last executing test programs: 43.353917332s ago: executing program 2 (id=1865): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000040)=0x14) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x1, 0x8, 0x7, 0x20100, 0x1, 0x9, '\x00', r0, r2, 0x5, 0x4, 0x2, 0xc}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000200000000020900010073797a31000000002c000000030a010100000000000000000a0000030900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x17e8}}, 0x40) 42.410182356s ago: executing program 2 (id=1873): unshare(0x66000080) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, r0, 0x1, 0x6, 0x0, 0xb, "b9e253fb6764293dbcc7068811e5da32b0ea71272dfca2398936ee14fce40d70f6c59320763321dfce7fde81de4ce65ef86d350f448dc2811217462a02d266", 0x17}, 0x60) 40.968903065s ago: executing program 1 (id=1881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) unshare(0xc040480) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket(0x400000000010, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) (async) setsockopt$sock_int(r9, 0x1, 0x2c, &(0x7f0000000600)=0x5bb, 0x4) (async) setsockopt$packet_fanout_data(r9, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 40.415982847s ago: executing program 1 (id=1884): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000180)=0x4, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x20000001) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map, 0x22, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0]}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="48c700001000030400000000fdffff1b0000030034150e344db9f66a3241449d6888735b7bea4156cd7348a944b1870f969aecd31cb897aff7b7e8bea46e58067269cdfee392e349f759ca6aa3f26a2c655b47b4e5bfe18e1fdc4d8332c99198dfa2e2d339fad088fb729c90c9d478366bf341ca", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYBLOB="9f68f33976"], 0x48}}, 0x0) 40.267637018s ago: executing program 1 (id=1885): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c00000000000000000000000000000000000000000000000200"/48}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0xc3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3d86dd60ecff8000181100fc000000000000000000000000000000ff02000000000000000000000000000100004e22001890"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x6, 0x9, 0x0, 0xfffd, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28}, 0x94) unshare(0x6a040000) socket(0x2, 0x80805, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @random}, &(0x7f0000000340)=0x80) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x8, 0x80000, 0x0, &(0x7f0000000280)) 37.584365507s ago: executing program 4 (id=1892): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x58, 0x700, 0x3, 0x5, {{0x8, 0x4, 0x1, 0xb, 0x20, 0x65, 0x0, 0x1, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0xa, "fb8713f33d34a2a2"}]}}}}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r10 = socket(0x40000000015, 0x5, 0x0) bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x1, r9, 0x0, r10}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7800, 0x8000, 0xfff, 0x101, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast1, @empty}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="5801", @ANYRES16, @ANYBLOB="010125bd7000fddbdf250900000058000180140002006970000200000008000100"/42, @ANYRES32, @ANYBLOB="080003000300000008000300010000001400020076657468315f746f5f687372000000001400020065727370616e30000000000000000000540001801400020070", @ANYRES32=0x0, @ANYBLOB="080001", @ANYRES32=r5, @ANYBLOB="080003000300000008000300010000000800", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32, @ANYRES32=r3, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="140002006970766c616e30000000000000000000140002006970766c616e3100", @ANYRES32=r13, @ANYBLOB="1400020064766d7270300000000000000000000008000300030000001400020070696d726567000000000000000000000800030000000000"], 0x158}}, 0x400c0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}, 0x2}], 0x1, 0x2002, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x2c0, r14, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xa9, 0x45, "a11288a2a4a6bb8ab1b1d513845712dc63af803426af8205ad7ec18acdf6139f9d84f72a61da4a92106bd7cc90e3f6d269a9fbd8eb509a3b935e84be23ee0250b3869a28b7d6c3c24f2c34a1986325f8b2debbd1a6559807480b5c31c0fa4c2c81838747099d3f2f0d7c403830db47d9a71024d718018cca1bca62ed08ecf316f386ab98e8f0fa418c0b2a36df5cf9e08152132073557df89abf6b3f83c8b9eb582e7f95e5"}, @NL80211_ATTR_TESTDATA={0xa8, 