last executing test programs: 34.70382141s ago: executing program 1 (id=13441): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000002c0)='e', 0x1, 0x24000000, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011000120534259aabb660889510dde003c4c4cbbad591888028de27116aad91605b7a6"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) r3 = socket(0x2, 0x80805, 0x0) (async, rerun: 64) close(0x3) (rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000580)={0x40000008}) (async) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) (async) recvfrom(r0, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 34.133477026s ago: executing program 1 (id=13445): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'veth0\x00', {0x1}, 0x5}) 33.847971103s ago: executing program 1 (id=13448): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r2 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x6a, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r4}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000000)={0x7, 0x5, 0x8000000000000000, 0x8, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0xff, 0x200000, 0x6, 0x8}}]}]}}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x10000}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x20008000) 33.011551087s ago: executing program 1 (id=13457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000040), 0x12) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000080), 0x12) close(r4) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$can_raw(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/70, 0x46}], 0x2}, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffffffffffffff0e}, 0x1, 0x0, 0x0, 0x8817}, 0xc008006) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000080000000003e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000042fc8200736f757263655f6d61635f69735f6d756c746963617374000500820000000000a3a15266acb88f7f247cd942a18aecc81f84ab2c164dbd0039b467799885291af9756c53fe10e3265b1c87686e054234b0d5eb6bf444fc9c47a34756c0ce3ac14e22047696474c4f6017f9d2e8ec5ad61f60160d6addd243cf239f9f7b7944e82e3847a2a668dacd281936cb4c70"], 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 31.854243734s ago: executing program 1 (id=13465): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0xc, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x2}, 0x10}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x38}}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000040)={0x3, 0x10000, 0x2, 0x80}, 0x10) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x0, 0xffffffaa}, 0xc) 31.617726452s ago: executing program 1 (id=13467): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) (async) close(r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004"], 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15.812811812s ago: executing program 32 (id=13467): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) (async) close(r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004"], 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.429761379s ago: executing program 2 (id=13511): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xfffffffffffffeff, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x68}}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0x4004743b, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000240)=0x1e) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x4, [@fwd={0xb}, @fwd={0x8}, @volatile={0x3, 0x0, 0x0, 0x9, 0x3}, @enum64={0xe, 0x6, 0x0, 0x13, 0x0, 0x2, [{0xd, 0xffff, 0x1}, {0x6, 0xffff, 0xff}, {0xc, 0x6, 0x6}, {0x2, 0xb1, 0xfffff721}, {0x6, 0x3, 0xc}, {0x8, 0xc7, 0x4}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0xf1, 0x5f]}}, &(0x7f0000000100)=""/30, 0xa0, 0x1e, 0x0, 0xfff}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 7.687073218s ago: executing program 3 (id=13516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)={0x44, r1, 0x800, 0x70bd2a, 0x25dfdbdb, {}, [{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0xffffff7d, 0x11, 0xff}}, {@pci, {0x0, 0xb, 0x464d}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0xb, 0x10}, {0x0, 0x11, 0xb2}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0xb, 0x9}, {0x0, 0x11, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000064010101000000000000000000000000ac1414130000000000000000000000004e2200004e250007020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="829d6da71016ce2c69e57a15752a79444882649f4ef69f7ac4d02d544bdfa69ae68122fbbe659dd7e12ff20e"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40) 7.547250259s ago: executing program 3 (id=13517): socket$kcm(0x29, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4) r1 = socket(0x11, 0xa, 0x0) bind$packet(r1, 0x0, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x3}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="2d7528743a4c34033ea8ec2ef5b0d792dd1bc3fe85f2b23d22d1a11cd5ee47a1dab162c84100040000b3f914145df009d8f9b68a4b629323f331a1041dcc5d170ab9c3261911aac6e7e7996d0cdd3251613e4349678b6ee890c832154327bde46aef917528476a43df382128413eaac838433a381230b9dbc12db8727a00c211bef8bba1f95c25ea67727660a19b1a35cc374a2aecd1d681f9e6194695de31704836acd9da8219d5aeb179bdcefd9a59cf99f38d7b1e2151558d868fab51a1a6beda39056fd79d6a46a1e437cd610e5615921d539929c459746e6f45a42b9a460cf5283a2f56ace81e4aec"], 0x5) r4 = socket(0x1e, 0x5, 0x0) listen(r4, 0x0) accept4$nfc_llcp(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000016c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000000e40)={0x808, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x5e8, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x43c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x420, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x9, 0x0, 0x0, 0x7, 0xaa81, 0x1, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5}, {0x6, 0x4}, {0x5, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x7}, {0x1}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x3, 0x4}, {0x7, 0x5}, {0x2, 0x5}, {0x6, 0x7}, {0x1, 0x9}, {0x0, 0x1}, {0x3, 0x7}, {0x2, 0x8}, {0x2, 0x1}, {0x2, 0x3}, {0x7, 0x2}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x6, 0x7}, {0x2, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x24, 0x1, 0x9, 0x6c, 0xc, 0x1, 0x6, 0xa, 0x60, 0x9, 0x18, 0xbe847266f6f5310e, 0xc, 0x1b, 0x41f0ba1e6bc3f829, 0xb, 0x4, 0x3, 0x5, 0x5, 0x12, 0x5, 0x24, 0x2, 0x48, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x5, 0x4, 0x9, 0x8, 0x5, 0x4]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x5, 0x5, 0xf2, 0x2, 0x2, 0x0, 0xa00]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x0, 0x0, 0x1, 0xd, 0xff, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x18, 0x48, 0x24, 0x6, 0x36, 0xb, 0x30, 0x3, 0x30, 0x6c, 0x30, 0x12, 0x16, 0x18, 0x4, 0x36, 0x24, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0xc2c, 0x2, 0x9, 0x2, 0x2, 0xf000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x8, 0x2, 0x176d, 0x8, 0xc, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x24, 0xb, 0x9, 0x24, 0x18, 0x2, 0x4, 0x4, 0x30, 0x12, 0x18, 0x6, 0x60, 0x9, 0x4, 0x8, 0x12, 0x5, 0x9, 0x6, 0x16, 0x18, 0x60, 0x2, 0x18, 0x2, 0x16, 0x6, 0x30]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x1000, 0x0, 0xf6, 0xcd, 0x2, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4}, {0x1, 0xa}, {0x2, 0x3}, {0x5, 0xa}, {0x3}, {0x7, 0x9}, {0x7, 0x6}, {0x7, 0x7}, {0x6}, {0x2}, {0x6, 0x7}, {0x5, 0x8}, {0x6, 0x2}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0xffff, 0xa, 0x9, 0x8, 0x1f1, 0x2, 0x4]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x6, 0x1b, 0x3, 0x36, 0x6, 0x24, 0x1, 0x30, 0xc, 0xb, 0x0, 0x2, 0x18, 0x4, 0x9, 0xb, 0x2, 0x30, 0xb, 0x5, 0x1b, 0x12, 0x16, 0x1, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x4, 0x2, 0x800, 0x7, 0x67, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x8, 0x5, 0x1, 0x1ff, 0x3, 0x3ff]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0xa}, {0x6, 0x7}, {0x5, 0x2}, {0x0, 0x9}, {0x6, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x4}, {0x1}, {0x5, 0x6}, {0x6}, {0x0, 0xa}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x2}, {0x1}, {0x1, 0x9}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x9}, {0x3, 0x2}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x8}, {}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0x2}, {0x3}, {0x3, 0x8}, {0x4, 0x16}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x7}, {0x4}, {0x7, 0x8}, {0x7, 0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x4, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8001, 0xb77a, 0x3, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x4, 0x36, 0x62, 0x1b, 0x30, 0x1f, 0x3, 0x1, 0x2, 0x18, 0x6c, 0xb, 0x30, 0x48, 0x6c, 0x60, 0xc, 0x48, 0x60, 0xb, 0x2, 0x6a, 0x48, 0x2, 0x6, 0x9, 0x2, 0x5, 0x30, 0x60, 0x16]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x3, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x7, 0x6}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x9, 0x9, 0x8, 0x84dd, 0xfff8, 0xfff8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x30, 0x48, 0x2, 0x60, 0x12, 0xb, 0x48, 0x11]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x6}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x4}, {0x7, 0x2}, {0x1}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x5, 0x4}, {0x2, 0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x3, 0x1}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x1, 0x1}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {}, {0x4, 0x4}, {0x6, 0x9}, {0x5, 0x5}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x7}, {}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x3, 0x7}, {0x4, 0x4}, {0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x12, 0x18, 0x9, 0x1, 0xc, 0xc, 0xd2379793e99601b4, 0x48, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3, 0x1ff]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0xa}, {0x2, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x6}, {0x3, 0x8}, {0x6, 0x7}, {0x7, 0xa}, {0x4, 0x8}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xa9}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x800, 0x3, 0x9, 0x5, 0x7, 0x9, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x7}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x6}, {0x2, 0x6}, {0x5, 0xa}, {0x2, 0x1}, {0x7, 0x9}, {0x7, 0xa}, {0x4, 0x5}, {0x5, 0x4}, {0x7}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x6, 0x5}, {0x4, 0xa}, {0x6, 0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x4, 0x5}, {0x6, 0x3}, {0x4, 0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x0, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1000, 0x9, 0x58, 0x2, 0xf, 0x800, 0x5]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4d, 0x9, 0x3, 0x18, 0x18, 0x4, 0x0, 0x3, 0x1b, 0x4, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x7ff, 0x101, 0x8, 0x9, 0x9, 0x5, 0x800]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x93}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x10, 0xe, 0x40, 0x8, 0x5a, 0x8001, 0xb57]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0xdc2, 0xb, 0x3f, 0xfb3, 0x4, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x8, 0x89, 0x9, 0x8f, 0x40, 0xb1e, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4000, 0x8, 0x101, 0x50, 0x1, 0x11, 0x4, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x7fff, 0xd7f9, 0x6, 0x3, 0xd, 0x83bb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xe43, 0x40, 0xfffc, 0x63a8, 0x8000, 0x7fff, 0x6]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x5, 0x16, 0x1b, 0x3, 0x1f, 0x1, 0x12, 0x36, 0x24, 0x30, 0x44, 0x6, 0xc, 0x4, 0xb, 0x48, 0x3, 0x1, 0x6c, 0x18, 0x6a, 0x24, 0x2, 0x60, 0x6c, 0x2, 0xb, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x5, 0x4, 0x16, 0x5, 0x4, 0x4, 0x2, 0x5, 0x9, 0x48, 0x3]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x5}, {0x5}, {0x3, 0x7}, {0x2, 0xa}, {0x1, 0x9}, {0x3, 0x8}, {0x7, 0xa}, {0x7, 0x8}, {0x1, 0x5}, {0x7, 0x8}, {0x0, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1dc, 0x11d, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0xa}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x5}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x5, 0xa}, {0x7, 0x3}, {0x5, 0x8}, {0x5}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x3}, {0x3, 0x8}, {0x7, 0xa}, {0x6, 0x9}, {0x3, 0x9}, {0x7, 0x3}, {0x1, 0x7}, {0x3, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x4, 0x7}, {0x7, 0x9}, {0x3, 0x5}, {0x3, 0x5}, {0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0xa}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x5}, {0x3, 0x8}, {0x1, 0xa}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x3}, {0x6, 0xa}, {0x1, 0x1}, {0x2, 0x9}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x8, 0x4679, 0xc5e5, 0x2, 0x7d]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x7, 0x8}, {0x7, 0xa}, {0x3}, {0x3}, {0x7, 0x9}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x4}, {}, {0x5, 0xa}, {0x6, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x7}, {0x6, 0x4}, {0x0, 0x4}, {0x7, 0x2}, {0x6, 0x5}, {0x4, 0x6}, {0x7, 0xa}, {0x0, 0xa}, {0x5, 0x4}, {0x7}, {0x7, 0x9}, {0x1}, {0x7, 0x1}, {0x6, 0x8}, {0x6, 0x9}, {0x7, 0x5}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x9}, {0x3}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x2}, {0x4, 0x5}, {0x5, 0xa}, {0x3, 0x8}, {0x1}, {0x4, 0x1f}, {0x6, 0x6}, {0x5, 0x5}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfff7, 0x0, 0xd0, 0x5, 0x9, 0x2, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x8e, 0x1, 0x7, 0x7ff, 0x6, 0x72, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x16, 0x16, 0x16, 0x10, 0x3, 0x5, 0x24, 0x3, 0x6, 0xb, 0xc, 0xb, 0x1, 0xb, 0x5, 0x6, 0x9, 0x4, 0x30, 0x0, 0x6c, 0x18, 0x16, 0x36, 0x1b, 0x48, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf65}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x175b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x808}, 0x1, 0x0, 0x0, 0x40080d4}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000003040)}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback, 0xb}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000600)="43368bfb5f199c5324b2837e565f084fd762be73d5ddb9c12a3f599286a962ba677b570b6a0e4e19ed472f5c7094a007117ab3899d9760907e812580deb62f116c6c3ccd88042fbe84cdc7d6bf60527056e1e1883b5df4619d8ebdbf3a3b23055345090d66d97bb8043acfe9b8314c9ceb310ff323d8399c", 0x78}, {&(0x7f00000008c0)="7889721b6016e6d5efb4da051ed0366e7d0ff3b5ecf31afd89a6f811d9d38ee52e61def34f13edb97ac3ffa4824fa25e84c0a7c6be7fcffeec2901cb4d6472b4d5a9adafbd9e9742ea78fc2693d0a12b01c2c1dca993c07ec44de3778fd81c1c013f10c22125b5c59f04e826874a9f101293d3e9bb882da61a2db0165e13bf3072", 0x81}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="50000000000000002900000036000000760600000000000001050000000000040104c91000000000000001c20400000004c2040000ae70c2394d3ead6c03010100000018e87919ae03904049edf2169c4d842e31442b8595c525cf7663343f206968982014ff7a4036c93f9d0cfa14a6f02dacf6f83d39065f4211abf3e3c45cf4eff7d1eb166582b800"/150], 0x50}}], 0x2, 0x4040005) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 6.683295423s ago: executing program 2 (id=13518): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000080)) (async) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40040c1) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40040c1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYRES32=r6], 0x8c}}, 0x0) 6.568509031s ago: executing program 3 (id=13519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffff"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r7, 0x100, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3b}]}, 0x34}}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r10, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x40008c1) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f00000001c0)=[{0x2, 0x400000000000000, {0x2, 0x0, 0x4}, {0x1, 0xff, 0x3}, 0xfd, 0xfe}], 0x20) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x74, r11, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_ethernet(0xd6, &(0x7f0000000100)={@remote, @link_local, @void, {@ipv4={0x800, @udp={{0xb, 0x4, 0x0, 0x6, 0xc8, 0x68, 0x0, 0x1, 0x11, 0x0, @empty, @remote, {[@cipso={0x86, 0x11, 0x3, [{0x5, 0xb, "caa97939a532657879"}]}, @lsrr={0x83, 0x7, 0xa7, [@broadcast]}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @opaque="a410bd6b4734671340c9d3260b98bc0fbee71e651775e600bedccde2361e54aa833dff927cf357c89d3d2d16b734451a7ab4ddf80424759721fff1a3852973675dd30350fef46f39e27c7de265bed78298952ab9cd4f111b2977b340c5d0c9cda6be60a23cfa11a701a4c355f6b78af75eb6d8c2db77b23c42f59b817869c8631439d22578cf72298a852dee4f3e723a8a3cd7ae"}}}}}, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000280)) 6.50176011s ago: executing program 4 (id=13520): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.789698406s ago: executing program 2 (id=13523): r0 = socket(0x11, 0x800000003, 0x0) (async, rerun: 32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r3, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x3, 0x11, 0x2}}]}, 0x4c}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xfc, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1cbe777b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xef8c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0xfffffff7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x6a, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async, rerun: 32) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000300)) (rerun: 32) 5.738305502s ago: executing program 0 (id=13524): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63", 0x8}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="110000006a"], 0xfe33) pread64(r0, &(0x7f0000000080)=""/57, 0x39, 0x800) 5.49549503s ago: executing program 3 (id=13525): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001200"], 0x1c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x2, 0x800, 0x4}]}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x36, 0x0, 0x1, 0x4863dbfa}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) recvmmsg(r0, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) 5.268198103s ago: executing program 0 (id=13526): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f0000000080)=""/202, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd28}, 0x21) 5.144226168s ago: executing program 4 (id=13527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x20) (async) write$cgroup_int(r0, &(0x7f0000000000), 0x12) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) (async, rerun: 32) writev(r0, &(0x7f0000003740)=[{&(0x7f0000000040)="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", 0xfb}, {&(0x7f0000000480)="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", 0xef3}], 0x2) (rerun: 32) 5.033871046s ago: executing program 0 (id=13528): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffff}, {0xfff3, 0xa}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0) (async, rerun: 64) r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000540)={&(0x7f0000000500), 0x0, 0xcc, 0x0, 0x3, 0x37, 0xfffffffffffffff7, 0x7, 0x9}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0xc) (rerun: 32) connect$802154_dgram(r2, &(0x7f0000000640)={0x24, @none={0x0, 0xffff}}, 0x14) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x44840}, 0x20000800) (async) sendmmsg$inet(r2, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000008c0)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)}}], 0x3, 0x20008084) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$sock(r4, 0x0, 0x0, 0x2004c005) sendto$rxrpc(r4, &(0x7f00000030c0)="8ba0ad94fa16f0c02d4faa6361c09afed60ca48ebb85f96f34fe0cffae21d18c238de2b330e51f3344e5", 0x2a, 0xc040, &(0x7f0000003100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x24) (async, rerun: 32) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0xa, 0x9}, {0xb, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000600000000000000fd07000018010000756c6c2500000000002020207a0bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008100000085000000b500000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x1f}, [@nested={0x45, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef122e"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 