last executing test programs: 2.527662555s ago: executing program 0 (id=4155): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001a0001000000000000000000ac1414aa0000000000000000000000002001000000000069e09dccada5e6220100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000003c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000000000000000000"], 0xf0}}, 0x0) 2.38359719s ago: executing program 0 (id=4160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x9, 0x340d, 0xd}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="292c5ddcdcd2cae5b457e49a52859c11abd47366d459c47c936c291c27f931c5f86702855db60150fc7cc8b5fff6b8d0b79f96a9048e4e9bcf84ef3dde7831625f44717d22f3deca1ae3bdb695fdfd2c8581b4e33c253f1be54b8df43c38d269f92305ff0bae30da583d7dcf3f5dbf9737e9abfb1789dba4e8ec8ba0ff6ee4ed5ff93dd1c50b87f3db3a9f51b0903b08207130d1d0ca756f8a5c642749d1e3c6402205ad2ad7e175040340867d30aa80f3732e2927f15319dfb278c9bcdf48387b45baa431", 0xc5, 0x40000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x6}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x69, "56820860e57a898bed0156eb2f180bf765313d4d9603dd2332d16a46caaa75efb7bddf9a480ea66bf2bbe7d47c30a7ccfc950461a1446f55a4870ed40919f9bb2a22cd6a47fe43ad71e3c28900f50e036731eba20843ac6a1a85c9f640c38816c85157cf7cbcc6656f"}, &(0x7f0000000200)=0x71) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r2, 0x4) pselect6(0x40, &(0x7f0000000280)={0xf, 0x28835002, 0x9, 0xffffffffffffffff, 0x7, 0x100000001, 0x2, 0x6777}, &(0x7f00000002c0)={0x5, 0x7fffffffffffffff, 0x9, 0x413, 0xa00000000000000, 0x6, 0x7, 0x1a0}, &(0x7f0000000300)={0x7c0, 0x2, 0xaaf2, 0x8, 0x2, 0x26e, 0x4, 0x1000}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r2, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xf}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000540)='rdma.current\x00', 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000680)={r2, 0x1000, "b9b9270be2618e9a40d2c47ccc93a04d2407b951a6f6528a59054b838a99cf00c63667854dadfb4b935ef5ea8d34ce7b409d9a4623f11005dea6bb4af09dc84ae26ac4bfb87f9f50e0cb94dba2170f67aa59c7aad2e6cc6f3597c125562c05b13d53cb776bd804c055371c147fada2d70f10d05bfe611f40a2e21a4f2716fae111cba94575660ffc22354e86146e5e72c272d1d62361e83121bb42f6ad49dcc6d717a41b1e6799fdef92da60daa9880cd034396eab867a58501eeac5dec4408e8954ae6c19af88c4316f73dffbf9b3a6fec3af6d63dd6b79799c4e4c972b5a27f707618167f4eaeccb8ae35c876423b53ebc7e05823d36d76c3e61159a65f546c151a64e751b759cb5d962258c66f58858c52f7480160e5f4ffd20ccd45896fd1cfc9498bcb2559ab0dbcf2fe0824c8344bfe50b8e404a5ef73bbd6e879c05381c8c9110d5c0d9ce1169e74fe60fd0044243cb33da24964a24097e47c978725a41b3c742b7a19ba05cb83d8798f10c5fdee218d06ba3343b4e3c3a513ff0875017bd89427edf7dbf974ebce7e84ebcd92b6028f05df656130a9c1e3a767a7fc9868f4f878e6e2e29703eb28981d6fb4290f9984d07d4c56ae8c6c3f100d595660bc0ecd0e37639a4b5c1abb8b11969197ce8f5994b6e05c17cb42240f9fe6781f0c512073c9b44fc99a1e0502b1a5501e8509cc92556df159541c184a1e7c93d69e371c3bc52778c70db4ea89a6189dacf477c0123df803494774eb6c1e99322b0af903df8dff6b6468c9712bd196e39595ab80fd621fb87a7e1e58cee781951e718f39dd00964b9936e588b738010feec8ebc4dc786636eb7f4d69ee8866e89bd6a4ead9468bfd61de8854bdb69c59762fb046e380a2bf4a6a83cc72167f1d2954568657d66eec79a4427c8850d6cc7edb103ad338ee55c655398ad85b1989e43f020e170fc4737df9e77c05186e229234e3a226d5add63c0316409b6868739955c7003250c941aa205da439ea2aca476db1bea3202b7dc86cf11d2cfabfb7be4262d6aff5b6b27f6ca3a36ae577129f4c19c366925cc65b7dc978e9a07e02d198d6cbb31be54cea770a29b2d29f49a71a2511d4a36aac8aa5ba12c6ddbef132f7eb396b0aba3b2a307564ab0759091e55f1cf31b63596f5395d92e3e17416640bbdc1f03c10dc7118b3d6df1112d570d661e76db07e0d0f8f484f3f168c6d14f92dc32683d231848191a6204de0fc74eeddecfc4a2c70fd43db559a37266e293f793c0218ea4dcd075d71d496deb35927b51f7a6c8c5e60257b3af648b4688547fc1d96d0c5df6c64da37fbc55b5dae10f23fa0607476b405de64038c4e023dceb90f2c409fb391cfeb9fcfac2e5651cad2cdca75a48e357dc56193325f2c462001d99c9b0c14e2a43b7f9218b8427dc0d178b61566e76c31505b1b12d21f8b944492aa4974e3ca46a651864954a7026b1da748ff6293d946b61a270c390005a5e73349383db608955135246d7f56cfb2517ff04b66d2066c547504817f68057f766598f5f5ff31034e5044994182ab7dc850176e2d6a309d210df54bb4e973a7f29dac8529350ac469d1f547b439618cc930011e971b78f96cfdb4c9800bf76de2bd6aeba590e9c6c50727312abc03c4c066ae11d154cbdb502c69562bed34e851821010a8258545be3262f758a321711cc8960d17b14eb9ceb8b062adf734430bdb863c6de6454c5a9c2aafe5b431fe159c8fcf0fda1e258c6da64ec957bab8412aa429621e2277ea4dc269fede07566ad5128ae0d26a1c3f03dabba2ac817fcef8788a98d4e143bd5563793574446f466b78481fb0f6e08731b9eeccfdfcc97b500802411cb436eae00451d6707db7548a6374a6061309a28e3fe4152da92298f165a70dd64eba1fcf6a7ba41eb42f32dd07e5bc517cfa8c27f0c29c132b72398b6c0cbb17d14ab6e3e094955c03a8c9c7311731b3dab4d730afa448e7314cc6344acb59b14bfe6e18050dc2ae51e93d246390729ada3759b8f8ab578ec7c196b0a2befe526d7fb22f3d7c3bacc396cfcf329e1db7b4dd94ed48ef646d9c4f44434c684e9c32d05fff06a15f22d6022ff815b2bd5b3a20a1f4c3511e0ee3ab2a17b56a0cccd17ba7610484f2227f6fc7cb873087c2439da2d09686c28415f373f1b5e86a5d3734543ac9360950cd73bf6f58fcf14cdacfb7c0e1b18b7342fd6e62ac080bb170e28056dde8451eb8cf9735c5ac80768a89988e22637e1c907f90f1256f8998ba5e794496e83682ee7a9b4f16dc9e6a179f053ad23c8b2fa2f8b1dd167cd98698134c02615569ae7e3929827adea0845e8754ede019949af1eaec130f7ecd3a493bfa0b9e1f0b18a982bcb68fa19d502da07362a97475d81dd85ec61a699fa3ae1897ae424a3df2fc9021be2ed0293eef9e8da77ae265bf44b6347c446bc3287c2eaf8a34fd28c5fa658f4551d373c795afde04b886ad5680c8bf8ae3bb43a7120f37d935fe0d21d3a401c83986ced898319800b73072370ad0f1e7dc2f661d1801d005d7ef29e3f532cc0a0ecd99b90705fd149d772d3d93d94f35abc6e34699355be260d765bd615899fe21abd219d70d40369597400fd709fa4b6f27cab2ee64c76ae821318562fb44a38c1631f3b4e95253f04994b802ad6313c9afa17fbdd4f478b417a0cf8ee9642a25262dc0671f4505f13e435677e9892184bbeb54bb4977693fc69a025256754f87b574e033fbca29efb33ca43b4284226d8d87dc1a4d6fddee4d8339f750a556bbd6bb0cae2a309870de5d5975361b9dbad9e7fa79a6726e3c104e69581e8d7593861faded435f5f3e8de45a02b0a9ca00bb94cfc5f3b7d3128b350f4fbdfd132b66562dee7bb830749d7cd4e36a64b48727d93c484a60d57cf2dd45cdda902475f9e71aeabcff18f53c5cc633497618724d59cc8966f4f3b5fc9a033fc3c164e859121d773b3a2f337ee659589b604f583e78a3957e7e44bb97c9cf6f9ec5717be6fa1e5091456df1baa55788e6fcfa9bf663792809241b8a099a623bc21ccc10cafc8c3f6595d62a3f9ae3ccfd4c102230e7aeb2f77622fe464cfc260f2f4ede153275de53d799ccbde33a81e357aaaf015e3f3ebd40611216461b1ed6919aff0be79f6b1f78421a697d3622a93dcbd3855d432ffa3ca1edea8cdb829eb8866c5b6e4681ce846287c0bb305434219ce460b058e9e75efd7e39969ddcbf77297b9e1bc26039665157986342d79e84077cbb19f4367629fa7ab290796515189384a056c8cad5f1dbb7d2a2220bf246e490391253499a3734161df2473bb28ed7fbf604ff7c676bbd8a53431acbff5eb5103bf0341caf04701d40a0ba0d6a63a9d6270700e52d7f35753dcec4a05186a1a0d204022020971d4d1baeaa8a44f0fbc835af7a7f251db192b7473e3b8b07b882f41185c19b57f6bd9ffd0c3c56eb7dcbf44abebbf32e0bca4e462406104a9e7698c810eaa5cebfbafe335635c696d3b0e0f50318911130aab6de48c881fa6b3aa07b95745f882c69cb38fc1f96d352f1f155c46275003dd03140f4c51bc04d4257b0199ff927c43921d30d96d973a9526940f454a4113ea0aaddd1d050e1d4a7037a260fd01744aedac25a938cf53fde37c7b82e770e9ad8d80c05bf70a2d37d6caac06f4d342dfbf64bfa309967ea6aafe70fa698e965b1fa67f507d58c8f8380b5caf3244a8e48bf5282d8c9028a1b7659eebfd4ef890d9a159424721efad1af535f5b45f2fc2852739c9f4085fc9b87fceebf1f499c4999e1d1e3f05d6349220238d17428c3ae2cba86f20ceff011a51188c0fbba8b7593f955a7aca643ac34a7e03d2a47d9a3841db5b2cb91c68560a718a22013b07a5055bc3d22c132da245a2d1c3cac9b4a35190a1ad54e0b26273cbb0b0a35b26c04aef5e96ba6f583d9a008bbd897fe842d2d66f3f46a9e6274cd9e7d6782f4721c5c54f0ee7422baa0988fb195053354f6c5eca861fbe0d09ea2d535781221be1c00f503c148c8b53b7af7a26b28fc8555b39ea468070f3edba32c9ef3bfcbfea736903e52265c4b2b08c0e6f596579f488844b47eff082d9f43260459859216ac023a215cc08f45356a9054d9df6a3b9e037aa94d15939b38682e254d21badeda748f8ee6351635bdeb3678f6435faa4be11d9462c849595e117e904d31a326f147867650b2002c11e93e37d57bc7cc265e06c01b467c6aa3359d0dac5fcd177258be07396d42988962c749494d50dc290ad0012e2e896879aed95229fe3f5281635485129dd0ff37bcfe465300f3526900eb5cd4e962f9de885bfbd9e4624cca4133874e82d1373a95a8343c273df2b562822b87c22513bfa3b110c2d5afea334f9e7e92cd26815c241734cda48bece718208bd7243aca1affed6ca2a9092dc65a78ba74b54966fef54325c6b7f8edc1a4cd79a20b78b59c2f5d74f83447026d1a6895a653960b97b552f62bae246ce906a5b7168caec70ced99076374a83247a3c2eb4c2083004608d76b697b1db11ad4b518e6c0afb61cbd81df625c055a1230e8e310f24bda1f2904a2dadb7a628974104f88dadd7685f09903176e7961e1ba8278ef06282bbdf290d300a8881f9b0ee80e9d3608ca956821e682d596fabdfaeec05e8177ab6aa2705d7afdac6c1d0865517502bf8600c08df9f0ee86874bbeb89803188597a1cec57643b387e66a7003ff19050831ee5347d847fc919e48619fb4ecca9c596decbffdcd6e2fe5034d5a63ccadf35dbe173f117a7010809bed019c32dcb8046a13bbb604a12d365b3d5e6d151327ce248d62aab8cb2a054a2695bbedd4c6195e2bd0f27a3b893dd859c2ca81873424ae6cfacb184d5c407dde1a76ffef41ea31f49004305ffa0df5d6582ae25b6f5eb37297cb2b2569c4f7bb03073f431bcabeed947765c9fb4de256f557d2191feb2d352d6e287cf22674b3957d10181002e1165562d2819a17755c53cf8e82a15083dc27de04cb7752841a8dde33a36bb6b5cbe11839e28fd2ebcb9f5198a7eac5cce942cd8f1e149da3938eb603753ec16f3ef85365c8aaace5528ec3ee7f7338dd3ecc61d600dafa4f28874d6c5bad81a4a59c8125a8c8ba991872cde3762305f8473ee9fc0cb0a14857c26d01ad9d3b0abc5d92126dd279918739d67595d6969cc61f85aa66fdf7878eb49cffe64a5253dcc1aec1e6bddf77cc422d7e12e885cd1f3ca3d82a15cc7d66d86597b8188058b5a1b87f943a33589e59e1ab3ab95cea2f6142bd397db0686e80cce03bb25e53f6986e7314133b69b524b512b808a7fa1c529cabaccc68684afc9bbb7814a790703b490c5cd9db3d1a6abbf9cedf2cf07a2db8e78ab3d1bb38479ff01182e7595b478149227c9227392374aed3698864379b53743f4c9213c4bea053d481f9eec18c2d990980ae11c3e30790d0ebb4c208421fb1ef2a9c5767db6dca069b313b6e11dd1a5e10660937271473752632f9c69c2f66cca376b587e8c15f5b219db87894a9e79878cdb9adb9377fb123adfb88a65e70a8e52e384a1f3cfefb3d7855523c5349225d58778b7dcda1f82828a59bb5199b6384f64117813ee80a6c56628d0d0a01f80f2909c7da95038b05c6a787d71c388024d6105a2a9cce634f237095e565f3ea6fc8edb6db95d00809e6ebc69151299d295d620f711289e8d156c3cb1edcc834da94b22b157e12efacc3148b4b5396589d57a947916aab4ba91121808e5e08d188a9b8035339fb5f703669f12672a6b2e7644d3a406"}, &(0x7f00000016c0)=0x1008) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000001700)=r6, 0x4) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000001740)={'tunl0\x00', 0x5, 0x10000}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), r3) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, &(0x7f0000001880)=""/136, &(0x7f0000001940)=0x88) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001980)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000019c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000001a00)=r7, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001b00)={'sit0\x00', &(0x7f0000001a40)={'erspan0\x00', 0x0, 0x20, 0x7, 0xb8d, 0x8, {{0x1f, 0x4, 0x1, 0x7, 0x7c, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x27, [@multicast2, @private=0xa010102, @local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @generic={0x7, 0x10, "d0fcc733ac1feedd44708c0529f5"}, @generic={0x86, 0x3, '5'}, @end, @timestamp_addr={0x44, 0x24, 0xef, 0x1, 0x2, [{@local, 0x4}, {@multicast2, 0x2}, {@multicast1}, {@remote, 0x4}]}, @ssrr={0x89, 0xf, 0x1a, [@remote, @dev={0xac, 0x14, 0x14, 0x3c}, @remote]}]}}}}}) setsockopt$inet6_mreq(r1, 0x29, 0xf, &(0x7f0000001b40)={@mcast1, r9}, 0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001b80)={r8, 0x7d6}, &(0x7f0000001bc0)=0x8) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200400d1}, 0x4004040) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001d00)) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d80), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, r10, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x801) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r3) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x54, r11, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xde89}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040090}, 0x4008818) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) 2.38212129s ago: executing program 1 (id=4161): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040600}, 0xc, &(0x7f0000002100)={&(0x7f0000002180)={{0x14}, [@NFT_MSG_NEWRULE={0x2694, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x8c, 0x7, 0x1, 0x0, "bc4292cede68c7d702901c5c3cdf43606bc8daa424aec16aebca990d4e1336b06a0b83202fd77ee11c61be5bcd6823f1ffe78565c879fc8116773275b4ebf353b51d08ab755b5901d55413c87523110a78b1857c66dcb76233796c8755015780e95bc2f5cd7de3976e7b24393f04025604f3a1113236118f8581d66be91cffbf198526d033752ea5"}, @NFTA_RULE_EXPRESSIONS={0x25d0, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0x24b0, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24a4, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0x122c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "3af37475ecdd95c132efa4c4448ab6eca6e3be66b6d85866cd2eea41f4a548d239a7d0b835c1f45ba730f0bcdaeb7f41c19c38cdc0759aac2365d701f40ea60519750fae449abf9dd1714d61f58ca7bb30b0298ed15260c151"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "825744a18e1175fee6be1c3d57d92b9e404b1e9356e884b284e6739dda979b03f0e47f7a8bcf2eef6933efe19e5c223094dd891fbfac973796367f4e7f6e894467349d73ad209923d03db1a7a7842cbaccfd475cb8a272cc831fa72bf09c88803926805acf7e3b8738667dd81a90440b08cb5cb5fbaa49d5481d3f07cda76e863a7cd5333741817376ba0d3ec37cc9ab953949e4b701553ba1f84d5ab2aa3336771645d8f1bc5985457f28ab48117a51796f38b5d1c9dc9a7df58e2eae0457051ffa8e48fe7eebf35f10d87cdb9197ef20d5b2b5555cea5fd4dc53b40b5b977493bf68205ee353eed1fc03693395c880092b18e19460dd416986b0984d95716f054b4c8167b530aaa2ef7a6c87d596f6e0012909766d4fe7a7bdc0c0320d8c7f8254287745aaa9e56f7ec870779d4d31a27667e650facc1805dd8b9dc968b4b782c5b323bb25c3f511e92d11a06edc10f364ca08343c4b286f6e47b634fc49e80c1df53eef25b0e0c906308f1fa223d7373884dafe6d6d03caf1faf29d1b16c8d376774d09cd3367c6a2280563bfdd632c0ad52f6158b0058102e1bb6d2e7f098eb3198883a43e4924d1147b98ffc9405ec5be16b93915dcdf7f729c2035ef0f13ab5edc791653928724d84c9464ddb06bec297889f22334c598b7a93511538c4ac705a37230486aa196788b82ccd13121b6253f2252f2faf3ea711217772f881ddb9d654389ec85fd9937da261fe8d23157c430747dcfcd677f78af7a899eb7ae2f9d1c7e651242cfdecaa1c3dbcfbd1ec4107d7cd46d73386982311d104f32583bf251520383e03afe359640fcb750732e1559199cb4a216ede79801c4fb5f683805581aa93b32e78cab9e8f609a89332bb04b2774d835c73ca40b27bba513bbb6b210a92c5cd736bad2994fbf4caaa55d9636faa005ca9e46f1a774ed044598ca7d8350fb7c804332aa883f99e94c07d50fd22af570c269cbfc051720800266de1f8e95f4c04d435c578c2d6541f7db70615a87c3eb9cb0c62ba5f302eb182d402061ba0a659aeed3d77b26ffbce8c694acbda4c76ce962eff02b36b6024848668f16fb7cd837791b96ba2491c9a9f856916e2e1f246a7a8bc7e5df7e2408cdbf9fc3ae60702ede40fb54411178bf8d61e5f37969c5e71e2393d5fd5b50637d86e56e60cfc23f6f3bd3b6c6e690595d701d87b12f45ed67eb96832cb26bbd9cc0af7c0f4946579291596f6e98badb6091417cc66991e2efa84dddab1cdf1dde5ca2f6f6d05947b48fac1ca974ec488a239c030b754562b4c2579c020477ce705980515cbd9616b3cb57921551fdf8a962d3b2bf9c24ecee8ae9df858882f569fc14fff8dbd639c99a5a1ca73bf7b73bebb91efb02f78b3f3d4ff5a7432d146d52bd6a28bb2bb13ed8cc8e65d1661822027081ba6a10e79dd08e45a9a5084b9cdf1d2f61e31190ba766a882bfff6610e067d48501159b7b6ebb8b7ef14a1dc5457320a8481b2ac8e53d85c4abc2e90f4f73729b5d19536c796ea3165959ec38693045823c1d3667d97ae16a1ce8c7119a3c507c153c9b529e14eea2df66fae34fbd560109db442879ec5bda215849c1561f024fade17aed60a41d3f80c4f690bfeaec0e1d9ac60c1b94910b97bdafee1efd91fca634392b137c0ca2cf9a744837c74ef068e568061e9599898ba54eafc85b399ed105fad039b64595711b06630afbaed5bface0b799a29793f1f12b62119483b73d0119e766ea582d74c4eb36deefc624b58d92e4611d79eb5f4edd3710389b80b2d85caf73080407b6917fee39f85c07d36eb531a4758cedf92f11020acb24825d2a57a5bb77b82a9ab025c402e95123c115e9c130e77e51c300b7d4db6b1bace701d6272b9f9cc5e36d45bd01458f1341b6c830a9f111030227e64573350a91f8fab35556ec3e5cca417d5d8a9b9c183998a43d1c09b737cf69f6704c669038035072fce4e83a43bc71d515bb4249e856b0cf5efd25e82e570cbddcbf1f12829a6c1cb84558f466b0adf5884c65d3aef8ca2b3ce84ed87b1bc5205b5a104251e4b7bbd6bf86d854a0377f0abac02c2e23467f13e5d0ad2f112ed11f7712b8156edddbdb4c678d5951f3cf113c40f3e0ccd18c52d238a4ff7c394d9d60af107d890bb8df09eadd9a22cc25d2df254e575a14339964fc395917961c060b651455da122dade0326de5761885b0c34abaa23fc0b6f15b6d323bda0633d48f94c9114349d9dd962041f28494579d00b21d975fa215c3b3e475f9dc44ef75e4196125c4402095399e4bab6396d1a447563b28c311f66acc0f7eee4c20625db55f10ad3dc50412e89778b871dd3f4be37d1ee8532e19683a6abce616a57124893deda701aa1d48bd903c31783345270cf4915eafd0c3e62336b3114f87cf8fb4ace1e8db942cc941c6e1a7d216a87008a0215c3d38e025b31b5109ace9f8d519bd1fca0fae33dfb7f3102df417bf80fa6320c5a024e9f77fdd63151701d1ee0ede3d9a24f5fc9fceeedb6489e0818564bfaf8962e101c7749364694f717bfe3e08b42f6d54e47d4faa81aa742df92701ba3ad402bad9b74087c65fd6918aa7455701f7b359a82ddba38aa6f0c54d12c445c97e9ee62e3afb101b914161db77c59c32d07fbc4198dbb7fc3c8b4c33296e402144848981d50ac67c34da8498ec6f6bd898432ac7b1d2842a09ae61f465470672e1b31786350a66e94bc929b21aa70f19f5ea395544f7c72090436c62827a18512f5dc9eac739cea34e595e88b86c17869a5953262ad251837d52ccd54a2b50c52b818fc138d2f90ea111c896f4d6a8e824acb035c51dfd6f1d7b720fb42763a5667adefd20f5a021773ab1e46ea01ce5bb31bcdd2f40744413b30c8a2e53e27d26645022d4de9759f739aa3bdb95a71184412ec7c15e4cf80490ce8c26ce5a36e765dc68da4dfcd992c9453d7049b9cfa9a1de96161ecde12843a5b2b6e84947ced93fac7a56809306e04e52adc1e4c3528a57b52815d8ba4e6d6744aa9d13f39ce4a345a685151113d2a7524e8e8295fb66b227620768abe25d50356c372a0e18590a2c131f04bff41fd246740a0017c62b9cf52c654c697dd010b6b2ccc4a67998000d09297db10ce532d246abdb3e156f8e5f1455757a16d53b02c00e974059ac5fbdf22a414fcfadc51a9aa93c0df2f08592b9d05ba1708e51148a61e5814b52b618603fcad375c2fc9698e2050aa7009827bac131e199aa7fd8f163317b858c05a30056038593ab829c4edb35db58ba811974abc04f3c1de21a348bb6f35ecd21547adcbf5694fe9993a5e3de14468599bc20cd6e1acdba88c637e36a8f7fce8bd605f381e2f83a2583c18525e37cc4d5cf7b6931f52ce771d3b76d616e26438c2f39cb8a31f9bfd96572b3414350e1d920854106bf8531dbce53f8c966a8a6407977f9ddc88283d7f78ac33921b161f13807c6a9bba0b95ce50ac9c38eb6bc49c7f04c70edaadfbb988c5f0f951625d998e8c125ba4c49285c4096cd2fc2aef16369ead1ba549b7e17622be72f937464018076545aee31a22a61a12c2dc11a86ca9d20c9976aaa406bbb997beb7b84a80b0037606b26e2357f10a133246870eb5f518974703af833384518f9cbc4e8b2207561d970d85080ccb79fa0615cd88bc9fc6daa7150f4a4d6f0ed73eb900f02f672783bdcd2170e4dbb0989448f2582cab1d0fed5557faee77644d915b13cabbb267a37a5a5f4b443d7b4025c47ccf7baae02c3292ec7235d795e7ee5af450b5d7d86b38ec2c84c0023ccea38a93d5ab36e722aa978ca6f5c180dc86318774c669835db061c28469eefc40af80af10e7b8e8859a09bff1c0aa6ff8d26091e6171edc906bf4b12145635a0429c89c96b802dfdd2398cf39b66ead33cc88684c6636ac296b407a4d0ea4e9c39ff88ad9077209526587ab088263461c8e2495e1fa32fe99a37778b60f338703ff5737b91b1248de86d5059c47c2afbef4893f6d00fa4d7038b4575faf346ec6943781496a45ac6a1a92ead7b1b65f39d9351e27b359a481f2b0fb2192f38d66ebf3e562763363d5bb19fcebda72fc0143055274d4d9be3b2888fd558905aa7c06ea1b6dfac012a0fdb412890f32f1d8f6b16c8e66c567e51ff3700e167d93051cdb2d0a9863a3cdd588d6c5bf1e401e120be42e98b80cc9ce853f190a73f729d4821945d425a1a28c33031ac082405a777ccd0c089d4b07d86981dd2c368085db369953d9b4d67faf07f2487970976e3a38e52e9f0d134ad676b68c1ff6fa439d57ec6fe3e5d489b1947efac5bad87cdfb5179d5a84dda40d701c7a582eff7f08f9e83260fff90c745172323fd523815561b5d147a725a3834b678b61512e81bb1e7855a39fa76815826c38d6d2f2e0bfcc7dc26272abf118feac0c7dccc82116ebdd8bd185663df89c5402dc4b8b4b1da43e651379a96a872a3c54dce4852e47ca140769ec71053fd80b31d9db94473854763e7550deaaad82bc1f54892cf8eec439282d2da00efb2f3ebe7d2455d1be1dcb5c71bfe7609af7f8baa16fb7d467056411d9b5c7fa1f267f2e906fc18985e74dd4f73cc91cfcec7e48583cc2661ff44b48b6e8c97e9ac4dbb6b4c21e6fe0d0864e2bb2200f6cdc8bb24ab53f3af9ce0d9065872fbee2621dab4d9fd3807425cbb2d9674284ea7418e7e9c2fb87fc8ec6fe55420a77adcd61dd25c827d1df99e000503d8f65002573b79599da4d49f2f86dd42785483b52851df90e84fa0a236bde8c50c813a98fcf7addbf9592d949a685356bc41078c4062e6fc4e85745abcdd8bdcf1e09b471526435644f8aa3555d59785b582f3f8dc684168ba37ab887371402b75ca9ba9637bb6548a1297eba9ee18421baf93c98596ed5b3c3062d0deced82d1ae92bef650d1b20b8a40c5a47f4290d594a27996e2d22d9d71fadab97938ea98f0ef821c7c09333bebc773a154479509dcc6d10e758e7a4a14b9178b82b10e1dcee8720ad2f13447c73a4b0dda1eb1ce7ff59743a14ad18bd45246defca6487251fe44227c271e44c9a7038e6a9fd87a0acfb7ed8fd96a291d7303c99ace9ca149e2e12eaa8e14a54d020878edbab427bd3f6cf26dec282c0814852e20977ae7725bbef1dea414f3522251f6934fc460d97aa7288a9535b53c7548f0e60009120fd280953f5f5d6f43f1512edd2ed7b7dc925a27a3913959e6a5ec5826a5019efedc7ba71827d6450d5e9931dcdbb4a91f712c26ce0d8d582961f6fc7d00532f13d3f7e9a4d73a9ed5d9f10b98bd72e80fa72e12f82d1d3d56a8e4030a92bc393f1bcdb6ebbfb7b3ccb8c5eec0e2245b9d30c78d4d56e5c882241ceae0ca9874b38a498e2eca18a742037d51b4afdeae2cc918b1c9501689198658166a4bdd982e19ec90fd42ba885f3b57aaefd65b106c7025c4500d97e0cd4e8e506361dca29706bc3636e7152c903c674e1151b7651fe3a6bce55f5033152dd38ec7196cd4362a1bf8a5b8a2686702e293bf861faaa555bedc9d2c44e774c7471da96cb706e5c3eec0107357303c38030eee3c43138abd9fe27364278441228a322f2e6b671cdcb8cede382b13a72f97e4c6facc87e63a2f00c511365a4017820510682b7dbdc901fca1accd23eb02aa9c82b26b18408c98fd17149b23f61b85bfe3568d91f2c31881772e926dc8f9fd425d83ed15697fa8933b024a5b2e853ffd03c29a810557c6ff48b39e87f200debacb64eb536df022a3fc037edcad7010693e37818d41ebbf68827b5ba1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "d0e3da6e4cffee8da1ce844882a741efe398f96bb968681531c5b0322ae6a8c8e900206f854e92ee79ae19a7186e603badac79e7eccace6dbd43764376baaee0df3908f970a8ea773a04bc700d8e7755b1bc82e7c1d69db17d997a9d74a340019edd8add8cf56beb4a7188097487499b78ece35528a688cf26ba076534282d5eb87b41e23fe2a52c0ea4d905887c920e1654d4c905f765f18c91d661099833f2919d8bc47aeac122d75c7584de14484963edbb0d69244deabc13b0887812b45224e75f21ecf1e426c1bb114757bac7b61cd8b76cb9f3327e950cd60cc7e8e8fd5cba1f94ff2765d9c77a37a253b69f7ba927b120"}]}, @NFTA_CMP_DATA={0x148, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2f, 