0x45, "d0f084dfeee9b6458de85cac7b4934c95823601f1c559ec9bca78db0f29a238e2abe57af7386b2322ba417070b8fd714c3cbbb725380d9a11ba7b1d9b8ffd0a48e3b898dcd5ba3fe942cb5b8f8d069d39b32537557139b1b14cbba6b069c57d0ea351ab27fda5d40afcb82d4f79c78713e278661214e35d5a53a9e6b730dcb6df2ca53034b257f1bb23bbd26bb2fb6630c9a85c13e9b5dc7af14134c28ce351fbbeac273"}, @NL80211_ATTR_TESTDATA={0x9b, 0x45, "ab4f58370cc084d7a522cda3ef8ca99d6d61af5e426e277a85736ef55b8ac2add4ea9d4f89227a6498dac260daa8414ac60605aa300f5dbd37f8825a7b859224dc0c91d84b547cac779c30d8ce2433d08365af65114f96086ed35b1267ad7f4bd771c333671d2c1803f3ecb06687253fe52f85323d5d7bd197a3090bf1609cce232350ae8f43f08a17fad1727f345db540932d569c1349"}, @NL80211_ATTR_TESTDATA={0xbc, 0x45, "5c61f7b0eb1442649780af5f15995ba0934fd353a0e58095c8b65374a92028ad92dd0b3b41e0e5f1a1750c4cf440bc0b2d8e9bb441026ef9a8a6a664153b4a7ff3f2e42819e78b7a2bddcd3e5499719dae18f1ce956d293855b50318f40a4b139ac19f14f7e35ef10f8dfefc6814929480e27c5335010a0c2045dbea82857c2424b35820720e2e20cc3b1e8d2510f3ec86eb9df766fa092756b25d5a6b436b5bb39391e50199642eef334bc088ab08f4a43d68e89f5cbe0d"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x2000}, 0x8000) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 36.628550322s ago: executing program 0 (id=1895): r0 = socket(0x26, 0x80e, 0x5) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206010300000000000000000000000400000065a4e973839fae1b00000900020073797a32000000003400078008000b400000000308001740fffff801060004404e2300000800134000007fff08001740000000400800084000000015000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r4 = accept4$packet(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x14, 0x800) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x6}}], 0x18}}], 0x1, 0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010003704000080000000000000000000", @ANYRES32=r5, @ANYBLOB="c324050000000000240012800b00010067656e65766500001400028005000c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "e4aa26a80f88132e83afb5"}]}}}], 0x40}, 0x200000e0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x7f, 0x1, @loopback, 0x95a82bd}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) shutdown(r1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002d00070100000000ffdbdf7e25027c000008000180040006000800028004000280c5746489090c15dde2"], 0x24}, 0x1, 0x0, 0x0, 0x4c80c}, 0xc010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000000500), 0x0, 0x4000800) recvfrom(r9, 0x0, 0x0, 0x2100, 0x0, 0x0) 36.438262626s ago: executing program 4 (id=1896): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r2, &(0x7f0000000080)=0x4, 0xfffffe7d) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) recvmsg(r5, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000000ac0)=""/138, 0x8a}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/165, 0xa5}, {&(0x7f00000041c0)=""/44, 0x2c}, {&(0x7f0000004200)=""/168, 0xa8}, {&(0x7f00000042c0)=""/130, 0x82}], 0x6}, 0x20000020) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private0}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r6, &(0x7f00000002c0)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x5e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000894}, 0x0) 35.829704218s ago: executing program 3 (id=1897): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="74000000020605000000000000000000000000d7c75500120003006269746d61703a69702c6d61630000000500040000000000090042007379001a00280007801800028014000240ff0200000000000000000000000000010c0700800800014000001c0205000500020000000508010006"], 0x74}}, 0x0) splice(r1, 0x0, r1, 0x0, 0x8000f28, 0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x51, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r9, &(0x7f0000000140)={0x1a, 0x5, 0x0, 0xff, 0x2, 0x9, @random="9f5d7ac3344d"}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r10, 0x0, 0xffffffff000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a320000000009000100", @ANYRES64=r11], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r14 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r15, {0xffff, 0x3}, {}, {0xffe0, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80010001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b88481aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 