4.943780006s ago: executing program 4 (id=13529): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) 4.681367893s ago: executing program 0 (id=13530): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x100, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffb}, {0xfff3, 0x2}, {0xffff, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0xb8, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xa4, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mirred={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x84, 0x8, 0xfffffffa, 0xffffffff}, 0x1, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xb8}}, 0x810) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x3d0, 0x1398, 0x1398, 0x3d0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x2b8, 0x2e0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x8, 0x7c7, 0x5d, 0x2, 0x4, 0x2, 0x99, 0x0, 0x80, 0x78}, {0x8000000000000001}}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0xff000000, 0xffff00], 0x0, 0x8, 0x89, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x300, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="f9a1a670de1f7a22", 0x8}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x24044080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRESDEC=r5, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$rds(0x15, 0x5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r8, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffffffe}, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r10, 0xa773a000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x12, r9, 0x604ac000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000000000007911a800000000001e000000000000009500000c00000000d544cdac38e2cd42be2b4776189a09de3263ad0a942d0074301379ce4cf82f8adcadaae1a4ef92b7804fe8964d07cdd7231845fa4ca9dc27767d9094942f7ea32f5f81f7"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x8940}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r11, @ANYBLOB="3f9d00000000fedbdf25170000000c000600020000000000000074003080140004008a515546d728132ccd3635c3013e25dd0500020009000000140004008c0c155df14a3f07000000000000005b050002000700000024000300eaa462e0742bc17adaa4fc388c30f861e08e9c0266349d6d7e6809bee846404914000400b308ac8e8fb7298be9a0aa65168678fa08000300", @ANYRES32=r12, @ANYBLOB="840030806c00018008000400ff0000000c00050003000000000000000800010002000000080001000000000008000100020000003c00038006000100030000000c06000100010000000c000400000000000000000008000200030000f05d53e6bd0006000100ffff0000140004008e480336f427334f970ca8c7c95411230c000600"/144], 0x150}}, 0x4) 4.653533481s ago: executing program 3 (id=13531): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r3, &(0x7f0000000000)="25803c00", 0x4, 0x2004082c, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000480)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)="5d37f2401f1c7adc613cefe51a89abe8bb9cfadc399291acbe73f985557cefc03ac423b849683c767ed58941654e7e1af5b9535c789d9b19ec078a0f9a56d9f1f524dae50cf2545504859737cf2e0c7fa8ad73c08fd2e0667ecb926ba419ebca0abb8841a5e1537dd26be38e8cde26a83bec529d42439df284c3fb35396ecda0cf79458123184d752058e8b17c37061fdc9c145b1d36360c0a71e284e93b6e9deaa7cac8cf4c77b9ece1f2126ce5a10af9071002e4672f1201ab5a116ba72237d8bf8897b2e251a587fe04e5d08449741bb859ee5050d8389555c430a787168c0f109997833578e2b1fb49aea59d657165a55156fe60ec", 0xf7}, {&(0x7f0000000740)="f9c1fe4197a70cdcc244ed47d97cad1b8765d0d773e2bc89fa688544a07e6ce3801a51657c1a157cf2c43e8fedd956c26d7076783e9f1700775d0ff8cab820405824e99e3ba23edbaa92fdc6d7ee07d5f54c246d58b82c7cea35cc103d0783d2dca9008145da247e8a9491f1d4a165f7", 0x70}], 0x2, &(0x7f0000000880)=[{0x78, 0x10f, 0x6, "5bf3f2445abc94e78948a7bd7994ffa444844a23d119b3f525240e5df172964379018e5469246d9463e143cd1683f0ec173ee3a3a2d7f6b790f161d29843c502745fbfc043913e7cf85d78c12a2d63eca5fe97add265123966e75314c4b81ea928ef6d5e"}, {0x30, 0x118, 0xfffffff8, "8e79c4f201fbd1739c387f667ecbdac978c172fd403c62dc197f41f7d320a2"}, {0x60, 0x10d, 0x800, "2b7f5eee20cca338d58351f7512cd6381fba51b71b2f12c3a3ebc14765a25327b3b13488e2795c179cdddef11f2b75bee12fe50313a20b3ae62336bb3b6b845e17ab6e97f5ea91cc0b"}, {0xb0, 0xb9, 0x2, "92145f7cfa429cae24f79fc9c2fbe3db357bee9c5841c275b14e3be6c044599380062f531ea0fdc30ed7cf0a3101b246761bdab0d0bc61e9cc1b07247015ad7c01bb7f83e3fc8f6ce1b240d1964225151531e602ec9de7eccd2bce95a0bc5f1cb127e7db37057a73348c7ee70b6c6139d87792d96ba565fb6059862aee49ed444a9070fdad2e7098bb1a67014fb3f584c7ab6ad4dee2e1475be42981265e"}, {0x70, 0x107, 0x400, "c25dfc0ed004761fd0890859ccc5120a85c58870938a4c71f3436b2b024d57753beaabe92a1639ddc30bbc39435057c57dccbd421b7b1d839ccd3827baddc7182ec84b5f84ea441071f69de31ec4203fea87424ef2c65982c48e0a5cb0c6807d"}], 0x228}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x24) 4.620296847s ago: executing program 4 (id=13532): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40800, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2003}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x116}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="52030000", @ANYRES16=r5, @ANYBLOB="ff0600000000fcdbdf25520000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'vlan0\x00', @random="21a800"}) (rerun: 32) 4.133792017s ago: executing program 2 (id=13533): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r3 = socket(0x2, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) epoll_create1(0x80000) close(r3) 3.940630017s ago: executing program 2 (id=13534): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)={'b', ' *:* ', 'rw\x00'}, 0x9) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 3.54141456s ago: executing program 4 (id=13535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth1_to_bridge\x00', @multicast}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a200000000e0a010200000000000000004d8ed50a0000000900010073797a31000000001400000011000100000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x6e, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) pipe(&(0x7f0000002740)={0xffffffffffffffff}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r7, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x84, 0x8}, 0xc) r11 = socket(0x11, 0x3, 0x0) setsockopt(r11, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg(r11, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r12, 0x1, 0xe5, 0x6, @multicast}, 0x80, &(0x7f0000007fc0)=[{&(0x7f00000004c0)="02010200002d3922ff65b4355e953d23d254f00000008100", 0x18}, {&(0x7f0000006d40)="f35888a8cb004305c6dc19d47062e4666fffa2965456e09efa3556bdaccb6b869549e866d2cee9de5cb026174534fd16c01a55e37ed6a818164cace9a3b20cd12e4ae292eab50a46062d3a1712b30504b67242f52870a3c13203f363644d2d9c511876f164a015887bcd89048d2d75a111b9a0701e04296143c091a98672c86180e99e3898c240e1a8bd6e7643e91cd3cc1190b083f3e8852f893b79062358eae9c593c114700b2e0fecc2dd31e6ef28df049b719bc86a6d22986edd37bc8358176f2ecfdd8c0d768101adbd570e73bc79fc5bbfb84b445c9e547e55cc278be202b5207f45f1ba3704cec520d95b7a85099009de56003865d3343f31751f8e033d042bb7bfe059cf5c85252f15ee60fbecde459c5ed936850e921d7772071fece6184b17cd0ec412f03897896bb2e054fc891225fe9a48987d5263a7ea9f9a59e7da25d95e8c1aa196ad4f2b8bca0ed0b31d249e80cccb4b212c7a0a3ee54a7cec48d89b266675657bc41daae76a96b4afea0f01026f3956f654e8e7f61317a0d9881330cdb18e985a21799615c28f4330ed77c375e9ed1939610d69509343da45611d7edbf600400e33c5b5833db77c4e10aaf72be533feb0d3b0da4f924febb6e373078d415d18029397ecc2130b5960cd9b2e76835cd2b45cf7d64a1a93f56e73a6a644056c5c350cfc626fdec30a3075493d6c996cdb63773a39bac11d92aad0dcc15067f99fe5e03947d17fbf9f75849328c4a2475464ca3444350bd081e8b7cc2a8088f024e945785bde8ba630aa93b850f8584ebb9cda71c6ef76bf63b697f3a672522fd6cb9a3a0717da26906994e51c89bcfd066ad924cc8f8ef30128c85af09ed8cb91273b01eb6c224bba7b8fdf2df20705709bd181ca7653f02cfd9751e1d0eb4e95061c6c2d1bf329d7bb2f6b910775caa4e4060b1c482294bd8e127f61787f30f44774781f1d5698fa4d885645ef7fb8324401972902b1da0995c4010e97416eaecc3ad73e07c43360a45753920cb7a3a0d9933c1e5e8a748b42ff0633f1b665059023d33ac067ee5f07ff242a9a2d8a9ce570860385c8c9add0c4365dad78c87cc826556c20aae9fd974642778abbd41c3754be710454d7d70fa45371b5d219c85511888c52a9c84a7d43778476c5e48f79689b44826a6ea9e5ca12fe42b390538961fa4a2269fcc8f3c0764aa7aab7020a0bcbb026a5de6395944ca4fde38b598b8f0939baef89e0df6e65b9c9d45dda2345b273f28b0f32d2c7a6ac3bb61af5a8325bec7d56a8edb510bc507c1883cce869c456cdb54d11b2e008ca1e21166151333296e656f247dbb3b0002e43cb5120c27eb70467d2854225247dac65e533f762ac7e94996589f4a4c6037ed0976403b421ce511e650ce9b88720439a4ffdc2522952e1eecea479bac27b1ddfd09f679d8d23ce034133c1247d00209a6e98cfab2509403d4517bd7abb6243e177784f7800a4fe7095a0e00b4ed0b9e7d4d6afcf4080840fae38a5aad2caf512a5ce254ce8d3a7e69e36be24eabb89e3211a9b75ca0a2345759e1e2e087f98ae8ef4cac49bb50c40fca799d082c6b1a04a9de343529d2fe64553e829bd11474537f024c0d43e448b707297ab99e641b9f9461f9ca091ff99bcb9c58b189e058a71b6cf1af94a633cba5e84a9b62fa2abee4e662371db31f346b6a597fd92861b27803b7500c225da571b1035a34ed8f9d4f28c21adead950214d1422531684b2d58005792c22d184c56221458696efcc659e816fe23cc17af5203b554a8f950e3e3403cd6e727475ab5db6f81b3afb4dd31813e0bdaa7a67fd8fbb176a6c7fd9cdb29a67d428ba1b47dadbbf8852a3b19043b327b7086931d139f7339d5a875c88ad6aeced9f0bf89bf137abdec3805a1736f1f887a83a9545a635e24e84e9147f078b217950d3ecf24563558cb6f7602b561a1f30bc5ff63d94eedb480c8286bc81f1a1b457f207bd55f73b9b72e4600e8d01ad4d27e70cd6eeb50f300fab264872afbae123fc6d42a184d7895a5196ddfa17ca651cb46004ae1ffaf35ed95aadf85a32d398810f57db4bf13bfb751275b31044afbab1afba378975ee6c2235d3f8383f95a076e882f314bbce8fcc9ea77eb36066a9787a717b73de9502af73984e0845c5aff10e8ba700441f68b0ac6f9068366455c867bd861067f94a7ec69ef4da9197c1114cec40b4df9417d1650dc41446e568c220a53b7fa1c307233b1693f7d4f50826ce3ebaf17f54e1f5d6594aff933fcf8dd99c14abf926fba251f97fd47e1c56ab7cc907cab3e26f1e57ad4fb2b12bba8d1803b0c01eb7cf976ed97acf1bc42e2cf4961d9f3cab02f4575d6c5031223866a03f6200c9059085892e33dae980f40d86439412a0cabaf2cd40e4e879c50469710c61cf8c562208e08aa8beb37f715cb0079e7ea1c1a5fe23f7903cacd0027ec7623f0509028241ad029a73e582f345222152e2225c30261b7cf395d8d1953932a2477e2c5ad4193d547798adabc9e633d8f6242a0e37ad9dc2ff717921f6a337c5313efed7a584d82daa0668f88a2f2082cdbcb3b5d14353b92b16877b7112329a016208f518c9a7e6123d4168b7ed8883c7800538b2d489d99703da10b7831cee7a0f3c0eeaef330b5d186e05b3443837530dc734224976690c5f912896bda90b841e35206248eb0a47b687dae6d5d5f2df6f49715b8127b18ca186232e60fd2d8e513c97335e7c05c7593ed02d300192770ede8d86eb9cc0202b6191ba8a532c79766124b4ce72d4cb0661ca98f15cb76fb75b424d833337a5c8ef6fde679944f679c7ae442bbba5e832f004c20a3c1c5a7ba07be6e34f3b0347c10c69001c11d761133208566f8e2bad76fccd027cd3271e0887ac6af7386c41fdc95f29ebe1f8f11788e7915b961c324412a305fb1310227afa4db8f98b3eeeb523aa39ea570b43aa20d807174cf16bac27f25a9426afbc3197c1b770259973a3ebe1315f03f6a51608e7266cd7e1ddc88a02c60ec3efbe2fa5bf975fc473947dc3ce1a01bf47ba0611b2e8e86a439df6533ae3aaeac064b24cf2c755b01f8e9cf09c067a1071813250949698bba960978f4afd9fb71f0da51d8c0ab8c7055b980d5e07cd163d7135da30d8e51b949e48b73d37535af72c58d0420c7bc1877d321c58b1f40c778d6f2bdabc5cae06c18d1e9bd2fdb6e43225c9a29c8927f61a54296a634a9f1c2480310170118215edc8b519ef43b024772ccd25d5975477a5737b653f0fdea3b3742a8f8cf5a0f71fc06e25103189609ab3bd870b89ecd3c90347916a683a191925fc3bfaba93ff2370a968cd5b3d3a2e9fda47f4830ae1c93c416124fcdba4dc1706b1ff0be7bd461e6dd1150a552720b34db585e86c485bffbf2d3a8b4002ee96d52997c509cbdb8d08f3ee9dcf7cfb70d75405a11381cb1967656d7dab4dc859cb1599ad68ee60f754de248a419177b9e5241d6f30be83714f1266eb19c75b1c900dc01516df73614b52973e212304a55723a641f27b26c7de75e742d7782c4dba182e16c3780e5719f12da4d47cc1ffcaad016de9508de5bb7e98008b0720c958271ea1508034eb815a6cf5c1adfbb1061d9d3031ae767f82406c1cbc26859be19c97aa635ad96f0c6cc2f67e95fff6c2aec3c49a68e68f9ed5be5527032748f7e942b0711ec3cdc551cd86c2b5b9950ce08a35bedbc030daa985df339e4d61a831b683afb858c60a44def823faad63c370a9377829ba0f7e97bdf603473fa99bdf111b049f8c6ea2c5284d9c637de8e38d042203f880fe3841dd46a912261c48de6c51927f2df30cc1fa932c687f601b8285be46db914cd8863d2880e7a77fa10b91f4510d870d7315212adbd8f700db276c8488aa5d372f66545686db2915583f0b118590717901c11fd1023c2b783f826edf365114fff3206c3d1655af11936145bd174ae71c2fb81d501f99ad3e5662e0e5a6ab1942498827823332e2d5e2de02b9c5d0f62ebcb993c613e97f55deed185932e08df5c7bd61ce6e0c052bd07e0b71cb5cf5042a71d375395a28f0ea93726aa78c72ed38299b6ca3e636eb967cf10d4baca37649c9ed3503aacb1b867ec80afa542bd32b4953bc9cd76ed8f25065492e98e928348fc946569dfafd30a768fdefcea2d4ff0c2d6366b6887a24de48b62127692a67059d1a81d7b201633d6277335cbc6e5431bed538087f85111b8e6d7b8dfaff1dee91934fa19bf53526f4fe3cad0d463bada1612dca6ecc2a72ec754f6437652b1e0424d3814b016a5de01f9251a9d9df6e3fcb1fcb96f78dd82fd6cd964869dd18aaaecf8d0e9436b1d1767b9bbc362e96a437187bb53d4b1678f6c5190c6495e0c748a537d839f98920f434eb97d5a4a4fc6b3f3f363a6e0d04dbd14137a6e6f462354b2f0bd0d8d2ecf4c15841b183c3715f7d5a2481180935c2ebdb77f447a41f5d1a9e983d0834ad23bcc12b26b6b5e5a95c8946acb71d292b65d3c33840ed40d1529cce3186b61400b1152788fef3e4f0497ee5f2e67358da1bb29b6825cc93f019204b955aaf130792e25743d3ece5d0b9ce385a3219c0112f8b22c6b2322ae2cfe56c42f5ba520796359d7996dae494da8f4b37d54642f99dc91baf0b64fb3dc4aab3515a4d95f06ed0636fa70965ad36f99d94e0d7af739ebf44b69bd9026c339e2bb17a139676b15ee221ef1a412b96760dafa0c7a5228402a9304c50c1800f0f7c9165b79b01a023513ccbea374d24cf4d3079059aa684a6649997c475fea76ab875bddcec3b2de6402bc65332788afa419e311e8f043fa9757169a11490f82a987ae4f9efdb6e041ec17c6f26528ffc747b1b0aee72f4b3f0e8e04a7cf993dcdf259acf775b0bf2c98bf5a1bcafdd57c79faf9127df5ca71952f9d1681e4b726fd08658ddff668e9fd391c13936d74f0be2114cbc5eb33558a10dc022e97b85eabfd8fb24bb655b5f4e1006efc6ba3ebd5e935b04819f805ed2085f213b31d48c7bde3e4331c7409d1abb39c762f34d24d72fa304b717d7fbcb754524e685e9fb00d2434ee2d05b2e99e759af3a75b2233ccd08811104ac5e000f80ad91cc316c42d694c5e2d09149e4deedb1ef4b7edca603512deb65d8897c5bd00e0acf70d1b88d5a242df72e7f4408d78f95c93d61464decb3b9d1764f1e4470010106998f784f03950b9ffbe0a4080ed92c0cae68e4915cefb5f57b69b4a144b7cc8967366d043cfe235d8b89958cdcb5bb39c9174d339fab489c4399af7f57d708dee928a0719c86e9389e589d166a30e6786ff388dabb1bc8dbde82e778b01e53d5708c1317be6f7920de5c0f56f36a7e72c232a1dd01278a8f29939f3c50d74162886f4315a75cb696c7085cc5ec506ab917c672ee36185fe462a8c3e74f2ae0833fe27f8643aa96996f1aceb85a16ddb5be432e1a93547e6ef321e1cb113c7e1fe1f519f71f0f1847a125f4dbf415882018694188188d63aceb405548d92a769afed037f498419cbcc9473085c17d44046d04b18f3dcdc3ec3be41a1d0a43c233f4efdb5ae3636518b4983f38859c97771349303ff525190e482b2cf4c98ee83c893fcd9c2d5d90d946b8349ed991dc9cd797af729fe283c9c225205901db5d25f13ed42a1fdad82edd6e5f03b2d06202208759bf01a0c593ae0fc23f2afb291111ead781ca968accf99fff569f02ae5049eba81e0530632c11c63c59d3ecfd5b51e8cc", 0xfe2}], 0x2}, 0x816) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x4, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sk_msg, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r14, 0x0, &(0x7f00000000c0)=""/85}, 0x20) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r15, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x0, 0x7, 0x5, 0x1, 0xfffffffffffffffe, 0x8}]}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0x54, &(0x7f0000000280)=""/84, 0x40f00, 0x10, '\x00', r3, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0xb, 0xfffffffa, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[r7, r8, r9, r10, 0x1, r13, r14, r15], &(0x7f0000000900)=[{0x3, 0x4, 0x6, 0xb}, {0x5, 0x4, 0x2, 0xa}, {0x4, 0x2, 0x1, 0x4}], 0x10, 0x56835b8f}, 0x94) 2.221606281s ago: executing program 0 (id=13536): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x99, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x3, &(0x7f0000000100)=@raw=[@generic={0x9, 0x8, 0x0, 0x5, 0x1}, @cb_func={0x18, 0xc}], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xae, &(0x7f0000000240)=""/174, 0x40f00, 0x41, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f0000000340)=[r3], 0x0, 0x10, 0x7ff}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r4, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000003540)=ANY=[@ANYBLOB="c4160000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000300030000001400020070696d7265670000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200697036677265746170300000000000002c000180080003000100000008000100", @ANYRES32=r2, @ANYBLOB="4fc83008a0bcc4cf08000000000000c5887adaa4", @ANYRES32=0x0, @ANYBLOB="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"], 0x16c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) (async) r9 = accept4$packet(r4, &(0x7f0000000480), &(0x7f0000000500)=0x14, 0xc1800) sendto$packet(r9, &(0x7f0000000540)="180abdab93fa78a523ad3aa3641f00c45b3f26251902915bda6a2927693b95fb592d9c7940e09ca7c62da35116c1509e253daab5155f618655759cd8e043df96efa89ab51772e34320871447a7c4626ac5df4790be00c08ca5ce3d0480921ecd", 0x60, 0x1000, &(0x7f00000005c0)={0x11, 0x1, r2, 0x1, 0xc3, 0x6, @link_local}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100001040000000000000000f2fffec8", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x40000) 1.625765798s ago: executing program 2 (id=13537): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000040)={0xffffffff, 0x74, 0xaae5, 0xcd7, 0x1b4, 0x10, 0x3}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000000033e3297882b128708419b01092000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200030300004e224e23b62a919030a885be04"], 0x4c}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) listen(r1, 0x800) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r4, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x1) (async) close(r0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9b}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x74, 0x9]}]}, 0x54}}, 0x4008044) (async) r5 = accept4(r1, 0x0, 0x0, 0x80000) (async) r6 = socket$kcm(0x2, 0xa, 0x2) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f00000002c0)={@local, @private=0xa010100}) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) 1.551605479s ago: executing program 4 (id=13538): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = getuid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r2}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x3, 0x4e24, 0x8, 0x2, 0x20, 0x0, 0xff, 0x0, r1}, {0xe7fb, 0x4, 0x1, 0x1, 0x3ff, 0x7fffffff, 0xc0, 0x5}, {0x1, 0x7fffffff, 0xffff, 0x8}, 0xa, 0x6e6bb3, 0x0, 0x0, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0xd4}, 0xa, @in6=@remote, 0x3506, 0x3, 0x0, 0x9, 0x3, 0x2, 0x1ff}}, 0xe8) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000080)={0x2, @short}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000080)) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x1bf5b}}, 0x20}}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0xc2, &(0x7f0000000340)={@local, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x2, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d4edcd0000006e1d0000000000000000000000000000000000000800", "b0b4e2d8157cddfb9792c8e37bafb99e7e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b00", "01acae0d00ea1443dbff53af54944d4894a87f20c65bfb8e0c9cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be314d00"}}}}}}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380100feffffbf00010000fe880000000000000000ebb0b4090f1ba58fd0de41b759e9000000000001ac1414aa000000000000000000000000000107944e230005000000003a000000174b0e41eae35db2cc6453d6a5898bb6ce049253f2af03c342f8ea2e6418a53ad14aa22cda507155f82381bbc4dea22ca428f96144e7e1181d52860202949e0677adb5fa83a474c1fddf2d0e1859253d169a789f20a4f7178ef554a711549f2b23a66bbbbcd51778f7a0637523fcffffffffffffff43ba770200"/204, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x24}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) 605.608711ms ago: executing program 3 (id=13539): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000440)) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000080)='.