last executing test programs: 2m27.64663487s ago: executing program 4 (id=6177): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000540)={r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r8 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r6, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xdc, r6, 0x111, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0xc8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ea84438cf16066c3da8ab45ce5581144afeaefb7113e086f339642d9cd421d9c"}, @NL802154_KEY_ATTR_ID={0x84, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fc380957f5ef21e589504501783c8eb9"}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000080) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r9, 0x8c, &(0x7f0000000480)}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r10, 0x1, 0x9, &(0x7f0000000000)=0x4, 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="040000000000000000"], 0x14}}, 0x0) 2m24.752639623s ago: executing program 4 (id=6180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000001000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r3) socket$kcm(0x29, 0x2, 0x0) sendfile(r3, r2, 0x0, 0xf03a0005) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000318000180140002006d61637674617030"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) unshare(0xc040480) 2m23.230539677s ago: executing program 4 (id=6191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYBLOB="a505fe85cc0fc3cc357fb321caa064f2425ca633280dd9a5b65e504b6cdd8a2370c473e431a8bea7fef95d3f9d160ed7dd0c31d3a8b3fc9803d80d7f73a687d7fc3a3c72b3da556ccd7a81a9886de5ae67e709a526954a5fdafd5da36f7ef70addc61a4c16f157eed80efe3c13ad6b0e0dec0b273e8ed46a03cb1c87c740c253f586c292424fdf256f0d1f32690443dba8964c22eb8bccc41cf9d5a5ba5d7f62c5c8f8bf21ba27131a10919822c7e7a72be2f9487fd80089a2489ba6389fb1ba379751912a8dbbc6f40823a4", @ANYBLOB="8fbf2bbd7000fcdbdf2516000000140001800d0001007564703a73797a3200000000"], 0x28}}, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x11, 0x0, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'ip6gretap0\x00', @random="e32579d14a8f"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYRES16=r2, @ANYRESOCT=r0], 0xfdef) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x4, 0x6, 0x80000001, 0x81, 0x5, 0x100, 0x7, [0xd9bb, 0xd]}}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffbfffe}, 0x50) 2m23.111326602s ago: executing program 4 (id=6195): r0 = socket(0x22, 0x80000, 0x7) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000900)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000c80)={0x340, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x7c}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8}, {0x8, 0x0, 0x10}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x808}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8e27}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x5fa}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x27c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, "88e447b18173e73ec88e279cc4ad967cbcb29a0e86945ccd21774cceb2a997afd0d2b900f483a689f96224a615eee4a346ebdee82cce5095502b25bee52ed1107fa525e2f28620f1dcfd72c7d521f9d3ed8c1f15bffb8dca81847f7ef1cecb049aa556132dd065e6283aa9d28eafe26f"}, @NL80211_BAND_6GHZ={0x80, 0x3, "6fbd7cf3954fb99cbcacf2401a916368370bfe2456a5f4a35879222b0d5c7baece362619e9878f27d3b9dc312810d4cf59f6f85f7c44e94e816e0631209d0ae6833f3a8d9065e59b82bb368d8e5c5f78cba69c08d26b60560fa3c34a4a51f40a8d4be6a58b5e9738fd122c46b6b66cdbd9d49bded86486489c399abe"}, @NL80211_BAND_6GHZ={0x29, 0x3, "f559739b8fc08cc4f51354a1f8b90530f88a2863c774ab49f1231a32a98786070bde0f35f3"}, @NL80211_BAND_5GHZ={0x5d, 0x1, "1c9dcbad2a46d4da4d15c2e8539ce3b853ed42b7cd1b965a1c46843a0d884381c251501ba9f094c7fc4107bbf69d7160c3070e0ee845e8e5578c81892acc3a7c16cf5d4ffba52bddd2d7cf57ef7e4cf2af1b555bbfb13eed1a"}, @NL80211_BAND_6GHZ={0xf7, 0x3, "44f913aa50bd2aad8f661b98fb8deeeb40b67651d8b5f7e806dcab9940ea4420bbe8b410b072af16d0da69a1fd1796b7e150f3e508ef9c73224c80c9218e00f2f06508e279436f0f6d6ef8d9f0c5c7e2ac08c4bb4fcf85f6f47b9ac92e4240e60c9ad0b5e28f26b1a01a8e02d15ab6c72cd77ce44a882927bb0699268a8c2ecacd751720806aa4494fab3db0e63f2d47018969c8e05125c66ad4019aae096617d198bc4d231af127980f5f878ec58e8ba34e3b1ec12a6084c56358e57f98d12be06d6eb6df18d87c8827ec6172bea69f4df8d3a86fb4923dc6dc7061aa637c941699a4263e4e7827778971fd0a6e727ebcf0fd"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="fdbc533c822a"}]}, 0x340}, 0x1, 0x0, 0x0, 0x8800}, 0xc0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r4, 0xb5}, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r8, 0x29, 0x2, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1840000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r9, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x840) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r3, 0x404ffeac}, 0x8) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r10 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x200000, {{0x5, 0x4, 0x0, 0x1d, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}}}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e23, 0x200, @local, 0x5}}, 0x86b, 0xfffa}, &(0x7f0000000500)=0x90) 2m22.742284144s ago: executing program 4 (id=6196): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb21}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb21}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) (async) ioctl(r0, 0x8b2a, &(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000034000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61145b00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) 2m22.333318705s ago: executing program 4 (id=6201): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703f5ff00000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000800)=ANY=[@ANYBLOB="68000000140001000000000000000000ff010000000000000000000000000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000c00080008000800000000ffff"], 0x68}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) writev(r1, &(0x7f0000003640)=[{&(0x7f0000000200)="f1c74ee2e7e6865bcf4b3be6b00119a6ef996e51e105d1af9eda788e621ff9ddc24ffcb58601c868d3f327319d6e71f1fba82763637a74508639454e26b940e18590b36729f109547b04192b63dd2a0eb0a097cd00a996ebce6fb81895d2cff909fcca1800b2abf438d4fa82bc239636617208493d4e463b55f4da1f58865d4597ae0ce8896b2f891bb7cfe16eccaa9feb53f9775ff3ab28347296b564b316dceffeba92178f2e6def442b0be401d63d6c2749e0945101dd03c67c76ad7ee0bcaf4935caf072d479101fa4ad60015ab42ebb1f89dfc694216d34116e09d00db900312e87b62aea6e92661221b885aa3e8c", 0xf1}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="1678a6a0f9c6feefd10f1933255d03f597f28d1612e4a29228e04a33220ebfcf5eb0f7d566ef44b0ade86229053d81a690de5db1d36219472b91a0e3c70cf4e9201b3526", 0x44}, {&(0x7f0000002200)="24e85622955aab3786e2d489263ad38b15bea2de470cb1fd1dd774b2b883c27009d89fdf4b74ba0dc2078e04992799c52c21e9ac9fefdfcaa544db405ceb85882407ef5cd482db47105961f91a9b22c0934b824f3fe3646a550160da576be24c31b64348e00d0cbc88932a822a839a44cb98487e3ccca716de9f7a5bfe3efd8416de691ee787fa54b71edaba1d45043b2813b76f6db0e8059a5393fa474912f59cdb9fec457fcc215c4e8835e76b18d335e31cd5059d2c4090d31f2432b813e72eb027", 0xc3}, {&(0x7f0000002300)="5f04d0561ae4260a7737a9c05502ddce04f557ed2704be261a148ac736658590008f5706063c7604d2bd14b1102402d908d346768200031e532aaf5523407db36c4350eef73b454844be31ea1dd8e6f7fad7b963525b932f004f1579021bcd9d67710395ab256ec61c0a8506316a739a386e18b7ad56258fbd2a5c6753418e3e39408db3f0d8b8eaf81c388246dab8a5cc51f2178363f43d6d0e6bf80543bce615cec48b6b5eaa306c3f106a18a42187f2d8fcac35e259b11008725845da587220a912d0e6c1d96d3c17f4274d7b6021df29d19bfb5edc525d6af6a3b0a8ab4cc9fdecf11aecc25822ee2ded67b44c4fa851be65d8ef7f5729ea61af6c2b1e4abf4d2829d95ee5afdb0e7ab12d53c6d0cd090112bd95d45edcd6f20362d71c16cc6797baebf53850047900f1a9be657c2f93551434766f6043a9d693af229d499ed6cfb8c9ccecefb54444de7f27314b2cb059c99598340c46338f400350fe43fbef6fabf1686e77d29378f6c4353edb5d36d0b48c818b5d0bcdb86d695b70b01bdefef6155e2988a90455ee0836099b332260a9e9177931ae1d048ea5dc3563dd5334c7a1a99dc8c882cc0ed74d506ee432a6393e24e26ca17518b04a6319dc95b5e08ab0ce0af3763c2a5b04e5c9383cc6eeed1043ad5ff6611fe38421fd3c68f083339515faff12f0b678f3f08c0fb61fff4ccc7258a4a454a5703648c2590c31e5e9e80373199cf482aa2ea8f7c6619deda285d89de334f2ece4cf15dac1258428dcccdadad89a04e9a972cf87041b67bb2bb4323f4a46a155a0ddef3e329e8ce2de491be18833798df269b4bfc9892faaeeddfc84ffd7e4f56c4acefe904ffc0674adbba2ac44eff3e543e01f023953dd96b0af8f888b5d5aae5b4ac63f6ab43cd6f102865e1a207ec8926b347884625581f7197d7cb25959792e85ea75de841158e42f5fbdefdf0722678bd4303b97b7862234d99e18defcce2aa4eab8e0e7c7525eaceafe77267c491abdfd514aad6c8ee1d55ec71dd2a47d9d93230378ca7adfc6c92da57b2ee465be3cc7c98d5b0707968952670e7de9bbbcb0d7a1dd7aaa6baa77a3c4e4b5bebd1558cfb53209dd1acb41b483210e4dc785871b1870746ed3645f45dafa281a3a5f3036baebf720233ba82c384390a89a521d1b50020759d617768b6139738ebc552a3fe7845df1bacec8720a729528f91d88ff7e17b258844dc2ab600e529523bf119ecc9a510ec309821a7e8336f256bc5ff6ec6ad10dc98ce80094018c4e046dc1c7f5d3c0c8714c6063c908f1b32dea2fb5d34f531b1e4de30833c1f637d9a060d01626384da6f0193ba5f17f200a7365cfcf20aa43a8ef90abab3190d5c104688048eeb09c54d3ea0af6cb2f94e6a48b6e193048a382ed0b5d07cc73c1acb4a72e5725d97363f73ffadcc280bc8941f3a0a51dc122a8b034521beada8cc0080d1ebbd384b3e98f8ce4443afc6609212e34646a12948de9d6342ac04c6952ac4ebf57de5f627f1711be3c3c190b9f5b5c6c9faa6f2ab53935a83f29f9099b8bde2dd26f01542648701b30b5dee4c40518834c186a46d9be41e10efff44056a2154e601c0555de5ceaa5df53fb3665389ad3c450c22eda9ee45ab4836de065264363125426fcc2fbcb334635562c2cf4abf46581b59f128c2de9974295e31de1aaf93f02fa42f81ad2e3df17b76282a79ff120132cacfb6292c58095e56463eb92680922fd41f3587e1937098c3f300bcaa7eafc2b878d575a4825164af82752d903f27b85ca9a9b6a880f6026edef329e1c0cdb3631589256fceabbcaa223151523db3dd44845dd8ad26afae6a9b665f3c5ffa39bd612957a8b5b6bb64680c71f807e11d7a17663479d52fd65ca07e5d0513722583f284845b73a6a207ecadc2326f9fbb176c13f8b9cb6bd12b4c64b627f0a4d1a6cff9dec3400e6749cf91cd4cdb555f584111a72c4031d4cbcc5ddbd2ebfd58ad9b93da2c4a0086d3596956f54bebb70e66983cb1c9d452b0732834293651aadfc1439872d6cbac3138256339379c272706ddbff375b2c6b8f00a5e12811f15b7e8fbbc633f231adda2293466b8b7221f0b67d7c1148b6873c20c2e27fd2da30c7cddc58121bc35791adf2d2c07babc59dd3eebb235016ca77e25707ad534696a4177ea49d4a0698ff8d5003b5434529dc2171cefcee69dcd51589e4e54386807d37d6893604fbcfa8ae1fe53bb4af3fefaafc9f70578b009deb0b3538b1c7b5598e81c04e69c6be117eae1428771096bc366743217aba27a9c0bd7cc944bb1d5a26f591a7869149d3bdd36a1e538f0103fc8c81316efd4c7dbd28513937c8e9836de74f9d854f879e69149d150c1e3709f0cbfbde00ba140c91f3010ffe2de6261f9e2c0a46974fc69310b01503676fd3458455b7e34b9f88189ad97fabe3084c2eaebc0e37506dc23116f4424416473ada7961a686ed681213bc670abc4ea0fc8e9bd83194b596ed626326f5d4f9d7f2c3990f9f4771f0838558e73841304bd82a01d75266e6f9e7598c5046b04d888fbee96183b501681aa72d4123c86ff1243fb3364e91d3cd3fc0a8f1ed0741c774d5b6efc03f913a00b379c7d038df37cd470444c487a28327efc40f28b437924ff4f80ad0af8fb3ae441dcb2103ae42ee4f8d642ddd445d4bbed6e1580618046337b1c8fba16d3b0039b09869c2ee6513997617dd9c2544cd44dca9d04b0f695fe6b585a29bea198e843a66d438655e5f52358336482139dee8b419fb0ab0a4a765ab3be2c7584c1512f690bb621ed36e7131b9559d57e798a5ed678ed4a1681a67a173c02b830d32a0ef44b317cfef01777c3e02aef423fea8821126c52d3409805ab87677bfbdc870a5f78c1081f5ec2c4ac77c590b8573dab9eb60fab4a0b9b32939327fd275fa8d3ab562370ccb184b851c54b562db8aaeee99cc95ea60a8a2bcc47f051910ed02a228c4c8380995502ec90a849623e7f38639427cfd7d0bbb022895da5119657ff672626f4bdba9cd989654d6478f41fe47d30e662c8b63601d895296b91973d4a3bb25de86953b39c0e7cdf67115e91f1eeb4d1901de100f38e76f689dc22fd87a155a980068f7e1a704ef6859fc983d9862dde5ce2294c69556fef070caf99c657e5db7280bca9df652c174112c09e97c14e34a6421cffaf2622753e9d5a5c1f7279f56be24d602b63ff810b32277463d0551d24ed9dfcc735b3fbcc301b4f2aa921054ac5354a7ac64fe0dc78650d920bafbf37f553a718101aac7f9949e0db33897440300cf6770387083ec94a710817dfa787f46a691ad2ba3421e75ee4715f9561b36e7ef437bee59359c0772512998fcbda02bcc2f60cd107c751aa840dabe7b72c7d6a70c92548f7bd43973f2d03c22b0f8db9a932f1c4c563f61376e3f6b9b7e5851ca17976c1b2663f9da1cc591c367a5fb6bf22981265f3171c963e7ee232d50cf261454fd6f11ebc5b1f4e8a3c9912a4f5df0ec77b37f1b0840b608b9668c27bd71222bc334424ebb89cf7dbd8476bb8b427c65f2f42faf1165b982e6d6d2b078bb4612d0ff4d97b61a816ac772aebf1e0a8b8759dae22a41a6b1ad123db730ad2c1550a9a460f5a1ea690ba59cc0f853b9ffe38f2c5659dc984769dc1d19c7edc76c2ad79f02af923a8c75420d38ac1d6770db3064f4901e3596543494c96880bd23d0afd997651d1e71583bbf834f3f6849fbf16518f265771849b5a87eb38c5716f6dd271c01e8f4612c3bb930138089d046c5d361f0cec6aea732742e7c10261fb083d2af31ca0f26080c0186de00f486dc1671353651fb7d448a5afb703a4b99bb3306bd8219644f9c296b21aa5b8a283ce9d8c02b5144a8664b12146dd31df687404efb0f5d068789161f93178b1d8eac7e59ed5cc18f2d8ba29b0a0cf7c5036333e86645993083a5cf00d8b1c087f42e82389c10c68f9496c55f7217b700b18f76c134dec27e3e148af80cd9c574c16c4e9a142bef3d4fe7695dc4cbc3f0af52a5033d8362c6155c4d26823b97e8bacf522a89d8545331b31598cc5c83201eafd44017160765739ca507e2a3484d317e106b9c981a0fc803688f6bd7a4e714aefafe2c9e433e98d344a927d4eefdd918a1a520b1a0f5a89ac37fbc31e2e8f909b748bff697de472ba1abf37423a2d34a53c5f1252012251f5e27376dcd446f74354b0d3ca9a224154148fa263c6aac66ccb07bd82a593f0e189c33f751681c7dcb64acf99f4314e488fb0aef07674c12d3978e5d46cc46f3259477e4e2a2b4fac7a5bde637dd55bf4f0a410577e9ee858a921ad70efc1772c9fc51a7d7d4dbf19d932462c2bb7837605789c274a8ec2943f6dd3c1f7987f87b1720c94ae79f85a091e8cfb5bebb0c6ce0184f0e3f56a247d4b34ee81c48fc3220d6faf6defb8acf9fc240f2d6bef825c458ea670ea7778ab76b58bdb91285da5d3790cf5e9ddb2370613e82841b6ea02987be90a3caa4da515709378aa874f15e71159b5a27b1b7a454b2eb2c6beaa7fc2cda9953c4296dabd9de2b2e337cbf6b13743246728324eb2b0e43926b60dee27776d5174060da4d3e72b4c2ecdabdc0fb867e53608a8ee8b163cd8c867ac749afb38122afe2512d557bc04deb4659b7771a162617d0e582c8596c6cd452f4ab7378d8687ecb6cfddc0fe2b422e0194a7a7c5110a4228b4815333c5e9941deeba6ad310011c5ca5ebf75a66a21c34a74c45ddf6b2f2d783e053a42a7029d170e2eabe7d9931ede8eedaa5fe24a5ea877ec0f1512a28a8aad194c7f6bc117fc0bd19682ea0d7dc26caf89cf876d835898db10ea199d1e39be962ed7fcce9d7ee736fc0491caeb75379c507cd26c85cb64f54aaf40f66fa818d4bacf4de6f59b739909fe552a7adc407ca9061ddf81837359affab803986a84c2e1439fcbd883a20e5cc164c582eec184451d0b96d4f049b91b5eeac53a5e07ec81b14c953084e594e984586b022fae9a515975264af9847a929c7a2b662b1123ed5907788df24d2c9abce9716b96d6a7e96b928b33792b1941bc47ddb316793a85b207ca64281371b7e6fe7770d206203f8d7b6cb1dd11e2f7154e7edd2a77585eb9ba4faabe5464cbc52c7d02c4069b4b06899a27328ff2104d9bd45bc39c742587b4a29968e97c64f903982c1da485274897de8b134db3a86b5edcab11e6ce724448bfcedbe25a50b8d643e01417fab5a75ef449b49eb180e4a4166b7d5e06510f37dfd865e3b4048906e23d445b67bcd6184a1916716e90e8f9dff9199e806e80c4160445db5ec0bda22f8d50d5dd809b5625a535bb32deba5e3fe8f34fff07c9397a36fd770749bf288ea08bb611240c59c1878ef6fa3044ac0922a68461867ec560ce46265e13e560a4981204f04f1c8c8438f906c15ee12f6c9556c1e5ea7cd6f26915f0a2ee58fda8b80155ecee489ee18824239af00a46890559846aeecc13f533fb8dc4631ac531cf0a7ff218aba500a861366f7af2dcfc63858d6008b8dbdb8ed3a508cb79cc6640589fab57d9aa95bbe4e265ce759e25237532d8c185e2d9bc76bafae5a97c23a709d05c74dc650b09429f4039bbe704bb1f19513d5ca9fc0c57e249985a77c2f5f96a0866345995874f52f3c9172c906ceb5da8e628982f4625e708f07bf576a265c92750f6ee486e9d21eb49da5bc1694ce603b57c69f3a38c6cb8376f854ab5208f9f7bd935be459bf3c2b789b59837b85f70e172f34f5cfb28fff9856e26e563222e67a35d46e3429fd6", 0x1000}, {&(0x7f0000003300)="f90e1dd5e633eee76508db086282c3a7b15b56db0602f612aae2b2ce0c00d91e3707bfedd79d3bdece666db90c1e487549b8b4f4d6c364f35defb7752061de452c5ce12e6d4c202432f3f58ed12c646348923a2c77cb9a440e55b9ece6c413577f7db992255e5ea30fbdcf56994ccdec0ef72a9672653cf294b7cd59b11034275a4d1e612e152e2b10ca5ea66b056639e9c8c2ba6558c6f7d12e9c4af397342ed285916e8f901ad6f3fe71ccb6edccaf59ad117085f17e07244394d890734e58a08789333b6b99b5bc2351f771a3201d3cd680479baa1371b2a7413ded9cdc85f0c71426e1afb3b8", 0xe8}, {&(0x7f0000003400)="50f74cbd6bf3dc921f1c47f9bc0c65cd69b9e7f265674083e491ae2cb9628bbfa16094fcfc7649e4fa", 0x29}, {&(0x7f00000003c0)="138c9bc30ee61de1028fa5ab56e2d03b7049a85aba18cb2968bec3bdd012e3f7fc655d5c68e950ca5198ef3d157a5488c4c2a316168905c282de3e61d17d89d8a45d2cf9b7ecb25bd0f89e531f17f3a28cad24455bda3fc2bb1080d3a6816dfc402b33e027cb40436946a49256f2687c95843e7831258f4592bccbd665f765cd117adaba2fd47101cd215ee1629d", 0x8e}, {&(0x7f0000003500)="c21d34a285a5d4a4156d639b6e2b253dc5693bb092d7e0d79b2b8bf2d3cee0e9310b", 0x22}, {&(0x7f0000003540)="9afd8fbd39f072ffa958e5a718d1a4bffec391312d8b24d95befd284f854107d0a8a8bd647149e7ae9321c8c1608493f5d751d190e784ed8df3a3a0644e02903324dd65a35dc6807cc0aaa34879d7427ffacabea3aefbe65c230e8b0d2eb7db619077c4655a22cb8af354bd2bb06fab6e59c1c72a280c19f76232eb284d7465961865c616ebff137fc116c7d1db1cfa80443ec7055eebb91fc1447056c703ead39345b39af590d2c4f7a5a220e064d6f60f3515cb45dfac2cf6eaa43bc4bcba699eded", 0xc3}], 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x110, r4, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3, @none, 0x3}, 0xe) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e001400028008000300030000000800010010"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) shutdown(r0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000500)={0x7, 'vcan0\x00', {0xf}, 0x7825}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r11, @ANYBLOB="9aeafd64524e6efd670f91f3afa0f1614bc092f3cc1e0b87fad543e16f1ea52e96976775ec9b15552b4bef263f19547ebcc5d3bce6aa940eada7ecfc47ea4fbf2b854b046c970add4aa98e7df091004616cd3d599878f71e4f0a572c94e509cc92c4439d"], 0x48}, 0x1, 0x0, 0x0, 0x4c894}, 0x4000) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r12, 0x8008b705, 0x0) 2m19.513640428s ago: executing program 3 (id=6222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async, rerun: 64) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8919, &(0x7f0000000040)="76657468303a3000000000000000000002") r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="150000005500bbca000000000000000007"], 0x18}}, 0x0) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_'}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="269783842f2857c6d1b581d573fc04fa7a2dd7bfa9ce2d3e5b0e61628d6d3a72954823ddf2fd95436d845b27ca55a0977a7f6ae4d4ce197a8fe88850ff32e95e5b90c3b4bd", 0x2}], 0x1}}], 0x4, 0x608d8d0) 2m19.384446302s ago: executing program 0 (id=6224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000072003303060000000400000007000000c5"], 0x18}}, 0x20000010) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "2eca37409e3e26049848c35f8a6b2c1b1463755eaa206d68", "79e1cfd4311cfdb33b917a40aff5662907ee7f4f3f81ba3c245dfccfc9f1e3ee"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$igmp6(0xa, 0x3, 0x2) socket$inet(0x2, 0x3, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 2m18.523512457s ago: executing program 3 (id=6228): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x7, @mcast1}}, 0x0, 0x3, 0x1, 0x7ff8000, 0xd}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f00000001c0)={r1, 0xc1e, 