35.424312129s ago: executing program 2 (id=1898): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000008a0475d3f300"/25, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000480), 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 35.314843157s ago: executing program 4 (id=1899): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e25, 0xb3, @mcast2, 0x2}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x16f3ba3e, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="024bbc2c17066a3640bdb0b9aeab2ec8416cb8ef4b74e2a650684665c1cc03497116c85805c37271395b23abd838d1a3bbaca41a13c9a462b47b5a01b05ffa3004b6bc7ab4eb2e9cd2903c6bd99229d85b976feca88ef8ff2e946b5f809cef4fdbee0343e4812f8a9a4f3d4d183b1324c3e15f59e5", 0x75}], 0x1}}], 0x1, 0x4001c00) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e25, 0xb3, @mcast2, 0x2}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x16f3ba3e, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="024bbc2c17066a3640bdb0b9aeab2ec8416cb8ef4b74e2a650684665c1cc03497116c85805c37271395b23abd838d1a3bbaca41a13c9a462b47b5a01b05ffa3004b6bc7ab4eb2e9cd2903c6bd99229d85b976feca88ef8ff2e946b5f809cef4fdbee0343e4812f8a9a4f3d4d183b1324c3e15f59e5", 0x75}], 0x1}}], 0x1, 0x4001c00) (async) 35.104115058s ago: executing program 4 (id=1900): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000040)='erspan\x00', 0x0, &(0x7f0000000080)={@align=0xd, {0x1c6, 0xff00, 0xbc, 0x7fffffff}}, 0x80000000, &(0x7f00000000c0), &(0x7f0000000100)}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x25, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x1, 0x1, 0x81, 0x0, @val=0x80}, '?'}}}}, 0x33) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x5f, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x1e002}]}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4040095}, 0x24000000) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={r0, 0xc, 0x7, "9e52a1dcd9e2cacf06"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'tunl0\x00', 0x800}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}]}}}]}, 0x40}}, 0x0) 35.083236168s ago: executing program 0 (id=1901): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (rerun: 32) pwritev(r2, 0x0, 0x0, 0x4000000, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, 0xffffffffffffffff) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfff8, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @loopback, {[@noop, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0xf, [{@local, 0x7}, {@local, 0x4}, {@rand_addr=0x64010101, 0x9}]}, @cipso={0x86, 0x2a, 0x3, [{0x6, 0x12, "5a5038cf9b732108b946fba000cddc3e"}, {0x2, 0xd, "f413567c09ed9d947789b8"}, {0x5, 0x3, "c9"}, {0x6, 0x2}]}]}}}}}}}, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r5}, 0x10) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000002180)=[{{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40050}}, {{&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x38}}], 0x2, 0x44800) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080), 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newtclass={0x44, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0xd}, {0x5, 0x3}, {0x4, 0xfff1}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_prio={0x9}]}, 0x44}}, 0x8000) 34.642117011s ago: executing program 2 (id=1902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x34, r2, 0xfffffffffffffdff, 0x170bd2c, 0x8003, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x6008010}, 0x20008000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0200000004400000", @ANYRES32, @ANYBLOB="4f8f11f04791092e838beb83125500a817966ec760014d37809c9f4cb67c6c7820e49a32ef4a5981111b441feaf077f00b", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x48, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 32.302060978s ago: executing program 2 (id=1903): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x10, 0x8000, 0x11, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7, 0xd9, 0x2}}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x2, r0, 0x1, 0x3, 0x6, @multicast}, 0x14) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) (rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@acquire={0x128, 0x17, 0x4, 0x70bd2c, 0x25dfdbfd, {{@in=@empty, 0x4d2, 0x3c}, @in6=@local, {@in6=@remote, @in6=@loopback, 0x4e22, 0x2, 0x4e23, 0x8, 0x8, 0x0, 0x0, 