-+\x00', 0x181000, &(0x7f00000000c0)={@align=0x3ff, {0x7, 0x1, 0x4, 0x101}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x10}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000cc0)={'broute\x00', 0x0, 0x3, 0x0, [0xfffffffffffffc00, 0x9, 0x8, 0x3, 0x5, 0xae2], 0x0, 0x0, 0x0}, &(0x7f0000000d80)=0x78) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 0s ago: executing program 0 (id=13540): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000007c0)='\x00\xab\x18\xe8\xe4\xc4\x16\a\x02\xf3\nz\x17\xf7\x8c\x17fp6x\xaa\x80\xa3\x91\xde\x01u\f\xf7\xf1\xe3\xf7od\xdf\x8a{d\xbd\x9b\x85\x04\xea\x18\x05\x8fOi\x83\xee-\a\xa3\x82\xd5\x87\x840\x8f\x98\f\x95\x86\xd0\a4n\xdf@\xd7\x8f`\xfe\xff\xff\xffucb\n\xc08\xa2mK_\x8e\x86\x0f\xb9u\x9a\n\xc1\v\xf7B(|M\t\x13\x9dj\xb5\xb1%\x8a\xcc\xe0\xe0\t~\xd5Tzdy\n\xe2i26\xd6zo/\xa7\x9d\xe6\xf2\xb1\xe6&\x94\xee\xf4\x04\xeb\xdb\xaa\xbc\x92\xdf\xac\xaa\r\xe1\x19E\xf1\x8f\x80\x9e\xc6W\xe2\x0f\xc5\x19^\x00\xaf\xa4\a\x898\xd2xx.4k$\xeeq\xfa,M@1Lf-\xda\xe6\xbd\x94d+q\xd3\xa6\xc1\x9b:\x1f\xc9\xdd2s\xb7\x00\x00\x00\x00\x00\x00\x00', 0x100, &(0x7f0000000080)={@align=0x240000000000, {0x4, 0x0, 0x7, 0x32}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x2}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, r7, 0xb01}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x80, 0x700, 0x4, 0x6, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x67, 0x0, 0xe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, {[@cipso={0x86, 0x3c, 0x1, [{0x0, 0x7, "bbd3132076"}, {0x0, 0x6, "63c31365"}, {0x2, 0x12, "bcfda0ae071b49fa0e82d34b834c2b11"}, {0x7, 0xe, "a026e5238ee6aef1882b3764"}, {0x6, 0x9, "37b3d0940a7a5b"}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x3000c840) (async, rerun: 64) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) (async) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) (async) close(r2) (async, rerun: 32) r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x41, &(0x7f0000000000)=0x7f, 0x4) (async) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000200)=""/220, 0xdc}], 0x1) (async, rerun: 32) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (rerun: 32) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r12, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) write(r12, 0x0, 0x0) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001000000000000000000ac1ee100000000002000000000000000403403f438bd9e2800000000000000000000000000000000020000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, r1}, 0x94) kernel console output (not intermixed with test programs): 0469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12481'. [ 1574.867662][T20467] xt_hashlimit: size too large, truncated to 1048576 [ 1574.933286][T20472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12483'. [ 1575.060246][T20481] validate_nla: 1 callbacks suppressed [ 1575.060264][T20481] netlink: 'syz.4.12483': attribute type 1 has an invalid length. [ 1575.210244][T20344] Bluetooth: hci0: command 0x0405 tx timeout [ 1575.387297][T20499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12487'. [ 1575.443088][T20502] tipc: Enabling of bearer rejected, failed to enable media [ 1575.524111][T20505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12491'. [ 1575.543468][T20512] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1575.602225][T20512] bond2: entered allmulticast mode [ 1575.609451][T20512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1575.631795][T20513] bond3: entered allmulticast mode [ 1575.637466][T20513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1575.672674][T20519] netlink: 'syz.2.12495': attribute type 1 has an invalid length. [ 1575.923235][T20540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12502'. [ 1575.941741][T20543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1576.276250][T20564] xt_ipcomp: unknown flags 1D [ 1576.377530][T20570] netlink: 'syz.3.12512': attribute type 3 has an invalid length. [ 1576.428873][T20517] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1576.455702][T20578] Cannot find del_set index 4 as target [ 1576.721868][T20594] Cannot find add_set index 46338 as target [ 1576.891082][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12520'. [ 1577.030306][T20614] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1577.121656][T20618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12524'. [ 1577.134215][T20616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12524'. [ 1577.446956][T20631] team0: Port device team_slave_0 removed [ 1577.609004][T20344] Bluetooth: hci0: command 0x0405 tx timeout [ 1577.725274][T20667] erspan0: entered promiscuous mode [ 1577.737217][T20667] erspan0: entered allmulticast mode [ 1577.966607][T20679] xt_ecn: cannot match TCP bits for non-tcp packets [ 1578.443498][T20716] netlink: 'syz.4.12557': attribute type 1 has an invalid length. [ 1578.459893][T20716] __nla_validate_parse: 8 callbacks suppressed [ 1578.459911][T20716] netlink: 756 bytes leftover after parsing attributes in process `syz.4.12557'. [ 1578.545309][T20668] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1578.714625][T26993] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.726840][T26993] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.747601][T26993] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.767610][T26993] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1578.949594][T20752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12568'. [ 1579.076977][T20755] tipc: Started in network mode [ 1579.083008][T20755] tipc: Node identity ac14140f, cluster identity 4711 [ 1579.090973][T20755] tipc: Enabled bearer , priority 10 [ 1579.476454][T20763] tipc: Resetting bearer [ 1579.579234][T20783] netlink: 'syz.3.12579': attribute type 11 has an invalid length. [ 1579.597458][T20344] block nbd6: Receive control failed (result -32) [ 1580.055026][T20763] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1580.063817][T20763] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1580.074870][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12581'. [ 1580.084753][T20791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12581'. [ 1580.094488][T27244] tipc: Node number set to 2886997007 [ 1580.181655][T20763] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1580.193309][T20763] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1580.403537][T20801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12583'. [ 1580.471552][T20812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12587'. [ 1580.493670][T20811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12585'. [ 1580.513522][T20814] netlink: 'syz.0.12588': attribute type 7 has an invalid length. [ 1580.538388][T20811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12585'. [ 1580.574033][T20811] netlink: 252 bytes leftover after parsing attributes in process `syz.4.12585'. [ 1580.646079][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12585'. [ 1581.147502][T20847] bond4: entered promiscuous mode [ 1581.158296][T20847] bond4: entered allmulticast mode [ 1581.164012][T20847] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1581.199736][T20853] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1581.207512][T20860] mac80211_hwsim hwsim93 ÿ: renamed from wlan1 [ 1581.344807][T20871] xt_hashlimit: overflow, try lower: 3/0 [ 1581.885873][T20901] netlink: 'syz.4.12616': attribute type 2 has an invalid length. [ 1582.036963][T20910] syzkaller1: entered promiscuous mode [ 1582.046447][T20910] syzkaller1: entered allmulticast mode [ 1582.070433][T20919] netlink: 'syz.4.12623': attribute type 1 has an invalid length. [ 1582.202002][T20919] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1582.445777][T20943] xt_hashlimit: size too large, truncated to 1048576 [ 1582.904500][T20986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1583.537464][ T4940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1583.555767][ T4940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1583.565563][ T4940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1583.573991][ T4940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1583.585020][ T4940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1583.727645][T20344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1583.738652][T20344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1583.751512][T20344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1583.760483][T20344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1583.784636][T20344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1583.861664][T10344] bond3: (slave syz_tun): Removing an active aggregator [ 1583.870025][T10344] bond3: (slave syz_tun): Releasing backup interface [ 1584.289929][T21051] veth0: entered promiscuous mode [ 1584.311218][T21051] batadv_slave_1: entered promiscuous mode [ 1584.376261][T21051] syzkaller1: entered promiscuous mode [ 1584.389744][T21051] syzkaller1: entered allmulticast mode [ 1584.529697][T21050] batadv_slave_1: left promiscuous mode [ 1584.541383][T21050] veth0: left promiscuous mode [ 1584.681078][T21013] wlan1 speed is unknown, defaulting to 1000 [ 1584.691402][T21066] __nla_validate_parse: 17 callbacks suppressed [ 1584.691418][T21066] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.12664'. [ 1584.691613][T21013] vxcan1 speed is unknown, defaulting to 1000 [ 1584.887534][T21060] syzkaller0: entered promiscuous mode [ 1584.901178][T21060] syzkaller0: entered allmulticast mode [ 1584.936769][T21072] hsr0: entered allmulticast mode [ 1584.958396][T21072] hsr_slave_0: entered allmulticast mode [ 1584.980499][T21072] hsr_slave_1: entered allmulticast mode [ 1584.996420][T21058] tipc: Enabled bearer , priority 0 [ 1585.010916][T21072] netlink: 'syz.2.12665': attribute type 15 has an invalid length. [ 1585.032685][T21056] tipc: Resetting bearer [ 1585.071995][T21056] tipc: Disabling bearer [ 1585.078818][T21075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12666'. [ 1585.094951][T21013] lo speed is unknown, defaulting to 1000 [ 1585.284891][T21086] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20001 [ 1585.409330][T21091] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12671'. [ 1585.419334][T21099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12672'. [ 1585.849087][ T4940] Bluetooth: hci5: command tx timeout [ 1585.941388][T21013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.960897][T21013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.979555][T21013] bridge_slave_0: entered allmulticast mode [ 1585.989131][T21013] bridge_slave_0: entered promiscuous mode [ 1586.015201][T21013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.028216][T21013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.048432][T21013] bridge_slave_1: entered allmulticast mode [ 1586.055689][T21013] bridge_slave_1: entered promiscuous mode [ 1586.076077][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12675'. [ 1586.131092][T21114] syzkaller0: entered promiscuous mode [ 1586.136855][T21114] syzkaller0: entered allmulticast mode [ 1586.163652][T21115] wlan1 speed is unknown, defaulting to 1000 [ 1586.171241][T21118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12675'. [ 1586.209164][T21013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1586.231749][T21013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1586.290720][T21013] team0: Port device team_slave_0 added [ 1586.308993][T21013] team0: Port device team_slave_1 added [ 1586.358943][T21013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.378114][T21013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.405049][T21013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.422858][T21013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.430107][T21013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.488485][T21013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1586.563153][T21125] netlink: 'syz.0.12678': attribute type 1 has an invalid length. [ 1587.947295][ T4940] Bluetooth: hci5: command tx timeout [ 1590.017710][ T4940] Bluetooth: hci5: command tx timeout [ 1590.702220][T21013] hsr_slave_0: entered promiscuous mode [ 1590.710063][T21013] hsr_slave_1: entered promiscuous mode [ 1590.716648][T21013] debugfs: 'hsr0' already exists in 'hsr' [ 1590.724292][T21013] Cannot create hsr debugfs directory [ 1590.733747][T21147] netlink: 'syz.1.12683': attribute type 21 has an invalid length. [ 1590.775507][T21147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12683'. [ 1590.876028][T21151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12682'. [ 1590.993795][T21165] netlink: 'syz.0.12686': attribute type 2 has an invalid length. [ 1591.024572][T21171] netlink: 'syz.3.12688': attribute type 32 has an invalid length. [ 1591.032693][T21171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12688'. [ 1591.071313][T21171] bond5: Setting coupled_control to off (0) [ 1591.260326][T21181] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12690'. [ 1591.289851][T21181] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12690'. [ 1591.306605][T21181] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12690'. [ 1591.320760][T21181] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12690'. [ 1591.493400][T21189] syzkaller0: entered promiscuous mode [ 1591.507472][T21189] syzkaller0: entered allmulticast mode [ 1591.583115][T21013] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1591.605034][T21013] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.655880][T21212] xt_nat: multiple ranges no longer supported [ 1592.099753][ T4940] Bluetooth: hci5: command tx timeout [ 1595.853628][T21013] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1595.883617][T21013] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.921313][T21218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12700'. [ 1595.950139][T21218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1596.003728][T21223] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12702'. [ 1596.033765][T21226] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1596.041601][T21013] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.077784][T21013] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.146774][T21013] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.177971][T21013] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.372063][T21250] geneve3: entered promiscuous mode [ 1596.516966][T21259] openvswitch: netlink: IP tunnel dst address not specified [ 1596.682739][T21257] syzkaller0: entered promiscuous mode [ 1596.689374][T21257] syzkaller0: entered allmulticast mode [ 1596.713120][T21264] netlink: zone id is out of range [ 1596.718352][T21264] netlink: zone id is out of range [ 1596.723607][T21264] netlink: zone id is out of range [ 1596.738388][T21264] netlink: zone id is out of range [ 1596.743858][T21264] netlink: zone id is out of range [ 1596.751643][T21264] netlink: zone id is out of range [ 1596.764210][T21264] netlink: zone id is out of range [ 1596.775163][T21264] netlink: zone id is out of range [ 1596.844013][T21266] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12715'. [ 1596.862373][T21013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1596.887765][T21013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1596.914393][T21013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1596.972878][T21013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1597.005386][T21013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1597.030291][T21013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1597.051260][T21281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12718'. [ 1597.090359][T21013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1597.113987][T21013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1597.375584][T21013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.459429][T21013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.512839][T26982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.513800][T21326] netlink: 'syz.1.12729': attribute type 2 has an invalid length. [ 1597.520032][T26982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.539113][T21324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12727'. [ 1597.553216][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.560391][ T9462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.647474][T21328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12730'. [ 1597.668438][T21328] netlink: 50 bytes leftover after parsing attributes in process `syz.0.12730'. [ 1597.684104][T21328] netlink: 50 bytes leftover after parsing attributes in process `syz.0.12730'. [ 1597.726916][T21328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12730'. [ 1597.742027][T21328] netlink: 50 bytes leftover after parsing attributes in process `syz.0.12730'. [ 1597.993026][T21346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1598.188609][T21365] tipc: Enabled bearer , priority 0 [ 1598.582999][T21396] vlan2: entered allmulticast mode [ 1598.598351][T21396] bond0: entered allmulticast mode [ 1598.608253][T21396] bond_slave_0: entered allmulticast mode [ 1598.627422][T21396] bond_slave_1: entered allmulticast mode [ 1598.761959][T21405] syzkaller0: entered promiscuous mode [ 1598.767737][T21405] syzkaller0: entered allmulticast mode [ 1598.986097][T21415] sctp: [Deprecated]: syz.0.12751 (pid 21415) Use of int in max_burst socket option deprecated. [ 1598.986097][T21415] Use struct sctp_assoc_value instead [ 1599.007323][T21013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.512546][T21013] veth0_vlan: entered promiscuous mode [ 1599.566799][T21013] veth1_vlan: entered promiscuous mode [ 1599.703577][T21013] veth0_macvtap: entered promiscuous mode [ 1599.739396][T21013] veth1_macvtap: entered promiscuous mode [ 1599.807171][T21013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.851814][T21013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.889120][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.905017][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.919657][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.961451][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.196877][T26993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.224165][T26993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.337831][T26982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.362863][T26982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.936133][T21506] netlink: 'syz.0.12775': attribute type 2 has an invalid length. [ 1600.972544][T21511] __nla_validate_parse: 16 callbacks suppressed [ 1600.972562][T21511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12776'. [ 1601.110368][T21511] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1601.118199][T21511] IPVS: set_ctl: invalid protocol: 25647 0.0.0.0:12148 [ 1601.124366][T21518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12778'. [ 1601.255764][T21489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12770'. [ 1601.287384][T21489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12770'. [ 1601.488963][T21538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12784'. [ 1601.935858][T20344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1601.952191][T20344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1601.953994][T21561] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12791'. [ 1601.970008][T20344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1601.976285][T21561] x_tables: duplicate underflow at hook 3 [ 1601.992178][T20344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1602.004470][T20344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1602.050225][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12791'. [ 1602.086948][T21564] netlink: 'syz.0.12791': attribute type 10 has an invalid length. [ 1602.128378][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12791'. [ 1602.276268][T21573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12793'. [ 1602.443935][T21583] ip6t_srh: unknown srh match flags 4000 [ 1602.455993][T26982] dvmrp0: left allmulticast mode [ 1602.469726][T26982] pimreg: left allmulticast mode [ 1602.475891][T26982] dvmrp8: left allmulticast mode [ 1602.653969][T26982] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 