 330.005537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.924872][ C0] net_ratelimit: 23583 callbacks suppressed [ 334.924898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.926160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.931228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.943841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.955331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.967763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.979081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 334.991655][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.002977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.015734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.934904][ C1] net_ratelimit: 23741 callbacks suppressed [ 339.934931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.934953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 339.941723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.953123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.965763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.977229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.989832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.001121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.013746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.025177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.944838][ C0] net_ratelimit: 23439 callbacks suppressed [ 344.944863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.944869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.945764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.951172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 344.963740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.975012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.987649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.999035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.011552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.022825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.954905][ C0] net_ratelimit: 21818 callbacks suppressed [ 349.954930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.954935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.955817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.961184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 349.974575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.985252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.997788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.009321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 350.022692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.033156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.964872][ C0] net_ratelimit: 21057 callbacks suppressed [ 354.964898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.965844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.971212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 354.984396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.995043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.008854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.019314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.031612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.042957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.056535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.394677][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 355.401733][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5832/1:b..l [ 355.410253][ C1] rcu: (detected by 1, t=10503 jiffies, g=27853, q=137623 ncpus=2) [ 355.418275][ C1] task:syz-executor state:R running task stack:20016 pid:5832 tgid:5832 ppid:5823 flags:0x00004002 [ 355.431822][ C1] Call Trace: [ 355.435165][ C1] [ 355.438137][ C1] __schedule+0x1850/0x4c30 [ 355.442703][ C1] ? mark_lock+0x9a/0x360 [ 355.447087][ C1] ? __lock_acquire+0x1397/0x2100 [ 355.452169][ C1] ? __pfx___schedule+0x10/0x10 [ 355.457067][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.463098][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 355.468606][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 355.473757][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 355.479520][ C1] ? mark_lock+0x9a/0x360 [ 355.483911][ C1] irqentry_exit+0x5e/0x90 [ 355.488377][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.494419][ C1] RIP: 0010:arch_stack_walk+0x5e/0x150 [ 355.499935][ C1] Code: 00 00 48 c7 45 c0 00 00 00 00 48 c7 45 b8 00 00 00 00 48 c7 45 b0 00 00 00 00 48 c7 45 a8 00 00 00 00 48 c7 45 a0 00 00 00 00 <48> c7 45 98 00 00 00 00 48 c7 45 90 00 00 00 00 48 c7 45 88 00 00 [ 355.519619][ C1] RSP: 0018:ffffc90003e0f260 EFLAGS: 00000286 [ 355.525739][ C1] RAX: 24e1a7504b195e00 RBX: ffffc90003e0f350 RCX: 0000000000000000 [ 355.533749][ C1] RDX: ffff88803468da00 RSI: ffffc90003e0f340 RDI: ffffffff818b36f0 [ 355.541755][ C1] RBP: ffffc90003e0f2f0 R08: ffffffff8214bed2 R09: 0000000000000000 [ 355.549763][ C1] R10: ffffc90003e0f420 