0xf6, r2, r3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x4e24, 0x74d1, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x6, r0, r5}, {0x4, 0x2, 0x178e, 0xffffffffffffffff, 0xaf, 0x800, 0x2, 0xc}, {0xf, 0xe6, 0x80000000, 0x75b3}, 0x368, 0x6e6bc0, 0x2, 0x0, 0x2, 0x3}, 0x4c4d5866, 0x4, 0x41, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x8040}, 0x7d3987b4a4ea9a01) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44005}, 0x20044045) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, 0xd, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x17, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0xf, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x2b, &(0x7f0000000880)=""/43, 0x41000, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x5, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000940)=[0xffffffffffffffff, r9, 0x1], &(0x7f0000000980)=[{0x3, 0x2, 0x1, 0x3}, {0x2, 0x3, 0x4}, {0x2, 0x5, 0x6, 0x4}, {0x1, 0x5, 0xc}, {0x5, 0x5, 0x3, 0x1}, {0x1, 0x4, 0xa, 0x5}, {0x1, 0x4, 0x4, 0x5}], 0x10, 0xff}, 0x94) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@ifindex=r4, 0x1f, 0x1, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0], 0x0}, 0x40) (async, rerun: 64) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c40)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@fallback=r1, r10, 0x1d, 0x0, 0x0, @void, @value=r12, @void, @void, r11}, 0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000c80)={0x0, 0x1000, 0x6, [0x0, 0x0, 0x2, 0xff7f, 0xb, 0x9]}, &(0x7f0000000cc0)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f0000000d00)={r13, 0xd9, "1acc97fea059cbacc4b1336d200f9c8989c8d5f5277cc553129269c12677236121fddf63add5f78e93fe7c7d7e81b6b9414f65ab436f02ea755a151b4771d0151248d69c8e30d055a7c18b2f9294cb4f18b7c85b7c7d7a006f65cda34f57940cf6d065d8b46709cb369191a929701805f11afd47653d286f197ee3f8d8a3ee56e94049c1b09aac4868365325e3f5ef6d6ebca91a81734634478ab5274006fd3f3f5cfabd66768345f4f6d7ff7d6d07b221dd0bf51481f9fd6b292d1f8633afcf5d9c49495fe7577545b36ef72b7d206b1404828daa8909f6a7"}, &(0x7f0000000e00)=0xe1) (async) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e40)={0xffffffffffffffff, 0xb, 0x18}, 0xc) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@bloom_filter={0x1e, 0xfff, 0x8, 0x7, 0x0, 0x1, 0x80, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x7}, 0x50) (async) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000000f00), 0x8) (async) r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0x8, [@float={0x6, 0x0, 0x0, 0x10, 0x10}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @volatile={0x6, 0x0, 0x0, 0x9, 0x5}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x6}}, @datasec={0x10, 0xa, 0x0, 0xf, 0x1, [{0x1, 0x2, 0x197}, {0x4, 0x2, 0x9}, {0x3, 0x1, 0x1}, {0x4, 0x4, 0x3}, {0x3, 0x9, 0xb}, {0x3, 0x6}, {0x1, 0x400, 0x783}, {0x2, 0xea22, 0x7}, {0x1, 0x5, 0x3}, {0x3, 0xfcb, 0x9b97}], "ba"}]}, {0x0, [0x2e, 0x5f, 0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000001240)=""/22, 0xf0, 0x16, 0x0, 0x3, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={r12, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0], 0x0, 0x6b, &(0x7f0000001400)=[{}, {}], 0x10, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@bloom_filter={0x1e, 0x1, 0x1, 0x7, 0x60001, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0xf}, 0x50) (async) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0xc020f509, &(0x7f00000016c0)={r10, 0x7, 0xf5e, 0x9}) (async, rerun: 32) r21 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', r4, 0xffffffffffffffff, 0x2, 0x1}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x10, 0x2f, &(0x7f0000000f40)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}, @map_fd={0x18, 0x2, 0x1, 0x0, r15}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4bbb1146}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f00000010c0)='GPL\x00', 0x72e0, 0xa, &(0x7f0000001100)=""/10, 0x41100, 0x8, '\x00', r2, @sk_msg=0x7, r17, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x5, 0xc, 0x9, 0xb}, 0x10, r18, r10, 0x1, &(0x7f0000001780)=[r19, r20, r21], &(0x7f00000017c0)=[{0x2, 0x1, 0x2, 0x3}], 0x10, 0x4}, 0x94) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000018c0)={'pim6reg1\x00'}) (async, rerun: 