1602.763442][T21600] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12795'. [ 1602.803980][ T9462] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1602.835258][T26982] gretap0 (unregistering): left promiscuous mode [ 1602.900637][T26982] bond8 (unregistering): (slave gretap5): Releasing active interface [ 1602.930215][T26982] bond6 (unregistering): (slave geneve3): Releasing active interface [ 1602.944301][T26982] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1603.025899][T26982] bond1 (unregistering): Released all slaves [ 1603.040296][T26982] bond2 (unregistering): Released all slaves [ 1603.056675][T26982] bond3 (unregistering): Released all slaves [ 1603.076544][T26982] bond4 (unregistering): Released all slaves [ 1603.090643][T26982] bond5 (unregistering): Released all slaves [ 1603.105160][T26982] bond0 (unregistering): left promiscuous mode [ 1603.112221][T26982] bond0 (unregistering): Released all slaves [ 1603.135178][T26982] bond6 (unregistering): Released all slaves [ 1603.150979][T26982] bond7 (unregistering): Released all slaves [ 1603.166726][T26982] bond8 (unregistering): Released all slaves [ 1603.474156][T21592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1603.710407][T26982] tipc: Disabling bearer [ 1603.740626][T26982] tipc: Left network mode [ 1603.881124][T21562] wlan1 speed is unknown, defaulting to 1000 [ 1603.895234][T16533] IPVS: starting estimator thread 0... [ 1603.897221][T21562] vxcan1 speed is unknown, defaulting to 1000 [ 1603.903078][T21618] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20004 [ 1604.039140][T21633] IPVS: using max 32 ests per chain, 76800 per kthread [ 1604.088175][ T4940] Bluetooth: hci2: command tx timeout [ 1604.387622][T21647] FAULT_INJECTION: forcing a failure. [ 1604.387622][T21647] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1604.435193][T21647] CPU: 1 UID: 0 PID: 21647 Comm: syz.0.12808 Not tainted syzkaller #0 PREEMPT(full) [ 1604.435220][T21647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1604.435232][T21647] Call Trace: [ 1604.435240][T21647] [ 1604.435250][T21647] dump_stack_lvl+0xe8/0x150 [ 1604.435284][T21647] should_fail_ex+0x40c/0x560 [ 1604.435315][T21647] prepare_alloc_pages+0x230/0x650 [ 1604.435350][T21647] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1604.435380][T21647] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1604.435408][T21647] ? __pfx_policy_nodemask+0x10/0x10 [ 1604.435448][T21647] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 1604.435474][T21647] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 1604.435502][T21647] alloc_pages_mpol+0x212/0x380 [ 1604.435535][T21647] alloc_pages_noprof+0xac/0x2a0 [ 1604.435565][T21647] alloc_skb_with_frags+0x264/0x760 [ 1604.435608][T21647] sock_alloc_send_pskb+0x878/0x990 [ 1604.435635][T21647] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1604.435669][T21647] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1604.435694][T21647] ? dev_get_by_index+0x22/0x2d0 [ 1604.435715][T21647] ? dev_get_by_index+0x22/0x2d0 [ 1604.435740][T21647] packet_sendmsg+0x3258/0x5040 [ 1604.435868][T21647] ? aa_label_sk_perm+0x532/0x6e0 [ 1604.435909][T21647] ? __lock_acquire+0x683/0x2cf0 [ 1604.435948][T21647] ? unwind_next_frame+0x8f/0x2550 [ 1604.435985][T21647] ? __pfx_packet_sendmsg+0x10/0x10 [ 1604.436017][T21647] ? __pfx_aa_sk_perm+0x10/0x10 [ 1604.436048][T21647] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1604.436073][T21647] ? __pfx_packet_sendmsg+0x10/0x10 [ 1604.436092][T21647] sock_sendmsg_nosec+0x13a/0x180 [ 1604.436119][T21647] ____sys_sendmsg+0x54e/0x850 [ 1604.436143][T21647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1604.436170][T21647] ? import_iovec+0x73/0xa0 [ 1604.436201][T21647] ___sys_sendmsg+0x2a5/0x360 [ 1604.436219][T21647] ? __lock_acquire+0x683/0x2cf0 [ 1604.436248][T21647] ? __pfx____sys_sendmsg+0x10/0x10 [ 1604.436298][T21647] ? __fget_files+0x2a/0x420 [ 1604.436322][T21647] ? __fget_files+0x3a2/0x420 [ 1604.436355][T21647] __x64_sys_sendmsg+0x1b1/0x290 [ 1604.436378][T21647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1604.436414][T21647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.436436][T21647] do_syscall_64+0x174/0x580 [ 1604.436463][T21647] ? trace_irq_disable+0x3b/0x140 [ 1604.436487][T21647] ? clear_bhb_loop+0x40/0x90 [ 1604.436510][T21647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.436529][T21647] RIP: 0033:0x7f2f13d9de99 [ 1604.436549][T21647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.436565][T21647] RSP: 002b:00007f2f14b81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1604.436586][T21647] RAX: ffffffffffffffda RBX: 00007f2f14026180 RCX: 00007f2f13d9de99 [ 1604.436600][T21647] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1604.436613][T21647] RBP: 00007f2f14b81090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.436625][T21647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1604.436636][T21647] R13: 00007f2f14026218 R14: 00007f2f14026180 R15: 00007ffdd122ef38 [ 1604.436666][T21647] [ 1604.765160][T21642] syzkaller0: entered promiscuous mode [ 1604.771281][T21642] syzkaller0: entered allmulticast mode [ 1604.816528][T21562] lo speed is unknown, defaulting to 1000 [ 1606.174913][ T4940] Bluetooth: hci2: command tx timeout [ 1607.454225][ T1315] ieee802154 phy12 wpan0: encryption failed: -22 [ 1608.258177][ T4940] Bluetooth: hci2: command tx timeout [ 1609.315516][T21695] Cannot find set identified by id 0 to match [ 1609.324710][T21697] x_tables: duplicate underflow at hook 2 [ 1609.423904][T21689] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1609.434079][T21704] netlink: 'syz.0.12823': attribute type 3 has an invalid length. [ 1609.614192][T21715] __nla_validate_parse: 2 callbacks suppressed [ 1609.614208][T21715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12826'. [ 1609.630073][T21718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12825'. [ 1610.086389][T21738] netlink: 'syz.0.12833': attribute type 1 has an invalid length. [ 1610.327778][T21562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.335478][ T4940] Bluetooth: hci2: command tx timeout [ 1610.354756][T21562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.363559][T21562] bridge_slave_0: entered allmulticast mode [ 1610.416426][T21562] bridge_slave_0: entered promiscuous mode [ 1610.464949][T21756] pim6reg: entered allmulticast mode [ 1610.483033][T21562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.502232][T21562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.523770][T21562] bridge_slave_1: entered allmulticast mode [ 1610.552491][T21562] bridge_slave_1: entered promiscuous mode [ 1610.658803][T26982] team0: left promiscuous mode [ 1610.677732][T26982] hsr_slave_0: left promiscuous mode [ 1610.684637][T26982] hsr_slave_1: left promiscuous mode [ 1611.206075][T21773] bond6: option all_slaves_active: invalid value (222) [ 1611.219108][T21773] bond6 (unregistering): Released all slaves [ 1611.253657][T21562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.339388][T21562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.454465][T21562] team0: Port device team_slave_0 added [ 1611.484908][T26982] IPVS: stop unused estimator thread 0... [ 1611.585324][T21562] team0: Port device team_slave_1 added [ 1611.681825][T21562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.698670][T21562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.759130][T21562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.774308][T21562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.782345][T21562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.821784][T21562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.833518][T21798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12851'. [ 1611.859213][T21798] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12851'. [ 1611.891973][T21798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12851'. [ 1611.924909][T21562] hsr_slave_0: entered promiscuous mode [ 1611.960274][T21562] hsr_slave_1: entered promiscuous mode [ 1611.977582][T21562] debugfs: 'hsr0' already exists in 'hsr' [ 1611.993813][T21562] Cannot create hsr debugfs directory [ 1612.402694][T21812] macvlan0: left promiscuous mode [ 1612.426271][T21830] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.12860'. [ 1612.434426][T21812] tipc: Resetting bearer [ 1612.454183][T21812] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1612.472729][T21812] gre1: left promiscuous mode [ 1612.479957][T21812] vlan0: left allmulticast mode [ 1612.484953][T21812] veth0_vlan: left allmulticast mode [ 1612.492234][T21812] vlan0: left promiscuous mode [ 1612.499140][T21812] macvtap1: left promiscuous mode [ 1612.504681][T21812] macvtap1: left allmulticast mode [ 1612.515367][T21812] veth3: left allmulticast mode [ 1612.525009][T21812] bond1: left promiscuous mode [ 1612.531680][T21812] bridge2: left promiscuous mode [ 1612.540320][T21812] macvtap2: left allmulticast mode [ 1612.545753][T21812] macvtap3: left allmulticast mode [ 1612.553942][T21812] bond2: left allmulticast mode [ 1612.562197][T21812] bond3: left allmulticast mode [ 1612.577664][T21812] bond4: left promiscuous mode [ 1612.591756][T21812] bond4: left allmulticast mode [ 1612.663419][T26982] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.674170][T26982] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.683935][T26982] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.752319][T26982] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.797251][T21821] netlink: 'syz.4.12857': attribute type 1 has an invalid length. [ 1612.819946][T21821] netlink: 756 bytes leftover after parsing attributes in process `syz.4.12857'. [ 1612.959804][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12860'. [ 1613.048226][T21846] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12863'. [ 1613.237508][T21562] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.277596][T21857] netlink: 'syz.4.12867': attribute type 1 has an invalid length. [ 1613.286169][T21857] netlink: 236 bytes leftover after parsing attributes in process `syz.4.12867'. [ 1613.311290][T21860] netlink: 'syz.0.12868': attribute type 5 has an invalid length. [ 1613.327494][T21856] netlink: 'syz.3.12866': attribute type 22 has an invalid length. [ 1613.339517][T21856] netlink: 'syz.3.12866': attribute type 22 has an invalid length. [ 1613.484327][T21562] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.691526][T21562] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.763273][T21881] syzkaller0: entered promiscuous mode [ 1613.779840][T21881] syzkaller0: entered allmulticast mode [ 1613.873137][T21562] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.939842][T21889] syzkaller0: entered promiscuous mode [ 1613.945485][T21889] syzkaller0: entered allmulticast mode [ 1614.090892][T21897] syzkaller0: entered promiscuous mode [ 1614.116520][T21897] syzkaller0: entered allmulticast mode [ 1614.127079][T21897] FAULT_INJECTION: forcing a failure. [ 1614.127079][T21897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.154436][T21897] CPU: 1 UID: 0 PID: 21897 Comm: syz.4.12879 Not tainted syzkaller #0 PREEMPT(full) [ 1614.154464][T21897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1614.154476][T21897] Call Trace: [ 1614.154484][T21897] [ 1614.154493][T21897] dump_stack_lvl+0xe8/0x150 [ 1614.154528][T21897] should_fail_ex+0x40c/0x560 [ 1614.154556][T21897] _copy_from_iter+0x1d3/0x1660 [ 1614.154589][T21897] ? _copy_from_iter+0x21b/0x1660 [ 1614.154617][T21897] ? __pfx__copy_from_iter+0x10/0x10 [ 1614.154648][T21897] ? __pfx__copy_from_iter+0x10/0x10 [ 1614.154683][T21897] copy_page_from_iter+0x219/0x2d0 [ 1614.154713][T21897] skb_copy_datagram_from_iter+0x2f4/0x720 [ 1614.154748][T21897] packet_sendmsg+0x36ab/0x5040 [ 1614.154784][T21897] ? __lock_acquire+0x683/0x2cf0 [ 1614.154823][T21897] ? unwind_next_frame+0x8f/0x2550 [ 1614.154859][T21897] ? __pfx_packet_sendmsg+0x10/0x10 [ 1614.154892][T21897] ? __pfx_aa_sk_perm+0x10/0x10 [ 1614.154926][T21897] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1614.154951][T21897] ? __pfx_packet_sendmsg+0x10/0x10 [ 1614.154971][T21897] sock_sendmsg_nosec+0x13a/0x180 [ 1614.154999][T21897] ____sys_sendmsg+0x54e/0x850 [ 1614.155022][T21897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1614.155046][T21897] ? import_iovec+0x73/0xa0 [ 1614.155070][T21897] ___sys_sendmsg+0x2a5/0x360 [ 1614.155085][T21897] ? __lock_acquire+0x683/0x2cf0 [ 1614.155108][T21897] ? __pfx____sys_sendmsg+0x10/0x10 [ 1614.155149][T21897] ? __fget_files+0x2a/0x420 [ 1614.155169][T21897] ? __fget_files+0x3a2/0x420 [ 1614.155196][T21897] __x64_sys_sendmsg+0x1b1/0x290 [ 1614.155214][T21897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1614.155243][T21897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.155261][T21897] do_syscall_64+0x174/0x580 [ 1614.155277][T21897] ? trace_irq_disable+0x3b/0x140 [ 1614.155297][T21897] ? clear_bhb_loop+0x40/0x90 [ 1614.155316][T21897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.155332][T21897] RIP: 0033:0x7f0d4db9de99 [ 1614.155347][T21897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1614.155361][T21897] RSP: 002b:00007f0d4ead8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1614.155379][T21897] RAX: ffffffffffffffda RBX: 00007f0d4de25fa0 RCX: 00007f0d4db9de99 [ 1614.155396][T21897] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1614.155406][T21897] RBP: 00007f0d4ead8090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.155417][T21897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1614.155427][T21897] R13: 00007f0d4de26038 R14: 00007f0d4de25fa0 R15: 00007ffd5af5db08 [ 1614.155452][T21897] [ 1614.263357][T21562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1614.437739][T21562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1614.486393][T21909] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1614.496240][T21562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1614.508372][T21562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1614.539362][T21562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1614.555726][T21562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1614.570822][T21910] Unsupported xt match [ 1614.570839][T21910] unable to load match [ 1614.592077][T21562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1614.604096][T21562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1614.865932][T21931] netlink: 'syz.2.12887': attribute type 1 has an invalid length. [ 1614.922433][T21562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.011465][T21562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1615.063203][ T9462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.070414][ T9462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.079654][T21944] __nla_validate_parse: 2 callbacks suppressed [ 1615.079672][T21944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12889'. [ 1615.115598][T16161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.122767][T16161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1615.435550][T21961] syzkaller0: entered promiscuous mode [ 1615.467021][T21961] syzkaller0: entered allmulticast mode [ 1615.494215][T21961] FAULT_INJECTION: forcing a failure. [ 1615.494215][T21961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1615.519532][T21961] CPU: 0 UID: 0 PID: 21961 Comm: syz.4.12894 Not tainted syzkaller #0 PREEMPT(full) [ 1615.519559][T21961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1615.519571][T21961] Call Trace: [ 1615.519579][T21961] [ 1615.519587][T21961] dump_stack_lvl+0xe8/0x150 [ 1615.519619][T21961] should_fail_ex+0x40c/0x560 [ 1615.519646][T21961] _copy_from_iter+0x1d3/0x1660 [ 1615.519678][T21961] ? _copy_from_iter+0x21b/0x1660 [ 1615.519705][T21961] ? __pfx__copy_from_iter+0x10/0x10 [ 1615.519731][T21961] ? __pfx__copy_from_iter+0x10/0x10 [ 1615.519769][T21961] copy_page_from_iter+0x219/0x2d0 [ 1615.519797][T21961] skb_copy_datagram_from_iter+0x2f4/0x720 [ 1615.519828][T21961] packet_sendmsg+0x36ab/0x5040 [ 1615.519861][T21961] ? __lock_acquire+0x683/0x2cf0 [ 1615.519896][T21961] ? unwind_next_frame+0x8f/0x2550 [ 1615.519929][T21961] ? __pfx_packet_sendmsg+0x10/0x10 [ 1615.519959][T21961] ? __pfx_aa_sk_perm+0x10/0x10 [ 1615.519989][T21961] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1615.520012][T21961] ? __pfx_packet_sendmsg+0x10/0x10 [ 1615.520030][T21961] sock_sendmsg_nosec+0x13a/0x180 [ 1615.520056][T21961] ____sys_sendmsg+0x54e/0x850 [ 1615.520078][T21961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1615.520104][T21961] ? import_iovec+0x73/0xa0 [ 1615.520133][T21961] ___sys_sendmsg+0x2a5/0x360 [ 1615.520150][T21961] ? __lock_acquire+0x683/0x2cf0 [ 1615.520178][T21961] ? __pfx____sys_sendmsg+0x10/0x10 [ 1615.520226][T21961] ? __fget_files+0x2a/0x420 [ 1615.520249][T21961] ? __fget_files+0x3a2/0x420 [ 1615.520279][T21961] __x64_sys_sendmsg+0x1b1/0x290 [ 1615.520300][T21961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1615.520337][T21961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.520358][T21961] do_syscall_64+0x174/0x580 [ 1615.520375][T21961] ? trace_irq_disable+0x3b/0x140 [ 1615.520396][T21961] ? clear_bhb_loop+0x40/0x90 [ 1615.520417][T21961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.520435][T21961] RIP: 0033:0x7f0d4db9de99 [ 1615.520453][T21961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1615.520469][T21961] RSP: 002b:00007f0d4ead8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1615.520490][T21961] RAX: ffffffffffffffda RBX: 00007f0d4de25fa0 RCX: 00007f0d4db9de99 [ 1615.520504][T21961] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1615.520517][T21961] RBP: 00007f0d4ead8090 R08: 0000000000000000 R09: 0000000000000000 [ 1615.520529][T21961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1615.520540][T21961] R13: 00007f0d4de26038 R14: 00007f0d4de25fa0 R15: 00007ffd5af5db08 [ 1615.520570][T21961] [ 1615.988418][T21973] bridge1: entered allmulticast mode [ 1616.244163][T21995] IPVS: length: 4096 != 8 [ 1616.271832][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12905'. [ 1616.282668][T21998] net_ratelimit: 46 callbacks suppressed [ 1616.282685][T21998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1616.389582][T22003] nbd: nbd3 already in use [ 1616.396101][T22004] block nbd3: NBD_DISCONNECT [ 1616.401436][T22004] block nbd3: Send disconnect failed -32 [ 1616.418581][T22004] block nbd3: shutting down sockets [ 1616.433494][T22007] netlink: 'syz.0.12906': attribute type 2 has an invalid length. [ 1616.471719][T22007] : entered promiscuous mode [ 1616.585341][T22014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12908'. [ 1616.616883][T21562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.726990][T21562] veth0_vlan: entered promiscuous mode [ 1616.763394][T21562] veth1_vlan: entered promiscuous mode [ 1616.854159][T21562] veth0_macvtap: entered promiscuous mode [ 1616.873655][T21562] veth1_macvtap: entered promiscuous mode [ 1616.882068][T22031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12914'. [ 1616.906366][T22031] netlink: ct family unspecified [ 1616.916366][T22031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1616.941957][T21562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1616.973010][T21562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1616.983982][T22034] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 1617.021126][T26996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.042252][T26996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.054637][T26996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.065806][T26996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.357664][T16161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.396844][T16161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.452733][T26982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.479397][T26982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.756581][T22065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12788'. [ 