0x1, "c6e0bbe6f9ec26f1124fc141c917fd2fabd73b805234cb10704b41348fee4aa41bd1c72907c87a5d7e08c1"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x98, 0x1, "807bf8c70a1b4213cf483da2a3fa259991865073ba8af969e4ec5d54f1f96ca7b2a2866e6ea0f6e6177fda2ecb2377d64fa89b99ec39f107e7e3d3236a69561ab8ea6d389e97eb19184b5de5444c051e5542289d1b6bd7660be442fb3aadb6eb36d331efd0319ae0487ed236494a04a6308ecbc1547f023f2fab9df03c2104b92b58c64c0b1d18c44ee83c439351efe96b338808"}]}, @NFTA_CMP_DATA={0x1124, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "45ffb469012f2fe696be391bd1d25668deb69b994f8b6ef5cf7077836987bef906ee4d1ded9d5b41885fc5f7ec01bfbf703822217cd8e9515a1a7246dd025d7bc55a5dcb56721d3a6523493d506171d3eebe01853a935593ab9a1e3de529f9dc180482e444019876406c04d9b15227da68b4a9437455d0c58398609ca473fb094dedd56d35ecc81718448ebab472294e562e6c4a9a5061652d5c877aa322a436aca6b14b2c372abc732bc9041a51e219dac8b4524009e0e50e3c47b595eb68b9fd903100941e4b6f0a4ff4f334b518e1656b6e507bf756228209d191b3cc50c2fa05e052d60e22527f58a50a425e3f146ea4b679"}]}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_USERDATA={0x8, 0xd, 0x1, 0x0, "08d06123"}]}, @NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x80000004}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x9c6cce0fc593710d}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2788}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000700000000000000feffffffff7f400002000000000000080180000001000000010006010000000044000500fc000000000000000000000000000001000000003c00000002000000ff0700000000000000000000000000000600000004"], 0xfc}}, 0x0) socket(0xa, 0x3, 0x1) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000a80)={&(0x7f00000000c0)=0x6, 0x0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000a40)}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x8020) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000004060500210000000000001b01000002"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 2.234436725s ago: executing program 1 (id=4167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r1, 0x0, 0x12, 0x0, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000200)={0x29, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e22, 0x2, 'sed\x00', 0x4, 0x1, 0x2}, 0x2c) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491717916deb4", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) socket$inet6(0xa, 0x80000, 0x8200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xd}, 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.063329036s ago: executing program 1 (id=4172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x814) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0xc045}, 0x0) 2.046146975s ago: executing program 3 (id=4174): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r0, 0x0, 0x53, 0x0, &(0x7f0000002e40)=0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.02271659s ago: executing program 1 (id=4175): socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x7ffe, 0x80) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa800135c9734f8f36d524bc987f6bac30f41007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff07000000ff", 0x58}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r5, 0xa1) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) shutdown(r5, 0x1) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000080), 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r1, r0, 0x0, 0xf03a0005) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x4020940d, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.967986907s ago: executing program 3 (id=4176): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/197, 0xbf}, {&(0x7f0000000000)=""/91, 0x5b}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x4000000000001ec, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/197, 0xbf}, {&(0x7f0000000000)=""/91, 0x5b}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x4000000000001ec, 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) (async) 1.960754382s ago: executing program 2 (id=4178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000004000000040000200900000000000000166442df58c927eec0630d489c5d74da173bc6031035555184ffb4b1b34a96e8a31785c83e2b4ea90b1890432eef136b3be90000d619333b4de5a96c81d75949129647f9e228e7e275e15335f2556a4cb54602fdb78d962016a49cb2c2d9f338279b9be4781c2e328d04b126d5f01592901d0b3c46f4b49c19c59e80d8f6b8d1e88e96b7023cf700d1f4bf0d35bad567cf0bb194933d6064884d81c95582233c8eda40d8146f6e7f9a9412fee08365a745fb85f55ab5a5565006050103ac93fe2bac9a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x6, 0x0}, 0x8) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0100002e00010000000000fcdbdf250b"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', r6, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x2a, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xad}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r13, 0x0, 0x0, 0x800) 1.5836782s ago: executing program 4 (id=4180): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x70bd27, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x60}}, @encap={0x1c, 0x4, {0x0, 0x1}}]}, 0x158}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd6000000500140600fc000000000000000000000000000000ff10000000000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="361e82f78c12a191"], 0x0) 1.492109494s ago: executing program 0 (id=4181): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e1e, 0x5, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) 1.440932503s ago: executing program 4 (id=4182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@getsa={0x50, 0x12, 0x418, 0x70bd2a, 0x25dfdbff, {@in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4d6, 0x2, 0x32}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x36}, @in=@loopback, 0xa, 0x9, 0x40}}]}, 0x50}}, 0x1000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 1.267629026s ago: executing program 0 (id=4183): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$nl_generic(r5, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x100, 0x1a, 0x200, 0x70bd2b, 0x25dfdbff, {0x7}, [@nested={0xcc, 0x73, 0x0, 0x1, [@nested={0x4, 0x15a}, @typed={0x4, 0x7d}, @generic="6b2191dcca8a49c322b54f524888aba36d01ec9f73cec469a145643fe168531a89537e4870fb3ec66bed22875f46591163ec5c9170d627a9d7700d1d1fb553ac89f3ca5dac5cdcadaa292034456aa68cc9b9832a540797d0dbb6916ee32760c7bbe313a29aa462a160ac971d264ce8a16bd646cd5853ded0e83ef89e522a11e750f04491aa1f9ebcc6a09eeaeada895f2d3c1cabe3cfe5864fbbe3a0b93f9c51b30944d701a2e22ae4a8653a3136c8fff52d0c78a50d0536c084b4986d60ff72"]}, @typed={0xb, 0x142, 0x0, 0x0, @binary="0234bf48b43545"}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x147, 0x0, 0x0, @str='nl80211\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000080}, 0x4400) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x38, r3, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x38}}, 0x20000000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01025ebcd80cc4991808d5db11bfff667d0000000000000000000700000008000300903cc6930b", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x25c, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x2c}}}}, [@NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, {0x18, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x10001}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x976}, @NL80211_ATTR_KEYS={0x1d0, 0x51, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "bf4dc88e7e0e7f121464981a9b"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "29377ce0c5"}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xf, 0x4, "74d7ad4706e63d22d63a26"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "81147c30071a5d96ee65d299ff"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f2c021b2f6"}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "64f87079aea239962035c6b43a"}, @NL80211_KEY_SEQ={0xb, 0x4, "30ac2a04e86be8"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6ed0fc12ab"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "fb8bfa5be3"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c1c366c2c2"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c4c66fd4d7"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4ed98d26d9c6a7fe5df4bbad9f"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f5e6eb91fe"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x8, 0x3, 0x4, 0xb}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x100000, {0xfffa, 0xfff, 0x18f1, 0x1}}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004080) 1.262745107s ago: executing program 4 (id=4184): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240df000500000000000004000000000000000000000067e57847c80000000000"], 0x48) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000081c0)={0x0, 0x0, &(0x7f0000008180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x46}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) pipe(&(0x7f0000000380)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001500000127bd7080fedbdf2502800900", @ANYRES32=r1, @ANYBLOB="14000600000000000400000003000000f20000001400060081000000060000000b000000080000000800090003000000"], 0x48}}, 0x0) 1.204044746s ago: executing program 2 (id=4185): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@struct={0x6, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f00000000c0)=""/2, 0x44, 0x2, 0x1}, 0x20) 1.007641723s ago: executing program 1 (id=4186): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x3, @mcast1, 0xfffffffe}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000340)="8253a2d986e73eb59e479f8c35184343e602b88ece47d0c2897e29ea70108dccd1f1b7bd3c661638218ce863a03e2c7c9af28f0dbd581be91e706b7dd3c42219", 0x40}, {&(0x7f0000000380)="bc0cce58521c641bb89f73f1ea2908cb9052298692e0f746dad2c0c660645915e90a8a23813dcd397d7b76eaae283d597808dc1be8b1e1ebda02971ca5e956adb1cef3cfc7398bb84446eeaaf1c6f30739d2235f354b630ec14b51eae5e46d767efc5ed2f3493aa76ee05e910f873cad0874b5b10178198f86ed0dd4829daecd696db8e51fa89d1314a1c4b1476594a9f92d66db8c464a9acba46d9cbc307d02258c976f3876cad3b3d8174b332671064ffa2803", 0xb4}, {&(0x7f0000000680)="fa6e11b6ed67a8a5cff3f1b216de811ee5d66296842bde22d54d429693dd6cf085c2dffb9ba83be72c23a35d66504fe2d987463d92c9abfe44c5ebf1903bc4603bfc3dec1e51b51e8a197e0881af14deb4065e4cc485e12bc668c3eb21b1ba791597495c08d957bedcbf92254db76d6d3ef55f7e6cc4ed31be077d0afede467c6831b7cb62e6b8be946db51604faba20aee1ab6978955ddf0d1db28e5736873845c62bd08a3f4dbfd9205e8b0f0e71140a09c5e5f13b8c79706eb46a73f3c3defe3e61cfff4e40a4910339a863a8bbdb564aed9ac16c2e3c6c228b674a833dfbd5599a29fbe20784c6973a5a0ab79fe05f6d", 0xf2}, {&(0x7f0000000780)}], 0x4, &(0x7f0000000800)=[@init={0x18, 0x84, 0x0, {0x10, 0x4, 0x0, 0x3}}], 0x18, 0x4000001}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) close(0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000054) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x57, 0x2, 0x2, 0x7e, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, 0x7800, 0x7, 0x9, 0x5}}) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x42800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f00000005c0)={'erspan0\x00', r3, 0x20, 0x8000, 0x0, 0x7, {{0x28, 0x4, 0x0, 0x13, 0xa0, 0x20, 0x0, 0x6b, 0x2f, 0x0, @empty=0x2f, @remote, {[@generic={0x82, 0xe, "4706aa6aaa60f0181c245db4"}, @ssrr={0x89, 0x17, 0x68, [@dev={0xac, 0x14, 0x14, 0x38}, @local, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101, @multicast2]}, @timestamp={0x44, 0x18, 0x70, 0x0, 0x5, [0x3344, 0x4, 0x7, 0x9, 0x2]}, @generic={0x83, 0xc, "163197436846878842ee"}, @timestamp={0x44, 0x4, 0xda, 0x0, 0x7}, @timestamp_prespec={0x44, 0x3c, 0xf1, 0x3, 0x3, [{@remote, 0x445}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x249f932e}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x26}}]}]}}}}}) 1.007405914s ago: executing program 0 (id=4187): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 1.001359169s ago: executing program 2 (id=4188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0x3253, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a0400ac00128009000100766c616e000000009c000280060001000400000004000380400004800c000100080000002b4a00000c000100fc0fabb2400000000c00010003001400040000000c00010066000000800000000c000100080000000e0000004c0003800c00010000000000530a00000c00010006000000ff0f00000c00010000000080ff0f00000c00010000000000050000000c00010006000000000000000c000100fbffffff2103000008000500", @ANYRES32=r5], 0xd4}}, 0x8000002) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0xf9b, 0x4) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x4, 0x6b3, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0x10) listen(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r8 = socket(0x8, 0x2, 0xfffd) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 878.485586ms ago: executing program 3 (id=4189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) (async, rerun: 32) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18}], 0x18}, 0x2c000044) (async, rerun: 32) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x7}}}, 0x24}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], 0x0}, 0x94) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="001d000000000000000000dd0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x96) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b91532cc9824d40f2b9e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) 639.707483ms ago: executing program 4 (id=4190): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r0, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18201, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'bridge_slave_1\x00', @broadcast}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000002400), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f00000025c0)={0x20, r5, 0xa01, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4805}, 0x4000080) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xe}}], 0x18}}], 0x1, 0x40000000) 586.421671ms ago: executing program 1 (id=4191): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fa056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160040fa0a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fa056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160040fa0a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r7, 0x40786e88, &(0x7f0000000440)={{&(0x7f0000000100)=[{0x4, 0x8, 0x8, {0xd84, 0xfffffffffffff800}, 0x8, 0x9, 0x3}, {0x7, 0x5, 0xbc, {0x10000, 0x3}, 0x0, 0x1, 0x81}, {0xd, 0x5, 0x0, {0x2, 0x280000000}, 0x7, 0x1}, {0x77c6dfac, 0x7fff, 0x4, {0x3, 0x1ff}, 0x80000000, 0x58f6, 0xfff}], 0x4, 0x40, 0x8, 0x1ff}, {&(0x7f0000000200)=[{0x0, 0x5}, {0x8, 0x111}, {0xf03, 0x7}, {0x10001, 0xf0cd}, {0x3, 0x5}, {0x7, 0xfffffffffffffffb}, {0x7, 0x8000000000000000}], 0x7, 0x10, 0x4, 0x10001}, {&(0x7f0000000280), 0x0, 0x8, 0x2, 0x7}, {&(0x7f00000002c0)=[{0x5, 0x8, 0x9, 0xffffffff, 0x5}, {0xcb70, 0x100000000, 0x2, 0xdac, 0x7}, {0x5, 0x37e0, 0x6, 0x0, 0x73b1}, {0x77, 0x713, 0x7, 0x8cff, 0x5}, {0x2, 0x800, 0x15, 0xb2, 0x4}, {0x40, 0x0, 0x4, 0xd1a8, 0x9}], 0x6, 0x28, 0x7, 0x3}, {&(0x7f00000003c0)=[0x27d8, 0xd5, 0x7ec5, 0x8, 0xffff, 0x6, 0x3, 0x5, 0x8], 0x9, 0x8, 0x8, 0x2}}) 536.360067ms ago: executing program 0 (id=4192): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0xffffffffffffffff, 0x1c}}, 0x20) mmap(&(0x7f000036c000/0x3000)=nil, 0x3000, 0x3, 0x8031, r0, 0xfffff000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b3300000000000000001500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000024001d80200000801c006e0018130300050004000100000009000200059f1d233d000000"], 0x4c}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000280), &(0x7f00000003c0)=r6}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r10, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 431.267122ms ago: executing program 3 (id=4193): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000000) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) (async) r0 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000080)="28404f22426104ebbddb8f898d5d988d8477ae088be9ae83f60436ce743fc8c1e251bc7294f198b7b21c79de2f8831432dc411fc920544", 0x37, 0x48011, &(0x7f00000000c0)={0xa, 0x4e20, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) (async) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045"], 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="c74b8648d71119fdad7b79de35000000180401002dbd700068dbdf250a000000ffdffe050004000008000400", @ANYRES32=r5, @ANYBLOB="06001500030000000c0016800500090001000000"], 0x38}}, 0x40000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) syz_emit_ethernet(0x87a2f, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000000002) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2b, 0x800, 0x7) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 430.749074ms ago: executing program 4 (id=4194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018180000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x2e, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbe278c8b9b5b7849922080020fffd000000119078e0000001e000000180000d000000000000000001"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4000000010003e79c25db2c0f5a8ffff7a0000000f0aba2ecb4941554275a8bde4e9c2710d98db932c817bd2156aa5f35195fe1b54b764d59df6f5db2830bb850ca5be9332de4131a1010fbe4b2ba23215c333e033f4f4aec3113f1c5bb3b0238323a5fd6d5ad51de6ea57353683a98e19b481874f9826", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002300fbffffffffffffff"], 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005", @ANYRES16=r5, @ANYRESOCT=0x0], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x40, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x60, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xb}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x34, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x3, 0x2a6, 0x3bb8, 0x90}}, @TCA_CBS_PARMS={0x18, 0x1, {0xc5, '\x00', 0x6, 0x4, 0x1ff, 0xffff639a}}, @TCA_CBS_PARMS={0x0, 0x1, {0x2f, '\x00', 0x5, 0x4, 0x4, 0x9}}]}}]}, 0x60}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="5081314cb29f56e10000000000000000000000000000fffffff70000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@union={0x6, 0x4, 0x0, 0x5, 0x0, 0x1, [{0xc, 0x1}, {0x1, 0x3, 0x3}, {0xb, 0x4, 0x5}, {0xd, 0x2, 0x5}]}, @func={0xb, 0x0, 0x0, 0xc, 0x3}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x20]}}, &(0x7f0000000b40)=""/241, 0x73, 0xf1, 0x0, 0x4b, 0x10000}, 0x28) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000d00)={0x0, r6}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x8, 0x9, 0x5, 0x10040, r7, 0x80, '\x00', r8, r9, 0x4, 0x4, 0x4, 0x0, @void, @value, @value=r10}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000000)='{\x8f:/#\x87}\x00', 0x50200, &(0x7f0000000040)={@_ha_fsid={[0xf04, 0x7]}, {0xa, 0x1ab8, 0x5a, 0xffffffffffffffff}}, 