32) sendmmsg$inet(r9, &(0x7f0000001d40)=[{{&(0x7f0000001900)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001940)="fb119857d9b9c1b304d99ba6cd13e1c79d3dee034b6932a2b5f9e80785de22803870c8227e41c6f2e406636320b8f0fe8a28dc98e5452060c3fce31a47d91a055782df621d259fb92579bf573f41a80856369e7938cdf50ad6114c4b3e84e4c3790bc6617643206fe34d1d63c437eacf02d149fc562575a25f19308ddb01", 0x7e}, {&(0x7f00000019c0)="904dc40a1f823bd9ba520dce81162abcb86ffe86c1eff0493c90ac341c6b5f57acafa57e297efc846f7c10ff0055813b2846e6a136c7dfb3add3ccf4f57e31d80742ae471944742a5fcbc9dd269f8a554d029b950e56fae4682d707fb9665bfb83b064b9b997aeaa50dac4e961911631369219f49851cb0201b7964007abcddfb779d36facd0ad11edeeba36bfe45f03d4fec2fe73476e6afc27e9", 0x9b}, {&(0x7f0000001a80)="bea1bdb38aa9c1cf17f5aa472eb389be1744f08eae70bd178db037064c72e35a44ba68e1a1c32aea3f20db883ccce1f810463b9e70969cf37fae914e0431d5437ac07250fc53f3da28de2e", 0x4b}, {&(0x7f0000001b00)="56c6a2b3eacc94", 0x7}, {&(0x7f0000001b40)="8c10e01b57180010fc1d8aed789ba65b9e61c8a6c88db68d31cef0ea5739811c4984e129249c34c559819f9bdd8a65c4fc9db7981ab4823a29824599fe7ecac3e165403c6993fc8751256eb5ba11029ac08294b2a7fa4e4947f8f412516a0ce849b6c28c203fc00ae9137e4b636654839f7546cae53017655a3a19e22f595094853c07f7", 0x84}, {&(0x7f0000001c00)="b8768431c9ef95f69d8632d8f08279f98116f7f95ef92650286fde5169e36e89387d051f79219a8f4f4608dd4558890ae50675147e33d474b7b8f7cf6b00a0335dbff24caa61650c1bfb8a6c71bf810d0f101fde31e7b78b5d6331d70580efbe60f422de9278295750f8594a371b18139de1b8ae759c6685969021c635455a2ad6ff127b0c4bd61432689374443c1009ff9b24fa22d3bdbc071f9a45e2eea1a7bbe5b4ad52077cd93a41c343396866453c1b8f20", 0xb4}], 0x6}}], 0x1, 0x4040000) 32.107152669s ago: executing program 0 (id=1904): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0x17d4}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xffff}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x40) 32.018558748s ago: executing program 3 (id=1905): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e00000002bde8c3c8000000da16c167d80307f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000003940), r0) 31.663554963s ago: executing program 4 (id=1906): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1}, 0x8) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}]}}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000370427bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="0012800b000100677265746170000004000280050021149f18c7082647191aff37ff2b000100"/49], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0xe5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 31.259947674s ago: executing program 2 (id=1907): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', r3, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r4, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$inet6(0xa, 0x6, 0x2) accept4$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000280)=0x1c, 0x80000) syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002000)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWSETELEM={0x1458, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x142c, 0x3, 0x0, 0x1, [{0x1428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x104, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "53725c21bf2531a3d0aed1e1a1586be5aa52e666bbc5c7f1f78c74d1dc7d275cb1ae0cd7d7b50ae0b7b779e59096983fcf76489027"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x12cc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "87861520a1b1d3167b72417df9bf1543446a2e98fd97d09be058f722d69e8deadc223d99bbaa59352ac704339be45676d9aba62bc54d7080c066d8453cda63eaf42f879d6a10146ca4092506b392312b36e409f26b72c93ff5e9bf88da04407627966c8061d39547e475be583b8ec8395899c850eb4f2c92c334f648664ebce1cdf7922a16a9af70b0b1a3f6c9ccca809892e1425ead0635b3ffb0abaa9d1881c70c9be0d021d6a91d8bc2"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x67, 0x1, "fb5991981c7199b44aeaaad95ab55bbb7f9fd9e9f532ac21ab98fa3f7d51d5e2b97bf919d1b8c118a929f89130c2984c5e74cf89e51b423f95a91bd9be661cc96848419ad938c3968b32deb189fcfacbab11cb97b0875e8a3d98ffbd31cdeb2e19a19a"}, @NFTA_DATA_VALUE={0xec, 0x1, "89b68b7b8bedd80d55a4d5a3a135a37398fad79296cb4c3e7f22f32d4037cc2d04f90e7dc3af4060fb5c429fbeb219df46a05be31281ade63e45295ed4d72c5412ee5b7fa19fdba05eada458ddffb797a7ee3ec36b5d1fdcf0d0cd1079b7538a2f67f37297a78da551247509cc97a280aae9878886f7583b229a42a845febcbdffe859c67ec1f08d15c7f6939da3364cb1bdefca06cb6cdcccca69e6cd39de364726a59c58f33ad75f75f7243f8aef00421db22c9ad0414def9f137125b03fa886bf606d5b2af9590371fadd583fd6384adacba7ab35d9ca5733e5cc2a8570d89341eb759ebf13ec"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x14b4}}, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc0400f67f08000b"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 