1617.840598][T22077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12927'. [ 1617.926240][T22086] tc_dump_action: action bad kind [ 1617.955397][T22086] IPVS: set_ctl: invalid protocol: 3822 0.0.0.0:20003 [ 1618.008250][ T4940] Bluetooth: hci2: command tx timeout [ 1618.233041][T22102] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12932'. [ 1618.271617][T22083] netlink: 'syz.0.12930': attribute type 7 has an invalid length. [ 1618.280834][T22083] netlink: 140 bytes leftover after parsing attributes in process `syz.0.12930'. [ 1618.322012][T22103] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12930'. [ 1618.820725][T22109] batadv_slave_0: entered promiscuous mode [ 1618.833234][T22109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12934'. [ 1618.848694][T22111] netlink: 'syz.3.12935': attribute type 1 has an invalid length. [ 1618.937089][T22109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1618.960300][T22109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1619.200526][T22125] netlink: 'syz.2.12940': attribute type 10 has an invalid length. [ 1619.231756][T22125] team0: Port device dummy0 added [ 1619.244029][T22125] netlink: 'syz.2.12940': attribute type 10 has an invalid length. [ 1619.262303][T22125] team0: Port device dummy0 removed [ 1619.326312][T27244] IPVS: starting estimator thread 0... [ 1619.335105][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880684f6800: rx timeout, send abort [ 1619.343824][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880684f6800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1619.418650][T22140] IPVS: using max 29 ests per chain, 69600 per kthread [ 1619.798770][T22165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1620.012186][T22172] syzkaller0: entered promiscuous mode [ 1620.028122][T22172] syzkaller0: entered allmulticast mode [ 1620.840226][T22226] __nla_validate_parse: 2 callbacks suppressed [ 1620.840246][T22226] netlink: 830 bytes leftover after parsing attributes in process `syz.4.12975'. [ 1620.885753][T22230] openvswitch: netlink: Key type 219 is out of range max 32 [ 1620.952888][T22234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12979'. [ 1621.037581][T22237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12980'. [ 1621.069012][T22238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12980'. [ 1621.073100][T22243] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1621.161319][T22247] syzkaller0: entered promiscuous mode [ 1621.182864][T22247] syzkaller0: entered allmulticast mode [ 1621.217387][T22249] netlink: 'syz.3.12982': attribute type 29 has an invalid length. [ 1621.248326][T22249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12982'. [ 1621.258419][T22255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12984'. [ 1621.535483][T22267] netlink: 'syz.3.12988': attribute type 3 has an invalid length. [ 1621.559755][T22267] netlink: 'syz.3.12988': attribute type 1 has an invalid length. [ 1621.573973][T22267] netlink: 204 bytes leftover after parsing attributes in process `syz.3.12988'. [ 1621.602354][T22266] netlink: 'syz.3.12988': attribute type 3 has an invalid length. [ 1621.625734][T22266] netlink: 'syz.3.12988': attribute type 1 has an invalid length. [ 1621.638602][T22266] netlink: 204 bytes leftover after parsing attributes in process `syz.3.12988'. [ 1621.660984][T22289] syzkaller0: entered promiscuous mode [ 1621.692340][T22289] syzkaller0: entered allmulticast mode [ 1622.006232][T22308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13001'. [ 1622.234097][T22319] veth0: entered promiscuous mode [ 1622.269176][T22322] netlink: 'syz.0.13007': attribute type 1 has an invalid length. [ 1622.313716][T22326] syzkaller1: entered promiscuous mode [ 1622.325068][T22326] syzkaller1: entered allmulticast mode [ 1622.342869][T22319] rdma_rxe: rxe_newlink: failed to add wg2 [ 1622.452855][T22319] veth0: left promiscuous mode [ 1622.494381][T22331] syzkaller0: entered promiscuous mode [ 1622.505415][T22338] netlink: 'syz.4.13012': attribute type 21 has an invalid length. [ 1622.515113][T22331] syzkaller0: entered allmulticast mode [ 1622.535335][T22338] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13012'. [ 1622.576565][T22336] ip6gre1: entered allmulticast mode [ 1623.514291][T22389] netlink: 'syz.2.13023': attribute type 4 has an invalid length. [ 1623.651426][T22397] Unsupported ieee802154 address type: 0 [ 1623.682050][T22357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1623.719686][T22375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1624.040936][T22418] syzkaller0: entered promiscuous mode [ 1624.054373][T22418] syzkaller0: entered allmulticast mode [ 1624.180704][T22424] bridge4: entered promiscuous mode [ 1624.197927][T22424] bridge4: entered allmulticast mode [ 1624.282969][T22427] netlink: 'syz.4.13033': attribute type 2 has an invalid length. [ 1624.972818][T22442] netlink: 'syz.0.13038': attribute type 1 has an invalid length. [ 1625.088769][T22442] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1625.170395][T22442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1627.019211][T22417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1627.188783][T22469] __nla_validate_parse: 1 callbacks suppressed [ 1627.188803][T22469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13044'. [ 1627.207447][T22469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13044'. [ 1627.221684][T22468] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13043'. [ 1627.262338][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13043'. [ 1627.281963][T22477] syzkaller0: entered promiscuous mode [ 1627.308027][T22477] syzkaller0: entered allmulticast mode [ 1627.705607][T22502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13054'. [ 1627.861753][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13054'. [ 1628.115493][T22532] netlink: 'syz.1.13061': attribute type 1 has an invalid length. [ 1628.449836][T22557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13069'. [ 1628.468668][T22557] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13069'. [ 1628.553467][T22563] bond0: invalid NS target ff00:: specified for addition [ 1628.586902][T22563] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 1628.611975][T22566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13072'. [ 1628.617147][T22568] bond0: invalid NS target ff00:: specified for addition [ 1628.632990][T22570] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13072'. [ 1628.652339][T22568] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 1628.767271][T22574] netlink: 'syz.2.13073': attribute type 1 has an invalid length. [ 1628.860857][T22585] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1628.935910][T22590] netlink: 'syz.3.13077': attribute type 7 has an invalid length. [ 1628.952965][T22590] netlink: 'syz.3.13077': attribute type 8 has an invalid length. [ 1629.020741][T22601] netlink: 'syz.1.13081': attribute type 11 has an invalid length. [ 1629.045650][T22601] netlink: 'syz.1.13081': attribute type 4 has an invalid length. [ 1629.277171][T22617] syzkaller0: entered promiscuous mode [ 1629.303401][T22617] syzkaller0: entered allmulticast mode [ 1629.683617][T22636] x_tables: duplicate underflow at hook 1 [ 1629.753345][T22639] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1629.787705][T22642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1629.795035][T22642] IPv6: NLM_F_CREATE should be set when creating new route [ 1629.802335][T22642] IPv6: NLM_F_CREATE should be set when creating new route [ 1629.828241][T22642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1629.912001][T22644] x_tables: duplicate underflow at hook 3 [ 1629.921489][T22646] xt_hashlimit: size too large, truncated to 1048576 [ 1630.407650][T22667] netlink: 'syz.1.13106': attribute type 1 has an invalid length. [ 1630.427730][T22667] netlink: 'syz.1.13106': attribute type 1 has an invalid length. [ 1630.674384][T22684] sctp: [Deprecated]: syz.3.13112 (pid 22684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1630.674384][T22684] Use struct sctp_sack_info instead [ 1630.811743][T22690] tipc: Enabling of bearer rejected, failed to enable media [ 1630.933795][T22691] syzkaller0: entered promiscuous mode [ 1630.941349][T22691] syzkaller0: entered allmulticast mode [ 1631.289363][T27244] IPVS: starting estimator thread 0... [ 1631.398741][T22715] IPVS: using max 28 ests per chain, 67200 per kthread [ 1631.410782][T22718] IPVS: length: 156 != 24 [ 1631.748828][T22738] bond2: (slave bond_slave_1): Device is not our slave [ 1631.755979][T22738] bond2: option active_slave: invalid value (bond_slave_1) [ 1631.781064][T22738] bond2 (unregistering): Released all slaves [ 1632.094338][T22762] netlink: 'syz.1.13132': attribute type 83 has an invalid length. [ 1632.184614][T22770] netlink: 'syz.4.13136': attribute type 1 has an invalid length. [ 1632.199090][T22770] netlink: 'syz.4.13136': attribute type 1 has an invalid length. [ 1632.205707][T22772] __nla_validate_parse: 35 callbacks suppressed [ 1632.205726][T22772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13133'. [ 1632.328892][T22777] bridge1: entered promiscuous mode [ 1632.334301][T22777] bridge1: entered allmulticast mode [ 1632.361646][T22782] netlink: zone id is out of range [ 1632.630532][T22794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1632.637872][T22794] IPv6: NLM_F_CREATE should be set when creating new route [ 1632.723569][T22799] sch_fq: defrate 0 ignored. [ 1633.861045][T22845] netlink: zone id is out of range [ 1633.873899][T22845] netlink: del zone limit has 4 unknown bytes [ 1633.971608][T22852] syzkaller0: entered promiscuous mode [ 1633.982896][T22852] syzkaller0: entered allmulticast mode [ 1634.302856][T22873] netlink: 'syz.0.13169': attribute type 21 has an invalid length. [ 1634.324006][T22873] netlink: 'syz.0.13169': attribute type 1 has an invalid length. [ 1634.453988][T22886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13173'. [ 1634.509733][T22886] netlink: 'syz.2.13173': attribute type 1 has an invalid length. [ 1634.518720][T22892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13175'. [ 1634.534667][T22886] macvlan0: entered promiscuous mode [ 1634.541176][T22886] macvlan0: entered allmulticast mode [ 1634.620407][T22901] xt_connbytes: Forcing CT accounting to be enabled [ 1634.765015][T22906] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13178'. [ 1634.779349][T22906] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13178'. [ 1634.813672][T22906] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13178'. [ 1634.840662][T22906] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13178'. [ 1634.861466][T22906] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13178'. [ 1634.882822][T22906] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13178'. [ 1634.927816][T22906] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13178'. [ 1635.421026][T22939] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1635.434665][T22945] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1635.805514][T22958] vlan3: entered allmulticast mode [ 1635.836976][T22958] veth1_virt_wifi: entered allmulticast mode [ 1636.210999][T22989] x_tables: duplicate underflow at hook 3 [ 1636.425429][T23011] netlink: 'syz.4.13213': attribute type 1 has an invalid length. [ 1636.447609][T23002] wlan1 speed is unknown, defaulting to 1000 [ 1636.472454][T23002] vxcan1 speed is unknown, defaulting to 1000 [ 1636.563303][T23018] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1636.629608][T23020] syzkaller0: entered promiscuous mode [ 1636.653608][T23020] syzkaller0: entered allmulticast mode [ 1636.836863][T23002] lo speed is unknown, defaulting to 1000 [ 1637.211902][T23046] netlink: 'syz.3.13224': attribute type 1 has an invalid length. [ 1637.313159][T23058] __nla_validate_parse: 31 callbacks suppressed [ 1637.313181][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13228'. [ 1637.345020][T23058] xt_hl: Unknown Hop Limit match mode: 206 [ 1637.449443][T23064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1637.633043][T23077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13234'. [ 1637.653447][T23064] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1637.671606][T23064] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1637.721582][T23064] veth1_to_bridge: entered allmulticast mode [ 1637.761583][T23064] veth1_to_bridge: entered promiscuous mode [ 1637.767857][T23064] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1637.787571][T23064] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1637.794892][T23064] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1638.536717][T23113] pim6reg527: entered allmulticast mode [ 1638.628495][T23120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13249'. [ 1638.654367][T23120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13249'. [ 1638.891433][T23120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.899224][T23120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.902294][T23139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1638.973853][T23120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1638.992029][T23120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1639.024598][T23120] vlan0: left promiscuous mode [ 1639.102356][T23120] vlan2: left allmulticast mode [ 1639.107346][T23120] bond0: left allmulticast mode [ 1639.114282][T23120] bond_slave_0: left allmulticast mode [ 1639.120789][T23120] bond_slave_1: left allmulticast mode [ 1639.142262][T23120] vlan3: left allmulticast mode [ 1639.147265][T23120] veth1_virt_wifi: left allmulticast mode [ 1639.184040][ T3257] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1639.210447][ T3257] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.230162][ T3257] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1639.254590][ T3257] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.273468][ T3257] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1639.283749][ T3257] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.296724][ T3257] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1639.317132][ T3257] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.401870][T23149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13257'. [ 1639.424881][T23149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13257'. [ 1639.900178][T23180] tc_dump_action: action bad kind [ 1639.959474][T23181] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1639.977507][T23181] bond1 (unregistering): Released all slaves [ 1640.206654][T23197] netlink: 'syz.1.13272': attribute type 1 has an invalid length. [ 1640.279128][T23199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13273'. [ 1640.333655][T23199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13273'. [ 1640.379414][T23199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13273'. [ 1640.403961][ T9466] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1640.427711][ T9466] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1640.431360][T23199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13273'. [ 1640.452852][ T9466] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1640.482801][T23207] syzkaller0: entered promiscuous mode [ 1640.497375][T23207] syzkaller0: entered allmulticast mode [ 1640.513588][ T9466] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1640.577407][T23216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1640.587761][T23216] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1640.607648][T23216] netlink: 'syz.4.13278': attribute type 4 has an invalid length. [ 1641.435233][T23251] SET target dimension over the limit! [ 1641.636242][T23225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1642.285749][T23273] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1645.775314][T23294] syzkaller0: create flow: hash 1918655078 index 2 [ 1645.793848][ T3257] syzkaller0: tun_net_xmit 76 [ 1645.799718][ T3257] syzkaller0: tun_net_xmit 48 [ 1645.805139][T23297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.820175][T27242] syzkaller0: tun_net_xmit 76 [ 1645.877504][T23284] syzkaller0: delete flow: hash 1918655078 index 2 [ 1645.967768][T23299] netlink: 'syz.1.13300': attribute type 10 has an invalid length. [ 1646.768504][T23312] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1646.804100][T23313] __nla_validate_parse: 3 callbacks suppressed [ 1646.804120][T23313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13304'. [ 1646.810653][T23312] netlink: 'syz.1.13303': attribute type 1 has an invalid length. [ 1646.948017][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802bd27000: rx timeout, send abort [ 1646.956672][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802bd27000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 1646.971203][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880260dcc00: rx timeout, send abort [ 1646.981907][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880260dcc00: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 1650.402641][T23330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1650.461040][T23340] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1650.535983][T23335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13309'. [ 1650.565030][T23335] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1650.650187][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13312'. [ 1651.197646][T23384] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1651.341241][T23394] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13327'. [ 1651.370388][T23395] netlink: 'syz.1.13324': attribute type 10 has an invalid length. [ 1651.464259][T23400] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1651.567179][T23395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.641241][T23395] bond0: (slave team0): Enslaving as an active interface with an up link [ 1652.013162][T23434] netlink: 'syz.1.13335': attribute type 21 has an invalid length. [ 1652.045649][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13337'. [ 1652.056883][T23434] netlink: 'syz.1.13335': attribute type 6 has an invalid length. [ 1652.078004][T23434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13335'. [ 1652.095350][T23438] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13338'. [ 1652.277662][T23438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13338'. [ 1652.318718][ T5286] veth1_vlan: left promiscuous mode [ 1652.362397][T23406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13331'. [ 1652.437124][T23406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13331'. [ 1652.493663][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13340'. [ 1652.528077][T23453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13340'. [ 1652.731650][T23465] netlink: 'syz.0.13341': attribute type 39 has an invalid length. [ 1653.697401][T23502] --map-set only usable from mangle table [ 1654.021671][T23529] netlink: 'syz.3.13356': attribute type 7 has an invalid length. [ 1654.032538][T23529] netlink: 'syz.3.13356': attribute type 8 has an invalid length. [ 1654.060931][T23530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13356'. [ 1654.080466][T23529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13356'. [ 1654.152778][T23529] bridge4: left promiscuous mode [ 1654.159334][T23529] bridge4: left allmulticast mode [ 1654.586342][T23577] FAULT_INJECTION: forcing a failure. [ 1654.586342][T23577] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.663511][T23577] CPU: 0 UID: 0 PID: 23577 Comm: syz.4.13371 Not tainted syzkaller #0 PREEMPT(full) [ 1654.663539][T23577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1654.663549][T23577] Call Trace: [ 1654.663556][T23577] [ 1654.663564][T23577] dump_stack_lvl+0xe8/0x150 [ 1654.663597][T23577] should_fail_ex+0x40c/0x560 [ 1654.663624][T23577] should_failslab+0xa8/0x100 [ 1654.663653][T23577] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1654.663675][T23577] ? skb_clone+0x212/0x3a0 [ 1654.663692][T23577] ? skb_clone+0x212/0x3a0 [ 1654.663716][T23577] skb_clone+0x212/0x3a0 [ 1654.663737][T23577] __netlink_deliver_tap+0x413/0x860 [ 1654.663765][T23577] ? netlink_deliver_tap+0x2e/0x1b0 [ 1654.663783][T23577] netlink_deliver_tap+0x19c/0x1b0 [ 1654.663802][T23577] netlink_unicast+0x77f/0x940 [ 1654.663847][T23577] netlink_sendmsg+0x813/0xb40 [ 1654.663875][T23577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1654.663899][T23577] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1654.663923][T23577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1654.663942][T23577] sock_sendmsg_nosec+0x13a/0x180 [ 1654.663968][T23577] ____sys_sendmsg+0x54e/0x850 [ 1654.663992][T23577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1654.664020][T23577] ? import_iovec+0x73/0xa0 [ 1654.664050][T23577] ___sys_sendmsg+0x2a5/0x360 [ 1654.664076][T23577] ? __lock_acquire+0x683/0x2cf0 [ 1654.664104][T23577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1654.664155][T23577] ? __fget_files+0x2a/0x420 [ 1654.664177][T23577] ? __fget_files+0x3a2/0x420 [ 1654.664212][T23577] __x64_sys_sendmsg+0x1b1/0x290 [ 1654.664233][T23577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1654.664270][T23577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.664291][T23577] do_syscall_64+0x174/0x580 [ 1654.664309][T23577] ? trace_irq_disable+0x3b/0x140 [ 1654.664333][T23577] ? clear_bhb_loop+0x40/0x90 [ 1654.664356][T23577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.664375][T23577] RIP: 0033:0x7f0d4db9de99 [ 1654.664393][T23577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1654.664410][T23577] RSP: 002b:00007f0d4ead8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1654.664429][T23577] RAX: ffffffffffffffda RBX: 00007f0d4de25fa0 RCX: 00007f0d4db9de99 [ 1654.664442][T23577] RDX: 0000000020004800 RSI: 0000200000000300 RDI: 0000000000000004 [ 1654.664454][T23577] RBP: 00007f0d4ead8090 R08: 0000000000000000 R09: 0000000000000000 [ 1654.664465][T23577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1654.664476][T23577] R13: 00007f0d4de26038 R14: 00007f0d4de25fa0 R15: 00007ffd5af5db08 [ 1654.664506][T23577] [ 1654.736183][T23582] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 1655.106412][T23606] netlink: 'syz.3.13379': attribute type 21 has an invalid length. [ 1655.126995][T23604] syzkaller1: entered promiscuous mode [ 1655.151031][T23604] syzkaller1: entered allmulticast mode [ 1655.422249][T23624] bond2: entered promiscuous mode [ 1655.471528][T23624] bond2: entered allmulticast mode [ 1655.495664][T23624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1655.517797][T23627] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1656.166601][T23635] FAULT_INJECTION: forcing a failure. [ 1656.166601][T23635] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.204123][T23635] CPU: 1 UID: 0 PID: 23635 Comm: syz.1.13386 Not tainted syzkaller #0 PREEMPT(full) [ 1656.204151][T23635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1656.204162][T23635] Call Trace: [ 1656.204171][T23635] [ 1656.204180][T23635] dump_stack_lvl+0xe8/0x150 [ 1656.204214][T23635] should_fail_ex+0x40c/0x560 [ 1656.204242][T23635] should_failslab+0xa8/0x100 [ 1656.204272][T23635] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1656.204295][T23635] ? local_lock_release+0x9c/0x160 [ 1656.204323][T23635] ? __alloc_skb+0x1d7/0x7a0 [ 1656.204346][T23635] ? __alloc_skb+0x1d7/0x7a0 [ 1656.204379][T23635] __alloc_skb+0x1d7/0x7a0 [ 1656.204412][T23635] netlink_ack+0x136/0xb30 [ 1656.204430][T23635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1656.204453][T23635] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1656.204587][T23635] ? __pfx_ref_tracker_free+0x10/0x10 [ 1656.204621][T23635] netlink_rcv_skb+0x2a4/0x4a0 [ 1656.204641][T23635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1656.204665][T23635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1656.204698][T23635] ? down_read+0x2be/0x330 [ 1656.204723][T23635] genl_rcv+0x28/0x40 [ 1656.204746][T23635] netlink_unicast+0x7bb/0x940 [ 1656.204785][T23635] netlink_sendmsg+0x813/0xb40 [ 1656.204815][T23635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1656.204839][T23635] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1656.204864][T23635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1656.204883][T23635] sock_sendmsg_nosec+0x13a/0x180 [ 1656.204917][T23635] ____sys_sendmsg+0x54e/0x850 [ 1656.204942][T23635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1656.204971][T23635] ? import_iovec+0x73/0xa0 [ 1656.205001][T23635] ___sys_sendmsg+0x2a5/0x360 [ 1656.205019][T23635] ? __lock_acquire+0x683/0x2cf0 [ 1656.205050][T23635] ? __pfx____sys_sendmsg+0x10/0x10 [ 1656.205106][T23635] ? __fget_files+0x2a/0x420 [ 1656.205129][T23635] ? __fget_files+0x3a2/0x420 [ 1656.205164][T23635] __x64_sys_sendmsg+0x1b1/0x290 [ 1656.205186][T23635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1656.205224][T23635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.205246][T23635] do_syscall_64+0x174/0x580 [ 1656.205264][T23635] ? trace_irq_disable+0x3b/0x140 [ 1656.205288][T23635] ? clear_bhb_loop+0x40/0x90 [ 1656.205312][T23635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.205331][T23635] RIP: 0033:0x7fbde5b9de99 [ 1656.205350][T23635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.205366][T23635] RSP: 002b:00007fbde6ae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1656.205386][T23635] RAX: ffffffffffffffda RBX: 00007fbde5e25fa0 RCX: 00007fbde5b9de99 [ 1656.205401][T23635] RDX: 0000000020004800 RSI: 0000200000000300 RDI: 0000000000000004 [ 1656.205413][T23635] RBP: 00007fbde6ae5090 R08: 0000000000000000 R09: 0000000000000000 [ 1656.205426][T23635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1656.205437][T23635] R13: 00007fbde5e26038 R14: 00007fbde5e25fa0 R15: 00007fff4b4e1a18 [ 1656.205468][T23635] [ 1657.066398][T23699] __nla_validate_parse: 12677 callbacks suppressed [ 1657.066414][T23699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13396'. [ 1661.854607][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1661.867997][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1661.881186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1661.894577][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1661.907462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1661.920335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1661.933199][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1661.946045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1661.958795][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1661.971732][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1662.305692][T23689] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13397'. [ 1662.326944][T23699] bond0: entered promiscuous mode [ 1662.354612][T23699] gretap0: entered promiscuous mode [ 1662.374306][T23699] debugfs: 'hsr1' already exists in 'hsr' [ 1662.406794][T23699] Cannot create hsr debugfs directory [ 1662.441103][T23699] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1662.493532][T23699] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1662.538756][T23699] hsr1: entered promiscuous mode [ 1662.577423][T23710] FAULT_INJECTION: forcing a failure. [ 1662.577423][T23710] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.640636][T23710] CPU: 1 UID: 0 PID: 23710 Comm: syz.1.13400 Not tainted syzkaller #0 PREEMPT(full) [ 1662.640663][T23710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1662.640674][T23710] Call Trace: [ 1662.640682][T23710] [ 1662.640691][T23710] dump_stack_lvl+0xe8/0x150 [ 1662.640725][T23710] should_fail_ex+0x40c/0x560 [ 1662.640754][T23710] should_failslab+0xa8/0x100 [ 1662.640783][T23710] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1662.640805][T23710] ? local_lock_release+0x9c/0x160 [ 1662.640834][T23710] ? __alloc_skb+0x1d7/0x7a0 [ 1662.640858][T23710] ? __alloc_skb+0x1d7/0x7a0 [ 1662.640890][T23710] __alloc_skb+0x1d7/0x7a0 [ 1662.640918][T23710] netlink_ack+0x136/0xb30 [ 1662.640933][T23710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1662.640952][T23710] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1662.640977][T23710] ? __pfx_ref_tracker_free+0x10/0x10 [ 1662.641011][T23710] netlink_rcv_skb+0x2a4/0x4a0 [ 1662.641032][T23710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1662.641057][T23710] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1662.641092][T23710] ? down_read+0x2be/0x330 [ 1662.641117][T23710] genl_rcv+0x28/0x40 [ 1662.641139][T23710] netlink_unicast+0x7bb/0x940 [ 1662.641178][T23710] netlink_sendmsg+0x813/0xb40 [ 1662.641209][T23710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1662.641233][T23710] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1662.641258][T23710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1662.641277][T23710] sock_sendmsg_nosec+0x13a/0x180 [ 1662.641304][T23710] ____sys_sendmsg+0x54e/0x850 [ 1662.641328][T23710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1662.641360][T23710] ? import_iovec+0x73/0xa0 [ 1662.641391][T23710] ___sys_sendmsg+0x2a5/0x360 [ 1662.641428][T23710] ? __lock_acquire+0x683/0x2cf0 [ 1662.641459][T23710] ? __pfx____sys_sendmsg+0x10/0x10 [ 1662.641514][T23710] ? __fget_files+0x2a/0x420 [ 1662.641539][T23710] ? __fget_files+0x3a2/0x420 [ 1662.641573][T23710] __x64_sys_sendmsg+0x1b1/0x290 [ 1662.641595][T23710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1662.641633][T23710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.641655][T23710] do_syscall_64+0x174/0x580 [ 1662.641672][T23710] ? trace_irq_disable+0x3b/0x140 [ 1662.641695][T23710] ? clear_bhb_loop+0x40/0x90 [ 1662.641718][T23710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.641736][T23710] RIP: 0033:0x7fbde5b9de99 [ 1662.641755][T23710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.641771][T23710] RSP: 002b:00007fbde6ae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1662.641792][T23710] RAX: ffffffffffffffda RBX: 00007fbde5e25fa0 RCX: 00007fbde5b9de99 [ 1662.641806][T23710] RDX: 0000000020004800 RSI: 0000200000000300 RDI: 0000000000000004 [ 1662.641819][T23710] RBP: 00007fbde6ae5090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.641831][T23710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.641843][T23710] R13: 00007fbde5e26038 R14: 00007fbde5e25fa0 R15: 00007fff4b4e1a18 [ 1662.641875][T23710] [ 1663.005102][T23717] siw: device registration error -23 [ 1663.877363][T23753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13411'. [ 1663.943112][T23753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13411'. [ 1663.974911][T23755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13414'. [ 1664.046270][T23760] syzkaller0: entered promiscuous mode [ 1664.080831][T23760] syzkaller0: entered allmulticast mode [ 1664.232183][T23755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1664.638650][T23766] netlink: 404 bytes leftover after parsing attributes in process `syz.3.13414'. [ 1664.675589][T23766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13414'. [ 1664.754189][T23766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13414'. [ 1664.789423][T23766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13414'. [ 1665.124201][T23792] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1665.440709][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13424'. [ 1666.214867][T23830] netlink: 'syz.0.13428': attribute type 11 has an invalid length. [ 1666.234986][T23830] netlink: 'syz.0.13428': attribute type 4 has an invalid length. [ 1666.251426][T23830] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13428'. [ 1666.733204][T23849] netlink: 'syz.1.13431': attribute type 4 has an invalid length. [ 1666.789817][T23850] netlink: 'syz.1.13431': attribute type 4 has an invalid length. [ 1666.859165][ C0] net_ratelimit: 6717 callbacks suppressed [ 1666.859186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1666.877583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1666.890061][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.902602][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.916329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1666.928905][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1666.941384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.953810][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1666.967340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1666.979910][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1667.033519][T23830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1668.077366][T23897] IPv6: NLM_F_CREATE should be specified when creating new route [ 1668.354990][T23903] __nla_validate_parse: 2 callbacks suppressed [ 1668.355008][T23903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13444'. [ 1668.492132][T23903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1668.499432][T23903] IPv6: NLM_F_CREATE should be set when creating new route [ 1668.893928][ T1315] ieee802154 phy12 wpan0: encryption failed: -22 [ 1669.272715][T23936] SET target dimension over the limit! [ 1670.259071][T23975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13462'. [ 1670.342395][T23979] batadv_slave_0: entered promiscuous mode [ 1670.377594][T23972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13462'. [ 1670.718233][T23972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1670.883510][T23972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.075497][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13466'. [ 1671.544608][T24003] netlink: 'syz.3.13466': attribute type 1 has an invalid length. [ 1671.867900][ C0] net_ratelimit: 7576 callbacks suppressed [ 1671.867924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.887795][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.900941][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1671.913604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1671.925886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.938448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.953313][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1671.965912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1671.978409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1671.990691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.877985][ C0] net_ratelimit: 8099 callbacks suppressed [ 1676.878005][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.897165][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1676.909582][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1676.922038][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.934411][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.947729][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1676.960109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1676.972553][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.984981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1676.998581][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1679.510990][T23993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13466'. [ 1680.391837][T24036] xt_hashlimit: size too large, truncated to 1048576 [ 1681.888234][ C0] net_ratelimit: 8651 callbacks suppressed [ 1681.888254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.906566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.919498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1681.931939][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1681.944400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.956950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1681.970102][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1681.982461][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1681.994827][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1682.007087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1686.898893][ C0] net_ratelimit: 10064 callbacks suppressed [ 1686.898912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1686.917353][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1686.929850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1686.942283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1686.955755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1686.968283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1686.980698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1686.993114][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1687.006777][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1687.019370][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1687.326886][T20344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1687.350779][T20344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1687.360685][T20344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1687.373933][T20344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1687.386569][T20344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1689.096430][T24043] veth5: entered allmulticast mode [ 1689.121936][T24046] macvlan0: entered promiscuous mode [ 1689.145750][T24049] bridge2: entered promiscuous mode [ 1689.152654][T24049] bridge2: entered allmulticast mode [ 1689.167000][T24038] pimreg: entered allmulticast mode [ 1689.531187][T20344] Bluetooth: hci3: command tx timeout [ 1689.856757][T24076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1690.750965][T16161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.391537][T16161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.449490][T24122] netlink: 'syz.3.13498': attribute type 1 has an invalid length. [ 1691.550520][T24115] netlink: 'syz.2.13496': attribute type 1 has an invalid length. [ 1691.608135][T20344] Bluetooth: hci3: command tx timeout [ 1691.657249][T24124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13496'. [ 1691.907850][ C0] net_ratelimit: 9084 callbacks suppressed [ 1691.907867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1691.926144][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1691.939657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1691.953152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1691.965631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1691.978045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1691.991382][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1692.003868][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1692.016297][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.028699][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.347304][T16161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.502202][T24056] wlan1 speed is unknown, defaulting to 1000 [ 1692.630669][T24140] syzkaller0: entered promiscuous mode [ 1692.636981][T24140] syzkaller0: entered allmulticast mode [ 1692.664268][T24152] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13501'. [ 1692.689036][T24056] vxcan1 speed is unknown, defaulting to 1000 [ 1693.347337][T24165] netlink: 'syz.2.13503': attribute type 10 has an invalid length. [ 1693.386553][T24168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13505'. [ 1693.467190][T24169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13503'. [ 1693.501747][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13503'. [ 1693.641224][T16161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.689347][T20344] Bluetooth: hci3: command tx timeout [ 1693.726328][T24056] lo speed is unknown, defaulting to 1000 [ 1694.574709][T24197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13513'. [ 1694.890129][T24206] netlink: 'syz.4.13515': attribute type 8 has an invalid length. [ 1695.768909][T20344] Bluetooth: hci3: command tx timeout [ 1695.812949][T24195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13512'. [ 1695.831773][T24195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13512'. [ 1696.290179][T24220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13519'. [ 