0x1e}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x1, 0x2400c054, &(0x7f0000000080)={0xa, 0x4e23, 0x10001, @private2, 0x81}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x2, 0x0, 0xc, 0x4, 0x9}, &(0x7f0000000040)=0x20) 2m18.283404219s ago: executing program 0 (id=6230): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r0, 0x0, 0xcf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000180)={'nr0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)}, 0x40020123) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r10, 0x114, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="4103"], 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r9, @ANYRES64=r7, @ANYRESHEX=r1], 0x87) 2m18.282429089s ago: executing program 3 (id=6231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 2m18.138111828s ago: executing program 2 (id=6232): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001980)=@newtfilter={0x44, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_team\x00'}]}}]}, 0x44}}, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="e03fbb1beb03aded85c1b8ca2671a6ab0008ee22695245151e6bd29efdfd13b77586f288aa8a8875f09ea72f8bd321aa790b0653ed14f9142140b488372b72cafbb0463a9033c79ce637d2b35386365d0dd23d8e943afdae980e1086b6d7a053747e7ee0724dd716e51da293cf8fcbbda6021f964d7b60f7de97d0be6cea0a6fbefbe6659e41d4136f7003553ecbc0b1dee70af6bb1994acaf7c9d93cfa7579aec73e3eb287864a8f4ba02b970b4e4d2694fe685ab7110a43c2a2de46e3444daec76b11836887d7ab325e82ef4ffda44672f9cf74e343c0d68180c4e000000000000000000"], 0x33fe0}}, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x3e8, 0x0, 0x70bd2a}, 0x10}}, 0x40) 2m18.050317756s ago: executing program 3 (id=6233): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "bc59aace13347d868a0ffae44dd3f177"}}}]}, 0x48}}, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB="ffff000001a2d08e48a4d0b8a43691b74e01e7f9d29f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x9862) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x34, 0x0, 0x100, 0x2, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x34}}, 0x40) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bond\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r8, 0x89e8) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0x4}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x38}}, 0x4c840) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x5, 'vlan1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000000406010300000000000000000500000205000100070000000900020073799c53eb232a83c3067a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a000000050004000000000005000100070000000c00078008001300000000000900020073797a320000000011000300686173683a6970"], 0x58}}, 0x0) 2m17.948407221s ago: executing program 2 (id=6235): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_getnexthop={0x28, 0x6a, 0x201, 0x70bd29, 0x25dfdbfd, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000a1a1011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x40084) 2m17.781126376s ago: executing program 1 (id=6237): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/83, 0x53}], 0x1, &(0x7f0000000480)=""/222, 0xde}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ad43000000000000600004"], 0x14}}, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000001a40), 0x4) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa1e55d962b9c568}, 0x4000014) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 2m15.112210434s ago: executing program 1 (id=6238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl(r1, 0x8b21, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 2m15.030283363s ago: executing program 2 (id=6239): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x35f}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x2000000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffd}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{}, 0x1}}, 0x10) 2m15.026166378s ago: executing program 0 (id=6240): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r4, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) (async) sendto$inet(r4, &(0x7f0000000140)="0100", 0x2, 0x4, 0x0, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x5, 0xa) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000010426bd700000000000000000003d6875c395030d5d3810250116952e372767852cddd0a839854063c61d7b0aeee55abe6e6820b2f0da24d36431497118737d42d8660ec833c4e121ed7f4c05b60a281656ff97855770654f67b67b8f6b34fd8a21a3455ae0cc4792dc435ce2b268dffa7f2372ea68a77b1d4358057427fc6233a1ae98644335af21001484ffa718afd87edc322ec05b2e4aeabc97e8600e5ca344e9", @ANYRES32=r1, @ANYBLOB="938000006882000008000a00", @ANYRES32=r2, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2m15.001149797s ago: executing program 3 (id=6241): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r4, 0x5) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) accept$phonet_pipe(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x8001, 0xffff, 0xffffc0df}, 0x14) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x48, r2, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0x18, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 2m14.843091411s ago: executing program 1 (id=6242): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m14.730206699s ago: executing program 2 (id=6243): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0xfffffffd, 0x2b}, @in6=@mcast1, {}, {0x0, 0x0, 0xa1}, {0x0, 0x0, 0x7d4}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x104}}, 0x0) bind$l2tp(r0, &(0x7f0000000000), 0x10) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18006fffffffffffffff0000800000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4bd}, 0x94) 2m14.727353179s ago: executing program 0 (id=6244): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x2d, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) 2m14.68233494s ago: executing program 0 (id=6245): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a004400fe0300010000000008000400010000000600150007000000280016800800010002000000140005"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000240)="e6f0686cccd2439c58a73e60b2c72bc6b58256c4bff457d8edc3e3cb408a8cfac5ba11325875d94e7b28a88f54f7c078839b4600ce4bb945c20c96d0ee664226a9aa3a0cbe9dd684de7d707a16a4a80a923c7f57764f9fde0780a87ceba52b6f7915729439c195a64059a1f5f3a581b2f5d071e825d440f9cc6beb2d486a29fbad2f6e4a11a8ae1964cbc6261a42de7e087a418edec6ec80f3417213641f9e90bc3678b5bee0e80e95d51b6c620b77") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x25dfdbfc, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500", @ANYRES32=0x1], 0x38}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000011c0)='hybla', 0x5) sendmsg(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="e7", 0x1}], 0x1}, 0x98) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x2f, 0x6, 0x7, 0x5, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8000, 0x7, 0x5, 0x5}}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m14.530431179s ago: executing program 1 (id=6246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f00000002c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7f, r2}, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'caif0\x00'}) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000100)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3f1dc15569532a020120f93bff7696e099c1b68d4813e18df197ac6cc8dcf4eebdc996955fa03e07974cc1377dc987def797d30170711b455acc2194a16065566f5a75de8ca8865010d656f8bc6b4d1ac934d2d334dcea17ed21d49aeb893efd82d79", 0x22}, {&(0x7f0000000240)="42010079c6705075f30500ee925bc0552283f0eddea4b32b07f29e504e7fc2e5763c7affc54fbba500fe", 0xd}], 0x3}, 0x400c0c8) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f00000004c0)) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0x4}, {0x0, 0x9}, {0xf, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000003c0)={{r2, &(0x7f0000000080)='/\x00', 0x200, &(0x7f0000000200)={@align=0x7c40, {0x7, 0xb31, 0x5, 0x5}}, 0x4f, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x4}, {[0x2, 0x2, 0x2, 0x8]}, 0xfffffff8, 0x41, &(0x7f0000000340)=""/65}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ffffffff00000000070000006c27181a0fd6529a2718f0c7fecab854"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000480)={0x0, @local, @multicast1}, 0xc) 2m14.471205188s ago: executing program 2 (id=6247): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000200)={0x98, 0x800}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES8=r4, @ANYBLOB="60003080050003"], 0x7c}, 0x1, 0x0, 0x0, 0x20004884}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x24000050) (async, rerun: 64) socketpair(0x1d, 0x1, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0x5, 0x401, {{0x7, 0x4, 0x3, 0x9, 0x1c, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}, {[@timestamp={0x44, 0x8, 0xd9, 0x0, 0x1, [0x9]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x94, 0x0, 0x122, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x40c0804}, 0x4000000) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x1, 0x8, 0x5f, "a13cda1065f39fa268882b3eb1056da0004e47c8fa6780ebd4da95bd19ae7fc78665569daa633d78adb7925a5084b38d32e0f58236925dc1829258d78666ec", 0xa}, 0x60) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m13.966164243s ago: executing program 1 (id=6248): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000740)={0x0, 0x2}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={r0, 0xcc, &(0x7f0000000300)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e21, 0x1, @empty, 0x8}, @in6={0xa, 0x4e22, 0x8, @empty, 0x3}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0xa81}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x7fe, @mcast2, 0x25}, @in6={0xa, 0x4e24, 0x1, @mcast1}]}, &(0x7f0000000440)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000100001000000000000000000000000003650a32cf7aaeea7e3801ca340f85aff0cab35cca39ff47084551cee7e276a86490626099375cdc74b9ed653b24c660db9d99aaac45934b673a42383257df9a00ad62c709177bb5deb22a9a0f7aa7587d486", @ANYRES32=r3, @ANYBLOB="00000000002100001c0012800900010069706970000000000c00028008000300ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newsa={0x1f8, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0xab, 0x14, {{'cmac(aes)\x00'}, 0x2f8, 0x0, "5edafe300f44660713790d02c5eadfc0df943507282d02b5577e5a1b6002a1a2aa5e91ed4a8cffd537e488930257c30b2bb91ba30958ca8c146fec7ac4a1d45c51ca98bbcf03d135f258ccb26f54dae0f92fba52f27c18bd9799348f010b4b"}}, @algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x1f8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001000010425bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="78080274ef3ca98f1f276c79263a232a89000100697069700000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r9) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000000000020000000000007fff00000900ac1414bb000000000000fd000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000100000000000084000500ac1414aa000000000000000000000000000000002b0000000a000000ffffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000fe800000000000000000000000000030004000"/244], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r11 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000005078ef665f8cd344746136700bceb7a92f9bd2b5f41b19867a62a9fd3776cfc329f2ba95d8b6b707677b92d950b28c84c148f2e7a00fdb22caf985cb89226cff65fad3cf1b247af771f4f410671d4c802277f003d817b82652670f8d4783d05687cc011bc4526448a6a1cebaba70d6b3f74dc1f9ffb9db37389f7658169269fcefd4e44e7fac0a002c9067719ab8f98e487cac24e2ecd7c090de4635dcfbcfba38fbf94d9dfa7d0b17a34677b0"], &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_buf(r11, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000000c0)=@req={0x0, 0x7ffffffe, 0x2008007, 0x1}, 0x10) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) getsockopt$inet_mreqn(r11, 0x0, 0x24, &(0x7f0000000240)={@rand_addr, @multicast1}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20008811) 2m13.860498301s ago: executing program 3 (id=6249): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9ad7e2", @ANYRES16=0x0, @ANYRES32=r3, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x1000000, 0xdc0, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x9b81, 0x3, {{0xd, 0x4, 0x2, 0x2d, 0x34, 0x66, 0x0, 0xe8, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xfb, 0x0, 0x4, [0x8001, 0x5, 0x6, 0x4, 0x4, 0x8, 0x180]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000700)={'sit0\x00', r7, 0x20, 0x20, 0x6, 0x5, {{0xe, 0x4, 0x3, 0x5, 0x38, 0x66, 0x0, 0x4, 0x4, 0x0, @local, @multicast1, {[@generic={0x94, 0x12, "c543f52172e8bb413769f550b8ba9f2a"}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xc3, 0x0, 0x5, [0x5, 0x8]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="bde0ead15a3a1cfc11fdbf34229b39852370712ac9d96d988d51535a2210e6799841a299f8e1e1995bf1a2acc3be0d06357eca93e1ddd4cf260797a361808f1f577cf5b0f434ef8b85b0f7d6c0f50b1aacd90769e2f50d9d339ef2b10ee9fd8bbdc9248bedbea906a3f90dc4311f54b68d09ab8533662270b5cc33da6f709d7c26e2a186614657f4", @ANYBLOB="0300010076786c686e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x64, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) syz_emit_ethernet(0x7b, &(0x7f0000000340)={@local, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3d, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, [@fragment={0x33, 0x0, 0x6, 0x1, 0x0, 0x1a, 0x66}], "17c17f0791"}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'ip6erspan0\x00'}) 2m13.584449904s ago: executing program 0 (id=6250): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611077000000000004000053490000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000003c0)={0x3, {{0x2, 0x81, @remote}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x270, 0x5c, 0x160, 0x0, 0x3e0, 0x270, 0x228, 0x25a, 0x270, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0x0, 0xff, 0xff], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0x1}, 0x5002, 0xf8, 0x160, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x0, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x9, 0x10, '\x00', 'syz0\x00', {0x4}}}}, {{@ipv6={@local, @empty, [0xffffffff, 0x0, 0xffffffff], [0xffffff00], 'veth1_to_hsr\x00', 'dummy0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x9f, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0c0088556223000004000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) 2m13.526397919s ago: executing program 2 (id=6251): r0 = socket$inet6(0xa, 0x2, 0x1) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002b00000002000000ffff000005"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000080)=0x7, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r3}, 0x38) 2m13.216820014s ago: executing program 1 (id=6252): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\,\x00', 0x8040, &(0x7f0000000040)={@align=0x62, {0x1, 0x90, 0xff, 0xffffffffffffffff}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x3900}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0xa, 0x1c, 0x9, 0x1, @empty, @remote, 0x7800, 0x80, 0x7fffffff, 0x46bd}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_deladdr={0x40, 0x15, 0x20, 0x70bd25, 0x25dfdbff, {0x2, 0x1, 0x21, 0xfd, r1}, [@IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_newrule={0x64, 0x20, 0x2, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x10, 0x6, 0x5, 0x0, 0x0, 0x6, 0x10001}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x8}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffe}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x6}, @FRA_SRC={0x14, 0x2, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4081) getsockname$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd8, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3388}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x634b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc45}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000700)={0x0, 0x0, 0x7da, 0x2dd9, 0xfffffff7, 0x7}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r4, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "4ea4d9dce40f30ce6a0de61a2f05da96"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x27}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x80b5}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x74, r5, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd8, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f1023d80d26fd271e1c0a7c1825d7c306778cf75983c1c29"}}, @TIPC_NLA_NODE_ID={0x60, 0x3, "5e5609bf7123fd55ae16616d7e02b83973f38988e6389793ce15246c3bc6e0ab43153ee71b46b2b707fa2a4cb89841972b9ad24ad81737f4dd024041472205c18f5e6606c4849f514a5bcfc6a50055c144cb75df16d1c2c19afac37f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40c3}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x44}, 0x20080004) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000c40)) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000001100)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000000cc0)={0x3dc, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10000}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1d0, 0x3, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd7, 0x1, "e2dbea530f72bc8f023b3d55e6926954836d230a2720a4c306fd9b7d73893f623a33d489b54cbf3ed7b0addb15cf02d297e7607fa873caa0af72e434125335ae0633ba4077e5d31f0a02ebed4b6713d421ee3723ffcabd7ed3894a5c913c303ed225b11e4ff5a8096aec6d22aa2c1145fe73d8e60365b093805b73fe1a82ae053191a8e9bc1caf144e6d69a2ab15a7e8817be7baedbddb1f0120148c67b26b3f3817ff4e69622252d7182c0a42e4951a3c086d90815e024f182424e0a9cbd2090aafcd46125ac1c9ca3fe50650a35b246bb580"}}, {0xb0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xac, 0x2, "f02674151b744c27601c0c59f4f925d4e2f0162bffec20b585621cb0410576e14b39053a57958a5cd9c6b45aeb15555850c84b9be94a2704f53bc13a0f9197b292681f800053bcca41584a14baddd44b5e1b87eb7076ebe177583c7e30d9ed2eae84a173b4588f220106effa0828425acc4f705e517bc0a1f7d3442929c9740feba01529368f6c3adc383db0075b7082f3240a45623e6178fffa39bd485108b4d462330c6f4b2c71"}}, {0x40, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3a, 0x2, "0f60b14572d8caee7eac0d7a5531ed42fd5f03b84721e80faf01a695e036e64f294d6503b8c2ca9fbf0dd655425e5351c3b0f65e0925"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x24, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7, 0x1, "fcae81"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}, {0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x80000001}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x198, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xef, 0x1, "15ea1dddc0dba485bcd3dc94655e449d49325acaa2ca6952bfde2e28e1d7660f1b74745e0d5267ad3b8737413adeb618bdcfe46cc2886ff51bf3b433d53856bc41d53e22523a3cced014b3624664661e5aa155f599975999945b80fc44aea2d9e40c3387447936c816c5be39106df62d1d83d635cbf4d0cbd4e5f23c40bd49ff47de6cbd66e400b350b0c19eb61066437d5455d281f1f06b20b2cd2dd530df3cc7227f671f8ab4d611bf47c977c3c264097f6209af6937f02913ac3229cec403582cc746dbaa99b91b899a84ed731fdf1b693aec7e29699fe7b6e1916bb18d74b3719d6d5c68e9937a7422"}}, {0xa0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9c, 