R11: fffff520007c1e94 R12: ffff88803468da00 [ 355.557774][ C1] R13: ffffffff818b36f0 R14: ffffc90003e0f340 R15: 0000000000000000 [ 355.565875][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 355.572074][ C1] ? save_stack+0xc2/0x1f0 [ 355.576546][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 355.582747][ C1] ? __lock_acquire+0x1397/0x2100 [ 355.587820][ C1] stack_trace_save+0x118/0x1d0 [ 355.592712][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 355.598143][ C1] save_stack+0xfb/0x1f0 [ 355.602444][ C1] ? __pfx_save_stack+0x10/0x10 [ 355.607355][ C1] ? page_ext_get+0x20/0x2a0 [ 355.611996][ C1] __reset_page_owner+0x76/0x430 [ 355.616980][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 355.622221][ C1] free_unref_page+0xdef/0x1130 [ 355.627126][ C1] __put_partials+0xeb/0x130 [ 355.631764][ C1] put_cpu_partial+0x17c/0x250 [ 355.636568][ C1] ? put_cpu_partial+0x70/0x250 [ 355.641464][ C1] __slab_free+0x2ea/0x3d0 [ 355.645933][ C1] ? __phys_addr+0xba/0x170 [ 355.650519][ C1] qlist_free_all+0x9a/0x140 [ 355.655149][ C1] ? anon_vma_fork+0x1fa/0x580 [ 355.660010][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 355.665515][ C1] __kasan_slab_alloc+0x23/0x80 [ 355.670407][ C1] ? anon_vma_fork+0x191/0x580 [ 355.675204][ C1] kmem_cache_alloc_noprof+0x1d9/0x380 [ 355.680718][ C1] anon_vma_fork+0x1fa/0x580 [ 355.685345][ C1] ? dup_userfaultfd+0xaa/0x5e0 [ 355.690243][ C1] copy_mm+0xcfc/0x1f90 [ 355.694458][ C1] ? __pfx_copy_mm+0x10/0x10 [ 355.699108][ C1] ? __init_rwsem+0x122/0x160 [ 355.703834][ C1] ? copy_signal+0x51c/0x640 [ 355.708463][ C1] copy_process+0x1845/0x3d50 [ 355.713234][ C1] ? copy_process+0x9fa/0x3d50 [ 355.718038][ C1] ? __lock_acquire+0x1397/0x2100 [ 355.723102][ C1] ? __pfx_copy_process+0x10/0x10 [ 355.728169][ C1] kernel_clone+0x226/0x8e0 [ 355.732719][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 355.737809][ C1] __x64_sys_clone+0x258/0x2a0 [ 355.742617][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 355.747938][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.754088][ C1] ? exc_page_fault+0x590/0x8b0 [ 355.758991][ C1] ? do_syscall_64+0xb6/0x230 [ 355.763719][ C1] do_syscall_64+0xf3/0x230 [ 355.768305][ C1] ? clear_bhb_loop+0x35/0x90 [ 355.773051][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.778986][ C1] RIP: 0033:0x7fa70cb76793 [ 355.783429][ C1] RSP: 002b:00007ffd255e2148 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 355.791906][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa70cb76793 [ 355.800179][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 355.808296][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 355.816300][ C1] R10: 00005555811507d0 R11: 0000000000000246 R12: 0000000000000000 [ 355.824313][ C1] R13: 000000000002f6a5 R14: 000000000002f683 R15: 00007ffd255e22d0 [ 355.832349][ C1] [ 355.835415][ C1] rcu: rcu_preempt kthread starved for 10023 jiffies! g27853 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 355.846652][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 355.856664][ C1] rcu: RCU grace-period kthread stack dump: [ 355.862591][ C1] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 355.874412][ C1] Call Trace: [ 355.877728][ C1] [ 355.880697][ C1] __schedule+0x1850/0x4c30 [ 355.885287][ C1] ? __pfx___schedule+0x10/0x10 [ 355.890189][ C1] ? __pfx_lock_release+0x10/0x10 [ 355.895286][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.901668][ C1] ? schedule+0x90/0x320 [ 355.905968][ C1] schedule+0x14b/0x320 [ 355.910173][ C1] schedule_timeout+0x15a/0x290 [ 355.915071][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 355.920573][ C1] ? __pfx_process_timeout+0x10/0x10 [ 355.925921][ C1] ? prepare_to_swait_event+0x330/0x350 [ 355.931519][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 355.936415][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 355.941668][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 355.947872][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 355.953252][ C1] ? finish_swait+0xd4/0x1e0 [ 355.957891][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 355.962533][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.967789][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 355.973734][ C1] ? __kthread_parkme+0x169/0x1d0 [ 355.978805][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.984073][ C1] kthread+0x2f0/0x390 [ 355.988188][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.993429][ C1] ? __pfx_kthread+0x10/0x10 [ 355.998059][ C1] ret_from_fork+0x4b/0x80 [ 356.002510][ C1] ? __pfx_kthread+0x10/0x10 [ 356.007143][ C1] ret_from_fork_asm+0x1a/0x30 [ 356.012150][ C1] [ 356.015199][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 356.021560][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc1-syzkaller-00210-g51a00be6a099 #0 [ 356.032190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.042374][ C1] RIP: 0010:debug_smp_processor_id+0xb/0x20 [ 356.048326][ C1] Code: e9 66 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 