31.234309134s ago: executing program 4 (id=1908): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000180)=r3, 0x12) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r6, 0x3328}, {r5, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 31.110058481s ago: executing program 0 (id=1909): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x2, 0x2, 0x10, @empty, @remote, 0x80, 0x8, 0x9, 0xfc000000}}) bind(r2, &(0x7f0000000480)=@ll={0x11, 0x16, r3, 0x1, 0xfa, 0x6, @link_local}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000014f8020400000000000000008000000015d2f0276c7538cfeb57e78144079a4e3758902f31f5cbe05bc200b55ce67fa0d9fe53e35ad13075f2ac85beefd3af763b0000000040000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="13cbdabb"], 0x3c}}, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r7, 0x0, 0x0, 0x80000) 31.106067159s ago: executing program 3 (id=1910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, r1, 0x333, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000289abc30ab4831a43df12609c0e04bd034dc00c670fb83bfa6", @ANYRES16=r3, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001f00fe8000000000000000000000000000bb"], 0x58}}, 0x0) 31.082387757s ago: executing program 1 (id=1911): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x202}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x88d0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000280)={0x2e, @loopback, 0x4e21, 0x0, 'sh\x00', 0x1, 0x9, 0x3f}, 0x2c) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r7, r9, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30) syz_emit_ethernet(0x4e, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000900)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004c17001c00680000f80290787f000001ac1414aa1407907864000101"], 0x0) setsockopt(r6, 0x107, 0xf, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r6, 0x0, 0x40011) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 30.65401427s ago: executing program 1 (id=1912): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@deltaction={0x7c, 0x31, 0x400, 0x1, 0x1ffffffd, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x7c}}, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e21, 0xfffff66b, @mcast2, 0x2}, 0x1c) (async) sendmmsg$inet(r4, &(0x7f0000007100)=[{{&(0x7f0000002080)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x20040000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x3a, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f00000032c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003280)={&(0x7f00000020c0)={0x1184, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x101c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe9c8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12843d74}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x1184}, 0x1, 0x0, 0x0, 0x800c008}, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r10, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x300, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r10, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'hsr0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r11) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000340)={0x2, 0xc1}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x54, r12, 0x601, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2]]}, 0xfffffffffffffdf0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000800) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r12, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x56}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000001}, 0x40004) 29.774934653s ago: executing program 1 (id=1913): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 29.676982627s ago: executing program 3 (id=1914): r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r2 = socket$kcm(0x2, 0x1, 0x0) (async) r3 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="01154e00010000112233445588fb", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x4, r4, 0x0, 0xff, 0x0}, 