0x2, "7fdb9f7e97324f4d4b1bebc26e8f0ff6c356043881dd2854d56d99a63cb9454149755c91892aeb7200e0aded8e70a670e5161791b2dceb881ddbfc3bf20c8a9f5dfa721d329da3e88240559864f7d41ec35813cccee1a80e1eea8dae0d0a20da0b9d6240c40cd5ed72d8fc19b0c2c1d5f5ed5324dbeca595b72182ee38ff941ef8ba6417406e013c69ea5b24dba1244ae92483f2cddad4ed"}}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x74, r6, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc001}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f00000017c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001780)={&(0x7f0000001300)={0x45c, r4, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x41}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x41c, 0x111, 0x0, 0x1, {0x418, 0x5, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x3dc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x286}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x164, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x248, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xca}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1ff}, @NL80211_ATTR_PEER_MEASUREMENTS={0x18, 0x111, 0x0, 0x1, {0x14, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x74}, 0x400c015) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001840)='ns/time_for_children\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x890) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r0) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, r10, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10000) syz_genetlink_get_family_id$mptcp(&(0x7f0000001a80), r0) ioctl$OCFS2_IOC_MOVE_EXT(r7, 0x40406f06, &(0x7f0000001ac0)={0x0, 0x3, 0x4, 0x6, 0x4}) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x20000000) 0s ago: executing program 32 (id=6250): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611077000000000004000053490000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000003c0)={0x3, {{0x2, 0x81, @remote}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x270, 0x5c, 0x160, 0x0, 0x3e0, 0x270, 0x228, 0x25a, 0x270, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0x0, 0xff, 0xff], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0x1}, 0x5002, 0xf8, 0x160, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x0, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x9, 0x10, '\x00', 'syz0\x00', {0x4}}}}, {{@ipv6={@local, @empty, [0xffffffff, 0x0, 0xffffffff], [0xffffff00], 'veth1_to_hsr\x00', 'dummy0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x9f, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0c0088556223000004000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) kernel console output (not intermixed with test programs): ibutes in process `syz.0.5666'. [ 680.253700][T28656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5666'. [ 680.428758][T28663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5668'. [ 680.428803][T28663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5668'. [ 681.193495][T28710] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 681.208929][T28710] ipt_ECN: cannot use operation on non-tcp rule [ 681.313487][T28716] xt_ecn: cannot match TCP bits for non-tcp packets [ 681.619917][T28742] netlink: 'syz.2.5682': attribute type 1 has an invalid length. [ 681.704953][T28742] 8021q: adding VLAN 0 to HW filter on device bond9 [ 681.797156][T28750] secmark_tg_check: 23 callbacks suppressed [ 681.797227][T28750] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 681.824852][T28750] __nla_validate_parse: 39 callbacks suppressed [ 681.833319][T28750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5684'. [ 681.833378][T28750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5684'. [ 681.872929][ T2055] block nbd1: Possible stuck request ffff888054789140: control (read@0,1024B). Runtime 120 seconds [ 681.872989][ T2055] block nbd1: Possible stuck request ffff888054789300: control (read@1024,1024B). Runtime 120 seconds [ 681.887489][ T2055] block nbd1: Possible stuck request ffff8880547894c0: control (read@2048,1024B). Runtime 120 seconds [ 681.887526][ T2055] block nbd1: Possible stuck request ffff888054789680: control (read@3072,1024B). Runtime 120 seconds [ 681.909340][T28752] netlink: 'syz.4.5685': attribute type 10 has an invalid length. [ 682.052904][T28756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5687'. [ 682.080717][T28756] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5687'. [ 682.092684][T28757] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5687'. [ 682.144128][T28759] netlink: 'syz.2.5688': attribute type 1 has an invalid length. [ 682.196243][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5688'. [ 682.218871][T28759] 8021q: adding VLAN 0 to HW filter on device bond10 [ 682.234644][T28762] netlink: 'syz.4.5689': attribute type 29 has an invalid length. [ 682.234667][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5689'. [ 682.270563][T28762] netlink: 'syz.4.5689': attribute type 29 has an invalid length. [ 682.270612][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5689'. [ 682.431691][ C0] net_ratelimit: 12 callbacks suppressed [ 682.431740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.431971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.432195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.176249][T28709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.286128][T28780] netlink: 'syz.1.5692': attribute type 1 has an invalid length. [ 684.328788][T28780] 8021q: adding VLAN 0 to HW filter on device bond14 [ 684.337560][T28779] netlink: 'syz.1.5692': attribute type 2 has an invalid length. [ 684.469489][T28786] block nbd3: not configured, cannot reconfigure [ 684.628886][T28789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5697'. [ 684.642851][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5697'. [ 685.198002][T28823] FAULT_INJECTION: forcing a failure. [ 685.198002][T28823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.213705][T28823] CPU: 0 UID: 0 PID: 28823 Comm: syz.0.5703 Not tainted syzkaller #0 PREEMPT(full) [ 685.213745][T28823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.213757][T28823] Call Trace: [ 685.213767][T28823] [ 685.213776][T28823] dump_stack_lvl+0xe8/0x150 [ 685.213812][T28823] should_fail_ex+0x410/0x560 [ 685.213850][T28823] _copy_from_user+0x2d/0xb0 [ 685.213873][T28823] ___sys_sendmsg+0x1c6/0x360 [ 685.214001][T28823] ? __lock_acquire+0x6df/0x2e50 [ 685.214026][T28823] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.214098][T28823] ? __fget_files+0x2a/0x420 [ 685.214126][T28823] ? __fget_files+0x3a2/0x420 [ 685.214162][T28823] __x64_sys_sendmsg+0x1b1/0x290 [ 685.214188][T28823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.214232][T28823] do_syscall_64+0x166/0x520 [ 685.214264][T28823] ? trace_irq_disable+0x3b/0x140 [ 685.214284][T28823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.214307][T28823] ? clear_bhb_loop+0x70/0xc0 [ 685.214333][T28823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.214354][T28823] RIP: 0033:0x7f012059e159 [ 685.214373][T28823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.214392][T28823] RSP: 002b:00007f0121432028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.214422][T28823] RAX: ffffffffffffffda RBX: 00007f0120825fa0 RCX: 00007f012059e159 [ 685.214437][T28823] RDX: 0000000004008004 RSI: 0000200000000c80 RDI: 0000000000000005 [ 685.214452][T28823] RBP: 00007f0121432090 R08: 0000000000000000 R09: 0000000000000000 [ 685.214465][T28823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.214478][T28823] R13: 00007f0120826038 R14: 00007f0120825fa0 R15: 00007fff0390ad38 [ 685.214510][T28823] [ 685.430500][T28825] x_tables: ip_tables: osf match: only valid for protocol 6 [ 685.495266][T28831] netlink: 'syz.0.5706': attribute type 7 has an invalid length. [ 685.504259][T28831] netlink: 'syz.0.5706': attribute type 8 has an invalid length. [ 685.575100][T28836] netlink: 'syz.0.5706': attribute type 7 has an invalid length. [ 685.575150][T28836] netlink: 'syz.0.5706': attribute type 8 has an invalid length. [ 686.166601][T28857] netlink: 'syz.3.5712': attribute type 7 has an invalid length. [ 686.166757][T28857] netlink: 'syz.3.5712': attribute type 8 has an invalid length. [ 686.332787][T28870] FAULT_INJECTION: forcing a failure. [ 686.332787][T28870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.332849][T28870] CPU: 0 UID: 0 PID: 28870 Comm: syz.1.5716 Not tainted syzkaller #0 PREEMPT(full) [ 686.332877][T28870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 686.332891][T28870] Call Trace: [ 686.332900][T28870] [ 686.332910][T28870] dump_stack_lvl+0xe8/0x150 [ 686.332944][T28870] should_fail_ex+0x410/0x560 [ 686.332978][T28870] _copy_from_user+0x2d/0xb0 [ 686.332999][T28870] __copy_msghdr+0x390/0x590 [ 686.333023][T28870] ___sys_sendmsg+0x213/0x360 [ 686.333042][T28870] ? __lock_acquire+0x6df/0x2e50 [ 686.333065][T28870] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.333114][T28870] ? __fget_files+0x2a/0x420 [ 686.333138][T28870] ? __fget_files+0x3a2/0x420 [ 686.333170][T28870] __x64_sys_sendmsg+0x1b1/0x290 [ 686.333192][T28870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 686.333229][T28870] do_syscall_64+0x166/0x520 [ 686.333257][T28870] ? trace_irq_disable+0x3b/0x140 [ 686.333275][T28870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.333293][T28870] ? clear_bhb_loop+0x70/0xc0 [ 686.333315][T28870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.333333][T28870] RIP: 0033:0x7f10b879e159 [ 686.333350][T28870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.333367][T28870] RSP: 002b:00007f10b9726028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.333387][T28870] RAX: ffffffffffffffda RBX: 00007f10b8a25fa0 RCX: 00007f10b879e159 [ 686.333401][T28870] RDX: 0000000004008004 RSI: 0000200000000c80 RDI: 0000000000000005 [ 686.333414][T28870] RBP: 00007f10b9726090 R08: 0000000000000000 R09: 0000000000000000 [ 686.333426][T28870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.333437][T28870] R13: 00007f10b8a26038 R14: 00007f10b8a25fa0 R15: 00007ffed1b91668 [ 686.333465][T28870] [ 687.027556][T28896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.104238][T28896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.127799][T28905] __nla_validate_parse: 12 callbacks suppressed [ 687.135166][T28905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5725'. [ 687.145342][T28905] netlink: 'syz.3.5725': attribute type 7 has an invalid length. [ 687.145394][T28905] netlink: 'syz.3.5725': attribute type 8 has an invalid length. [ 687.145415][T28905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5725'. [ 687.246406][T28905] erspan0: entered promiscuous mode [ 687.274614][T28905] erspan0: left promiscuous mode [ 687.310452][T28911] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 687.319729][T28911] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 687.517651][T28919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5732'. [ 687.551612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.551873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.603319][T28925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5733'. [ 687.612981][T28925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5733'. [ 687.633682][T28926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5733'. [ 687.633723][T28926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5733'. [ 687.639090][T28921] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5730'. [ 687.811799][T28931] xt_hashlimit: size too large, truncated to 1048576 [ 687.881181][T28939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5738'. [ 688.159147][T28949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5741'. [ 688.186733][T28949] erspan0: entered promiscuous mode [ 688.197117][T28949] gretap0: entered promiscuous mode [ 688.207562][T28949] erspan0: left promiscuous mode [ 688.219722][T28949] gretap0: left promiscuous mode [ 688.998516][T28984] team0: Device vlan0 failed to change mtu [ 689.020058][ T79] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 689.065851][ T79] bond0: (slave bond4): link status definitely down, disabling slave [ 689.188711][T28999] netlink: NAT attribute has 8 unknown bytes [ 689.195356][T28999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.223727][T29001] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 689.267197][T29002] erspan0: entered promiscuous mode [ 689.277674][T29002] erspan0: left promiscuous mode [ 689.598123][T29012] validate_nla: 5 callbacks suppressed [ 689.598168][T29012] netlink: 'syz.2.5759': attribute type 2 has an invalid length. [ 691.163550][T29089] netlink: 'syz.0.5784': attribute type 1 has an invalid length. [ 691.266727][T29089] 8021q: adding VLAN 0 to HW filter on device bond19 [ 691.571769][T29113] netlink: 'syz.4.5791': attribute type 1 has an invalid length. [ 691.586036][T29115] netlink: 'syz.0.5790': attribute type 1 has an invalid length. [ 691.630873][T29115] bond20: entered promiscuous mode [ 691.639161][T29115] bond20: entered allmulticast mode [ 691.646911][T29115] 8021q: adding VLAN 0 to HW filter on device bond20 [ 691.719686][T29118] erspan2: entered allmulticast mode [ 691.729612][T29118] bond20: (slave erspan2): making interface the new active one [ 691.738715][T29118] erspan2: entered promiscuous mode [ 691.747406][T29118] bond20: (slave erspan2): Enslaving as an active interface with an up link [ 693.311648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.311915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.115500][T29090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.271964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.272637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.398734][T29145] netlink: 'syz.4.5799': attribute type 1 has an invalid length. [ 694.427582][T29140] __nla_validate_parse: 15 callbacks suppressed [ 694.427639][T29140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5797'. [ 694.477905][T29150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5799'. [ 694.597795][T29145] 8021q: adding VLAN 0 to HW filter on device bond22 [ 694.950770][ T4935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 694.962639][ T4935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 694.972886][ T4935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 694.985397][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 695.000686][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 695.575938][T29189] A link change request failed with some changes committed already. Interface 04±ÿª¨úrBº“€ may have been left with an inconsistent configuration, please check. [ 695.781367][T29201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5807'. [ 695.792053][T29201] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5807'. [ 695.802250][T29201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5807'. [ 696.079908][T29169] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 696.363545][T29226] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5811'. [ 696.422907][T29228] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 696.648759][T29234] syzkaller0: entered promiscuous mode [ 696.648798][T29234] syzkaller0: entered allmulticast mode [ 696.726157][T29237] ip6t_rt: too many addresses specified [ 696.995214][T29165] wlan0 speed is unknown, defaulting to 1000 [ 697.012934][T29165] lo speed is unknown, defaulting to 1000 [ 697.071838][T23789] Bluetooth: hci0: command tx timeout [ 697.347128][T29165] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.355230][T29165] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.364193][T29165] bridge_slave_0: entered allmulticast mode [ 697.371895][T29165] bridge_slave_0: entered promiscuous mode [ 697.380425][T29165] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.388002][T29165] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.395820][T29165] bridge_slave_1: entered allmulticast mode [ 697.405713][T29165] bridge_slave_1: entered promiscuous mode [ 697.450994][T29165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.467273][T29165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.505215][T29165] team0: Port device team_slave_0 added [ 697.515878][T29165] team0: Port device team_slave_1 added [ 697.548671][T29165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.552203][T29165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.552297][T29165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.561258][T29165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.561296][T29165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.564408][T29165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.678095][T29165] hsr_slave_0: entered promiscuous mode [ 697.685280][T29165] hsr_slave_1: entered promiscuous mode [ 697.685890][T29165] debugfs: 'hsr0' already exists in 'hsr' [ 697.685912][T29165] Cannot create hsr debugfs directory [ 697.907252][T29165] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 697.907316][T29165] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 697.907386][T29165] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.037418][T29165] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 698.037492][T29165] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 698.037518][T29165] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.166840][T29165] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 698.166899][T29165] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 698.166928][T29165] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.266467][T29165] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 698.266532][T29165] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 698.266576][T29165] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.909515][T29205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.943549][T29165] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 699.069661][T29165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.079478][T29165] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 699.081973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.082554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.083161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.138349][T29165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.153007][T23789] Bluetooth: hci0: command tx timeout [ 699.158765][T29263] batadv_slave_0: entered promiscuous mode [ 699.165661][T29165] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 699.197310][T29165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.205607][T29165] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 699.228596][T29263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5820'. [ 699.243033][T29165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.278922][T29270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5820'. [ 