80 63 5f 8c <48> c7 c6 c0 63 5f 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 [ 356.067985][ C1] RSP: 0018:ffffc900001e6358 EFLAGS: 00000282 [ 356.074097][ C1] RAX: 0000000000000100 RBX: 0000000000000001 RCX: ffff88801d688000 [ 356.082105][ C1] RDX: ffff88801d688000 RSI: 0000000000000001 RDI: ffffffff8c5f6380 [ 356.090131][ C1] RBP: ffffc900001e6470 R08: ffffffff8a709e94 R09: 1ffffffff2857110 [ 356.098150][ C1] R10: dffffc0000000000 R11: fffffbfff2857111 R12: 000000005f8171fb [ 356.106157][ C1] R13: ffff888163efa740 R14: 0000000065a7fe9d R15: 00000000953dabcc [ 356.114175][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 356.123145][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.129763][ C1] CR2: 00007f2fba8a7241 CR3: 0000000062c0a000 CR4: 00000000003526f0 [ 356.137766][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.145868][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.153894][ C1] Call Trace: [ 356.157207][ C1] [ 356.160084][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 356.166465][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 356.172243][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 356.178095][ C1] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 356.184404][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 356.191064][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 356.197356][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 356.202787][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 356.208484][ C1] ? acct_account_cputime+0x207/0x210 [ 356.213921][ C1] ? update_process_times+0x242/0x2f0 [ 356.219366][ C1] ? tick_nohz_handler+0x37c/0x500 [ 356.224642][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 356.230161][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 356.235607][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 356.241375][ C1] ? sched_clock+0x4a/0x70 [ 356.245849][ C1] ? read_tsc+0x9/0x20 [ 356.249956][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 356.256100][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 356.261285][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 356.267490][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 356.273342][ C1] [ 356.276300][ C1] [ 356.279265][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.285477][ C1] ? ipv6_get_ifaddr+0x214/0x8f0 [ 356.290457][ C1] ? debug_smp_processor_id+0xb/0x20 [ 356.295784][ C1] rcu_is_watching+0x15/0xb0 [ 356.300415][ C1] ipv6_get_ifaddr+0x21d/0x8f0 [ 356.305221][ C1] ? __lock_acquire+0x1397/0x2100 [ 356.310286][ C1] ? ipv6_get_ifaddr+0x1df/0x8f0 [ 356.315273][ C1] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 356.320597][ C1] ? ndisc_parse_options+0x651/0x680 [ 356.325950][ C1] ndisc_recv_na+0x626/0x1120 [ 356.330689][ C1] ? __pfx_ndisc_recv_na+0x10/0x10 [ 356.335867][ C1] ? ndisc_rcv+0x4c2/0x6f0 [ 356.340329][ C1] icmpv6_rcv+0x1128/0x19e0 [ 356.344887][ C1] ? __pfx_icmpv6_rcv+0x10/0x10 [ 356.349800][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 356.354697][ C1] ip6_protocol_deliver_rcu+0x105b/0x1580 [ 356.360481][ C1] ? ip6_input_finish+0xdc/0x2d0 [ 356.365459][ C1] ip6_input_finish+0x187/0x2d0 [ 356.370363][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 356.375768][ C1] NF_HOOK+0x3a4/0x450 [ 356.379895][ C1] ? NF_HOOK+0x9a/0x450 [ 356.384090][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 356.388726][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 356.394151][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 356.399389][ C1] ip_sabotage_in+0x203/0x290 [ 356.404111][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 356.409354][ C1] nf_hook_slow+0xc3/0x220 [ 356.413818][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 356.419073][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 356.424311][ C1] NF_HOOK+0x29e/0x450 [ 356.428423][ C1] ? skb_orphan+0xae/0xd0 [ 356.432796][ C1] ? NF_HOOK+0x9a/0x450 [ 356.436988][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 356.441620][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 356.446874][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 356.451591][ C1] __netif_receive_skb+0x1ea/0x650 [ 356.456751][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 356.461819][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 356.467510][ C1] ? netif_receive_skb+0x131/0x890 [ 356.472683][ C1] ? netif_receive_skb+0x131/0x890 [ 356.477879][ C1] netif_receive_skb+0x1e8/0x890 [ 356.482857][ C1] ? __pfx_lock_release+0x10/0x10 [ 356.487926][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 356.493432][ C1] ? br_netif_receive_skb+0x130/0x1a0 [ 356.498869][ C1] NF_HOOK+0x9e/0x400 [ 356.502918][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 356.508684][ C1] ? NF_HOOK+0xfc/0x400 [ 356.512878][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 356.517522][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 356.523285][ C1] ? br_pass_frame_up+0x297/0x430 [ 356.528366][ C1] br_handle_frame_finish+0x18ed/0x1fe0 [ 356.533984][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 356.539918][ C1] ? __lock_acquire+0x1397/0x2100 [ 356.545016][ C1] ? nf_hook_slow+0x175/0x220 [ 356.549739][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 356.555674][ C1] br_nf_hook_thresh+0x472/0x590 [ 356.560669][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 356.566169][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 356.572106][ C1] ? skb_push+0x97/0x100 [ 356.576392][ C1] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 356.582413][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 356.588363][ C1] br_nf_pre_routing_ipv6+0x379/0x770 [ 356.593785][ C1] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 356.599390][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 356.605331][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 356.611874][ C1] ? br_nf_pre_routing+0x70e/0x1470 [ 356.617124][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 356.622636][ C1] br_handle_frame+0x9fd/0x1530 [ 356.627543][ C1] ? migrate_enable+0x395/0x510 [ 356.632438][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 356.637771][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 356.643965][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 356.649902][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 356.655766][ C1] ? ip6_input_finish+0x215/0x2d0 [ 356.660842][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 356.666167][ C1] __netif_receive_skb_core+0x14eb/0x4690 [ 356.671944][ C1] ? ip6_mc_input+0x9c5/0xc30 [ 356.676673][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 356.682786][ C1] ? mark_lock+0x9a/0x360 [ 356.687186][ C1] __netif_receive_skb+0x12f/0x650 [ 356.692343][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 356.697407][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 356.703076][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.709123][ C1] ? __pfx_lock_release+0x10/0x10 [ 356.714199][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 356.719376][ C1] process_backlog+0x662/0x15b0 [ 356.724286][ C1] ? process_backlog+0x33b/0x15b0 [ 356.729368][ C1] ? __pfx_process_backlog+0x10/0x10 [ 356.734691][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.740745][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.747126][ C1] __napi_poll+0xcb/0x490 [ 356.751504][ C1] net_rx_action+0x89b/0x1240 [ 356.756247][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 356.761487][ C1] ? __run_timer_base+0x178/0x8e0 [ 356.766558][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 356.772263][ C1] handle_softirqs+0x2d4/0x9b0 [ 356.777080][ C1] ? run_ksoftirqd+0xca/0x130 [ 356.781798][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 356.787128][ C1] ? preempt_schedule+0xe1/0xf0 [ 356.792048][ C1] run_ksoftirqd+0xca/0x130 [ 356.796588][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 356.801750][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 356.807513][ C1] ? smpboot_thread_fn+0x2d3/0xa30 [ 356.812669][ C1] ? smpboot_thread_fn+0x4fb/0xa30 [ 356.817818][ C1] ? smpboot_thread_fn+0x656/0xa30 [ 356.823097][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 356.828251][ C1] smpboot_thread_fn+0x544/0xa30 [ 356.833227][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 356.838295][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 356.843800][ C1] kthread+0x2f0/0x390 [ 356.847925][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 356.853419][ C1] ? __pfx_kthread+0x10/0x10 [ 356.858049][ C1] ret_from_fork+0x4b/0x80 [ 356.862498][ C1] ? __pfx_kthread+0x10/0x10 [ 356.867138][ C1] ret_from_fork_asm+0x1a/0x30 [ 356.871960][ C1] [ 359.974829][ C0] net_ratelimit: 20483 callbacks suppressed [ 359.974857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.975388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.981122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 359.993639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.005075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.019343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.030286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.042765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.054082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.067457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.984792][ C0] net_ratelimit: 22181 callbacks suppressed [ 364.984819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.985304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.991085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.004713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.015030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.027554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.039043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.052820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.062857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:c4:4d:76:f6:59, vlan:0) [ 365.075624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)