0x14) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r2, r1}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d2081000000000000000000c73016b000000000095"], &(0x7f0000000100)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x14, 0x1, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={0x0, 0xfffffffffffffffe, &(0x7f0000000600), &(0x7f0000000280), 0x8000000, r6}, 0x38) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r7, &(0x7f0000000000)="230003000100ef", 0x7) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000008000000000000000800000091110d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003300)={r1, 0x0, 0xf6, 0x1000, &(0x7f00000005c0)="127e3b4f967412582f69fe05f81e69b02ab36accdd5e979534e0edeec2083c9bf8f0b3959d1737420f6969e8b05349b51582a11cc53f9315e4d8808133aacbdbbbb457a53da2a2f908d2d36ef34fcfd3687f8b0131cabaa67d4761a15eb95c5627a583a00d367eb9d14e2ad323ff379a959298bdeb1ddadea941abfaac41ab3156249a891c8f0d042614bda09e9bc584c3b26d9dcdfc0538f847701fdb2769c542d48affd7aa14fb3f13e9c469a2d1d162b63da042908f33d94eb139d114bfee928307567ea8b44340fd87d0ed46a4b43012d70621d302f8ea3c06322295f020dec9f5e1471b0138acc0f7f4833ae585185dcac8d102", &(0x7f0000002280)=""/4096, 0x0, 0x0, 0x0, 0x25, &(0x7f0000003280), &(0x7f00000032c0)="b4e4f1156674e7fdb79b75cd2e385a10efd1cdbfd0b8d80432b477ec5098e5f703bbbde861", 0x0, 0x0, 0x5}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r9, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r8, 0x7}, 0x8) 29.427204005s ago: executing program 0 (id=1915): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x820c, 0x3, 0xffffafb2}, &(0x7f0000000040)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) 29.342905929s ago: executing program 3 (id=1916): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, r0, 0x42162000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x15, &(0x7f00000010c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x1, 0xd, 0x3, 0xfff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x0, 0x9, 0x1e400, 0x7, 0xa2}, 0x14) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 29.173270308s ago: executing program 0 (id=1917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24040880) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4001004) 29.139774384s ago: executing program 3 (id=1918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 0s ago: executing program 32 (id=1907): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', r3, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r4, r3, 0x25, 0x0, @void}, 0x10) r5 = socket$inet6(0xa, 0x6, 0x2) accept4$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000280)=0x1c, 0x80000) syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002000)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWSETELEM={0x1458, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x142c, 0x3, 0x0, 0x1, [{0x1428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x104, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "53725c21bf2531a3d0aed1e1a1586be5aa52e666bbc5c7f1f78c74d1dc7d275cb1ae0cd7d7b50ae0b7b779e59096983fcf76489027"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x12cc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "87861520a1b1d3167b72417df9bf1543446a2e98fd97d09be058f722d69e8deadc223d99bbaa59352ac704339be45676d9aba62bc54d7080c066d8453cda63eaf42f879d6a10146ca4092506b392312b36e409f26b72c93ff5e9bf88da04407627966c8061d39547e475be583b8ec8395899c850eb4f2c92c334f648664ebce1cdf7922a16a9af70b0b1a3f6c9ccca809892e1425ead0635b3ffb0abaa9d1881c70c9be0d021d6a91d8bc2"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x67, 0x1, "fb5991981c7199b44aeaaad95ab55bbb7f9fd9e9f532ac21ab98fa3f7d51d5e2b97bf919d1b8c118a929f89130c2984c5e74cf89e51b423f95a91bd9be661cc96848419ad938c3968b32deb189fcfacbab11cb97b0875e8a3d98ffbd31cdeb2e19a19a"}, @NFTA_DATA_VALUE={0xec, 