0x7c99, &(0x7f0000000180), &(0x7f00000001c0)=0x6}, {[0xa, 0x8000, 0x10, 0x5]}, 0x2, 0xeb, &(0x7f0000000380)=""/235}) recvmsg$can_j1939(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f00000005c0)=""/131, 0x83}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000880)}], 0x6, &(0x7f0000000940)=""/8, 0x8}, 0x12101) 367.176406ms ago: executing program 2 (id=4195): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xea2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x34b3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7ca}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x3}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xea2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x34b3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7ca}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x3}, 0x18}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) (async) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) (async) 239.063923ms ago: executing program 4 (id=4196): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="1fcc0a4d810135509922dd934fa147db4ad0559f9a5e543778b0957b0cbac8aa431b138759bbba48e879e10b0e96b01eaecc7ea0ee52fadec8b75b924302ea6c47e90389482b2c252c5da458a9a200225049b818589202bd331fa1528f6b88384e62568d397e5e102cc155ff207b67f939d8d1cf8022aab956a70e12d7df1a33", 0x80, 0x40000, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 123.588195ms ago: executing program 3 (id=4197): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@none, 0x100, 0xb733, 0x401, 0x2, 0x7b0, "b8f508ca207a8c6b5dae65ad6606acc1d94b8ba02e98bbe9bc7f10182efc2efac99146a77e48caf1eeef66eb85bbe118b02f2c95af11b2f94c102163419dc2baf9fad93b9844faa4ebadb9d6c634d30184cbd4a1da40316c21d0baf916498301e84288cb03a5fbc086ef03e1062b00ef2d14e0feeb7949f7d9025154a65cc01e"}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f00000000c0)='^{\'\x00', 0x200000, &(0x7f0000000100)={@_ha_fsid={[0xfffffffe, 0x29c]}, {0x0, 0x7, 0x3, 0x3}}, 0xcc, &(0x7f0000000140), &(0x7f0000000180)=0x101}, {[0x0, 0xffff0000, 0x1, 0x9]}, 0x5, 0x87, &(0x7f00000001c0)=""/135}) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000380)={0x0, 0x7, [0x6, 0x0, 0x0, 0x0, 0xe98, 0x5]}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f00000003c0)) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000480)=0x3) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x8, [0x40, 0xa, 0x7b0c, 0x1, 0x8, 0x8, 0x7, 0x4]}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=@deltaction={0x8c, 0x31, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x81, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4008, r1}, 0x18) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000000740)) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000780)={@rand_addr, @private}, &(0x7f00000007c0)=0xc) write$ppp(r1, &(0x7f0000000800)="84f6d0f95d8e054e62935b9c32c1aa1b69f3500bed86fa6474314a323d3e940bf9c3b188621fae823fc0ad638c8f593b44c1f9e15a4710897c35dcd6d9799ce67ed2269cbb308923e8758912e3d9813fa367dfe3628d0f84ce5ac0cf5e47a173d244754fc5cc12680c069f540ab6f61fb0030385681b1bacf573b327a6306820967f9a17804e871d3b8e36cf1391e3db3db6f5f683a498c1dfe8efc0cceae95253cc78fc", 0xa4) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000008c0)=0x1) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000900)={0x3, 0x2, 0x4, 0x5}) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000e00)={&(0x7f0000000940), 0xc, &(0x7f0000000dc0)={&(0x7f0000000980)={0x440, 0x3f3, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x2, 0x3b, [0x7, 0x4, 0x40, 0x3ff, 0x7fffffff, 0x800, 0x3, 0x0, 0x7, 0x2, 0x5000, 0x8, 0x4, 0x4, 0xa, 0xff, 0x1, 0x41, 0x2, 0x200, 0x8000, 0x100, 0x8ecb, 0x610, 0x8, 0x3, 0xe, 0x9af, 0xffffffff, 0x6, 0x1, 0xe, 0x7, 0x3, 0x0, 0x1c0, 0x2, 0x6, 0x85, 0xfffffffe, 0x80000000, 0x527b, 0x0, 0x10000000, 0x200, 0x6fdc, 0xfff, 0x8, 0x3, 0x8, 0x7, 0x8, 0x5, 0x800, 0x8000, 0x2, 0x200, 0x0, 0x1, 0x9, 0x10001, 0xfffffffc, 0x7, 0x3], [0x4, 0x1, 0xff, 0x328, 0x1, 0x8, 0x9, 0x1, 0x9, 0x70d, 0xfe, 0x4, 0x8, 0x7, 0x0, 0xfffffffe, 0xb7, 0x7c, 0x8, 0x8, 0x80, 0x4, 0x80000000, 0x67, 0x81, 0x1, 0x2, 0x1ff, 0x7, 0x8, 0x2, 0x401, 0xfffffeff, 0xfffffff8, 0x4, 0x4, 0x43b91632, 0xf90, 0x80000000, 0x1c, 0x4, 0x7fff, 0x10000, 0x7, 0xff, 0x6, 0x4, 0xff, 0x6, 0x6a, 0x2, 0x7, 0x6, 0x3, 0x8, 0x9, 0x3, 0xac46, 0x7ff, 0x81, 0xf, 0x2, 0x7, 0x1ff], [0x6, 0x3, 0xfffffffb, 0x200, 0x53, 0x8, 0xbc, 0x2, 0xf, 0x11b, 0x40, 0x9, 0x5, 0x9, 0xcae, 0x3, 0x400, 0x4f, 0x3, 0x6, 0x800, 0xe0000, 0x8, 0x7, 0x2, 0x1, 0x401, 0x3b17, 0x9, 0xb, 0x9, 0xfc5c, 0x7, 0x9, 0x2, 0x0, 0x97, 0x80000001, 0xffffffff, 0x7a, 0x1ff, 0xffff, 0x4, 0x3, 0x264, 0x3ff, 0xbfbf, 0x2b3, 0x0, 0x7fff, 0x7, 0x4, 0xfffffffa, 0x7fff, 0x0, 0xe, 0x0, 0x4, 0x80000000, 0x8, 0x6, 0xf, 0x2, 0x5], [0xfff, 0x2, 0x0, 0x4, 0xfffffffb, 0x8000, 0x8, 0x81, 0x7, 0x80000000, 0x7, 0x2, 0x9, 0x2, 0x3, 0xff, 0x8, 0xd710, 0x9, 0x0, 0x9, 0x5, 0x1, 0x64, 0x0, 0x3, 0x7, 0x2, 0x3, 0x5, 0xad0e, 0x3, 0x276, 0x1, 0xfffffff4, 0x11e, 0x684b, 0x2, 0x9, 0x3, 0x4, 0xd3c88d0, 0x9, 0x200, 0x2, 0x4, 0x3, 0x7, 0x3, 0x80000001, 0x1, 0x64e, 0x6, 0x6, 0xf, 0x703, 0x0, 0xa, 0x7, 0xfffffff0, 0xfffffff9, 0x1, 0x9, 0x3], 0x1d, ['skbmod\x00', '@/!!\x00', '\x00', '\x99{!!]$\\*\x00', 'skbmod\x00']}, ["", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000e40)={0xffffffffffffffff}) ioctl$XFS_IOC_GET_RESBLKS(r3, 0x80105873, &(0x7f0000000ec0)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000f00)) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000001040)={r0, &(0x7f0000000f40)='^!\x00', 0x12000, &(0x7f0000000f80)={@_ha_fsid={[0x0, 0x6]}, {0x401, 0xc, 0x9, 0x8}}, 0x1, &(0x7f0000000fc0), &(0x7f0000001000)=0x7}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x50, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x6546ff1094118eba}, 0x4050) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000001280), &(0x7f00000012c0)=0x4) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001300)={0x1, 0xe68, @status={[0x8001, 0xd, 0x200, 0x3, 0x8, 0xd]}, [0x7, 0x400, 0x2, 0x3, 0xd, 0x1, 0x0, 0xca7, 0x2, 0x0, 0x3ff, 0x9, 0x0, 0x8, 0x4e3b, 0x401, 0x1000, 0xffffffffffffffff, 0x3992, 0x4, 0x3, 0x0, 0x7, 0xcdf6, 0x2f76a2f0, 0x8000000000000000, 0x40, 0x2, 0x8, 0xfffffffffffffff9, 0x5, 0x6c9a, 0x5, 0x600000000000, 0x1000, 0x1000, 0x10, 0x6, 0x0, 0x8, 0x3f, 0x10000, 0x8, 0x4, 0x101, 0x2, 0x7, 0x7f, 0x34, 0x9c45, 0x2, 0x1, 0x4, 0x0, 0x4, 0x5, 0x200, 0x8, 0x5, 0x4, 0x2, 0x2, 0x5a, 0x6]}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d80), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x34, r8, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x20, 0xa, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x24008001) 122.647456ms ago: executing program 2 (id=4198): r0 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x190}}, 0x0) 35.516586ms ago: executing program 3 (id=4199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000e3ffffff0000000000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000000380)=0x3) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfff], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x89f8c55f46292553}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x804) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400005881000000000000000050a284661d8c510d4b59e6d3383fa7cdf2d323e82b0c4a2bc76593eb817ad60462933cf7336fe5d006951203bd48a83848f14d75740b6506cf6b4c15ebfc52db29e9e534c7886d4a2128c7", @ANYRES32=0x0, @ANYBLOB="46060900200000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r14, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x8, 0x3, 0x0) r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 0s ago: executing program 2 (id=4200): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$kcm(0x21, 0x2, 0x2) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000100100000a"], 0x28}, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x8, 0x0, &(0x7f0000001380)) kernel console output (not intermixed with test programs): ot create hsr debugfs directory [ 305.446641][T16612] GUP no longer grows the stack in syz.2.3012 (16612): 200000003000-20000000a000 (200000001000) [ 305.471785][T16612] CPU: 1 UID: 0 PID: 16612 Comm: syz.2.3012 Not tainted syzkaller #0 PREEMPT(full) [ 305.471809][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.471825][T16612] Call Trace: [ 305.471854][T16612] [ 305.471924][T16612] dump_stack_lvl+0xe8/0x150 [ 305.472052][T16612] __get_user_pages+0x238c/0x2720 [ 305.472099][T16612] ? __gup_longterm_locked+0xc3b/0x15c0 [ 305.472153][T16612] ? rcu_is_watching+0x15/0xb0 [ 305.472189][T16612] __gup_longterm_locked+0xd52/0x15c0 [ 305.472205][T16612] ? trace_irq_disable+0x3b/0x140 [ 305.472245][T16612] ? gup_fast_fallback+0x1c3e/0x20d0 [ 305.472263][T16612] gup_fast_fallback+0x1d82/0x20d0 [ 305.472291][T16612] ? __pfx_gup_fast_fallback+0x10/0x10 [ 305.472305][T16612] ? lock_release+0x4b/0x3c0 [ 305.472347][T16612] ? __fget_files+0x2a/0x420 [ 305.472373][T16612] ? is_valid_gup_args+0x11f/0x200 [ 305.472387][T16612] ? get_user_pages_fast+0x4d/0xb0 [ 305.472402][T16612] __iov_iter_get_pages_alloc+0x378/0xa40 [ 305.472539][T16612] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 305.472571][T16612] iov_iter_get_pages2+0x5e/0xa0 [ 305.472590][T16612] __se_sys_vmsplice+0x7b5/0x1660 [ 305.472609][T16612] ? __futex_hash+0x416/0x750 [ 305.472651][T16612] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 305.472670][T16612] ? __pfx_futex_wait+0x10/0x10 [ 305.472713][T16612] ? rcu_is_watching+0x15/0xb0 [ 305.472730][T16612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.472767][T16612] do_syscall_64+0x174/0x580 [ 305.472882][T16612] ? clear_bhb_loop+0x40/0x90 [ 305.472899][T16612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.472915][T16612] RIP: 0033:0x7f569699ce59 [ 305.472963][T16612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.473006][T16612] RSP: 002b:00007f56978a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 305.473037][T16612] RAX: ffffffffffffffda RBX: 00007f5696c15fa0 RCX: 00007f569699ce59 [ 305.473048][T16612] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 305.473058][T16612] RBP: 00007f5696a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 305.473068][T16612] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 305.473077][T16612] R13: 00007f5696c16038 R14: 00007f5696c15fa0 R15: 00007ffe63586f18 [ 305.473099][T16612] [ 305.729149][T16617] netlink: 'syz.1.3014': attribute type 11 has an invalid length. [ 305.763446][T16374] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.773332][T16374] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.783194][T16374] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.792970][T16374] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 305.864016][T14269] ip6_tunnel:  xmit: Local address not yet configured! [ 305.892259][T16374] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.902977][T16374] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.913816][T16374] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.924498][T16374] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 305.970245][T16374] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.981363][T16374] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 305.991941][T16374] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 306.003258][T16374] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 306.071898][T16374] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.083698][T16374] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 306.091206][ T5624] Bluetooth: hci0: command tx timeout [ 306.097106][T16374] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 306.110925][T16374] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 306.225352][T16374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.235441][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.244058][T16374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.254507][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.263556][T16374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.276873][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.285830][T16374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 306.294984][T16374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.340124][T16374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.355179][T16374] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.366705][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.374712][ T3264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.395434][T14268] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.403156][T14268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.886882][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.064667][T16374] veth0_vlan: entered promiscuous mode [ 307.081767][T16680] __nla_validate_parse: 73 callbacks suppressed [ 307.081787][T16680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3028'. [ 307.112683][T16374] veth1_vlan: entered promiscuous mode [ 307.183997][T16684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3031'. [ 307.194125][T16680] syzkaller0: entered promiscuous mode [ 307.194303][T16687] Bluetooth: MGMT ver 1.23 [ 307.206246][T16680] syzkaller0: entered allmulticast mode [ 307.214277][T16374] veth0_macvtap: entered promiscuous mode [ 307.225757][T16684] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 307.251715][T16684] netlink: 'syz.2.3031': attribute type 2 has an invalid length. [ 307.262065][T16374] veth1_macvtap: entered promiscuous mode [ 307.306055][T16374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.321275][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3032'. [ 307.354081][T16374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.405437][T14268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.421990][T14268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.449687][T14268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.478378][T14268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.597144][T14268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.607971][ C0] net_ratelimit: 282 callbacks suppressed [ 307.607986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.623066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.624422][T14268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.681390][T14264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.690714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.715852][ T292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.730934][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'. [ 307.741264][ T292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.839837][ T7203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.158254][ T5624] Bluetooth: hci0: command tx timeout [ 308.206988][T16739] netlink: 'syz.2.3043': attribute type 8 has an invalid length. [ 308.245494][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.254216][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.263852][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.284895][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.284922][T16741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3044'. [ 308.303265][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.320276][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.389026][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.591469][T14268] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.617288][T14268] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.622675][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3049'. [ 308.638031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.646618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.667654][T14268] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 308.809395][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3050'. [ 308.831129][T14268] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.841171][T14268] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.850962][T14268] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 308.865730][T16770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3048'. [ 308.968396][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 309.051470][T16742] vxcan1 speed is unknown, defaulting to 1000 [ 309.091907][T14268] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.141646][T14268] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.159598][T14268] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 309.247894][T14268] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.268874][T14268] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.283690][T14268] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 309.359804][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.427335][T16798] netlink: 'syz.4.3060': attribute type 9 has an invalid length. [ 309.489572][T14268] bridge_slave_1: left allmulticast mode [ 309.499938][T14268] bridge_slave_1: left promiscuous mode [ 309.511696][T14268] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.582205][T14268] bridge_slave_0: left allmulticast mode [ 309.608905][T14268] bridge_slave_0: left promiscuous mode [ 309.624613][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3063'. [ 309.630065][T14268] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.653169][T14268] dvmrp8: left allmulticast mode [ 309.692183][T16816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3065'. [ 309.837006][T14268] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 309.918245][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 309.939229][T14268] bond9 (unregistering): (slave gretap1): Releasing active interface [ 310.012245][T14268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.022026][T14268] bond_slave_0: left allmulticast mode [ 310.030729][T14268] bond0 (unregistering): Released all slaves [ 310.041117][T14268] bond1 (unregistering): Released all slaves [ 310.053240][T14268] bond2 (unregistering): Released all slaves [ 310.066131][T14268] bond3 (unregistering): (slave veth9): Releasing active interface [ 310.078189][T14268] bond3 (unregistering): (slave veth11): Releasing active interface [ 310.091266][T14268] bond3 (unregistering): Released all slaves [ 310.103452][T14268] bond4 (unregistering): Released all slaves [ 310.118985][T14268] bond5 (unregistering): Released all slaves [ 310.131256][T14268] bond6 (unregistering): Released all slaves [ 310.144328][T14268] bond7 (unregistering): Released all slaves [ 310.161049][T14268] bond8 (unregistering): Released all slaves [ 310.178197][T14268] bond9 (unregistering): Released all slaves [ 310.193664][T14268] bond10 (unregistering): Released all slaves [ 310.205348][T14268] bond11 (unregistering): Released all slaves [ 310.237992][ C0] bridge0: port 3(gretap1) entered forwarding state [ 310.244646][ C0] bridge0: topology change detected, propagating [ 310.251857][ T5629] Bluetooth: hci0: command tx timeout [ 310.263580][T16827] vlan0: entered promiscuous mode [ 310.277373][T16827] bridge0: entered promiscuous mode [ 310.399210][ T5629] Bluetooth: hci1: command tx timeout [ 310.531265][T14268] tipc: Left network mode [ 310.866506][T16872] sctp: [Deprecated]: syz.0.3076 (pid 16872) Use of int in max_burst socket option. [ 310.866506][T16872] Use struct sctp_assoc_value instead [ 311.197081][T16742] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.205137][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.213809][T16742] bridge_slave_0: entered allmulticast mode [ 311.223318][T16742] bridge_slave_0: entered promiscuous mode [ 311.235575][T16898] netlink: 'syz.0.3080': attribute type 1 has an invalid length. [ 311.248478][T16742] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.256841][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.265030][T16742] bridge_slave_1: entered allmulticast mode [ 311.274302][T16742] bridge_slave_1: entered promiscuous mode [ 311.285394][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 311.436113][T16742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.449931][T16742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.521688][T16742] team0: Port device team_slave_0 added [ 311.530238][T16742] team0: Port device team_slave_1 added [ 