699.286036][T29263] xfrm0: entered promiscuous mode [ 699.286086][T29263] xfrm0: entered allmulticast mode [ 699.318217][T29268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5823'. [ 699.377716][T29268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5823'. [ 699.550244][T29284] netlink: 'syz.4.5825': attribute type 1 has an invalid length. [ 699.560157][T29284] __nla_validate_parse: 1 callbacks suppressed [ 699.560175][T29284] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5825'. [ 699.567612][T29270] netlink: 'syz.0.5820': attribute type 3 has an invalid length. [ 699.605131][T29165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.610961][T29270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5820'. [ 699.628522][T29270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.766965][T29270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.891103][T29165] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.914557][T24813] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.914670][T24813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.940938][T24811] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.941064][T24811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.586220][T29165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.594721][T29287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.756893][T29165] veth0_vlan: entered promiscuous mode [ 700.780384][T29165] veth1_vlan: entered promiscuous mode [ 700.826497][T29165] veth0_macvtap: entered promiscuous mode [ 700.844231][T29165] veth1_macvtap: entered promiscuous mode [ 700.878298][T29165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.910286][T29165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.967600][T29327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5834'. [ 700.982788][T24813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.991676][T24809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.991790][T24809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.991872][T24809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.232571][T23789] Bluetooth: hci0: command tx timeout [ 703.311751][T23789] Bluetooth: hci0: command tx timeout [ 703.714543][T29317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.964788][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.964828][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.180620][T29358] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 704.191704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.191931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.212080][T29359] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 704.312708][T29362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5843'. [ 704.339701][T18489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.339745][T18489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.867827][T29370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 704.935603][T29370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 704.945496][T24799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.988211][T29370] 8021q: adding VLAN 0 to HW filter on device bond8 [ 705.016073][T24959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.042635][T29370] 8021q: adding VLAN 0 to HW filter on device bond9 [ 705.058366][T29370] bond8: entered promiscuous mode [ 705.065806][T29370] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 705.159332][T29370] 8021q: adding VLAN 0 to HW filter on device bond12 [ 705.220183][T29370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.230876][T29370] 8021q: adding VLAN 0 to HW filter on device bond19 [ 705.240715][T24959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.256476][T29370] 8021q: adding VLAN 0 to HW filter on device bond20 [ 705.266967][T29370] 8021q: adding VLAN 0 to HW filter on device bond21 [ 705.313469][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.323556][ T3324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.333584][T24959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.350112][T24959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.449737][T24800] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 705.568936][T24800] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 705.581933][T29383] netlink: 'syz.1.5845': attribute type 29 has an invalid length. [ 705.581968][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5845'. [ 705.583829][T18489] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 705.591137][T24812] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 705.591192][T24812] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 705.640706][T24813] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 705.807549][T29422] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.808285][T29422] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.084365][T24811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.170948][T29422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.186049][T29441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 706.186093][T29441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5854'. [ 706.216453][T29422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.260028][T29445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 706.260076][T29445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5854'. [ 706.524097][T24800] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.524164][T24800] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.589805][T29441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 706.589844][T29441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5854'. [ 706.604537][T24811] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.619651][T29445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5854'. [ 706.630886][T29445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5854'. [ 706.650199][ T5280] veth0_vlan: left promiscuous mode [ 706.748133][T29452] xt_hashlimit: size too large, truncated to 1048576 [ 706.789840][T29455] Cannot find set identified by id 65534 to match [ 706.847324][ T79] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.316600][T29474] bond15: option lp_interval: invalid value (0) [ 707.323305][T29474] bond15: option lp_interval: allowed values 1 - 2147483647 [ 707.336517][T29474] bond15 (unregistering): Released all slaves [ 707.404241][T29476] veth1_to_bond: entered allmulticast mode [ 707.484310][T29481] veth1_to_bond: left allmulticast mode [ 707.548229][T29497] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 707.986612][T29515] xt_LOG: level 8 >= 8 [ 708.413237][T29538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5871'. [ 709.422753][ T79] net_ratelimit: 12 callbacks suppressed [ 709.422814][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.472052][T24959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.711663][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 709.973595][T29465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.342289][T29548] netlink: 'syz.3.5874': attribute type 2 has an invalid length. [ 710.367712][T29553] bond15: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 710.380112][T29553] bond15 (unregistering): Released all slaves [ 710.416068][T29557] macvlan0: entered promiscuous mode [ 710.511753][T24959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.544175][ T3324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.591676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.592215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.628206][T29573] __nla_validate_parse: 4 callbacks suppressed [ 710.632178][T29573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5879'. [ 710.698896][T29565] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 710.712810][T29565] gretap1: entered promiscuous mode [ 710.712851][T29565] gretap1: entered allmulticast mode [ 710.857795][T29584] netlink: 'syz.3.5885': attribute type 97 has an invalid length. [ 710.857833][T29584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5885'. [ 710.857868][T29584] netlink: 'syz.3.5885': attribute type 97 has an invalid length. [ 710.857900][T29584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5885'. [ 711.552488][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.672738][T24809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.705450][T29618] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.5893'. [ 711.715216][T29618] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 711.726790][T29618] 0ªX¹¦Dö»: entered allmulticast mode [ 711.954215][ T2055] block nbd1: Possible stuck request ffff888054789140: control (read@0,1024B). Runtime 150 seconds [ 711.954279][ T2055] block nbd1: Possible stuck request ffff888054789300: control (read@1024,1024B). Runtime 150 seconds [ 711.954310][ T2055] block nbd1: Possible stuck request ffff8880547894c0: control (read@2048,1024B). Runtime 150 seconds [ 711.954397][ T2055] block nbd1: Possible stuck request ffff888054789680: control (read@3072,1024B). Runtime 150 seconds [ 712.179386][T29638] syzkaller1: entered promiscuous mode [ 712.179449][T29638] syzkaller1: entered allmulticast mode [ 712.592181][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.812414][T24809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.829675][T29591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.284793][T29658] syzkaller0: entered promiscuous mode [ 714.284841][T29658] syzkaller0: entered allmulticast mode [ 714.667705][T29686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5910'. [ 714.679727][T24957] net_ratelimit: 4 callbacks suppressed [ 714.679773][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.046046][T18489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.081573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.081830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.713933][T24959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.165820][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.751767][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.264135][T24811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.498227][T29716] lo: entered promiscuous mode [ 717.509965][T29716] tunl0: entered promiscuous mode [ 717.529780][T29716] gre0: entered promiscuous mode [ 717.543711][T29716] 0ªX¹¦Dö»: entered promiscuous mode [ 717.550544][T29716] 0ªX¹¦Dö»: left allmulticast mode [ 717.593851][T29679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 717.653534][T29719] x_tables: duplicate underflow at hook 1 [ 717.749087][T29716] erspan0: entered promiscuous mode [ 717.792875][T29722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5920'. [ 717.815789][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.849952][T29716] ip_vti0: entered promiscuous mode [ 718.023986][T29728] netlink: 'syz.4.5923': attribute type 1 has an invalid length. [ 718.351607][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 718.372694][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.817641][T29797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5938'. [ 719.875258][T24958] net_ratelimit: 9 callbacks suppressed [ 719.875312][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.138514][T29815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5943'. [ 720.300621][T29820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5944'. [ 720.324239][T29820] macsec1: entered promiscuous mode [ 720.324287][T29820] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 720.335868][T29820] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 720.411284][T29823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5945'. [ 720.604365][T24809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.912571][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.017742][T29840] syzkaller0: entered promiscuous mode [ 721.017794][T29840] syzkaller0: entered allmulticast mode [ 721.083864][T29841] syzkaller0: mtu less than device minimum [ 721.713879][T24812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.953331][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.224981][T29760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.454087][T29848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5952'. [ 722.705969][T29858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5958'. [ 722.762949][T29861] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5959'. [ 722.823624][T24813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.945152][T29873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.945963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.049599][T29879] netlink: 'syz.1.5962': attribute type 4 has an invalid length. [ 723.059252][T29879] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5962'. [ 723.077464][T29879] .`: renamed from bond0 (while UP) [ 723.079009][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.299984][T29890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5965'. [ 723.590010][T29918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5968'. [ 723.590051][T29918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5968'. [ 723.590115][T29918] netlink: 'syz.0.5968': attribute type 4 has an invalid length. [ 725.033261][T24811] net_ratelimit: 7 callbacks suppressed [ 725.033319][T24811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.152380][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.393813][ T79] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 725.394099][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.133193][T24813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.192105][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.200636][T29883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.477991][T29940] netlink: 'syz.2.5974': attribute type 83 has an invalid length. [ 726.677712][T29955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'. [ 726.688487][T29955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5977'. [ 727.002403][T29964] xt_TCPMSS: Only works on TCP SYN packets [ 727.020642][T29961] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 727.031284][T29961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5980'. [ 727.031331][T29961] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5980'. [ 727.096121][T29965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5982'. [ 727.231897][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.263913][T24809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.302458][T29984] ±ÿª¨úrBº“€: entered promiscuous mode [ 727.308824][T29984] gre0: entered promiscuous mode [ 727.316124][T29984] ip_vti0: entered promiscuous mode [ 727.543696][T29996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5991'. [ 728.272345][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.327828][T29975] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 728.373241][T24813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.311578][T23789] Bluetooth: hci0: command 0x0401 tx timeout [ 730.077961][T29968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.354417][T24958] net_ratelimit: 5 callbacks suppressed [ 730.354471][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.411688][T30040] netlink: 'syz.0.6003': attribute type 4 has an invalid length. [ 730.411728][T30040] __nla_validate_parse: 2 callbacks suppressed [ 730.411741][T30040] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6003'. [ 730.468596][T30039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 730.573689][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.588838][T30055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6005'. [ 730.603022][T30055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6005'. [ 730.646860][T30055] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 730.996964][T30072] netlink: 'syz.3.6011': attribute type 2 has an invalid length. [ 730.997035][T30072] netlink: 'syz.3.6011': attribute type 2 has an invalid length. [ 731.152876][T24809] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 731.157973][T24809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.392854][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.417453][T30096] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6018'. [ 731.681697][T24813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.006588][T30104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6019'. [ 732.344221][T30113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 732.434630][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.559800][T30121] Bluetooth: MGMT ver 1.23 [ 732.559932][T30121] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 732.783018][T24813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.147763][T30085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.182558][T30125] ksmbd: Unknown IPC event: 1, ignore. [ 734.498454][T30146] netlink: 476 bytes leftover after parsing attributes in process `syz.0.6033'. [ 734.514608][T30153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6034'. [ 734.516932][T30153] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001 [ 734.580186][T30156] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6035'. [ 734.588419][T30156] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6035'. [ 734.831564][T23789] Bluetooth: hci0: command 0x0401 tx timeout [ 734.949062][T30176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6042'. [ 735.264144][T30186] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 735.551842][T24957] net_ratelimit: 12 callbacks suppressed [ 735.551888][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.613583][T30204] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6047'. [ 735.632439][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 735.667081][T30207] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6047'. [ 735.704058][T30170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 735.704105][T30170] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 735.788668][T30213] netlink: 'syz.4.6050': attribute type 1 has an invalid length. [ 735.799087][T30208] netlink: 'syz.2.6049': attribute type 10 has an invalid length. [ 735.858916][T30208] veth0_to_bond: entered promiscuous mode [ 735.899684][T30211] macvtap1: entered promiscuous mode [ 735.902777][T30211] macvtap1: entered allmulticast mode [ 735.902836][T30211] veth1_vlan: entered allmulticast mode [ 736.085671][T30222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6052'. [ 736.225964][T24809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.334545][T30227] netlink: 'syz.0.6056': attribute type 21 has an invalid length. [ 736.334638][T30227] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6056'. [ 736.438208][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6059'. [ 736.448146][T30232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6059'. [ 