1696.689283][T24224] netlink: 'syz.4.13520': attribute type 15 has an invalid length. [ 1696.719812][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13520'. [ 1696.731052][T24220] vcan0 (unregistering): left allmulticast mode [ 1696.857446][T24224] netlink: 'syz.4.13520': attribute type 15 has an invalid length. [ 1696.917940][ C0] net_ratelimit: 8745 callbacks suppressed [ 1696.917959][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1696.929232][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13520'. [ 1696.936255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.957854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1696.971266][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1696.983760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1696.996197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.008758][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.020973][T24234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13523'. [ 1697.022054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1697.042584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1697.054982][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.117123][ T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1697.253364][ T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1697.312091][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13525'. [ 1697.415019][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1697.461879][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1697.718014][T24253] netlink: 'syz.4.13529': attribute type 1 has an invalid length. [ 1697.726061][T24253] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13529'. [ 1697.739133][T24253] netlink: 'syz.4.13529': attribute type 6 has an invalid length. [ 1697.939106][T16161] bridge_slave_1: left allmulticast mode [ 1697.980787][T16161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.127149][T16161] bridge_slave_0: left allmulticast mode [ 1698.144154][T24271] xt_hashlimit: invalid interval [ 1698.155424][T16161] bridge_slave_0: left promiscuous mode [ 1698.187225][T16161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.374450][T24271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13530'. [ 1699.367457][T24305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13535'. [ 1700.086612][T16161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1700.116350][T16161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.135979][T16161] bond0 (unregistering): (slave team0): Releasing backup interface [ 1700.151500][T16161] bond0 (unregistering): Released all slaves [ 1700.243915][T24287] syzkaller0: entered promiscuous mode [ 1700.264060][T24287] syzkaller0: entered allmulticast mode [ 1700.345412][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1700.355427][T24056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.366141][T24056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.374210][T24056] bridge_slave_0: entered allmulticast mode [ 1700.388812][T24056] bridge_slave_0: entered promiscuous mode [ 1700.835344][T24056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.980707][T24056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.050769][T24056] bridge_slave_1: entered allmulticast mode [ 1701.164135][T24056] bridge_slave_1: entered promiscuous mode [ 1701.394406][T24323] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13538'. [ 1701.927939][ C0] net_ratelimit: 8496 callbacks suppressed [ 1701.927958][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1701.947090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1701.959558][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1701.971961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1701.984354][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1701.997601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1702.010067][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1702.022540][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1702.035028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1702.048339][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1702.207860][T24319] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1702.215274][T24319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.223039][T24319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.287203][T24327] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13539'. [ 1702.302688][T24320] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1702.310029][T24320] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1702.317700][T24320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.324942][T24320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.332478][T24320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.339698][T24320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.378597][T24320] bridge0: entered promiscuous mode [ 1702.384527][T24320] bridge0: entered allmulticast mode [ 1706.841234][ C1] sched: DL replenish lagged too much [ 1706.937835][ C1] net_ratelimit: 25714 callbacks suppressed [ 1706.937855][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1706.938179][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1706.944078][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1706.956300][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1706.968138][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1706.980267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1706.992004][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1707.004188][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1707.015943][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1707.027992][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1711.948042][ C1] net_ratelimit: 27667 callbacks suppressed [ 1711.948063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1711.948182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1711.954289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1711.966450][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1711.978286][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1711.990342][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1712.002062][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1712.014257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1712.026043][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1712.038177][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.925176][ T4940] Bluetooth: hci5: command 0x0405 tx timeout [ 1716.957904][ C1] net_ratelimit: 27618 callbacks suppressed [ 1716.957925][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1716.957948][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1716.964129][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1716.976295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1716.988115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.000168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.011932][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.024014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.035891][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.047935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1721.967920][ C1] net_ratelimit: 28240 callbacks suppressed [ 1721.967940][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1721.968045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1721.974131][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1721.986295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1721.998163][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1722.010174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1722.021936][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1722.034081][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1722.045919][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1722.057998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1726.977995][ C1] net_ratelimit: 25715 callbacks suppressed [ 1726.978015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1726.978147][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1726.984229][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1726.997582][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1727.008335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1727.020472][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1727.032304][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1727.045509][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1727.056182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1727.068252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1731.988073][ C1] net_ratelimit: 22473 callbacks suppressed [ 1731.988095][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1731.988330][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1731.994369][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1732.006532][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1732.018500][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1732.031058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1732.043588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1732.054382][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1732.066175][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1732.078701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.718130][ T1315] ieee802154 phy12 wpan0: encryption failed: -22 [ 1736.997910][ C1] net_ratelimit: 23756 callbacks suppressed [ 1736.997931][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1736.998503][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1737.004160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.016307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1737.028930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.040617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.051995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.064215][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.076093][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.088637][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1742.008071][ C1] net_ratelimit: 23696 callbacks suppressed [ 1742.008092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.008656][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1742.014421][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.027531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1742.038728][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.051437][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.062754][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.075082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.086986][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.099755][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1747.018028][ C1] net_ratelimit: 23976 callbacks suppressed [ 1747.018048][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.018052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1747.018425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1747.024277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.036543][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.048324][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.060184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.072205][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.084813][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.096313][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.028071][ C1] net_ratelimit: 25964 callbacks suppressed [ 1752.028092][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.028240][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.034293][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.047129][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1752.058502][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.070648][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.082360][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.094175][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.106255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.118136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:c9:1b:de:52:86, vlan:0) [ 1757.037812][ C1] net_ratelimit: 27126 callbacks suppressed [ 1757.037834][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.038053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.044170][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.056916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1757.068041][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.080110][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.091901][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.103657][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.117981][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.127766][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.047908][ C0] net_ratelimit: 28750 callbacks suppressed [ 1762.047923][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.047928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.048104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.054224][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.066197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1762.078280][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.090322][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.102064][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.113846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.125937][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.057896][ C0] net_ratelimit: 29663 callbacks suppressed [ 1767.057925][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.057993][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.064035][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.076164][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.088515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.100039][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.111932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.124073][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.135804][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.147917][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.068202][ C0] net_ratelimit: 30740 callbacks suppressed [ 1772.068223][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.068553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.074342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.086466][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.098287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.110317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.122603][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.136355][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.147573][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.158150][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.078129][ C0] net_ratelimit: 30772 callbacks suppressed [ 1777.078149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.078170][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.084706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.096316][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.108190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.120351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.132673][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.144173][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.156135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.168308][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.087964][ C1] net_ratelimit: 31550 callbacks suppressed [ 1782.087983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.088088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.094231][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.106910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.118508][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.130304][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.142414][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.154963][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.166419][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.178206][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.097958][ C1] net_ratelimit: 31486 callbacks suppressed [ 1787.097980][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.098051][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.104201][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.116051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.128122][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.140593][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.152072][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.163866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.175944][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.187970][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.107871][ C1] net_ratelimit: 33333 callbacks suppressed [ 1792.107891][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.107898][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.108056][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.114125][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.125928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.138052][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.149842][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.162177][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.174075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.186037][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.361395][ T1315] ieee802154 phy12 wpan0: encryption failed: -22 [ 1797.117838][ C1] net_ratelimit: 33547 callbacks suppressed [ 1797.117860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.117942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.124143][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.136042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.148151][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.160007][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1797.172032][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.184038][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.195818][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.207691][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.127852][ C1] net_ratelimit: 33991 callbacks suppressed [ 1802.127873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.127891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.134090][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.146378][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.157934][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.169806][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.181868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.193672][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.205666][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.217540][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.137834][ C1] net_ratelimit: 35569 callbacks suppressed [ 1807.137855][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.138022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.144044][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.155866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.167963][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.179836][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.191887][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.204081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.215753][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.227645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.147865][ C0] net_ratelimit: 35745 callbacks suppressed [ 