311.559884][T16742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.567311][T16742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.593606][T16742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.606457][T16742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.613793][T16742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.710059][T16742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.907215][T16928] netlink: 'syz.0.3087': attribute type 1 has an invalid length. [ 311.992499][T16933] tipc: Bearer : already 2 bearers with priority 10 [ 312.027476][T16933] tipc: Bearer : trying with adjusted priority [ 312.058566][T16933] tipc: Enabling of bearer rejected, failed to enable media [ 312.120269][T16936] netlink: 'syz.4.3089': attribute type 1 has an invalid length. [ 312.139740][T16936] __nla_validate_parse: 7 callbacks suppressed [ 312.139770][T16936] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.3089'. [ 312.184073][T16742] hsr_slave_0: entered promiscuous mode [ 312.198715][T16742] hsr_slave_1: entered promiscuous mode [ 312.206425][T16742] debugfs: 'hsr0' already exists in 'hsr' [ 312.220622][T16742] Cannot create hsr debugfs directory [ 312.459506][T16954] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3092'. [ 312.478341][ T5629] Bluetooth: hci1: command tx timeout [ 312.506538][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 312.512112][T16970] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3096'. [ 312.785045][T16975] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 312.798330][ C0] net_ratelimit: 19 callbacks suppressed [ 312.798349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.813097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.819759][T16987] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3100'. [ 312.835031][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3100'. [ 312.920919][T16987] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 312.927845][T16995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3104'. [ 312.982646][T16987] bond5 (unregistering): Released all slaves [ 313.074294][T17008] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3107'. [ 313.086331][T14268] hsr_slave_0: left promiscuous mode [ 313.121869][T14268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.159559][T14268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.169231][T14268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.186507][T14268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.203785][T14268] veth0_macvtap: left promiscuous mode [ 313.226062][T14268] veth1_vlan: left promiscuous mode [ 313.236867][T14268] veth0_vlan: left promiscuous mode [ 313.439266][T14259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.448236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.460074][ T7205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.520955][ T7287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.593665][T17034] netlink: 'syz.2.3111': attribute type 13 has an invalid length. [ 313.599391][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.613409][T14268] team0 (unregistering): Port device team_slave_1 removed [ 313.635488][T14268] team0 (unregistering): Port device team_slave_0 removed [ 313.711719][T16998] batadv_slave_0: Caught tx_queue_len zero misconfig [ 313.725974][T16991] pimreg: entered allmulticast mode [ 313.837920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.846579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.866340][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3113'. [ 313.884648][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3114'. [ 313.895536][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3114'. [ 313.936559][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 313.990934][T17040] macsec1: entered promiscuous mode [ 313.996415][T17040] bridge0: entered promiscuous mode [ 314.003043][T17040] macsec1: entered allmulticast mode [ 314.008622][T17040] bridge0: entered allmulticast mode [ 314.015202][T17040] bridge0: port 3(macsec1) entered blocking state [ 314.023849][T17040] bridge0: port 3(macsec1) entered disabled state [ 314.035033][T17040] bridge0: left allmulticast mode [ 314.060020][ T7205] bridge0: left promiscuous mode [ 314.078084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.213449][T14268] IPVS: stop unused estimator thread 0... [ 314.549795][T16742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.558634][ T5629] Bluetooth: hci1: command tx timeout [ 314.583232][T16742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.599007][T16742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.618374][T16742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.637193][T17072] syzkaller0: entered promiscuous mode [ 314.650954][T17072] syzkaller0: entered allmulticast mode [ 314.659174][T16742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.670423][T16742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.679097][T16742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.691642][T16742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.936785][T16742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.006792][T16742] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.044530][T14268] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.051719][T14268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.096046][T14268] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.103710][T14268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.348472][T17125] syzkaller0: entered promiscuous mode [ 315.361557][T17125] syzkaller0: entered allmulticast mode [ 315.404703][T17125] pimreg: entered allmulticast mode [ 316.040081][T16742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.208802][T17177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.216533][T17177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.290577][T17181] netlink: 'syz.4.3144': attribute type 1 has an invalid length. [ 316.315768][T17186] netlink: 'syz.0.3146': attribute type 1 has an invalid length. [ 316.364111][T16742] veth0_vlan: entered promiscuous mode [ 316.403675][T16742] veth1_vlan: entered promiscuous mode [ 316.484456][T17197] netlink: 'syz.0.3148': attribute type 28 has an invalid length. [ 316.529272][T16742] veth0_macvtap: entered promiscuous mode [ 316.568065][T16742] veth1_macvtap: entered promiscuous mode [ 316.637935][ T5629] Bluetooth: hci1: command tx timeout [ 316.703398][T17205] bond1: (slave sit0): Device is not bonding slave [ 316.726380][T17205] bond1: option active_slave: invalid value (sit0) [ 316.744697][T17205] bond1 (unregistering): Released all slaves [ 316.785034][T17228] netlink: 'syz.0.3156': attribute type 6 has an invalid length. [ 316.957323][T17205] netlink: 'syz.1.3151': attribute type 21 has an invalid length. [ 316.965666][T16742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.987643][T16742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.003181][T17205] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.041676][T17225] syzkaller0: entered promiscuous mode [ 317.065261][T17225] syzkaller0: entered allmulticast mode [ 317.103635][T14264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.117626][T14264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.149472][T14264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.220987][T14264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.296228][T17256] sctp: [Deprecated]: syz.2.3159 (pid 17256) Use of int in max_burst socket option. [ 317.296228][T17256] Use struct sctp_assoc_value instead [ 317.416061][T17265] __nla_validate_parse: 8 callbacks suppressed [ 317.416077][T17265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3163'. [ 317.439781][ T292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.472469][ T292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.532362][T17265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.554713][T14264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.582461][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3164'. [ 317.589954][T14264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.620925][T17278] "syz.4.3166" (17278) uses obsolete ecb(arc4) skcipher [ 317.685077][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 318.007967][ C0] net_ratelimit: 30 callbacks suppressed [ 318.007985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.024010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.044791][ T29] audit: type=1804 audit(1782223470.325:10): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3171" name="/newroot/43/cgroup.controllers" dev="tmpfs" ino=235 res=1 errno=0 [ 318.100559][ T29] audit: type=1800 audit(1782223470.325:11): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3171" name="cgroup.controllers" dev="tmpfs" ino=235 res=0 errno=0 [ 318.127516][T17311] "syz.0.3172" (17311) uses obsolete ecb(arc4) skcipher [ 318.170589][T17317] veth0: entered promiscuous mode [ 318.193499][T17315] veth0: left promiscuous mode [ 318.342246][T17328] xt_hashlimit: size too large, truncated to 1048576 [ 318.476222][ T7203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.518450][T17337] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3177'. [ 318.558057][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 318.568481][ T292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.576806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.604392][T17341] smc: net device team0 applied user defined pnetid SYZ2 [ 318.672126][T17341] smc: net device team0 erased user defined pnetid SYZ2 [ 318.718406][ T7194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.781783][T17349] netlink: 'syz.3.3180': attribute type 7 has an invalid length. [ 318.800645][ T7194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.979035][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.000505][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.011522][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.028493][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.036072][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.043288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.052083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.206885][T17376] syzkaller1: entered promiscuous mode [ 319.220537][T17375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3187'. [ 319.238191][T17376] syzkaller1: entered allmulticast mode [ 319.327446][T14259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.371497][T14259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.385708][T14259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 319.400747][T14259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 48982 - 0 [ 319.540132][T14259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.591896][T14259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.639927][T14259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 319.687326][T14259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 48982 - 0 [ 319.785884][ T7194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.886820][T14259] bond0: (slave netdevsim1): Releasing backup interface [ 319.924081][T14259] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 319.960227][T14259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.989209][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 319.990263][T14259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.011352][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 320.037880][T14259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 320.054269][T17436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3200'. [ 320.065624][T14259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 48982 - 0 [ 320.171645][T14259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.253106][T14259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.309657][T14259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 320.353769][T14259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 48982 - 0 [ 320.555889][T17468] C: renamed from lo (while UP) [ 320.581817][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 320.656588][T17474] xt_NFQUEUE: number of total queues is 0 [ 320.794223][T14259] batadv1: left allmulticast mode [ 320.819524][T14259] batadv1: left promiscuous mode [ 320.839809][T14259] bridge0: port 3(batadv1) entered disabled state [ 320.875158][T14259] bridge_slave_1: left allmulticast mode [ 320.906684][T14259] bridge_slave_1: left promiscuous mode [ 320.919749][T14259] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.942989][T14259] bridge_slave_0: left allmulticast mode [ 320.950513][T14259] bridge_slave_0: left promiscuous mode [ 320.956231][T14259] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.982650][T14259] veth7: left allmulticast mode [ 320.997422][T14259] veth7: left promiscuous mode [ 321.006840][T14259] bridge1: port 1(veth7) entered disabled state [ 321.014542][T17498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3212'. [ 321.035990][T14259] pim6reg: left allmulticast mode [ 321.057709][T14259] tipc: Resetting bearer [ 321.120703][ T5629] Bluetooth: hci4: command tx timeout [ 321.316820][T14259] tipc: Disabling bearer [ 321.399192][T14259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.424957][T14259] bond_slave_0: left allmulticast mode [ 321.456356][T14259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.487124][T14259] bond_slave_1: left allmulticast mode [ 321.504771][T14259] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 321.529727][T14259] batadv0: left allmulticast mode [ 321.542984][T14259] bond0 (unregistering): Released all slaves [ 321.564698][T14259] bond1 (unregistering): Released all slaves [ 321.583930][T14259] bond2 (unregistering): Released all slaves [ 321.614657][T14259] bond3 (unregistering): Released all slaves [ 321.648871][T14259] bond4 (unregistering): Released all slaves [ 321.670600][T17368] vxcan1 speed is unknown, defaulting to 1000 [ 321.825285][T14259] tipc: Disabling bearer [ 321.877378][T14259] tipc: Left network mode [ 321.940172][T17537] netlink: 'syz.4.3220': attribute type 1 has an invalid length. [ 322.097708][T17537] 8021q: adding VLAN 0 to HW filter on device bond12 [ 322.425202][T17567] bond1: option fail_over_mac: invalid value (16) [ 322.440861][T17567] bond1 (unregistering): Released all slaves [ 322.915102][T17599] vlan1: entered promiscuous mode [ 322.943859][T17599] vlan1: entered allmulticast mode [ 322.955647][ T7202] IPVS: starting estimator thread 0... [ 322.961169][T17599] veth0_vlan: entered allmulticast mode [ 322.962709][T17614] __nla_validate_parse: 3 callbacks suppressed [ 322.962727][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3237'. [ 323.088218][T17615] IPVS: using max 63 ests per chain, 151200 per kthread [ 323.208650][ T5629] Bluetooth: hci4: command tx timeout [ 323.274027][T17625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3238'. [ 323.599156][T14259] hsr_slave_0: left promiscuous mode [ 323.619290][T14259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.640940][T14259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.667051][T14259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.700561][T14259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.747562][T14259] veth1_macvtap: left promiscuous mode [ 323.760030][T14259] veth0_macvtap: left promiscuous mode [ 323.859344][T17680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3249'. [ 323.947148][T17683] netlink: 'syz.4.3249': attribute type 17 has an invalid length. [ 323.972969][T17683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3249'. [ 323.984477][T17683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3249'. [ 324.077363][T14259] team0 (unregistering): Port device team_slave_1 removed [ 324.104880][T14259] team0 (unregistering): Port device team_slave_0 removed [ 324.205577][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 324.231447][T17683] gretap0: entered promiscuous mode [ 324.238789][T17683] gretap0: left promiscuous mode [ 324.247607][T17368] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.255767][T17368] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.264418][T17368] bridge_slave_0: entered allmulticast mode [ 324.272067][T17368] bridge_slave_0: entered promiscuous mode [ 324.304602][T17368] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.334419][T17368] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.358808][T17368] bridge_slave_1: entered allmulticast mode [ 324.371634][T17368] bridge_slave_1: entered promiscuous mode [ 324.486892][T17368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.502681][T17368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.549963][T17698] macvlan0: entered promiscuous mode [ 324.592110][T17368] team0: Port device team_slave_0 added [ 324.604877][T17702] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3253'. [ 324.649142][T17368] team0: Port device team_slave_1 added [ 324.686816][T17700] net_ratelimit: 5 callbacks suppressed [ 324.686848][T17700] openvswitch: netlink: IP tunnel dst address not specified [ 324.748905][T17700] sctp: [Deprecated]: syz.4.3255 (pid 17700) Use of int in maxseg socket option. [ 324.748905][T17700] Use struct sctp_assoc_value instead [ 324.766321][T17368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.777623][T17368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.850961][T17368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.876338][T14259] IPVS: stop unused estimator thread 0... [ 324.882241][T17368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.902788][T17368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.940687][T17717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3258'. [ 324.977326][T17368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.000172][T17723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.079379][T17723] netlink: 'syz.0.3259': attribute type 21 has an invalid length. [ 325.096752][T17728] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 325.101895][T17368] hsr_slave_0: entered promiscuous mode [ 325.118832][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 325.130005][T17368] hsr_slave_1: entered promiscuous mode [ 325.136456][T17368] debugfs: 'hsr0' already exists in 'hsr' [ 325.176241][T17734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.192665][T17368] Cannot create hsr debugfs directory [ 325.280945][ T5629] Bluetooth: hci4: command tx timeout [ 325.295017][T14269] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.312294][T14269] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.386424][T14269] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.404035][T14269] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.415861][T17736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3262'. [ 325.498333][ T29] audit: type=1800 audit(1782223477.785:12): pid=17746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3265" name="memory.events" dev="tmpfs" ino=175 res=0 errno=0 [ 325.530551][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 325.619912][T17753] block nbd2: server does not support multiple connections per device. [ 325.630005][T17753] block nbd2: shutting down sockets [ 325.632753][T17758] netlink: 'syz.3.3268': attribute type 1 has an invalid length. [ 325.701180][T17758] bond1: entered promiscuous mode [ 325.708923][T17758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.769490][T17758] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3268'. [ 325.776950][T17765] pim6reg1: entered promiscuous mode [ 325.807382][T17765] pim6reg1: entered allmulticast mode [ 325.995677][T17368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.000760][T17775] netlink: 'syz.0.3273': attribute type 1 has an invalid length. [ 326.032058][T17368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.040411][T17778] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 326.084068][T17775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.114263][T17368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.153736][T17368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.165799][T17797] netlink: 'syz.3.3276': attribute type 11 has an invalid length. [ 326.175284][T17368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.185973][T17368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.206884][T17776] bond2: (slave veth0_to_bond): making interface the new active one [ 