736.645674][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.915198][T24811] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 736.916146][T24811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.953946][ T4935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 736.967331][ T4935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 736.975507][ T4935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 736.990107][ T4935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 737.006037][ T4935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 737.089188][T23789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 737.097411][T23789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 737.105815][T23789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 737.114219][T23789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 737.133557][T23789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 737.420826][ T3324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.448738][T30262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6063'. [ 737.608593][T30267] syzkaller0: entered promiscuous mode [ 737.619302][T30267] syzkaller0: entered allmulticast mode [ 737.711876][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.768569][T30277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.837309][T30282] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6066'. [ 737.837365][T30282] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6066'. [ 738.064342][T30292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6068'. [ 738.111719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.111943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.469608][T30249] wlan0 speed is unknown, defaulting to 1000 [ 738.476090][T30249] lo speed is unknown, defaulting to 1000 [ 738.594933][T30301] IPVS: Error connecting to the multicast addr [ 738.875893][T30302] wlan0 speed is unknown, defaulting to 1000 [ 738.888510][T30302] lo speed is unknown, defaulting to 1000 [ 739.113964][T30249] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.114114][T30249] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.114273][T30249] bridge_slave_0: entered allmulticast mode [ 739.127500][T30249] bridge_slave_0: entered promiscuous mode [ 739.146941][T30249] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.157136][T30249] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.165223][T30249] bridge_slave_1: entered allmulticast mode [ 739.173203][T30249] bridge_slave_1: entered promiscuous mode [ 739.236759][ T4935] Bluetooth: hci1: command tx timeout [ 739.246271][T30249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.272187][T30249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.388853][T30249] team0: Port device team_slave_0 added [ 739.407617][T30249] team0: Port device team_slave_1 added [ 739.532606][T30249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.532665][T30249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.533456][T30249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.563175][T30249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.563244][T30249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.563340][T30249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.725416][T30249] hsr_slave_0: entered promiscuous mode [ 739.727881][T30249] hsr_slave_1: entered promiscuous mode [ 739.729678][T30249] debugfs: 'hsr0' already exists in 'hsr' [ 739.729732][T30249] Cannot create hsr debugfs directory [ 739.933986][T30249] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.934045][T30249] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.027560][T30249] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.027621][T30249] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.156677][T30249] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.156742][T30249] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.219007][T30249] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.219062][T30249] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.603459][T30269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.634735][T30315] netlink: 'syz.2.6070': attribute type 2 has an invalid length. [ 740.634780][T30315] __nla_validate_parse: 1 callbacks suppressed [ 740.634825][T30315] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6070'. [ 740.685034][T30249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 740.713786][T30249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 740.727695][T30249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 740.783446][T30249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 740.791772][T30249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 740.820474][T18489] net_ratelimit: 5 callbacks suppressed [ 740.820522][T18489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.840152][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.882954][T30249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 740.883999][T30249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 740.945333][T30249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 741.050670][T30319] syzkaller0: left promiscuous mode [ 741.050712][T30319] syzkaller0: left allmulticast mode [ 741.127720][T30249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.171227][T30249] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.189307][T24811] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.189562][T24811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.228788][T24811] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.229102][T24811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.312689][ T4935] Bluetooth: hci1: command tx timeout [ 741.473272][T30349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6074'. [ 741.872253][T24957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.962919][T24809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.068457][ T2055] block nbd1: Possible stuck request ffff888054789140: control (read@0,1024B). Runtime 180 seconds [ 742.068517][ T2055] block nbd1: Possible stuck request ffff888054789300: control (read@1024,1024B). Runtime 180 seconds [ 742.068561][ T2055] block nbd1: Possible stuck request ffff8880547894c0: control (read@2048,1024B). Runtime 180 seconds [ 742.068592][ T2055] block nbd1: Possible stuck request ffff888054789680: control (read@3072,1024B). Runtime 180 seconds [ 742.310452][T30379] gretap2: entered promiscuous mode [ 742.322830][T30379] batman_adv: batadv0: Adding interface: gretap2 [ 742.333858][T30379] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 742.355810][T30379] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 742.629239][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 742.682964][T24800] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 742.683201][T24800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.913789][T24958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.936558][T30410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6088'. [ 743.057323][T30249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.094766][T24813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.148111][T30249] veth0_vlan: entered promiscuous mode [ 743.160790][T30249] veth1_vlan: entered promiscuous mode [ 743.200931][T30249] veth0_macvtap: entered promiscuous mode [ 743.209792][T30249] veth1_macvtap: entered promiscuous mode [ 743.229656][T30249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.249646][T30249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.290917][ T3324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.290979][ T3324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.291034][ T3324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.317786][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.321981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.322798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.392675][ T4935] Bluetooth: hci1: command tx timeout [ 745.208895][T30383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.218635][T30398] netlink: 'syz.0.6085': attribute type 4 has an invalid length. [ 745.218702][T30398] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6085'. [ 745.386468][T24811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.386503][T24811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.460454][T30420] netlink: 'syz.4.6093': attribute type 1 has an invalid length. [ 745.473868][ T4935] Bluetooth: hci1: command tx timeout [ 745.580684][T30435] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6090'. [ 745.714399][T18489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.714439][T18489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.855514][T30440] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6090'. [ 746.033169][T24959] net_ratelimit: 7 callbacks suppressed [ 746.033230][T24959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.381228][T30471] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 746.408307][T30471] bond2 (unregistering): Released all slaves [ 746.425644][T24800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.432174][T24813] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 749.544835][T30491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.631757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.632016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.632244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.900674][T30543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6113'. [ 750.476404][T23789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 750.488851][T23789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 750.497462][T23789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 750.517763][T23789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 750.529279][T23789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 751.054433][T30605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6125'. [ 751.447185][T24809] smc: removing ib device syz1 [ 751.905189][T24809] smbdirect: ib_dev[syz1] removed [ 752.293508][T30587] wlan0 speed is unknown, defaulting to 1000 [ 752.377801][T30587] lo speed is unknown, defaulting to 1000 [ 752.593263][T23789] Bluetooth: hci4: command tx timeout [ 752.708420][T30659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6135'. [ 752.719342][T30659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6135'. [ 752.734681][T30664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6137'. [ 752.929664][T30665] vlan11: entered promiscuous mode [ 752.929704][T30665] geneve1: entered promiscuous mode [ 752.930098][T30665] vlan11: entered allmulticast mode [ 752.930133][T30665] geneve1: entered allmulticast mode [ 753.205912][T30678] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6139'. [ 753.560672][T24807] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 753.723115][T30695] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 754.359967][T30711] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 754.627084][T30728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6150'. [ 754.670555][T30734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6149'. [ 754.680137][T23789] Bluetooth: hci4: command 0x041b tx timeout [ 754.723050][T30737] netlink: 'syz.1.6152': attribute type 4 has an invalid length. [ 754.760231][T30731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6151'. [ 755.009738][T30747] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 755.100669][T30755] netlink: 'syz.3.6155': attribute type 5 has an invalid length. [ 755.110445][T30755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6155'. [ 755.224412][T30754] ªªªªª1: renamed from virt_wifi0 [ 755.235233][T30756] x_tables: duplicate underflow at hook 2 [ 755.245372][T30587] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.246073][T30587] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.246401][T30587] bridge_slave_0: entered allmulticast mode [ 755.297384][T30587] bridge_slave_0: entered promiscuous mode [ 755.304402][T30748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.349031][T30748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.391715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.391970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.392198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.480592][T30760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6158'. [ 755.587020][T30587] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.587203][T30587] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.587727][T30587] bridge_slave_1: entered allmulticast mode [ 755.631664][T30587] bridge_slave_1: entered promiscuous mode [ 756.081204][T30587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.118590][T30587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.406419][T30587] team0: Port device team_slave_0 added [ 756.480137][T30587] team0: Port device team_slave_1 added [ 756.668465][T30587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.668510][T30587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.668822][T30587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.675713][T30587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.675750][T30587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.675817][T30587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.755703][ T4935] Bluetooth: hci4: command 0x041b tx timeout [ 757.107516][T30587] hsr_slave_0: entered promiscuous mode [ 757.118145][T30587] hsr_slave_1: entered promiscuous mode [ 757.127823][T30587] debugfs: 'hsr0' already exists in 'hsr' [ 757.127867][T30587] Cannot create hsr debugfs directory [ 757.810742][T30812] netlink: 'syz.1.6171': attribute type 1 has an invalid length. [ 758.142448][T30831] __nla_validate_parse: 2 callbacks suppressed [ 758.142501][T30831] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6175'. [ 758.167430][T30830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6175'. [ 758.377170][T30822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6173'. [ 758.710316][T30587] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 758.831859][ T4935] Bluetooth: hci4: command 0x041b tx timeout [ 759.314181][T24807] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 760.511569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.511780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.512152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.911737][ T4935] Bluetooth: hci4: command 0x041b tx timeout [ 761.018139][T30833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.034806][T30587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 761.089269][T30587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.105967][T30587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 761.160914][T30587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 761.209425][T30587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 761.241768][T30587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 761.257515][T30587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 761.281103][T30587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 761.550872][T30587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.604992][T30587] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.628182][T24809] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.628322][T24809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.659493][T24806] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.659748][T24806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.714616][T30888] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6185'. [ 761.813881][T30890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6187'. [ 762.206188][T30899] netlink: 'syz.3.6189': attribute type 6 has an invalid length. [ 762.664297][T30920] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 762.709691][T30927] netlink: 'syz.3.6194': attribute type 10 has an invalid length. [ 762.806485][T30927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6194'. [ 762.845887][T30927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6194'. [ 763.193867][T30587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.278745][T30942] syzkaller0: entered promiscuous mode [ 763.278789][T30942] syzkaller0: entered allmulticast mode [ 763.374737][T30587] veth0_vlan: entered promiscuous mode [ 763.396455][T30587] veth1_vlan: entered promiscuous mode [ 763.459841][T30587] veth0_macvtap: entered promiscuous mode [ 763.472847][T30587] veth1_macvtap: entered promiscuous mode [ 763.514985][T30587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.557678][T30587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.624599][T30954] FAULT_INJECTION: forcing a failure. [ 763.624599][T30954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.643306][T30954] CPU: 0 UID: 0 PID: 30954 Comm: syz.0.6202 Not tainted syzkaller #0 PREEMPT(full) [ 763.643338][T30954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 763.643353][T30954] Call Trace: [ 763.643362][T30954] [ 763.643373][T30954] dump_stack_lvl+0xe8/0x150 [ 763.643412][T30954] should_fail_ex+0x410/0x560 [ 763.643452][T30954] _copy_from_iter+0x1d3/0x1660 [ 763.643565][T30954] ? __alloc_skb+0x27a/0x7a0 [ 763.643668][T30954] ? __alloc_skb+0x27a/0x7a0 [ 763.643703][T30954] ? __alloc_skb+0x27a/0x7a0 [ 763.643751][T30954] ? __pfx__copy_from_iter+0x10/0x10 [ 763.643782][T30954] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 763.643823][T30954] ? __alloc_skb+0x27a/0x7a0 [ 763.643848][T30954] ? __alloc_skb+0x27a/0x7a0 [ 763.643881][T30954] ? netlink_sendmsg+0x650/0xb40 [ 763.643959][T30954] ? skb_put+0x112/0x210 [ 763.643981][T30954] netlink_sendmsg+0x6c0/0xb40 [ 763.644015][T30954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.644047][T30954] ? apparmor_socket_sendmsg+0x98/0x360 [ 763.644104][T30954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.644127][T30954] sock_sendmsg_nosec+0x13a/0x180 [ 763.644163][T30954] ____sys_sendmsg+0x54e/0x850 [ 763.644190][T30954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 763.644220][T30954] ? import_iovec+0x73/0xa0 [ 763.644245][T30954] ___sys_sendmsg+0x2a5/0x360 [ 763.644264][T30954] ? __lock_acquire+0x6df/0x2e50 [ 763.644288][T30954] ? __pfx____sys_sendmsg+0x10/0x10 [ 763.644343][T30954] ? __fget_files+0x2a/0x420 [ 763.644368][T30954] ? __fget_files+0x3a2/0x420 [ 763.644403][T30954] __x64_sys_sendmsg+0x1b1/0x290 [ 763.644427][T30954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 763.644469][T30954] do_syscall_64+0x166/0x520 [ 763.644497][T30954] ? trace_irq_disable+0x3b/0x140 [ 763.644517][T30954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.644537][T30954] ? clear_bhb_loop+0x70/0xc0 [ 763.644561][T30954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.644580][T30954] RIP: 0033:0x7f012059e159 [ 763.644599][T30954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.644616][T30954] RSP: 002b:00007f0121432028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.644638][T30954] RAX: ffffffffffffffda RBX: 00007f0120825fa0 RCX: 00007f012059e159 [ 763.644653][T30954] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 763.644666][T30954] RBP: 00007f0121432090 R08: 0000000000000000 R09: 0000000000000000 [ 763.644679][T30954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.644691][T30954] R13: 00007f0120826038 R14: 00007f0120825fa0 R15: 00007fff0390ad38 [ 763.644722][T30954] [ 763.828515][ T1156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.965490][T30961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6200'. [ 763.966035][T30961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6200'. [ 763.966530][T30961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6200'. [ 763.966983][T30961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6200'. [ 764.007174][T30961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6200'. [ 764.022135][T30961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6200'. [ 764.022410][T30961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6200'. [ 764.022607][T30961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6200'. [ 764.022779][T30961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6200'. [ 764.022946][T30961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6200'. [ 764.266059][T24809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.268154][T24809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.278009][T24798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.510151][T30972] block nbd3: not configured, cannot reconfigure [ 764.549358][T24815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.549400][T24815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.783394][T24806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.783434][T24806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.786220][T30986] tc_dump_action: action bad kind [ 765.072762][T24807] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 765.424944][T23789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 765.434430][T23789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 765.446378][T23789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 765.454647][T23789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 765.464748][T23789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 765.515810][T31018] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 765.631657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.631901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.786908][T31028] batadv_slave_0: entered promiscuous mode [ 765.797780][T31028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.840447][T31028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.909744][T31026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.035859][T31038] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20002 [ 766.330056][T31054] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 766.330115][T31054] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 766.483988][T31057] vti0: entered allmulticast mode [ 766.820265][T31012] wlan0 speed is unknown, defaulting to 1000 [ 766.827987][T31012] lo speed is unknown, defaulting to 1000 [ 767.554567][ T4935] Bluetooth: hci3: command tx timeout [ 767.692733][T31097] ipt_REJECT: ECHOREPLY no longer supported. [ 767.843918][T31101] xt_hashlimit: size too large, truncated to 1048576 [ 767.851320][T24815] nci: nci_rx_work: unknown MT 0x1 [ 768.175220][T31012] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.175606][T31012] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.175957][T31012] bridge_slave_0: entered allmulticast mode [ 768.180208][T31012] bridge_slave_0: entered promiscuous mode [ 768.190448][T31012] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.190829][T31012] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.191172][T31012] bridge_slave_1: entered allmulticast mode [ 768.196143][T31012] bridge_slave_1: entered promiscuous mode [ 768.244873][T31012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.256143][T31012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.296638][T31012] team0: Port device team_slave_0 added [ 768.303431][T31012] team0: Port device team_slave_1 added [ 768.329188][T31012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.329217][T31012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.329248][T31012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.335146][T31012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.335188][T31012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.335250][T31012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.473832][T31012] hsr_slave_0: entered promiscuous mode [ 768.476541][T31012] hsr_slave_1: entered promiscuous mode [ 768.478536][T31012] debugfs: 'hsr0' already exists in 'hsr' [ 768.478586][T31012] Cannot create hsr debugfs directory [ 768.678250][T31012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.678310][T31012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.678336][T31012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36471 - 0 [ 768.678416][T31012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 768.772999][T31012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.773056][T31012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.773087][T31012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36471 - 0 [ 768.773185][T31012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 768.831553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.831785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.906223][T31012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.919222][T31012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.932339][T31012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36471 - 0 [ 768.932368][T31012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 769.020935][T31012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.020991][T31012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.021019][T31012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 36471 - 0 [ 769.021099][T31012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 769.552632][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 769.631534][ T4935] Bluetooth: hci3: command tx timeout [ 770.684108][T31096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 770.716819][T31012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 770.764972][T31012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.774156][T31012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 770.833631][T31012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 770.834735][T24815] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 770.849372][T31012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 770.886158][T31012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 770.895214][T31012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 770.937635][T31012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.042824][T31140] __nla_validate_parse: 66 callbacks suppressed [ 771.042892][T31140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6240'. [ 771.192045][T31144] netlink: 'syz.3.6241': attribute type 2 has an invalid length. [ 771.226039][T31149] Cannot find add_set index 0 as target [ 771.241876][T31153] netlink: 'syz.0.6245': attribute type 1 has an invalid length. [ 771.319439][T31012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.360801][T31012] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.391117][T24813] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.391298][T24813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.428649][T24807] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.429106][T24807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.568881][T31167] netlink: 'syz.1.6246': attribute type 32 has an invalid length. [ 771.711951][T23789] Bluetooth: hci3: command tx timeout [ 771.928243][ T4935] block nbd3: Receive control failed (result -32) [ 771.951557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.951775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.119444][ T2055] block nbd1: Possible stuck request ffff888054789140: control (read@0,1024B). Runtime 210 seconds [ 772.119507][ T2055] block nbd1: Possible stuck request ffff888054789300: control (read@1024,1024B). Runtime 210 seconds [ 772.119555][ T2055] block nbd1: Possible stuck request ffff8880547894c0: control (read@2048,1024B). Runtime 210 seconds [ 772.119594][ T2055] block nbd1: Possible stuck request ffff888054789680: control (read@3072,1024B). Runtime 210 seconds [ 772.131066][T31181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6248'. [ 772.215965][T31181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6248'. [ 772.268603][T31181] bridge0: port 3(veth1_to_bridge) entered blocking state [ 772.268797][T31181] bridge0: port 3(veth1_to_bridge) entered disabled state [ 772.269260][T31181] veth1_to_bridge: entered allmulticast mode [ 772.375338][T31181] veth1_to_bridge: entered promiscuous mode [ 772.375512][T31181] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 772.376045][T31181] bridge0: port 3(veth1_to_bridge) entered blocking state [ 772.376148][T31181] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 772.431129][T24806] tipc: Subscription rejected, illegal request [ 772.494885][T31190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6248'. [ 772.574623][T31187] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6249'. [ 772.751113][T31208] No such timeout policy "syz0" [ 772.758209][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.758496][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.759620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.759979][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.761112][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.761512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 772.762711][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.844444][ T4935] Bluetooth: hci3: command tx timeout [ 775.841566][ C1] net_ratelimit: 10572 callbacks suppressed [ 775.841637][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 775.842031][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 775.842094][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.842448][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 775.842527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.842857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 775.843312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 775.843721][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 775.843997][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.844088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 776.412420][ T4985] udevd[4985]: worker [5633] /devices/virtual/block/nbd1 timeout; kill it [ 776.482318][ T4985] udevd[4985]: seq 30720 '/devices/virtual/block/nbd1' killed [ 780.851579][ C1] net_ratelimit: 18243 callbacks suppressed [ 780.851627][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 780.851995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 780.852351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 780.852574][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.852751][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 780.853108][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.853150][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 780.853553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 780.853980][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 780.854317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 780.901359][ C0] sched: DL replenish lagged too much [ 785.861510][ C1] net_ratelimit: 17252 callbacks suppressed [ 785.861562][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 785.861752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.862030][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 785.862334][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.862473][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 785.862919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 785.863353][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 785.863793][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 785.864263][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 785.864697][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 790.871625][ C1] net_ratelimit: 17629 callbacks suppressed [ 790.871672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 790.872061][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 790.872260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.872458][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 790.872680][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.872897][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 790.873334][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 790.873821][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 790.874084][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.874185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 795.881719][ C0] net_ratelimit: 17450 callbacks suppressed [ 795.881719][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 795.881765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.882109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 795.882182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.882513][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 795.882985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 795.883474][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 795.883621][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.883922][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 795.884076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.891618][ C1] net_ratelimit: 18373 callbacks suppressed [ 800.891641][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 800.891861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.892048][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 800.892290][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.892466][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 800.892971][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 800.893397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 800.893821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.893843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 800.894225][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 805.901602][ C1] net_ratelimit: 17326 callbacks suppressed [ 805.901626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 805.901993][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 805.902391][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 805.902527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.902818][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 805.903019][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.903260][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 805.903671][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 805.904054][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 805.904439][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 810.911451][ C1] net_ratelimit: 16379 callbacks suppressed [ 810.911473][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 810.911828][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 810.912221][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 810.912619][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 810.913050][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 810.913364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.913475][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 810.913841][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.913921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 810.914255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.921359][ C1] net_ratelimit: 17766 callbacks suppressed [ 815.921388][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.921422][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 815.921774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.921823][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 815.922180][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.922182][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 815.922533][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 815.922979][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 815.923404][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 815.923833][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 820.931563][ C1] net_ratelimit: 17877 callbacks suppressed [ 820.931586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 820.932002][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 820.932645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.933081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.933169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 820.933512][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.933613][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 820.933939][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.934037][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 820.934519][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 825.941490][ C1] net_ratelimit: 17375 callbacks suppressed [ 825.941513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 825.941874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 825.942239][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 825.942727][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 825.942943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.943150][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 825.943366][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.943762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 825.943813][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.944164][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 830.951539][ C1] net_ratelimit: 17925 callbacks suppressed [ 830.951565][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 830.951943][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 830.952360][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 830.952761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 830.952913][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.953175][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 830.953333][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.953599][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 830.953798][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.954050][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.199983][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 835.961617][ C0] net_ratelimit: 17376 callbacks suppressed [ 