1812.147886][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.148043][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.154001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.166115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.177936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.189924][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.201809][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.213874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.225679][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.237772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.157943][ C1] net_ratelimit: 35544 callbacks suppressed [ 1817.157964][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.158037][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.164194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.176075][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.188211][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.199971][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.211977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.224236][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.236011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.247799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1821.577778][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1821.584803][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24325/1:b..l [ 1821.593414][ C1] rcu: (detected by 1, t=10503 jiffies, g=312669, q=128005 ncpus=2) [ 1821.601503][ C1] task:syz.3.13539 state:R running task stack:25376 pid:24325 tgid:24324 ppid:18109 task_flags:0x400140 flags:0x00080000 [ 1821.616576][ C1] Call Trace: [ 1821.619884][ C1] [ 1821.622836][ C1] __schedule+0x17d9/0x56c0 [ 1821.627398][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1821.632362][ C1] ? __pfx___schedule+0x10/0x10 [ 1821.637246][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1821.642240][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1821.647333][ C1] irqentry_exit+0x14f/0x8f0 [ 1821.651940][ C1] ? trace_irq_disable+0x3b/0x140 [ 1821.656992][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1821.662991][ C1] RIP: 0010:kasan_check_range+0x7/0x2c0 [ 1821.668577][ C1] Code: 48 c7 c6 bd 23 4b 8e e8 97 39 f4 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 <41> 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d 04 37 [ 1821.688206][ C1] RSP: 0018:ffffc900060ded08 EFLAGS: 00000246 [ 1821.694293][ C1] RAX: ffffc900060df490 RBX: 0000000000000010 RCX: ffffffff8176fef4 [ 1821.702285][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900060dee38 [ 1821.710272][ C1] RBP: 0000000000000000 R08: ffffc900060df490 R09: 0000000000000000 [ 1821.718259][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 1821.726246][ C1] R13: ffffffff90fc9154 R14: ffffc900060dee38 R15: ffffc900060dee30 [ 1821.734245][ C1] ? unwind_next_frame+0xd04/0x2550 [ 1821.739478][ C1] __asan_memset+0x22/0x50 [ 1821.743914][ C1] unwind_next_frame+0xd04/0x2550 [ 1821.748962][ C1] ? alloc_pages_mpol+0x212/0x380 [ 1821.754013][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1821.759153][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1821.765338][ C1] arch_stack_walk+0x11b/0x150 [ 1821.770136][ C1] ? folio_alloc_mpol_noprof+0x39/0x160 [ 1821.775726][ C1] stack_trace_save+0xa9/0x100 [ 1821.780520][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1821.785923][ C1] save_stack+0x122/0x230 [ 1821.790278][ C1] ? __pfx_save_stack+0x10/0x10 [ 1821.795148][ C1] ? post_alloc_hook+0x1f9/0x250 [ 1821.800113][ C1] ? get_page_from_freelist+0x21fa/0x2270 [ 1821.805856][ C1] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 1821.811859][ C1] ? alloc_pages_mpol+0x212/0x380 [ 1821.816934][ C1] __set_page_owner+0x8d/0x4c0 [ 1821.821730][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1821.827128][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 1821.833221][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1821.838452][ C1] ? bad_range+0x8e/0x2a0 [ 1821.842807][ C1] post_alloc_hook+0x1f9/0x250 [ 1821.847595][ C1] get_page_from_freelist+0x21fa/0x2270 [ 1821.853201][ C1] ? prepare_alloc_pages+0x230/0x650 [ 1821.858604][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1821.864449][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1821.870819][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 1821.876158][ C1] alloc_pages_mpol+0x212/0x380 [ 1821.881194][ C1] folio_alloc_mpol_noprof+0x39/0x160 [ 1821.886610][ C1] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1821.892278][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 1821.897339][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 1821.902820][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1821.909030][ C1] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 1821.915057][ C1] shmem_get_folio_gfp+0x5da/0x16d0 [ 1821.920315][ C1] shmem_fault+0x179/0x390 [ 1821.924765][ C1] __do_fault+0x138/0x2a0 [ 1821.929130][ C1] ? do_pte_missing+0x140c/0x34b0 [ 1821.934177][ C1] do_pte_missing+0x2215/0x34b0 [ 1821.939073][ C1] ? handle_mm_fault+0xec/0x3080 [ 1821.944048][ C1] handle_mm_fault+0x1b36/0x3080 [ 1821.949032][ C1] ? handle_mm_fault+0xec/0x3080 [ 1821.954002][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1821.959307][ C1] ? follow_page_pte+0x6ce/0xe70 [ 1821.964274][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 1821.969594][ C1] __get_user_pages+0x1678/0x2720 [ 1821.974772][ C1] populate_vma_page_range+0x2be/0x3c0 [ 1821.980273][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1821.986285][ C1] ? down_read+0x2be/0x330 [ 1821.990726][ C1] __mm_populate+0x25f/0x390 [ 1821.995353][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1822.000497][ C1] vm_mmap_pgoff+0x353/0x4e0 [ 1822.005119][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1822.010262][ C1] ? rcu_is_watching+0x15/0xb0 [ 1822.015057][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 1822.019929][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1822.024722][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.030808][ C1] do_syscall_64+0x174/0x580 [ 1822.035508][ C1] ? trace_irq_disable+0x3b/0x140 [ 1822.040559][ C1] ? clear_bhb_loop+0x40/0x90 [ 1822.045261][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.051206][ C1] RIP: 0033:0x7f74c3d9de99 [ 1822.055640][ C1] RSP: 002b:00007f74c4c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1822.064071][ C1] RAX: ffffffffffffffda RBX: 00007f74c4025fa0 RCX: 00007f74c3d9de99 [ 1822.072504][ C1] RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1822.080496][ C1] RBP: 00007f74c3e33eaf R08: ffffffffffffffff R09: 00000000215eb000 [ 1822.088490][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1822.096479][ C1] R13: 00007f74c4026038 R14: 00007f74c4025fa0 R15: 00007ffc26cd7cc8 [ 1822.104492][ C1] [ 1822.107528][ C1] rcu: rcu_preempt kthread starved for 570 jiffies! g312669 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1822.118661][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1822.128646][ C1] rcu: RCU grace-period kthread stack dump: [ 1822.134543][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1822.148066][ C1] Call Trace: [ 1822.151396][ C1] [ 1822.154345][ C1] __schedule+0x17d9/0x56c0 [ 1822.158893][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1822.163885][ C1] ? __pfx___schedule+0x10/0x10 [ 1822.167897][ C0] net_ratelimit: 34219 callbacks suppressed [ 1822.167914][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.168860][ C1] ? schedule+0x90/0x2b0 [ 1822.174928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.186602][ C1] schedule+0x164/0x2b0 [ 1822.186635][ C1] schedule_timeout+0x152/0x2c0 [ 1822.186658][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1822.191568][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.202889][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1822.202922][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1822.207349][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.211941][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1822.212010][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1822.217639][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.229334][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1822.229368][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1822.235309][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.240486][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1822.240533][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1822.252832][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.258065][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1822.258099][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1822.263174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.274894][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1822.274926][ C1] kthread+0x388/0x470 [ 1822.274953][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1822.281342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.286360][ C1] ? __pfx_kthread+0x10/0x10 [ 1822.298566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.303493][ C1] ret_from_fork+0x514/0xb70 [ 1822.389837][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1822.394980][ C1] ? __switch_to+0xc89/0x1420 [ 1822.399684][ C1] ? __pfx_kthread+0x10/0x10 [ 1822.404307][ C1] ret_from_fork_asm+0x1a/0x30 [ 1822.409196][ C1] [ 1822.412227][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1822.418577][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1822.423826][ C0] NMI backtrace for cpu 0 [ 1822.423847][ C0] CPU: 0 UID: 0 PID: 16163 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 1822.423867][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1822.423880][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 1822.423978][ C0] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 1822.424001][ C0] Code: 20 da 4b 8c 48 c7 c6 60 da 4b 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 f7 cd 9c 07 65 8b 0d ec cd 9c 07 f7 c1 ff [ 1822.424016][ C0] RSP: 0018:ffffc900000061b8 EFLAGS: 00000282 [ 1822.424031][ C0] RAX: 0000000000000001 RBX: ffffc900000062f8 RCX: ffff88802c43dd00 [ 1822.424044][ C0] RDX: ffffc90000006301 RSI: ffffffff8c4bda60 RDI: ffffffff8c4bda20 [ 1822.424057][ C0] RBP: 1ffffffff21db401 R08: ffffc90000006370 R09: 0000000000000000 [ 1822.424070][ C0] R10: ffffc90000006338 R11: fffff52000000c69 R12: ffffc90000000000 [ 1822.424084][ C0] R13: ffffffff8176f27f R14: ffffc900000062e8 R15: ffffc90000006380 [ 1822.424097][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 1822.424118][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1822.424130][ C0] CR2: 0000563d0dff4a38 CR3: 0000000059bcc000 CR4: 00000000003526f0 [ 1822.424145][ C0] Call Trace: [ 1822.424153][ C0] [ 1822.424161][ C0] rcu_is_watching+0x15/0xb0 [ 1822.424190][ C0] unwind_next_frame+0x1b66/0x2550 [ 1822.424211][ C0] ? arch_stack_walk+0xe3/0x150 [ 1822.424227][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1822.424247][ C0] __unwind_start+0x514/0x660 [ 1822.424265][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1822.424288][ C0] arch_stack_walk+0xe3/0x150 [ 1822.424307][ C0] ? stack_trace_save+0xa9/0x100 [ 1822.424329][ C0] stack_trace_save+0xa9/0x100 [ 1822.424348][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1822.424371][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1822.424396][ C0] kasan_save_track+0x3e/0x80 [ 1822.424443][ C0] ? skb_scrub_packet+0x2c8/0x3d0 [ 1822.424469][ C0] kasan_save_free_info+0x40/0x50 [ 1822.424487][ C0] __kasan_slab_free+0x5c/0x80 [ 1822.424510][ C0] kmem_cache_free+0x182/0x650 [ 1822.424531][ C0] ? __skb_ext_put+0x221/0x2f0 [ 1822.424555][ C0] ? veth_xmit+0x66/0xe60 [ 1822.424587][ C0] ? lock_acquire+0x106/0x350 [ 1822.424611][ C0] skb_scrub_packet+0x2c8/0x3d0 [ 1822.424636][ C0] __dev_forward_skb2+0x28c/0x730 [ 1822.424660][ C0] ? __dev_forward_skb+0x12/0x30 [ 1822.424683][ C0] ? veth_xmit+0x66/0xe60 [ 1822.424702][ C0] veth_xmit+0x493/0xe60 [ 1822.424720][ C0] ? veth_xmit+0x66/0xe60 [ 1822.424744][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1822.424769][ C0] __dev_queue_xmit+0x14c0/0x3820 [ 1822.424792][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1822.424813][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1822.424837][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1822.424854][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1822.424871][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1822.424890][ C0] ? ipt_do_table+0x137f/0x15d0 [ 1822.424908][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1822.424930][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1822.424961][ C0] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 1822.425049][ C0] br_dev_queue_push_xmit+0x370/0x4b0 [ 1822.425101][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1822.425129][ C0] NF_HOOK+0x64e/0x6e0 [ 1822.425156][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1822.425179][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 1822.425197][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1822.425224][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1822.425245][ C0] br_nf_post_routing+0xa53/0xee0 [ 1822.425270][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1822.425296][ C0] ? br_fdb_toggle_local_vlan_0+0xac8/0x1120 [ 1822.425318][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1822.425345][ C0] nf_hook_slow+0xc5/0x220 [ 1822.425366][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1822.425390][ C0] NF_HOOK+0x23e/0x3f0 [ 1822.425413][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1822.425434][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1822.425455][ C0] ? net_generic+0x1e/0x240 [ 1822.425479][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1822.425506][ C0] ? net_generic+0x1e/0x240 [ 1822.425532][ C0] br_forward_finish+0xd3/0x130 [ 1822.425553][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1822.425578][ C0] br_nf_forward_finish+0xa76/0xea0 [ 1822.425609][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1822.425636][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1822.425662][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1822.425686][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1822.425709][ C0] NF_HOOK+0x64e/0x6e0 [ 1822.425736][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1822.425759][ C0] ? net_generic+0x1e/0x240 [ 1822.425783][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1822.425811][ C0] ? net_generic+0x1e/0x240 [ 1822.425834][ C0] ? net_generic+0x1e/0x240 [ 1822.425860][ C0] br_nf_forward_ip+0x7eb/0xa30 [ 1822.425885][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1822.425912][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1822.425937][ C0] nf_hook_slow+0xc5/0x220 [ 1822.425957][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1822.425980][ C0] NF_HOOK+0x23e/0x3f0 [ 1822.426003][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1822.426024][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1822.426047][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1822.426068][ C0] ? br_multicast_flood+0x1161/0x1610 [ 1822.426094][ C0] ? br_handle_vlan+0x5e/0x530 [ 1822.426145][ C0] __br_forward+0x397/0x540 [ 1822.426166][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1822.426191][ C0] br_handle_frame_finish+0x12e0/0x1990 [ 1822.426217][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1822.426239][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1822.426265][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1822.426284][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1822.426308][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1822.426324][ C0] ? ipt_do_table+0x137f/0x15d0 [ 1822.426340][ C0] ? kasan_save_track+0x4f/0x80 [ 1822.426359][ C0] ? kasan_save_stack+0x43/0x60 [ 1822.426383][ C0] ? nf_hook_slow+0x176/0x220 [ 1822.426405][ C0] br_nf_pre_routing_finish+0x138a/0x1a10 [ 1822.426439][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1822.426466][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1822.426494][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1822.426518][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1822.426541][ C0] NF_HOOK+0x64e/0x6e0 [ 1822.426564][ C0] ? net_generic+0x1e/0x240 [ 1822.426590][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1822.426614][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1822.426644][ C0] ? setup_pre_routing+0x4d2/0x6e0 [ 1822.426670][ C0] br_nf_pre_routing+0xec2/0x14b0 [ 1822.426694][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1822.426724][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1822.426749][ C0] br_handle_frame+0x127f/0x1510 [ 1822.426779][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1822.426806][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1822.426830][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1822.426851][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1822.426878][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1822.426903][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 1822.426932][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1822.426993][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1822.427015][ C0] ? ip6_rcv_finish+0x265/0x280 [ 1822.427039][ C0] ? NF_HOOK+0x336/0x3c0 [ 1822.427066][ C0] ? process_backlog+0x3c3/0x1860 [ 1822.427092][ C0] ? process_backlog+0x3c3/0x1860 [ 1822.427118][ C0] ? process_backlog+0x3c3/0x1860 [ 1822.427142][ C0] process_backlog+0x706/0x1860 [ 1822.427167][ C0] ? process_backlog+0x3c3/0x1860 [ 1822.427197][ C0] __napi_poll+0xaa/0x330 [ 1822.427219][ C0] net_rx_action+0x61d/0xf50 [ 1822.427248][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1822.427290][ C0] handle_softirqs+0x225/0x840 [ 1822.427311][ C0] ? do_softirq+0x76/0xd0 [ 1822.427331][ C0] ? kernel_fpu_end+0x62/0x80 [ 1822.427350][ C0] do_softirq+0x76/0xd0 [ 1822.427369][ C0] [ 1822.427375][ C0] [ 1822.427381][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1822.427401][ C0] blake2s_compress+0xfa/0x1c00 [ 1822.427470][ C0] ? __up_read+0x29c/0x930 [ 1822.427490][ C0] ? __pfx___up_read+0x10/0x10 [ 1822.427508][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 1822.427534][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1822.427560][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1822.427590][ C0] blake2s_final+0x10f/0x270 [ 1822.427617][ C0] compute_mac1+0x184/0x200 [ 1822.427671][ C0] ? __pfx_compute_mac1+0x10/0x10 [ 1822.427696][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1822.427725][ C0] wg_cookie_add_mac_to_packet+0x57/0x1a0 [ 1822.427750][ C0] wg_packet_handshake_send_worker+0x1aa/0x370 [ 1822.427778][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1822.427802][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1822.427831][ C0] ? rcu_is_watching+0x15/0xb0 [ 1822.427856][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1822.427876][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1822.427908][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1822.427931][ C0] ? assign_work+0x3cf/0x5d0 [ 1822.427951][ C0] worker_thread+0xa47/0xfb0 [ 1822.427984][ C0] kthread+0x388/0x470 [ 1822.428008][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1822.428026][ C0] ? __pfx_kthread+0x10/0x10 [ 1822.428049][ C0] ret_from_fork+0x514/0xb70 [ 1822.428079][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1822.428102][ C0] ? __switch_to+0xc89/0x1420 [ 1822.428129][ C0] ? __pfx_kthread+0x10/0x10 [ 1822.428152][ C0] ret_from_fork_asm+0x1a/0x30 [ 1822.428175][ C0] [ 1827.177802][ C0] net_ratelimit: 33318 callbacks suppressed [ 1827.177823][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.177823][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.178105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.183954][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.196064][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.208381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.219958][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.231792][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.243769][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.255671][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)