326.222852][T17776] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 326.256796][T17800] hsr0: entered promiscuous mode [ 326.277449][T17368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.319818][T17368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.456919][T17818] netlink: 'syz.3.3279': attribute type 21 has an invalid length. [ 326.486461][T17819] netlink: 'syz.4.3281': attribute type 1 has an invalid length. [ 326.486561][T17818] netlink: 'syz.3.3279': attribute type 5 has an invalid length. [ 326.504233][T17818] netlink: 'syz.3.3279': attribute type 6 has an invalid length. [ 326.652707][T17368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.752869][T17368] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.778928][T14268] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.786154][T14268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.904419][T14268] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.912277][T14268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.207369][T17883] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.215468][T17883] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.358103][ T5629] Bluetooth: hci4: command tx timeout [ 327.914778][T17927] bond1: entered promiscuous mode [ 327.920565][T17927] bond1: entered allmulticast mode [ 327.927031][T17927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.976597][T17927] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 327.985081][T17927] __nla_validate_parse: 11 callbacks suppressed [ 327.985097][T17927] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3303'. [ 328.009650][T17927] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3303'. [ 328.018933][T17927] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 328.027089][T17927] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3303'. [ 328.254067][T17368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.427602][T17368] veth0_vlan: entered promiscuous mode [ 328.503802][T17368] veth1_vlan: entered promiscuous mode [ 328.537034][T17963] syzkaller0: entered promiscuous mode [ 328.552784][T17967] set match dimension is over the limit! [ 328.563843][T17963] syzkaller0: entered allmulticast mode [ 328.713868][T17368] veth0_macvtap: entered promiscuous mode [ 328.796737][T17368] veth1_macvtap: entered promiscuous mode [ 328.882802][T17368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.959206][T17982] syzkaller0: entered promiscuous mode [ 328.970826][T17982] syzkaller0: entered allmulticast mode [ 328.994112][T17368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.219337][ T292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.339711][T18018] validate_nla: 2 callbacks suppressed [ 329.339729][T18018] netlink: 'syz.3.3324': attribute type 9 has an invalid length. [ 329.381997][T18019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3326'. [ 329.544789][T18012] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.555142][T18012] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.674725][T18012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.693304][T18012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.731561][T18012] macvlan0: left promiscuous mode [ 329.765711][T18012] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 329.828439][T18012] bond1: left promiscuous mode [ 329.835087][ T292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.846153][T14268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.858472][T14262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.872335][T18016] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3325'. [ 329.901804][T14262] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.910901][T14262] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.926623][T14262] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.935567][T14262] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.104817][T14262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.146370][T14262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.215530][ T292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.243880][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3331'. [ 330.256737][ T292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.565333][T18065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3338'. [ 330.765049][T18072] syzkaller0: entered promiscuous mode [ 330.790205][T18072] syzkaller0: entered allmulticast mode [ 330.835274][T18072] tipc: Started in network mode [ 330.848798][T18072] tipc: Node identity 3a5a7f932964, cluster identity 4711 [ 330.869444][T18072] tipc: Enabled bearer , priority 0 [ 330.893901][T18075] IPVS: Scheduler module ip_vs_sip not found [ 330.924488][T18070] tipc: Resetting bearer [ 330.936742][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.945092][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.955201][T18070] tipc: Disabling bearer [ 330.963125][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.974639][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.983140][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.246164][ T7205] IPVS: starting estimator thread 0... [ 331.289692][T18104] netlink: 'syz.3.3347': attribute type 10 has an invalid length. [ 331.325162][T18104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.367927][T18101] IPVS: using max 59 ests per chain, 141600 per kthread [ 331.400557][T18104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.550440][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 331.940728][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 332.141646][T18085] vxcan1 speed is unknown, defaulting to 1000 [ 332.432093][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 332.542856][T18186] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 332.562552][T18186] bond2 (unregistering): Released all slaves [ 332.579882][T18188] syzkaller1: entered promiscuous mode [ 332.585531][T18188] syzkaller1: entered allmulticast mode [ 332.727249][T18220] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 332.786974][T18220] xt_hashlimit: size too large, truncated to 1048576 [ 333.029311][T18085] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.036728][T18085] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.037994][ T5629] Bluetooth: hci2: command tx timeout [ 333.044333][T18085] bridge_slave_0: entered allmulticast mode [ 333.056826][T18085] bridge_slave_0: entered promiscuous mode [ 333.067255][T18085] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.074696][T18085] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.082426][T18085] bridge_slave_1: entered allmulticast mode [ 333.101112][T18085] bridge_slave_1: entered promiscuous mode [ 333.171492][T18251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.175038][T18255] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 333.248199][T18085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.301724][T18085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.404459][T18085] team0: Port device team_slave_0 added [ 333.425823][T18085] team0: Port device team_slave_1 added [ 333.493458][T18267] __nla_validate_parse: 3 callbacks suppressed [ 333.493488][T18267] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3383'. [ 333.544363][T18085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.545885][T18267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3383'. [ 333.578521][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.641835][T18085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.672240][T18085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.692041][T18085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.733640][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'. [ 333.746945][T18085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.795616][T18292] team0: Port device team_slave_0 removed [ 333.809235][T18287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3386'. [ 333.865042][T18286] syzkaller0: entered promiscuous mode [ 333.897312][T18286] syzkaller0: entered allmulticast mode [ 333.936018][T18303] netlink: 'syz.2.3389': attribute type 1 has an invalid length. [ 334.018031][T18085] hsr_slave_0: entered promiscuous mode [ 334.026832][T18310] netlink: 'syz.2.3389': attribute type 12 has an invalid length. [ 334.040484][T18085] hsr_slave_1: entered promiscuous mode [ 334.062730][T18085] debugfs: 'hsr0' already exists in 'hsr' [ 334.078241][T18085] Cannot create hsr debugfs directory [ 334.272561][T18330] syzkaller0: entered promiscuous mode [ 334.282050][T18330] syzkaller0: entered allmulticast mode [ 334.330135][T18330] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3395'. [ 334.364602][T18330] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3395'. [ 334.387625][T18330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3395'. [ 334.408166][T18332] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3395'. [ 334.435779][T18332] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3395'. [ 334.470129][T18332] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3395'. [ 334.567224][T18085] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.587512][T18085] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.661394][T18085] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.675925][T18085] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.873914][T18085] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.911875][T18085] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.954976][T18368] vcan1: entered promiscuous mode [ 334.961692][T18368] vcan1: entered allmulticast mode [ 334.997452][T18085] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.009685][T18085] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.118651][ T5629] Bluetooth: hci2: command tx timeout [ 335.196308][T18388] team0 (unregistering): Port device team_slave_0 removed [ 335.204858][T18388] team0 (unregistering): Port device team_slave_1 removed [ 335.218286][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 335.347609][T18085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.375605][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.395099][T18085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.409821][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.439510][T18085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.450786][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.467677][T18085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.491227][T18085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.512012][T18408] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 335.637281][T18425] netlink: 'syz.1.3419': attribute type 10 has an invalid length. [ 335.644207][T18085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.662928][T18425] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.671373][T18425] bond0: (slave team0): Enslaving as an active interface with an up link [ 335.703945][T18085] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.725597][T14259] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.733216][T14259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.764570][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.772144][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.230257][T18467] tipc: Enabling of bearer rejected, failed to enable media [ 336.431639][T18477] veth1_to_bond: entered allmulticast mode [ 336.471078][T18480] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 336.484308][T18480] bond2 (unregistering): Released all slaves [ 336.505813][T18477] veth1_to_bond: entered promiscuous mode [ 336.527290][T18489] veth1_to_bond (unregistering): left allmulticast mode [ 336.534512][T18489] veth1_to_bond (unregistering): left promiscuous mode [ 336.550761][T18489] bond0: (slave bond_slave_1): Releasing backup interface [ 336.566583][T18085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.865336][T18085] veth0_vlan: entered promiscuous mode [ 336.877686][T18085] veth1_vlan: entered promiscuous mode [ 336.929506][T18085] veth0_macvtap: entered promiscuous mode [ 336.944020][T18085] veth1_macvtap: entered promiscuous mode [ 336.979652][T18085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.019965][T18085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.044309][ T292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.064081][ T292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.083830][ T292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.105557][ T292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.198266][ T5629] Bluetooth: hci2: command tx timeout [ 337.204136][T14269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.219957][T14269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.243625][T14262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.276345][T14262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.577943][T18581] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 337.840395][T18599] vlan2: entered allmulticast mode [ 338.023537][T18612] bond1: entered promiscuous mode [ 338.030772][T18612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.055547][T18616] bridge1: entered promiscuous mode [ 338.063567][T18616] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 338.248228][T18623] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 338.257438][T18623] syzkaller1: linktype set to 823 [ 338.418056][T18634] netlink: 'syz.3.3478': attribute type 4 has an invalid length. [ 338.500070][T18637] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 338.603972][T18639] tipc: Started in network mode [ 338.619832][T18639] tipc: Node identity feab6c2db7e7, cluster identity 5 [ 338.649953][T18639] tipc: Enabled bearer , priority 0 [ 338.674853][T18640] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 338.713549][T18640] tipc: Disabling bearer [ 338.861985][T18655] macvlan3: entered promiscuous mode [ 338.886396][T18655] macvlan3: entered allmulticast mode [ 338.983736][T18667] __nla_validate_parse: 21 callbacks suppressed [ 338.983766][T18667] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3489'. [ 339.144441][T18688] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3493'. [ 339.239687][T18683] syzkaller0: entered promiscuous mode [ 339.245693][T18683] syzkaller0: entered allmulticast mode [ 339.278070][ T5629] Bluetooth: hci2: command tx timeout [ 339.301873][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 339.486562][T18697] syzkaller0: entered promiscuous mode [ 339.508776][T18697] syzkaller0: entered allmulticast mode [ 339.656024][T18727] tipc: Started in network mode [ 339.669422][T18727] tipc: Node identity c69de892b4c8, cluster identity 4711 [ 339.708790][T18727] tipc: Enabled bearer , priority 0 [ 339.753776][T18730] syzkaller0: entered promiscuous mode [ 339.762775][T18730] syzkaller0: entered allmulticast mode [ 339.785751][T18727] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 339.867144][T18727] tipc: Resetting bearer [ 339.909217][T18726] tipc: Resetting bearer [ 339.960613][T18726] tipc: Disabling bearer [ 340.049200][T18750] syzkaller0: entered promiscuous mode [ 340.069067][T18750] syzkaller0: entered allmulticast mode [ 340.151463][T18763] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3516'. [ 340.378049][T18780] syzkaller0: entered promiscuous mode [ 340.383571][T18780] syzkaller0: entered allmulticast mode [ 340.462459][T18775] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 340.613130][T18785] vxcan1 speed is unknown, defaulting to 1000 [ 340.697642][T18797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3526'. [ 340.715341][T18797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3526'. [ 340.719617][T18795] openvswitch: netlink: IP tunnel dst address not specified [ 340.811049][T18803] x_tables: unsorted underflow at hook 2 [ 340.832348][T18804] x_tables: unsorted underflow at hook 2 [ 340.861516][T18806] syzkaller0: entered promiscuous mode [ 340.875499][T18806] syzkaller0: entered allmulticast mode [ 340.965346][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3530'. [ 341.227516][T18827] syzkaller0: entered promiscuous mode [ 341.252131][T18827] syzkaller0: entered allmulticast mode [ 341.300417][T18827] tipc: Enabled bearer , priority 0 [ 341.333777][T18826] tipc: Resetting bearer [ 341.398998][T18826] tipc: Disabling bearer [ 341.488970][T18842] tipc: Enabled bearer , priority 0 [ 341.519580][T18842] syzkaller0: entered promiscuous mode [ 341.539814][T18842] syzkaller0: entered allmulticast mode [ 341.574550][T18850] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 341.605336][T18842] tipc: Resetting bearer [ 341.667653][T18841] tipc: Resetting bearer [ 341.695471][T18841] tipc: Disabling bearer [ 341.761066][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'. [ 341.885881][T18865] netlink: 'syz.1.3548': attribute type 21 has an invalid length. [ 341.970456][T18867] gre0: entered promiscuous mode [ 341.993822][T18873] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3552'. [ 342.001095][T18867] gre0: entered allmulticast mode [ 342.012166][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3552'. [ 342.034656][T18871] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 342.107265][T18871] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.120043][T18882] openvswitch: netlink: Flow key attribute not present in set flow. [ 342.129919][T18871] gretap1: entered promiscuous mode [ 342.136139][T18882] openvswitch: netlink: Flow key attribute not present in set flow. [ 342.150888][T18871] gretap1: entered allmulticast mode [ 342.202358][T18882] openvswitch: netlink: Flow key attribute not present in set flow. [ 342.351815][T18891] netlink: 'syz.3.3555': attribute type 63 has an invalid length. [ 342.530509][T18908] netlink: 'syz.3.3559': attribute type 7 has an invalid length. [ 342.566191][T18908] netlink: 'syz.3.3559': attribute type 8 has an invalid length. [ 342.598384][T18914] netlink: 'syz.0.3561': attribute type 2 has an invalid length. [ 342.613849][T18914] netlink: 'syz.0.3561': attribute type 1 has an invalid length. [ 342.632101][T18914] netlink: 'syz.0.3561': attribute type 1 has an invalid length. [ 342.669352][T18914] netlink: 'syz.0.3561': attribute type 2 has an invalid length. [ 343.065489][T18934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.107045][T18936] tipc: Started in network mode [ 343.112314][T18936] tipc: Node identity ac14140f, cluster identity 4711 [ 343.126574][T18936] tipc: Enabled bearer , priority 10 [ 343.153870][T18938] tipc: Failed to remove unknown binding: 66,0,0/0:1487520208/1487520209 [ 343.175889][T18938] tipc: Failed to remove unknown binding: 66,0,0/0:1487520208/1487520209 [ 343.233602][T18941] netlink: 'syz.4.3572': attribute type 14 has an invalid length. [ 343.273563][T18940] netlink: 'syz.4.3572': attribute type 14 has an invalid length. [ 343.701318][T18982] bond0: (slave bond_slave_1): Releasing backup interface [ 343.737956][T18968] netlink: Conntrack attr has 4 unknown bytes [ 343.845185][T19000] syzkaller0: entered promiscuous mode [ 343.851094][T19000] syzkaller0: entered allmulticast mode [ 343.976971][T19002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.019657][T19004] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 344.238531][ T54] tipc: Node number set to 2886997007 [ 346.591988][T18969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.756353][T19016] vlan2: entered allmulticast mode [ 346.777903][T19016] bond0: entered allmulticast mode [ 346.803688][T19016] bond_slave_0: entered allmulticast mode [ 346.820277][T19025] __nla_validate_parse: 12 callbacks suppressed [ 346.820295][T19025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3600'. [ 346.869108][T19029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3600'. [ 346.936374][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'. [ 346.982365][T19036] validate_nla: 7 callbacks suppressed [ 346.982383][T19036] netlink: 'syz.3.3602': attribute type 2 has an invalid length. [ 347.080437][T19036] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.250343][T19060] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 347.282407][T19060] bond3 (unregistering): Released all slaves [ 347.362348][T19059] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 347.380755][T19059] bond3 (unregistering): Released