835.961639][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.962688][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 835.963171][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 835.963587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 835.964032][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 835.964042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.964416][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 835.964450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.964769][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 835.964802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.971647][ C1] net_ratelimit: 16582 callbacks suppressed [ 840.971670][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 840.972079][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 840.972477][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 840.972940][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 840.973347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 840.973366][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.973757][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 840.974124][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 840.974476][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 840.974532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.981451][ C1] net_ratelimit: 17301 callbacks suppressed [ 845.981474][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 845.981857][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 845.981922][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.982310][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 845.982336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.982745][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 845.982757][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.983183][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.983203][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 845.983630][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 850.991461][ C0] net_ratelimit: 17536 callbacks suppressed [ 850.991511][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.991580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 850.992047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 850.992477][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 850.992936][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 850.993381][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 850.993849][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 850.993911][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.994283][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 850.994325][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.001390][ C1] net_ratelimit: 17359 callbacks suppressed [ 856.001437][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 856.001828][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 856.002242][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 856.002676][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 856.003107][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 856.003531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 856.003584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.003971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 856.004011][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 856.004357][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 861.011536][ C1] net_ratelimit: 17843 callbacks suppressed [ 861.011578][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 861.011950][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 861.012080][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.012317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 861.012481][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.012743][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 861.012930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.013174][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 861.013397][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 861.013603][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 866.021625][ C1] net_ratelimit: 17603 callbacks suppressed [ 866.021679][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 866.021840][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.022047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 866.022249][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.022489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 866.022894][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 866.023137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.023294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 866.023621][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 866.023707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 871.031555][ C1] net_ratelimit: 18464 callbacks suppressed [ 871.031577][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 871.031623][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.031943][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 871.032331][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 871.033123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 871.033557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 871.033991][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 871.034448][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 871.034530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.034815][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 876.041535][ C0] net_ratelimit: 18046 callbacks suppressed [ 876.041558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.041673][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 876.041965][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.042128][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 876.042343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.042517][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 876.043026][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 876.043459][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 876.043920][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 876.044311][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 881.051688][ C1] net_ratelimit: 16446 callbacks suppressed [ 881.051741][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 881.051942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.052165][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 881.052359][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.052632][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 881.052835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.053094][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 881.053303][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.053546][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 881.053967][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 886.061368][ C0] net_ratelimit: 16310 callbacks suppressed [ 886.061425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.061507][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 886.061938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 886.062400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 886.062847][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.062860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 886.063300][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 886.063311][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 886.063744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 886.063789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.071342][ C1] net_ratelimit: 17597 callbacks suppressed [ 891.071398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 891.071882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 891.072004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.072325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 891.072478][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.072814][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 891.072923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.073556][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.079557][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.080595][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.081422][ C1] net_ratelimit: 17444 callbacks suppressed [ 896.081434][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.081484][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 896.081868][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 896.081879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.082257][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 896.082267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.082664][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 896.082685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 896.083088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 896.083556][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 901.091566][ C1] net_ratelimit: 17996 callbacks suppressed [ 901.091590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 901.091815][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.092049][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 901.092265][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.092474][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 901.092718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.092923][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 901.093145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.093363][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 901.093796][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 906.101348][ C1] net_ratelimit: 17056 callbacks suppressed [ 906.101374][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 906.101807][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 906.102136][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 906.102253][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 906.102586][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 906.102691][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 906.103116][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 906.103563][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 906.103995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 906.104147][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.111553][ C1] net_ratelimit: 17759 callbacks suppressed [ 911.111607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 911.111970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.112037][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 911.112383][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.113745][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.113774][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 911.114195][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.114257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 911.114583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 911.114691][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 916.121348][ C0] net_ratelimit: 17207 callbacks suppressed [ 916.121392][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.121527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 916.121808][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.121951][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 916.122391][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 916.122848][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 916.123287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 916.123291][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 916.123733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 916.124161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 921.131329][ C0] net_ratelimit: 18056 callbacks suppressed [ 921.131352][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.131464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 921.131785][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.131892][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 921.133234][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.133411][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 921.133647][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.133878][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 921.134089][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 921.134252][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 922.071167][T23789] Bluetooth: hci1: command tx timeout [ 926.141615][ C1] net_ratelimit: 17093 callbacks suppressed [ 926.141639][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 926.142061][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 926.142146][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.142438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 926.142587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.142880][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 926.143036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.143342][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 926.143471][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 926.143758][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 931.151641][ C1] net_ratelimit: 17729 callbacks suppressed [ 931.151664][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 931.152061][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 931.152417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.152440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 931.152857][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 931.152875][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.153252][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 931.153659][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 931.154052][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 931.154405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 936.161459][ C0] net_ratelimit: 17095 callbacks suppressed [ 936.161485][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.161717][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 936.161904][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 936.162153][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 936.162585][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 936.163025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 936.163462][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 936.163939][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 936.164372][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 936.164435][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.171608][ C1] net_ratelimit: 17117 callbacks suppressed [ 941.171632][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 941.171940][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.172053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 941.172369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.172478][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 941.172852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.172902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 941.173281][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.173326][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 941.173746][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 946.181457][ C1] net_ratelimit: 17561 callbacks suppressed [ 946.181481][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 946.181959][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.181963][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 946.182343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.182426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 946.182947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 946.183464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 946.183984][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 946.184489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 946.184860][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.191413][ C1] net_ratelimit: 16889 callbacks suppressed [ 951.191463][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.191470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 951.191873][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 951.192289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 951.192686][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 951.193132][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 951.193533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 951.193939][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 951.194029][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.194331][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 956.201426][ C1] net_ratelimit: 17350 callbacks suppressed [ 956.201449][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 956.201801][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 956.202167][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 956.202268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.202566][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 956.202709][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.202962][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 956.203340][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 956.203727][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:b2:aa:85:f1:ff:eb, vlan:0) [ 956.204161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 958.451307][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 958.583626][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31212/1:b..l P31194/1:b..l [ 958.592898][ C1] rcu: (detected by 1, t=10516 jiffies, g=163969, q=2224 ncpus=2) [ 958.600818][ C1] task:syz.0.6250 state:R running task stack:24360 pid:31194 tgid:31193 ppid:19020 task_flags:0x400140 flags:0x00080002 [ 958.614350][ C1] Call Trace: [ 958.617670][ C1] [ 958.620664][ C1] __schedule+0x17db/0x58f0 [ 958.625218][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.631349][ C1] ? __pfx___schedule+0x10/0x10 [ 958.636247][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 958.641651][ C1] ? tipc_nametbl_lookup_mcast_sockets+0x5b/0xd50 [ 958.648196][ C1] preempt_schedule_common+0x7f/0xd0 [ 958.653523][ C1] ? tipc_nametbl_lookup_mcast_sockets+0x43a/0xd50 [ 958.660058][ C1] preempt_schedule_thunk+0x16/0x40 [ 958.665307][ C1] __local_bh_enable_ip+0xe9/0x140 [ 958.670481][ C1] tipc_nametbl_lookup_mcast_sockets+0x43a/0xd50 [ 958.676838][ C1] ? tipc_nametbl_lookup_mcast_sockets+0x5b/0xd50 [ 958.683300][ C1] tipc_sk_mcast_rcv+0x58b/0xf20 [ 958.688343][ C1] ? __lock_acquire+0x6df/0x2e50 [ 958.693333][ C1] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 958.698845][ C1] ? lock_acquire+0x115/0x350 [ 958.703562][ C1] ? tipc_mcast_xmit+0x11f3/0x19e0 [ 958.708797][ C1] tipc_mcast_xmit+0x1384/0x19e0 [ 958.713780][ C1] ? __might_fault+0xaf/0x130 [ 958.718550][ C1] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 958.723869][ C1] ? _copy_from_iter+0x2d3/0x1660 [ 958.728937][ C1] ? __alloc_skb+0x27a/0x7a0 [ 958.733576][ C1] ? __alloc_skb+0x27a/0x7a0 [ 958.738211][ C1] ? __alloc_skb+0x27a/0x7a0 [ 958.742908][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 958.748297][ C1] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 958.754401][ C1] ? __alloc_skb+0x27a/0x7a0 [ 958.759036][ C1] ? __alloc_skb+0x27a/0x7a0 [ 958.763682][ C1] ? tipc_msg_build+0x439/0xf50 [ 958.768616][ C1] ? tipc_msg_build+0x4af/0xf50 [ 958.773536][ C1] ? net_generic+0x1e/0x240 [ 958.778115][ C1] ? net_generic+0x1e/0x240 [ 958.782669][ C1] ? net_generic+0x1e/0x240 [ 958.787210][ C1] ? tipc_group_bc_cong+0x15f/0x210 [ 958.792516][ C1] tipc_send_group_bcast+0x80d/0xad0 [ 958.797859][ C1] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 958.803712][ C1] ? tipc_sk_filter_rcv+0x2f20/0x3210 [ 958.809136][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 958.814870][ C1] __tipc_sendmsg+0x313/0x2b60 [ 958.819723][ C1] ? __pfx___tipc_sendmsg+0x10/0x10 [ 958.824959][ C1] ? aa_label_sk_perm+0x532/0x6e0 [ 958.830018][ C1] ? rcu_is_watching+0x16/0xb0 [ 958.834811][ C1] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 958.840202][ C1] ? __lock_acquire+0x6df/0x2e50 [ 958.845168][ C1] ? __lock_acquire+0x6df/0x2e50 [ 958.850148][ C1] ? tipc_sk_backlog_rcv+0x1ad/0x270 [ 958.855475][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 958.860550][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 958.865963][ C1] ? tipc_sendmsg+0x47/0x70 [ 958.870517][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 958.875839][ C1] tipc_sendmsg+0x55/0x70 [ 958.880215][ C1] ? __pfx_tipc_sendmsg+0x10/0x10 [ 958.885264][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 958.890317][ C1] ____sys_sendmsg+0x54e/0x850 [ 958.895121][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.900441][ C1] ? import_iovec+0x73/0xa0 [ 958.904983][ C1] ___sys_sendmsg+0x2a5/0x360 [ 958.909690][ C1] ? __lock_acquire+0x6df/0x2e50 [ 958.914684][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.919924][ C1] ? __lock_acquire+0x6df/0x2e50 [ 958.924911][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 958.930310][ C1] __sys_sendmmsg+0x273/0x4d0 [ 958.935028][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 958.940277][ C1] ? do_futex+0x3e7/0x4e0 [ 958.944675][ C1] ? rcu_is_watching+0x16/0xb0 [ 958.949484][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 958.954368][ C1] do_syscall_64+0x166/0x520 [ 958.958997][ C1] ? trace_irq_disable+0x3b/0x140 [ 958.964045][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.970144][ C1] ? clear_bhb_loop+0x70/0xc0 [ 958.974864][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.980789][ C1] RIP: 0033:0x7f012059e159 [ 958.985236][ C1] RSP: 002b:00007f0121432028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 958.993689][ C1] RAX: ffffffffffffffda RBX: 00007f0120825fa0 RCX: 00007f012059e159 [ 959.001727][ C1] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000004 [ 959.009736][ C1] RBP: 00007f012063503b R08: 0000000000000000 R09: 0000000000000000 [ 959.017737][ C1] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.025753][ C1] R13: 00007f0120826038 R14: 00007f0120825fa0 R15: 00007fff0390ad38 [ 959.033777][ C1] [ 959.036849][ C1] task:syz-executor state:R running task stack:28168 pid:31212 tgid:31212 ppid:30249 task_flags:0x400040 flags:0x00080002 [ 959.050375][ C1] Call Trace: [ 959.053682][ C1] [ 959.056675][ C1] __schedule+0x17db/0x58f0 [ 959.061242][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 959.066471][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 959.072159][ C1] ? __lock_acquire+0x6df/0x2e50 [ 959.077123][ C1] ? __pfx___schedule+0x10/0x10 [ 959.082008][ C1] ? __lock_acquire+0x6df/0x2e50 [ 959.086985][ C1] preempt_schedule_irq+0x4b/0x90 [ 959.092046][ C1] irqentry_exit+0x14f/0x910 [ 959.096682][ C1] ? trace_irq_disable+0x3b/0x140 [ 959.101747][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 959.107750][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 959.113064][ C1] Code: ff ff ff e8 20 f9 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 54 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf fc 43 0a cc 48 8d 3d b7 34 da [ 959.132734][ C1] RSP: 0018:ffffc90003ff7740 EFLAGS: 00000292 [ 959.138860][ C1] RAX: d446a91c2fa48f00 RBX: 0000000000000000 RCX: 0000000000000046 [ 959.146867][ C1] RDX: 00000000d5ce5df1 RSI: ffffffff8e6fd432 RDI: ffffffff8c6d9480 [ 959.154865][ C1] RBP: ffff888031e79f40 R08: 1f00000000000000 R09: 0000000000000000 [ 959.162870][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8ed5c6e0 [ 959.170867][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 959.178874][ C1] ? shmem_symlink+0x19f/0x4d0 [ 959.183705][ C1] ? unwind_next_frame+0x8f/0x2550 [ 959.188872][ C1] unwind_next_frame+0xac/0x2550 [ 959.193854][ C1] ? unwind_next_frame+0x8f/0x2550 [ 959.199002][ C1] ? kmemdup_noprof+0x2b/0x70 [ 959.203720][ C1] ? unwind_next_frame+0x8f/0x2550 [ 959.208890][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 959.215120][ C1] arch_stack_walk+0x11b/0x150 [ 959.219945][ C1] ? shmem_symlink+0x19f/0x4d0 [ 959.224744][ C1] stack_trace_save+0xa9/0x100 [ 959.229538][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 959.234975][ C1] save_stack+0x122/0x230 [ 959.239326][ C1] ? __pfx_save_stack+0x10/0x10 [ 959.244197][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 959.249512][ C1] ? __slab_free+0x274/0x2c0 [ 959.254130][ C1] ? qlist_free_all+0x99/0x100 [ 959.258924][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 959.264610][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 959.269666][ C1] ? __kmalloc_node_track_caller_noprof+0x44b/0x720 [ 959.276293][ C1] ? kmemdup_noprof+0x2b/0x70 [ 959.280988][ C1] ? shmem_symlink+0x19f/0x4d0 [ 959.285798][ C1] ? page_ext_put+0x97/0xc0 [ 959.290342][ C1] __reset_page_owner+0x71/0x1f0 [ 959.295332][ C1] __free_frozen_pages+0xc93/0xd90 [ 959.301265][ C1] __slab_free+0x274/0x2c0 [ 959.305754][ C1] qlist_free_all+0x99/0x100 [ 959.310386][ C1] kasan_quarantine_reduce+0x148/0x160 [ 959.315886][ C1] __kasan_slab_alloc+0x22/0x80 [ 959.320759][ C1] __kmalloc_node_track_caller_noprof+0x44b/0x720 [ 959.327210][ C1] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 959.333832][ C1] ? shmem_symlink+0x19f/0x4d0 [ 959.338645][ C1] ? shmem_symlink+0x19f/0x4d0 [ 959.343466][ C1] kmemdup_noprof+0x2b/0x70 [ 959.348091][ C1] shmem_symlink+0x19f/0x4d0 [ 959.352715][ C1] ? inode_permission+0x2bc/0x5f0 [ 959.357782][ C1] vfs_symlink+0x18b/0x330 [ 959.362226][ C1] ? security_path_symlink+0xfd/0x360 [ 959.367637][ C1] filename_symlinkat+0x1cd/0x410 [ 959.372766][ C1] ? __pfx_filename_symlinkat+0x10/0x10 [ 959.378355][ C1] ? do_getname+0x151/0x250 [ 959.382897][ C1] __se_sys_symlinkat+0x4e/0x2b0 [ 959.387881][ C1] do_syscall_64+0x166/0x520 [ 959.392525][ C1] ? trace_irq_disable+0x3b/0x140 [ 959.397600][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.403700][ C1] ? clear_bhb_loop+0x70/0xc0 [ 959.408430][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.414351][ C1] RIP: 0033:0x7f88aff9d217 [ 959.418787][ C1] RSP: 002b:00007fff5a67bfa8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 959.427223][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f88aff9d217 [ 959.435230][ C1] RDX: 00007f88b0035ff4 RSI: 00000000ffffff9c RDI: 00007fff5a67c040 [ 959.443226][ C1] RBP: 00007fff5a67bfec R08: 0000000000000001 R09: 00000000ffffffff [ 959.451225][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000029 [ 959.459218][ C1] R13: 00000000000927c0 R14: 00000000000bc9bf R15: 00007fff5a67c040 [ 959.467249][ C1] [ 959.470312][ C1] rcu: rcu_preempt kthread starved for 938 jiffies! g163969 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 959.481284][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 959.491289][ C1] rcu: RCU grace-period kthread stack dump: [ 959.497202][ C1] task:rcu_preempt state:R running task stack:27656 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 959.510749][ C1] Call Trace: [ 959.514054][ C1] [ 959.517026][ C1] __schedule+0x17db/0x58f0 [ 959.521581][ C1] ? __lock_acquire+0x6df/0x2e50 [ 959.526578][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 959.531743][ C1] ? __pfx___schedule+0x10/0x10 [ 959.536634][ C1] ? lock_acquire+0x115/0x350 [ 959.541354][ C1] ? schedule+0x90/0x2b0 [ 959.545660][ C1] schedule+0x164/0x2b0 [ 959.549883][ C1] schedule_timeout+0x152/0x2c0 [ 959.554767][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 959.560175][ C1] ? __pfx_process_timeout+0x10/0x10 [ 959.565514][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 959.571361][ C1] ? prepare_to_swait_event+0x322/0x350 [ 959.576950][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 959.581836][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 959.588023][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 959.593351][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 959.598614][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 959.604510][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 959.609163][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 959.614399][ C1] ? __kthread_parkme+0x71/0x1f0 [ 959.619373][ C1] ? __kthread_parkme+0x199/0x1f0 [ 959.624441][ C1] kthread+0x38b/0x480 [ 959.628540][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 959.633786][ C1] ? __pfx_kthread+0x10/0x10 [ 959.638439][ C1] ret_from_fork+0x514/0xb70 [ 959.643063][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 959.648220][ C1] ? __switch_to+0xc89/0x1420 [ 959.652941][ C1] ? __pfx_kthread+0x10/0x10 [ 959.657560][ C1] ret_from_fork_asm+0x1a/0x30 [ 959.662372][ C1] [ 959.665427][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 959.671772][ C1] CPU: 1 UID: 0 PID: 24806 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 959.681444][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 959.691536][ C1] Workqueue: krds_cp_wq#8/0 rds_connect_worker [ 959.697873][ C1] RIP: 0010:unwind_next_frame+0x6c9/0x2550 [ 959.703713][ C1] Code: c7 44 24 18 e0 d5 bb 8e 49 8d 6e 38 4c 8b 6c 24 18 49 8d 55 04 49 8d 5d 05 48 89 d0 48 c1 e8 03 48 89 44 24 30 42 0f b6 04 20 <84> c0 48 89 54 24 08 0f 85 93 17 00 00 48 89 d8 48 c1 e8 03 42 0f [ 959.723351][ C1] RSP: 0018:ffffc90000a17720 EFLAGS: 00000a03 [ 959.729460][ C1] RAX: 0000000000000000 RBX: ffffffff91a9ca8f RCX: ffffffff90f884c4 [ 959.737461][ C1] RDX: ffffffff91a9ca8e RSI: ffffffff91a9ca8a RDI: ffffffff8c6d9420 [ 959.745450][ C1] RBP: ffffc90000a17800 R08: 0000000000000001 R09: 0000000000000000 [ 959.753450][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: dffffc0000000000 [ 959.761454][ C1] R13: ffffffff91a9ca8a R14: ffffc90000a177c8 R15: 1ffff92000142ef9 [ 959.769458][ C1] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 959.778424][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.785039][ C1] CR2: 00007f07ca000000 CR3: 0000000077a54000 CR4: 00000000003526f0 [ 959.793043][ C1] Call Trace: [ 959.796354][ C1] [ 959.799233][ C1] ? br_handle_frame_finish+0x1119/0x1950 [ 959.805085][ C1] ? unwind_next_frame+0x8f/0x2550 [ 959.810235][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 959.816431][ C1] arch_stack_walk+0x11b/0x150 [ 959.821232][ C1] ? br_handle_frame_finish+0x1119/0x1950 [ 959.827000][ C1] stack_trace_save+0xa9/0x100 [ 959.831800][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 959.837211][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 959.842193][ C1] ? __lock_acquire+0x6df/0x2e50 [ 959.847160][ C1] kasan_save_track+0x3e/0x80 [ 959.851863][ C1] ? kasan_save_track+0x3e/0x80 [ 959.856734][ C1] ? kasan_save_free_info+0x40/0x50 [ 959.861955][ C1] ? __kasan_slab_free+0x5c/0x80 [ 959.866923][ C1] ? kmem_cache_free+0x182/0x650 [ 959.871880][ C1] ? br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 959.877455][ C1] ? NF_HOOK+0x64e/0x6e0 [ 959.881722][ C1] ? br_nf_post_routing+0xa51/0xee0 [ 959.886945][ C1] ? nf_hook_slow+0xc5/0x220 [ 959.891650][ C1] ? NF_HOOK+0x23e/0x3f0 [ 959.895933][ C1] ? br_forward_finish+0xd3/0x130 [ 959.900978][ C1] ? br_nf_forward_finish+0xa76/0xea0 [ 959.906382][ C1] ? NF_HOOK+0x64e/0x6e0 [ 959.910661][ C1] ? br_nf_forward_ip+0x7e7/0xa30 [ 959.915726][ C1] ? nf_hook_slow+0xc5/0x220 [ 959.920356][ C1] ? NF_HOOK+0x23e/0x3f0 [ 959.924624][ C1] ? __br_forward+0x397/0x540 [ 959.929332][ C1] ? br_handle_frame_finish+0x1119/0x1950 [ 959.935131][ C1] ? br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 959.940626][ C1] kasan_save_free_info+0x40/0x50 [ 959.945723][ C1] __kasan_slab_free+0x5c/0x80 [ 959.950539][ C1] kmem_cache_free+0x182/0x650 [ 959.955328][ C1] ? __skb_ext_put+0x221/0x2f0 [ 959.960194][ C1] ? __skb_ext_del+0x271/0x390 [ 959.965016][ C1] br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 959.970349][ C1] ? NF_HOOK+0xa2/0x6e0 [ 959.974538][ C1] NF_HOOK+0x64e/0x6e0 [ 959.978637][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 959.983264][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 959.989046][ C1] ? net_generic+0x1e/0x240 [ 959.993581][ C1] ? net_generic+0x1e/0x240 [ 959.998132][ C1] br_nf_post_routing+0xa51/0xee0 [ 960.003192][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 960.008955][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 960.014551][ C1] nf_hook_slow+0xc5/0x220 [ 960.019036][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 960.024987][ C1] NF_HOOK+0x23e/0x3f0 [ 960.029113][ C1] ? NF_HOOK+0xa2/0x3f0 [ 960.033302][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 960.037927][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 960.043874][ C1] ? net_generic+0x1e/0x240 [ 960.048421][ C1] br_forward_finish+0xd3/0x130 [ 960.053312][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 960.059241][ C1] br_nf_forward_finish+0xa76/0xea0 [ 960.064500][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 960.070263][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 960.075759][ C1] ? NF_HOOK+0xa2/0x6e0 [ 960.079949][ C1] ? NF_HOOK+0xa2/0x6e0 [ 960.084136][ C1] NF_HOOK+0x64e/0x6e0 [ 960.088244][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 960.092859][ C1] ? net_generic+0x1e/0x240 [ 960.097402][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 960.103256][ C1] ? net_generic+0x1e/0x240 [ 960.107805][ C1] ? net_generic+0x1e/0x240 [ 960.112348][ C1] br_nf_forward_ip+0x7e7/0xa30 [ 960.117262][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 960.123023][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 960.128182][ C1] nf_hook_slow+0xc5/0x220 [ 960.132678][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 960.138180][ C1] NF_HOOK+0x23e/0x3f0 [ 960.142286][ C1] ? NF_HOOK+0xa2/0x3f0 [ 960.146472][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 960.151097][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 960.156645][ C1] ? skb_clone+0x246/0x3a0 [ 960.161146][ C1] ? br_flood+0x620/0x8d0 [ 960.165511][ C1] ? br_handle_vlan+0x5e/0x530 [ 960.170435][ C1] __br_forward+0x397/0x540 [ 960.174979][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 960.180508][ C1] br_handle_frame_finish+0x1119/0x1950 [ 960.186103][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 960.192040][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 960.196959][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 960.202144][ C1] ? nf_hook_slow+0x176/0x220 [ 960.206863][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 960.212805][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 960.217786][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 960.223107][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 960.228614][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 960.234549][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 960.239818][ C1] ? lock_acquire+0x115/0x350 [ 960.244532][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 960.250557][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 960.256495][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 960.261996][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 960.267594][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 960.273644][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 960.280192][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 960.285433][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 960.290927][ C1] br_handle_frame+0x1329/0x1600 [ 960.295924][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 960.301257][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 960.307181][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 960.312514][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 960.317800][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 960.323124][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 960.328930][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 960.335059][ C1] ? ip6_rcv_finish+0x265/0x280 [ 960.340001][ C1] ? NF_HOOK+0x336/0x3c0 [ 960.344282][ C1] ? process_backlog+0x3de/0x18b0 [ 960.349345][ C1] ? process_backlog+0x3de/0x18b0 [ 960.354427][ C1] process_backlog+0x727/0x18b0 [ 960.359320][ C1] ? call_timer_fn+0xd5/0x5f0 [ 960.364120][ C1] ? process_backlog+0x3de/0x18b0 [ 960.369212][ C1] __napi_poll+0xaa/0x330 [ 960.373674][ C1] net_rx_action+0x61d/0xf50 [ 960.378348][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 960.383527][ C1] handle_softirqs+0x226/0x860 [ 960.388341][ C1] ? do_softirq+0x77/0xd0 [ 960.392721][ C1] ? __inet6_bind+0x386/0xf30 [ 960.397509][ C1] do_softirq+0x77/0xd0 [ 960.401704][ C1] [ 960.404662][ C1] [ 960.407627][ C1] __local_bh_enable_ip+0x100/0x140 [ 960.412867][ C1] __inet6_bind+0x386/0xf30 [ 960.417521][ C1] kernel_bind+0x13e/0x1c0 [ 960.421969][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 960.427393][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 960.432392][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 960.438326][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 960.444011][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 960.450211][ C1] ? lock_acquire+0x115/0x350 [ 960.454943][ C1] rds_connect_worker+0x1d8/0x290 [ 960.460005][ C1] ? process_scheduled_works+0x97a/0x1630 [ 960.465769][ C1] process_scheduled_works+0xc3d/0x1630 [ 960.471394][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 960.477424][ C1] ? assign_work+0x3cf/0x5d0 [ 960.482063][ C1] worker_thread+0xa47/0xfb0 [ 960.486717][ C1] ? __kthread_parkme+0x71/0x1f0 [ 960.491727][ C1] kthread+0x38b/0x480 [ 960.495823][ C1] ? __pfx_worker_thread+0x10/0x10 [ 960.501063][ C1] ? __pfx_kthread+0x10/0x10 [ 960.505701][ C1] ret_from_fork+0x514/0xb70 [ 960.510320][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 960.515468][ C1] ? __switch_to+0xc89/0x1420 [ 960.520208][ C1] ? __pfx_kthread+0x10/0x10 [ 960.524847][ C1] ret_from_fork_asm+0x1a/0x30 [ 960.529672][ C1]