all slaves [ 347.611120][T19098] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3617'. [ 347.631945][T19098] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.639955][T19098] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.683441][T19108] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3619'. [ 347.706259][T19108] nbd: illegal input index -8454144 [ 347.712473][T19109] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.3617'. [ 347.853358][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3623'. [ 348.168836][T19151] netlink: 'syz.2.3630': attribute type 1 has an invalid length. [ 348.197734][T19151] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3630'. [ 348.208204][T19151] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3630'. [ 348.240912][T19151] netlink: 'syz.2.3630': attribute type 1 has an invalid length. [ 348.248788][T19151] netlink: 'syz.2.3630': attribute type 8 has an invalid length. [ 348.266001][T19151] netlink: 606 bytes leftover after parsing attributes in process `syz.2.3630'. [ 348.376800][T19178] bond2: entered promiscuous mode [ 348.382569][T19178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.407145][T19182] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.414570][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.487018][T19191] netlink: 'syz.0.3640': attribute type 32 has an invalid length. [ 348.596786][T19197] xt_bpf: check failed: parse error [ 348.824210][T19218] nbd: must specify an index to disconnect [ 348.956675][T19225] ipt_REJECT: TCP_RESET invalid for non-tcp [ 349.255906][T19255] tipc: Enabled bearer , priority 0 [ 349.415529][T19265] netlink: 'syz.0.3660': attribute type 2 has an invalid length. [ 349.569620][T19274] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 349.658711][T19244] bridge2: entered promiscuous mode [ 349.675072][T19244] bridge2: entered allmulticast mode [ 349.761506][T19286] netlink: 'syz.3.3667': attribute type 1 has an invalid length. [ 349.905628][T19297] smc: net device team0 applied user defined pnetid SYZ2 [ 350.029574][T19302] netlink: 'syz.4.3674': attribute type 1 has an invalid length. [ 350.167071][T19309] bond1: (slave gretap1): making interface the new active one [ 350.186861][T19309] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 350.368812][ T7196] tipc: Node number set to 1229745197 [ 350.417887][T14269] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.439021][T14269] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.461203][T14269] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.476245][T14269] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.037493][T19375] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 351.119596][T19381] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 351.153259][T19381] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 351.208267][T19385] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 351.324420][T19393] mac80211_hwsim hwsim48 ÿ: renamed from wlan1 (while UP) [ 351.725921][T19427] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 351.877666][T19438] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 352.066887][T19454] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 352.141860][T19459] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 352.359837][T19472] tipc: Resetting bearer [ 352.543661][T19479] xt_CT: No such helper "snmp" [ 352.966551][T19472] bridge_slave_0: left allmulticast mode [ 352.974278][T19472] bridge_slave_0: left promiscuous mode [ 352.980913][T19472] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.002692][T19472] bridge_slave_1: left allmulticast mode [ 353.009309][T19472] bridge_slave_1: left promiscuous mode [ 353.017211][T19472] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.032902][T19472] bond2: (slave veth0_to_bond): Releasing active interface [ 353.045876][T19472] bond0: (slave bond_slave_0): Releasing backup interface [ 353.062573][T19472] bond0: (slave bond_slave_1): Releasing backup interface [ 353.080843][T19472] team0: Port device team_slave_1 removed [ 353.094286][T19472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.112349][T19472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.127302][T19472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.143503][T19472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.166864][T19472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 353.194861][T19486] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.202240][T19486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.209718][T19486] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.216953][T19486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.261165][T19486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.302313][T14269] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 353.542205][T19519] syzkaller1: entered promiscuous mode [ 353.561794][T19519] syzkaller1: entered allmulticast mode [ 353.582712][T19519] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 353.595229][T19519] netlink: 'syz.3.3743': attribute type 21 has an invalid length. [ 353.611986][T19519] __nla_validate_parse: 34 callbacks suppressed [ 353.612003][T19519] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3743'. [ 353.863535][T19542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.886566][T19537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3754'. [ 353.927019][T19548] netlink: 'syz.1.3756': attribute type 1 has an invalid length. [ 353.942173][T19542] syzkaller0: entered promiscuous mode [ 353.953354][T19548] netlink: 'syz.1.3756': attribute type 4 has an invalid length. [ 353.954923][T19542] syzkaller0: entered allmulticast mode [ 353.980222][T19548] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3756'. [ 354.003984][T19551] netlink: 10592 bytes leftover after parsing attributes in process `syz.1.3756'. [ 354.082551][T19555] netlink: 'syz.2.3758': attribute type 1 has an invalid length. [ 354.113204][T19558] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 354.182420][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3760'. [ 354.221609][T19559] bond2: (slave bridge4): making interface the new active one [ 354.231103][T19559] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 357.598691][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.357990][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 366.557918][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.479044][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 373.598425][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.608730][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 375.622050][T19594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.629767][T19594] IPv6: NLM_F_CREATE should be set when creating new route [ 375.724793][T19604] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3769'. [ 375.754027][T19604] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 375.764254][T19606] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 375.782929][T19606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.862591][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3772'. [ 375.877171][T19613] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.3771'. [ 375.890970][T19613] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 376.003703][T19621] netlink: 'syz.0.3774': attribute type 1 has an invalid length. [ 376.071994][T19621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.097186][T19621] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 376.168338][T19644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3780'. [ 376.174924][T19638] netlink: 'syz.4.3778': attribute type 1 has an invalid length. [ 376.203046][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3779'. [ 376.214427][T19644] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 376.240715][T19650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3781'. [ 376.257042][T19650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3781'. [ 376.267264][T19650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3781'. [ 376.276488][T19650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3781'. [ 376.296010][T19651] xt_l2tp: wrong L2TP version: 0 [ 376.316984][T19638] macvtap1: entered allmulticast mode [ 376.548333][T19677] syzkaller0: entered promiscuous mode [ 376.554632][T19677] syzkaller0: entered allmulticast mode [ 376.642524][T19686] netlink: 'syz.3.3791': attribute type 4 has an invalid length. [ 376.653271][T19686] netlink: 'syz.3.3791': attribute type 4 has an invalid length. [ 376.655084][T19688] openvswitch: netlink: IPv4 tun info is not correct [ 376.939479][T19702] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 376.951669][T19702] syzkaller1: Refused to change device type [ 377.005977][T19701] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 377.051555][T19702] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 377.057705][T19702] syzkaller1: Refused to change device type [ 377.185858][T19719] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 377.198533][ T7203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.215122][T19719] bond3 (unregistering): Released all slaves [ 377.438617][T14265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.448129][ T7203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.457005][ T7193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.583324][T19750] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 377.585184][T19751] netlink: Conntrack attr has 4 unknown bytes [ 377.782277][T19760] netlink: 'syz.3.3812': attribute type 2 has an invalid length. [ 377.792376][T19760] netlink: 'syz.3.3812': attribute type 2 has an invalid length. [ 377.815401][T19763] x_tables: duplicate underflow at hook 1 [ 377.837419][T19764] veth1_to_bond: entered allmulticast mode [ 377.858583][T19764] veth1_to_bond: entered promiscuous mode [ 377.944383][T19764] veth1_to_bond (unregistering): left allmulticast mode [ 377.983034][T19764] veth1_to_bond (unregistering): left promiscuous mode [ 378.040642][T19764] bond0: (slave bond_slave_1): Releasing backup interface [ 378.518376][T19814] netlink: 'syz.4.3828': attribute type 9 has an invalid length. [ 378.561241][T19821] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.759787][T19838] netlink: 'syz.3.3838': attribute type 8 has an invalid length. [ 378.844358][T19845] netlink: 'syz.0.3841': attribute type 6 has an invalid length. [ 378.874665][T19847] netlink: 'syz.4.3840': attribute type 1 has an invalid length. [ 379.026313][T19849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.095453][T19857] bond3: (slave geneve2): making interface the new active one [ 379.106030][T19857] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 379.121088][ T1052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.168006][T14259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.191136][T19860] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 379.211462][T14259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.232503][T14259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.252745][T19867] sock: sock_timestamping_bind_phc: sock not bind to device [ 379.365867][T19886] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20003 [ 379.409408][T19890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.515560][T19898] bridge3: entered allmulticast mode [ 379.593404][T19903] tipc: Enabled bearer , priority 0 [ 379.632438][T19903] syzkaller0: entered promiscuous mode [ 379.638187][T19903] syzkaller0: entered allmulticast mode [ 379.644393][T19903] tipc: Resetting bearer [ 379.660731][T19902] tipc: Resetting bearer [ 379.787373][T19902] tipc: Disabling bearer [ 380.000390][T19865] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 380.100176][T19936] syzkaller0: entered promiscuous mode [ 380.114039][T19936] syzkaller0: entered allmulticast mode [ 380.473543][T19952] syzkaller0: entered promiscuous mode [ 380.482062][T19952] syzkaller0: entered allmulticast mode [ 380.675776][T19966] tipc: Enabling of bearer rejected, failed to enable media [ 380.948605][T19989] __nla_validate_parse: 142 callbacks suppressed [ 380.948623][T19989] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3883'. [ 380.984357][T19989] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3883'. [ 381.027458][T19995] validate_nla: 1 callbacks suppressed [ 381.027476][T19995] netlink: 'syz.3.3886': attribute type 15 has an invalid length. [ 381.061988][T19998] nbd: must specify a device to reconfigure [ 381.092935][T19995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3886'. [ 381.128843][T20004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3887'. [ 381.181946][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3887'. [ 381.229964][T14269] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.247159][T20017] netlink: 'syz.2.3891': attribute type 1 has an invalid length. [ 381.260350][T14265] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.282578][T14265] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.295750][T20017] netlink: 'syz.2.3891': attribute type 2 has an invalid length. [ 381.321371][T14265] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.333562][T20017] netlink: 'syz.2.3891': attribute type 1 has an invalid length. [ 381.358194][ T9] net_ratelimit: 8 callbacks suppressed [ 381.358211][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.380296][T20017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3891'. [ 381.427092][T20031] netlink: 'syz.4.3894': attribute type 1 has an invalid length. [ 381.601069][T20032] macvlan2: entered promiscuous mode [ 381.622531][T20032] macvlan2: entered allmulticast mode [ 381.644890][T20032] bond3: entered promiscuous mode [ 381.662517][T20032] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 381.693998][T20032] bond3: left promiscuous mode [ 381.845011][T20057] veth1_to_hsr: entered promiscuous mode [ 381.852416][T20057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.864838][T20057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.882130][T20057] veth1_vlan: left promiscuous mode [ 381.889083][T20057] veth0_vlan: left promiscuous mode [ 381.895197][T20057] veth0_vlan: entered promiscuous mode [ 381.906710][T20057] veth1_vlan: entered promiscuous mode [ 381.921075][T20057] veth1_macvtap: left promiscuous mode [ 381.930265][T20057] veth0_macvtap: left promiscuous mode [ 381.936958][T20057] veth0_macvtap: entered promiscuous mode [ 381.944931][T20057] veth1_macvtap: entered promiscuous mode [ 381.955477][T20057] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 381.963264][T20057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.972987][T20057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.999136][T20057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.013458][T20057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.024586][T20057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.035919][T20057] bond2: left promiscuous mode [ 382.044871][ T5282] veth1_vlan: left promiscuous mode [ 382.062435][T14262] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.069585][T14262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.091003][T14262] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.098601][T14262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.161641][T14265] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.176463][T14265] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.191479][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.211051][ T7203] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.389748][T20085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.401229][ T7203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.464989][T20085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.581153][T20089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.714991][T20111] netlink: 'syz.2.3907': attribute type 1 has an invalid length. [ 382.790893][ T7203] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.861936][T20111] bond3: (slave gretap1): making interface the new active one [ 382.870525][T20111] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 383.037652][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3914'. [ 383.051790][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.060329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.072014][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'. [ 383.131327][T20138] 8021q: adding VLAN 0 to HW filter on device bond4 [ 383.198224][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.212480][T14262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.220942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.235269][T20147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3916'. [ 383.254109][T20147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3916'. [ 383.294023][T20147] netlink: 'syz.2.3916': attribute type 6 has an invalid length. [ 383.320287][T20147] TC_ACT_REPEAT abuse ? [ 383.343890][T20154] netlink: 'syz.3.3918': attribute type 1 has an invalid length. [ 383.354841][T20155] netlink: 'syz.3.3918': attribute type 1 has an invalid length. [ 383.439040][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.453291][T20169] netlink: 'syz.4.3922': attribute type 1 has an invalid length. [ 383.464592][T20155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 383.970858][T20204] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 383.981508][T20204] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 384.036826][T20204] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 384.065535][T20209] tipc: Enabled bearer , priority 0 [ 384.091350][T20209] syzkaller0: entered promiscuous mode [ 384.109535][T20209] syzkaller0: entered allmulticast mode [ 384.125162][T20209] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 384.152567][T20209] tipc: Resetting bearer [ 384.163109][T20207] tipc: Resetting bearer [ 384.175889][T20207] tipc: Disabling bearer [ 384.271770][T20217] x_tables: duplicate underflow at hook 3 [ 384.280518][T20217] openvswitch: netlink: IP tunnel dst address not specified [ 384.412898][T20222] bond4: Invalid ad_actor_system MAC address. [ 384.422247][T20222] bond4: option ad_actor_system: invalid value (1) [ 384.431461][T20222] bond4 (unregistering): Released all slaves [ 384.482421][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.618405][T20239] ±ÿª¨úrBº“: renamed from lo [ 384.870887][T20233] vxcan1 speed is unknown, defaulting to 1000 [ 385.011753][T20258] bond0: (slave team0): Releasing backup interface [ 385.061631][T20258] bridge_slave_0: left allmulticast mode [ 385.082470][T20258] bridge_slave_0: left promiscuous mode [ 385.097431][T20258] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.124315][T20258] bridge_slave_1: left allmulticast mode [ 385.145131][T20258] bridge_slave_1: left promiscuous mode [ 385.168500][T20258] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.179477][T20270] nbd0: detected capacity change from 2206203904 to 0 [ 385.203032][T20270] block nbd0: reconnected socket [ 385.229097][T20258] bond0: (slave bond_slave_0): Releasing backup interface [ 385.257964][T20258] team0: Port device team_slave_0 removed [ 385.271099][T20258] team0: Port device team_slave_1 removed [ 385.281204][T20258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.295265][T20258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.311583][T20258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.320356][T20258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.329577][T20267] vlan0: entered promiscuous mode [ 385.338790][T20267] team0: Port device vlan0 added [ 386.007841][ T5629] block nbd0: Receive control failed (result -32) [ 386.317915][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 386.348214][T20343] __nla_validate_parse: 9 callbacks suppressed [ 386.348233][T20343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3968'. [ 386.480045][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3970'. [ 386.496718][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3970'. [ 386.559369][ T7203] net_ratelimit: 4 callbacks suppressed [ 386.559388][ T7203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.598980][ T7203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.679102][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.687882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.638255][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.959018][T14265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.967973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.107545][T20317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.123158][T20352] validate_nla: 2 callbacks suppressed [ 389.123186][T20352] netlink: 'syz.2.3971': attribute type 2 has an invalid length. [ 389.155741][T20352] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3971'. [ 389.391669][T20380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3978'. [ 389.467062][ T29] audit: type=1107 audit(1782223541.745:13): pid=20383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='np‚žçÕ”ãÖŽÒ' [ 389.495782][T20386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3980'. [ 389.506539][T20386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3980'. [ 389.521263][T20386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3980'. [ 389.694536][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.786011][T20410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3983'. [ 389.822051][T20415] ipt_ECN: cannot use operation on non-tcp rule [ 389.901416][T20421] netlink: 'syz.0.3990': attribute type 23 has an invalid length. [ 389.916373][T20423] netlink: 'syz.0.3990': attribute type 23 has an invalid length. [ 390.158041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.273898][T20446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3999'. [ 390.719252][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.265920][T20525] netlink: 'syz.3.4015': attribute type 15 has an invalid length. [ 391.293301][T20525] netlink: 'syz.3.4015': attribute type 15 has an invalid length. [ 391.328324][T14259] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 391.351710][T14259] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 391.364388][T14259] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 391.391055][T14259] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 391.447965][ T5282] veth0_vlan: left promiscuous mode [ 391.481583][ T5282] veth0_vlan: entered promiscuous mode [ 391.593516][T20548] __nla_validate_parse: 14 callbacks suppressed [ 391.593555][T20548] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4023'. [ 391.674102][T20553] netlink: 'syz.0.4026': attribute type 10 has an invalid length. [ 391.726655][T20553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.758707][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.804216][T20553] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 391.893353][T20577] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4029'. [ 391.921581][T20567] Can't find ip_set type [ 391.936761][T20577] netlink: ct family unspecified [ 391.998333][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.007160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.033292][T20584] tipc: Enabling of bearer rejected, failed to enable media [ 392.079259][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4032'. [ 392.079477][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4032'. [ 392.483510][T20626] syzkaller1: entered promiscuous mode [ 392.491424][T20626] syzkaller1: entered allmulticast mode [ 392.605484][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4038'. [ 392.692824][T20640] netlink: 'syz.0.4039': attribute type 2 has an invalid length. [ 392.719322][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4039'. [ 392.801278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.814897][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.856536][T20650] netlink: 'syz.2.4041': attribute type 11 has an invalid length. [ 392.907628][T20653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.147561][T20657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4042'. [ 393.177216][T20664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.478651][T20685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.633017][T20697] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4052'. [ 393.840939][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.869676][T20722] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.4060'. [ 393.944893][T20729] tipc: Enabling of bearer rejected, failed to enable media [ 394.001537][T14265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.086015][T20739] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4062'. [ 394.396799][T20753] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 394.717862][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 394.844222][T20801] xt_hashlimit: overflow, try lower: 3/0 [ 394.920888][T20810] netlink: 'syz.1.4079': attribute type 12 has an invalid length. [ 394.941008][T20810] netlink: 'syz.1.4079': attribute type 11 has an invalid length. [ 394.991011][T20813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.377006][T20844] netlink: 'syz.1.4085': attribute type 7 has an invalid length. [ 395.388510][T20844] netlink: 'syz.1.4085': attribute type 7 has an invalid length. [ 395.397701][T20848] netlink: 'syz.2.4087': attribute type 13 has an invalid length. [ 395.589973][T20859] netlink: 'syz.0.4089': attribute type 1 has an invalid length. [ 395.626297][T20859] bond5: entered promiscuous mode [ 395.639875][T20859] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.653242][T20859] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 395.712721][T20859] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 395.731153][T20859] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 395.893221][T20884] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.967292][T20892] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 395.982265][T20892] bond4 (unregistering): Released all slaves [ 396.057429][T20900] netlink: 'syz.1.4100': attribute type 1 has an invalid length. [ 396.390921][T20926] netlink: 'syz.0.4111': attribute type 24 has an invalid length. [ 396.590701][T20934] hsr_slave_1 (unregistering): left promiscuous mode [ 396.833885][T20954] netlink: 'syz.3.4119': attribute type 27 has an invalid length. [ 396.859399][T20954] netlink: 'syz.3.4119': attribute type 4 has an invalid length. [ 396.879132][T20954] __nla_validate_parse: 11 callbacks suppressed [ 396.879151][T20954] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4119'. [ 396.957935][ T9] net_ratelimit: 12 callbacks suppressed [ 396.957955][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.162170][T20983] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 397.194912][T20990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4127'. [ 397.218021][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.226752][T20992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4127'. [ 397.226842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.399858][T20997] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 397.411887][T20997] bond2: option packets_per_slave: allowed values 0 - 65535 [ 397.422552][T20997] bond2 (unregistering): Released all slaves [ 397.450694][T21002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4132'. [ 397.467943][T21002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4132'. [ 397.572928][T21016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4136'. [ 397.597063][T21019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4137'. [ 397.833504][T21034] syzkaller0: entered promiscuous mode [ 397.839222][T21034] syzkaller0: entered allmulticast mode [ 397.923920][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.998374][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.263297][T21063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.288236][T21065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.305205][T21071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'. [ 398.393253][T21075] tipc: Trying to set illegal importance in message [ 398.608445][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4156'. [ 398.784196][T21107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4164'. [ 398.789313][T21108] sctp: [Deprecated]: syz.0.4160 (pid 21108) Use of int in maxseg socket option. [ 398.789313][T21108] Use struct sctp_assoc_value instead [ 398.881766][T21113] bridge0: port 3(veth1_to_bridge) entered blocking state [ 398.899843][T21113] bridge0: port 3(veth1_to_bridge) entered disabled state [ 398.907475][T21113] veth1_to_bridge: entered allmulticast mode [ 398.914563][T21113] veth1_to_bridge: entered promiscuous mode [ 398.920612][T21113] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 398.944968][T21121] IPVS: set_ctl: invalid protocol: 41 172.20.20.27:20002 [ 398.945488][T21113] bridge0: port 3(veth1_to_bridge) entered blocking state [ 398.959367][T21113] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 399.050129][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.172647][T21145] netlink: 'syz.2.4178': attribute type 11 has an invalid length. [ 399.181398][T21145] netlink: 'syz.2.4178': attribute type 11 has an invalid length. [ 399.199790][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 399.213310][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.363320][T21181] vlan2: entered allmulticast mode [ 400.419355][T21181] bond0: entered allmulticast mode [ 400.462999][T21181] bond_slave_0: entered allmulticast mode [ 400.801325][T21197] syzkaller0: entered promiscuous mode [ 400.827019][T21197] syzkaller0: entered allmulticast mode [ 400.863807][T21214] validate_nla: 2 callbacks suppressed [ 400.863825][T21214] netlink: 'syz.0.4192': attribute type 29 has an invalid length. [ 401.008297][T21223] netlink: 'syz.4.4196': attribute type 10 has an invalid length. [ 401.183849][T21233] netlink: 'syz.3.4199': attribute type 1 has an invalid length. [ 401.967821][ C1] net_ratelimit: 7355 callbacks suppressed [ 401.967852][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.987877][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.001316][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.014975][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.028633][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.042328][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.055738][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.068955][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.082570][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.096239][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 405.417749][ C0] sched: DL replenish lagged too much [ 406.977769][ C1] net_ratelimit: 12115 callbacks suppressed [ 406.977799][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.997334][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.010438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.023645][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.036725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.049827][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.062924][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.076017][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.089672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.103076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.987900][ C1] net_ratelimit: 12430 callbacks suppressed [ 411.987942][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.007518][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.020659][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.033729][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.046767][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.059878][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.073078][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.086327][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.102467][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.115784][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.203977][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 416.997844][ C1] net_ratelimit: 13149 callbacks suppressed [ 416.997877][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.017434][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.031066][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.044833][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.057990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.071919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.090139][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.103294][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.117378][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.130584][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.007869][ C1] net_ratelimit: 13385 callbacks suppressed [ 422.007897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 422.027175][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.041023][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.056679][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 422.070387][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.083911][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.097649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 422.113147][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.127456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.139714][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 426.166485][T19947] Bluetooth: hci5: command 0x0406 tx timeout [ 427.018044][ C1] net_ratelimit: 13043 callbacks suppressed [ 427.018077][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.037723][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.050942][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.064011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.077282][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.090459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.103605][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.116655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.129289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.141455][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.027764][ C1] net_ratelimit: 13950 callbacks suppressed [ 432.027801][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.047248][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.059618][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.071961][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.084240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.096410][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.108648][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.121191][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.133343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.145566][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 435.043033][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 437.038053][ C1] net_ratelimit: 13413 callbacks suppressed [ 437.038091][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.057409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.070444][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.083592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.096720][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.110170][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.123657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.137074][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.150501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.163669][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.047827][ C1] net_ratelimit: 13900 callbacks suppressed [ 442.047858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.067325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.080427][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.093481][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.106701][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.119791][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.132854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.145868][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.158036][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.170204][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.058073][ C1] net_ratelimit: 13547 callbacks suppressed [ 447.058103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.077350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.089503][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.101839][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.113992][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.126148][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.138399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.150543][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.162845][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.175245][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.067959][ C1] net_ratelimit: 13416 callbacks suppressed [ 452.067989][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.087360][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.100586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.113681][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.126871][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.140205][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.153484][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.166569][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.180158][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.193241][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.077925][ C1] net_ratelimit: 13339 callbacks suppressed [ 457.077965][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.098368][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.112721][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.129112][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.141586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.153852][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.166135][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.178305][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.190719][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.202948][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.087829][ C1] net_ratelimit: 13494 callbacks suppressed [ 462.087861][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.107234][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.119536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.131788][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.143969][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.156254][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.168406][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.180550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.192801][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.204964][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.097923][ C1] net_ratelimit: 16437 callbacks suppressed [ 467.097955][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.098056][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 467.104830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.116783][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 467.129756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 467.141400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 467.154317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 467.166940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 467.180716][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.192277][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 472.107800][ C1] net_ratelimit: 18490 callbacks suppressed [ 472.107826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 472.107831][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 472.108187][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.114999][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 472.127225][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.139267][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 472.151592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 472.163750][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 472.176213][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 472.188341][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 476.000620][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 477.118083][ C1] net_ratelimit: 17610 callbacks suppressed [ 477.118095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 477.118114][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 477.125319][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 477.138160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 477.150196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 477.162674][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.175062][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 477.187974][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.200050][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 477.212485][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.121175][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 482.127844][ C1] net_ratelimit: 17653 callbacks suppressed [ 482.127876][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 482.128510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 482.134648][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 482.147781][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 482.160958][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.173063][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 482.185432][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.197962][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 482.211097][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.222956][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 487.137926][ C0] net_ratelimit: 18499 callbacks suppressed [ 487.137949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 487.138017][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 487.145094][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 487.157479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.169725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 487.182133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.194220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 487.206894][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.220615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 487.234096][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.147935][ C1] net_ratelimit: 16886 callbacks suppressed [ 492.147957][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 492.147967][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.155328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 492.167498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.179615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 492.192179][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 492.205136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 492.217703][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 492.229634][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 492.242072][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.157912][ C0] net_ratelimit: 17128 callbacks suppressed [ 497.157935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 497.158008][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.165168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 497.177317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.189470][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 497.202358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 497.215302][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 497.227393][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 497.239743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 497.252129][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.167849][ C1] net_ratelimit: 18247 callbacks suppressed [ 502.167881][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.168723][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 502.174560][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 502.187089][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 502.200017][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 502.213159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 502.225676][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.237796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 502.250117][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.262224][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 506.724958][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 507.177707][ C1] net_ratelimit: 18367 callbacks suppressed [ 507.177736][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 507.178177][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 507.184474][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.197048][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 507.209379][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.221436][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 507.233757][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.245908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 507.258346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.270932][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 509.297694][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 509.304686][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21226/1:b..l [ 509.312715][ C0] rcu: (detected by 0, t=10503 jiffies, g=78221, q=2927 ncpus=2) [ 509.321065][ C0] task:syz.3.4199 state:R running task stack:24696 pid:21226 tgid:21226 ppid:16742 task_flags:0x400040 flags:0x00080002 [ 509.334588][ C0] Call Trace: [ 509.337897][ C0] [ 509.340935][ C0] __schedule+0x17d9/0x56c0 [ 509.345918][ C0] ? __pfx___schedule+0x10/0x10 [ 509.350798][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 509.355942][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 509.361872][ C0] ? __pfx___schedule+0x10/0x10 [ 509.366758][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 509.371871][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 509.377274][ C0] preempt_schedule_common+0x82/0xd0 [ 509.382670][ C0] ? nl80211_netlink_notify+0x46b/0x840 [ 509.389053][ C0] preempt_schedule_thunk+0x16/0x40 [ 509.394456][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 509.399826][ C0] __local_bh_enable_ip+0xe1/0x130 [ 509.405058][ C0] nl80211_netlink_notify+0x46b/0x840 [ 509.410462][ C0] ? nl80211_netlink_notify+0x74/0x840 [ 509.415945][ C0] notifier_call_chain+0x1a5/0x3d0 [ 509.421084][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 509.426851][ C0] netlink_release+0x11f8/0x1aa0 [ 509.432053][ C0] ? netlink_release+0x106/0x1aa0 [ 509.437111][ C0] ? __pfx_netlink_release+0x10/0x10 [ 509.442426][ C0] ? down_write+0x16d/0x200 [ 509.446957][ C0] ? __pfx_down_write+0x10/0x10 [ 509.451838][ C0] sock_close+0xad/0x220 [ 509.456198][ C0] ? __pfx_sock_close+0x10/0x10 [ 509.461076][ C0] __fput+0x418/0xa50 [ 509.465111][ C0] task_work_run+0x1d9/0x270 [ 509.469731][ C0] ? __pfx_task_work_run+0x10/0x10 [ 509.474859][ C0] ? rcu_is_watching+0x15/0xb0 [ 509.479654][ C0] exit_to_user_mode_loop+0x1fa/0x730 [ 509.485139][ C0] ? rcu_is_watching+0x15/0xb0 [ 509.489919][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.496021][ C0] do_syscall_64+0x353/0x580 [ 509.500643][ C0] ? trace_irq_disable+0x3b/0x140 [ 509.505689][ C0] ? clear_bhb_loop+0x40/0x90 [ 509.510385][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.516298][ C0] RIP: 0033:0x7ff61199ce59 [ 509.520726][ C0] RSP: 002b:00007fff0897a288 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 509.529158][ C0] RAX: 0000000000000000 RBX: 00007ff611c17da0 RCX: 00007ff61199ce59 [ 509.537141][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 509.545123][ C0] RBP: 00007ff611c17da0 R08: 0000000000000006 R09: 0000000000000000 [ 509.553120][ C0] R10: 00007ff611c17cb0 R11: 0000000000000246 R12: 00000000000621a0 [ 509.561110][ C0] R13: 00007ff611c1663c R14: 0000000000062030 R15: 00007fff0897a390 [ 509.569104][ C0] [ 509.572142][ C0] rcu: rcu_preempt kthread starved for 2206 jiffies! g78221 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 509.583256][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 509.593231][ C0] rcu: RCU grace-period kthread stack dump: [ 509.599125][ C0] task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 509.612719][ C0] Call Trace: [ 509.616011][ C0] [ 509.618963][ C0] __schedule+0x17d9/0x56c0 [ 509.623494][ C0] ? rcu_is_watching+0x15/0xb0 [ 509.628279][ C0] ? rcu_is_watching+0x15/0xb0 [ 509.633064][ C0] ? __pfx___schedule+0x10/0x10 [ 509.637929][ C0] ? schedule+0x90/0x360 [ 509.642190][ C0] ? rcu_is_watching+0x15/0xb0 [ 509.646980][ C0] ? lock_release+0x4b/0x3c0 [ 509.651609][ C0] schedule+0x164/0x360 [ 509.655788][ C0] schedule_timeout+0x152/0x2c0 [ 509.660652][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 509.666043][ C0] ? __pfx_process_timeout+0x10/0x10 [ 509.671380][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 509.677215][ C0] ? prepare_to_swait_event+0x322/0x350 [ 509.682829][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 509.687720][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 509.693896][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 509.699202][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 509.704424][ C0] ? trace_irq_enable+0x3b/0x140 [ 509.709387][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 509.714005][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 509.719223][ C0] ? __kthread_parkme+0x71/0x1f0 [ 509.724189][ C0] ? __kthread_parkme+0x196/0x1f0 [ 509.729252][ C0] kthread+0x388/0x470 [ 509.733341][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 509.738915][ C0] ? __pfx_kthread+0x10/0x10 [ 509.743524][ C0] ret_from_fork+0x514/0xb70 [ 509.748175][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 509.753310][ C0] ? __switch_to+0xc89/0x1420 [ 509.758467][ C0] ? __pfx_kthread+0x10/0x10 [ 509.763874][ C0] ret_from_fork_asm+0x1a/0x30 [ 509.769128][ C0] [ 509.772204][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 509.778561][ C0] Sending NMI from CPU 0 to CPUs 1: [ 509.783805][ C1] NMI backtrace for cpu 1 [ 509.783833][ C1] CPU: 1 UID: 0 PID: 12383 Comm: kworker/R-bond5 Not tainted syzkaller #0 PREEMPT(full) [ 509.783851][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.783862][ C1] Workqueue: bond5 bond_alb_monitor [ 509.784010][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 509.784045][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 c0 d6 35 0a cc 89 f6 31 d2 e9 86 8e 7a 03 66 0f 1f 44 00 [ 509.784059][ C1] RSP: 0018:ffffc90000a07c30 EFLAGS: 00000046 [ 509.784072][ C1] RAX: 000000000000063f RBX: ffff8880b8723c80 RCX: 0000000000000838 [ 509.784083][ C1] RDX: 0000000000000000 RSI: 000000000000063f RDI: 0000000000000838 [ 509.784092][ C1] RBP: ffffc90000a07d00 R08: 0000000000000001 R09: 0000000000000000 [ 509.784102][ C1] R10: 0000000000000003 R11: ffffffff8173f530 R12: 000000000000063f [ 509.784116][ C1] R13: dffffc0000000000 R14: 0000000010006804 R15: 0000000000000020 [ 509.784127][ C1] FS: 0000000000000000(0000) GS:ffff88812537b000(0000) knlGS:0000000000000000 [ 509.784140][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.784150][ C1] CR2: 0000200000006038 CR3: 0000000011e4a000 CR4: 00000000003526f0 [ 509.784164][ C1] Call Trace: [ 509.784170][ C1] [ 509.784176][ C1] lapic_next_event+0x11/0x20 [ 509.784194][ C1] clockevents_program_event+0x385/0x630 [ 509.784217][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 509.784234][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 509.784258][ C1] ? tick_program_event+0x8f/0x120 [ 509.784281][ C1] __hrtimer_rearm_deferred+0x26c/0x420 [ 509.784301][ C1] irqentry_exit+0x8b7/0x8f0 [ 509.784325][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.784342][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 509.784361][ C1] Code: f7 e8 9d ba f7 f5 f7 c3 00 02 00 00 74 05 e8 10 77 23 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 d1 e8 f5 65 8b 05 2d a4 8f 07 85 c0 74 18 5b 41 5e e9 91 48 [ 509.784373][ C1] RSP: 0018:ffffc90000a07e58 EFLAGS: 00000206 [ 509.784385][ C1] RAX: 0000000000000046 RBX: 0000000000000282 RCX: 0000000080000102 [ 509.784394][ C1] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: 0000000000000001 [ 509.784405][ C1] RBP: ffff88801c6dcd08 R08: ffffffff903114f7 R09: 1ffffffff206229e [ 509.784420][ C1] R10: dffffc0000000000 R11: fffffbfff206229f R12: 0000000000000000 [ 509.784431][ C1] R13: ffff88814bcb7000 R14: ffffffff9a6a0af8 R15: 0000000000000000 [ 509.784449][ C1] debug_check_no_obj_freed+0x39e/0x450 [ 509.784515][ C1] ? ip6_mc_input+0x909/0xbc0 [ 509.784609][ C1] kmem_cache_free+0xfd/0x650 [ 509.784634][ C1] ip6_mc_input+0x909/0xbc0 [ 509.784655][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 509.784674][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 509.784693][ C1] ? rcu_read_lock_held+0xa/0x50 [ 509.784710][ C1] ? ip6_rcv_finish+0x265/0x280 [ 509.784733][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 509.784750][ C1] ip_sabotage_in+0x1e1/0x270 [ 509.784830][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 509.784850][ C1] nf_hook_slow+0xc5/0x220 [ 509.784922][ C1] NF_HOOK+0x21f/0x3c0 [ 509.784940][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 509.784958][ C1] ? NF_HOOK+0x9e/0x3c0 [ 509.784975][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 509.784992][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 509.785010][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 509.785030][ C1] ? netif_receive_skb+0x102/0xbf0 [ 509.785080][ C1] netif_receive_skb+0x278/0xbf0 [ 509.785096][ C1] ? NF_HOOK+0xfa/0x3a0 [ 509.785146][ C1] ? rcu_is_watching+0x15/0xb0 [ 509.785163][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 509.785179][ C1] ? lock_release+0x4b/0x3c0 [ 509.785201][ C1] ? nf_hook_slow+0x182/0x220 [ 509.785215][ C1] ? rcu_read_lock_held+0xa/0x50 [ 509.785231][ C1] ? br_netif_receive_skb+0x126/0x190 [ 509.785253][ C1] NF_HOOK+0xa4/0x3a0 [ 509.785271][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 509.785291][ C1] ? NF_HOOK+0xfa/0x3a0 [ 509.785310][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 509.785329][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 509.785352][ C1] ? br_pass_frame_up+0x275/0x420 [ 509.785372][ C1] br_handle_frame_finish+0x1192/0x1990 [ 509.785397][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 509.785424][ C1] ? nf_hook_slow+0x176/0x220 [ 509.785440][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 509.785459][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 509.785482][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 509.785502][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 509.785522][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 509.785630][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 509.785651][ C1] ? rcu_is_watching+0x15/0xb0 [ 509.785667][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 509.785707][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 509.785729][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 509.785751][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 509.785772][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 509.785794][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 509.785816][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 509.785838][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 509.785857][ C1] br_handle_frame+0x127f/0x1510 [ 509.785887][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 509.785908][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 509.785928][ C1] ? trace_irq_enable+0x3b/0x140 [ 509.785951][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 509.785970][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 509.786014][ C1] ? NF_HOOK+0x9e/0x3c0 [ 509.786034][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 509.786053][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 509.786070][ C1] ? ip6_rcv_finish+0x265/0x280 [ 509.786089][ C1] ? NF_HOOK+0x336/0x3c0 [ 509.786111][ C1] ? lock_acquire+0x5f/0x350 [ 509.786132][ C1] ? process_backlog+0x3c3/0x1860 [ 509.786156][ C1] ? process_backlog+0x3c3/0x1860 [ 509.786175][ C1] process_backlog+0x706/0x1860 [ 509.786195][ C1] ? process_backlog+0x3c3/0x1860 [ 509.786218][ C1] __napi_poll+0xaa/0x330 [ 509.786236][ C1] net_rx_action+0x61d/0xf50 [ 509.786258][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 509.786276][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 509.786320][ C1] ? rcu_is_watching+0x15/0xb0 [ 509.786339][ C1] ? net_tx_action+0xbff/0xc30 [ 509.786359][ C1] handle_softirqs+0x225/0x840 [ 509.786380][ C1] ? __irq_exit_rcu+0xca/0x220 [ 509.786401][ C1] __irq_exit_rcu+0xca/0x220 [ 509.786420][ C1] irq_exit_rcu+0x9/0x30 [ 509.786438][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 509.786457][ C1] [ 509.786462][ C1] [ 509.786468][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.786484][ C1] RIP: 0010:queue_delayed_work_on+0x17a/0x1e0 [ 509.786510][ C1] Code: 00 4d 85 f6 75 16 e8 25 04 39 00 eb 15 e8 1e 04 39 00 e8 09 03 1b 0a 4d 85 f6 74 ea e8 0f 04 39 00 fb 65 48 8b 05 06 5e ad 11 <48> 3b 44 24 20 75 56 89 d8 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f [ 509.786522][ C1] RSP: 0018:ffffc9000624f960 EFLAGS: 00000293 [ 509.786535][ C1] RAX: 21f35099518bff00 RBX: ffff88803c379301 RCX: ffff88804bea5d00 [ 509.786546][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.786555][ C1] RBP: 0000000000000008 R08: ffffffff903114f7 R09: 1ffffffff206229e [ 509.786566][ C1] R10: dffffc0000000000 R11: fffffbfff206229f R12: 0000000002000001 [ 509.786577][ C1] R13: 0000000000000000 R14: 0000000000000200 R15: 0000000000000000 [ 509.786594][ C1] ? rcu_is_watching+0x15/0xb0 [ 509.786610][ C1] bond_alb_monitor+0x122e/0x17c0 [ 509.786628][ C1] ? irqentry_exit+0x218/0x8f0 [ 509.786646][ C1] ? trace_irq_disable+0x3b/0x140 [ 509.786667][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 509.786685][ C1] ? rcu_is_watching+0x15/0xb0 [ 509.786700][ C1] ? lock_acquire+0x5f/0x350 [ 509.786720][ C1] ? __pfx_bond_alb_monitor+0x10/0x10 [ 509.786739][ C1] ? rcu_is_watching+0x15/0xb0 [ 509.786755][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 509.786774][ C1] process_scheduled_works+0xa8e/0x14e0 [ 509.786803][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 509.786820][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 509.786840][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 509.786859][ C1] ? assign_work+0x3af/0x5d0 [ 509.786885][ C1] rescuer_thread+0x7b6/0x10b0 [ 509.786907][ C1] ? rescuer_thread+0xb8/0x10b0 [ 509.786935][ C1] kthread+0x388/0x470 [ 509.786949][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 509.786969][ C1] ? __pfx_kthread+0x10/0x10 [ 509.786982][ C1] ret_from_fork+0x514/0xb70 [ 509.786998][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 509.787013][ C1] ? __switch_to+0xc89/0x1420 [ 509.787035][ C1] ? __pfx_kthread+0x10/0x10 [ 509.787049][ C1] ret_from_fork_asm+0x1a/0x30 [ 509.787073][ C1] [ 512.187781][ C1] net_ratelimit: 15129 callbacks suppressed [ 512.187812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.188092][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 512.194490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.207178][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 512.218755][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.231975][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 512.242737][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.255937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 512.266655][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 512.279976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 517.197694][ C1] net_ratelimit: 16990 callbacks suppressed [ 517.197725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.198437][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 517.204376][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.216891][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 517.229325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.241442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 517.253805][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.266021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0) [ 517.278494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 517.290987][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:36:db:23:c4:d9, vlan:0)