0x1, "89b68b7b8bedd80d55a4d5a3a135a37398fad79296cb4c3e7f22f32d4037cc2d04f90e7dc3af4060fb5c429fbeb219df46a05be31281ade63e45295ed4d72c5412ee5b7fa19fdba05eada458ddffb797a7ee3ec36b5d1fdcf0d0cd1079b7538a2f67f37297a78da551247509cc97a280aae9878886f7583b229a42a845febcbdffe859c67ec1f08d15c7f6939da3364cb1bdefca06cb6cdcccca69e6cd39de364726a59c58f33ad75f75f7243f8aef00421db22c9ad0414def9f137125b03fa886bf606d5b2af9590371fadd583fd6384adacba7ab35d9ca5733e5cc2a8570d89341eb759ebf13ec"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "a44c8fd78e5662396d999b89247bf8587a69ca95cceea64678f54c8d020b2bcc69566bbc9dcb305242d2692a7824f06fe0faf554f574776a0dca878ee94ed88552335b513d9d8f226abde2643fec47dea27e8ba382259143c5d4f833a6a48a42ffc7fac3b8acbf6f15f67c68563a014b4d3ada2497006609dca4d6bd359ee748bb4763e86da87e3246441b4248f7d5cd2fc29093be04ab29b041153f91ee61af110f031fc2bcf76b8410c0edc3e48535adbf9ccb32abdb5e30cdaf59e6dcb027613a21217d43af02ba6c7dd702401f6aa5ebda2038ed436f439dd831ec54b9abde9db04163c113d4ed3f6d704cb6f9c250572ae5ca8d906cf387af4acef143191be9b1b8c92a3452e8d316b45e9b2deb63d72a41618b502de47f653339acd98295136987c69ad9d560198f9a427ab1c0b5f30df63729b9096098773fce195994e279f4cde78c40c4a98ded7bbc2986a4b3572c69ce014cd08365192404fe9f60bde81fe78694a63e2a041a22917b7bb79711b55543594b9a0f73a421c0343ab8e3f42918e8025d86e6cd75a4ceaf563ad3eaae575a04500bd89868904c158f784edaac171c45fc0465d2dc57e8d7ec1d6c10f85de6417de8f999d7b7806087bc825f7c8c963976473afd971940b4158e5da961c7bed536ead91ae275fb42cb0e6be8088d4dd3bd84bd333deca21104f953645d11afbfec0c2df1b1684ea5f6cffa9b32f68c76c269374bbb9417f877b4f1ae2a9d2d68e9473e27bae63915f62e1baab46229154e4f2d2b758740c3dfde3898f9d9c5b8ce9e49b6958dd1ec21e0f2098cd7ee57becce921814c40a8a0992ac184b7e46f0ccb99c3124fe511012af0422fbbc0303aba6a1fef3da0fd571aca887eecd52dda1f3476911c2dbc47e50d02ce532174ab8e6d799e1c45b1a31bb2d8491e8d606d6b516d5b5ff2a635a86e2e3becf4ea27bac8bafda87d94f431f6da7d2e3cad88c1d95e0582fc7319ebe467d4b00aa5b092df76022ef281acd4f75c83138cfc4353ec11bbccb727fcd0d6c192cf6f3c087d2ef45c2b6dd110fad1fb7cc791f9fc6dc5d273cfda04c0150857841fcda62b711cedde754cd4dba38f976765a167d4f237e6a5a170c820d9ef13d0a7e0dd6aa4b4bcfebc2658809c1af6cbed4f6c8592ec065c61dbfa6ebd7be9da5d9bd88cbcdeb627e244cbae72371dee57647ec4b254996c4f3e84c2bb82db794ee218c1f49fb07771eb12fd64011b849046105e1e39d05229ea797fec2d34104586af023a39c411d396df7dfdd81bf9057cdb7e0b27e4b86c369f468695a6a530abcd2417f93ee81888794be8009b980aed40bbaa20e1df02a71cf4b11a15c103c3e3ecb2c6f38097fe772ab0fd9abc18095640c0058397c3622c398fc921756c16ea82292061b5897c0d62cfbb8518edd3c048e0159785a941fc495ed47d12980c8dfd6140a22a5ba7c6222d2600b56a604b8e250af4a55ed6d3905d020b23fd9e18af0ff0ce00e55586567e8250da8e7d17c744be9731fafff267eb84228418c00df042c52af2fe73e0f3c122d8fb891d87e4baad8f1e75873a9ba90e6a137acd26e8fbfe0f2d8348b538b369ad78a7b7cb60001c5996b086e141190fb67eada6955f8b49ae5792ecc957b885270dd5fd554d4bf1ce51e3bfb8bf6f0665f2e85c3ba7672ca831f815d63870481a5e8aa0b799beda0b8dce2989a33c2b2f56583b27fa26c90f1f80fffe37bf3a990196309e0221295710ae53465d38b3cbeede8cb4e5ad39a3a0dd740648ec68124002cc8356d3967cc0a830b1b6d1fdf7710cd8fa7b119b1340023d352d3f3851ac4f46954fd6bf462426cec0b20794fab0bf1011dd6d9b0c2397e083a888ba861fb0f9e16b9b20ab9bb80d51572d3f151f4acb8594f6391bc29ecb0fec38e600ea1612bc7ab61538facc0334f6fb19a7f8c93048f801a88c056a4962de2a4075cfb5e2a2191fe2a3b09e4b688e27c739555984227014bc1b16bd09067d5b10daa3ce192c274c91a610338d5a87d3a25f84a9ad8a122b0218b096ae6e2bf78cf4bc576721eefc0198f86f7cd792bb4bc16840a362ac386e517d79e027eea558afc09c689a4534f61b3809f97eeb65f34ade884533d93be53a2ba78dd0433553acd16bb90ac00d91f210d77cba8ddd930d42ebd0f19a50117f9449217b99b76c95025e4d93a59bf37b15e71f32e74855fa556f32334816ca40dd229ef971b0a15113ba1650d2e2f133cf86c41a1371a92ff3359b7b0b8cfdd63517c5702112b25802f30b1466aa8ebec4039a146dc1b6f999f7a40f1ebb583f94a19225621dfcce125914be6e03f54debdb3edabfe13664726ecd92b20aeee2880625a2e71178a1c8d2714c672eabed1515af70f1027e94f363db096eec7683a58414801ca9ac9de9a2319245bfbb218d37d149173961a06f8a7d501cec0b2e1c4024b58bfc68c468200c0362c8920402035a2240fd5bd65c6732c7268fe24eae25d25137708c0120dcde937fca09371eeb604d40499a46952ea66172edb6c3ea25aeb52bd6f7f198e3a269af745c9f4ebed3c5b8c5e7c3ed3d8648b96eab12fb14e656f221e25791860d3554716edaee3068fb31247c8f309f6ffcfe0c869210448d0d067b83ea32c0b9f24ea109be7e66c87c411f092365daee862502becfc10239c854a6126248e08cf3e6dd017d666261452cf618ad8e226bf12c090f19e4cb5ee6627a6855146c50392dd2b5899a95587ccf272697ec94580642a0496e8be1249ca9d70268aa062056bf83257050a8b80b7c3551a46619ea2a93ed4bc08cd699af7357af3155522c9770fe90bccd68a9b3dc5235be1eed427c181ee4a9c20b09d87d50d8fea576935914b836f3823b805a25d9d011aacd67f0be82e3bacdcc598b45cd3e579dfc4f955d7386ae3267fd4070779760323b454ea21dc6d9182fe5c16a1074a85f56d8cc7cb08ae41cf593d1bbe66bc1e0d7b9e6703aac9a827c01ac3184d14dfae9aa2f0990fe966a8cff1bea9989c6d502b1544260219e07a0e26234adb40c82b36d9321187dd3b7e0352011aaa168d27a14d40ab11ddea0045bd3f5ce482b67a4733dd41e3ddf9fa9e571580caa5b8bb0e75bc62ba9eba06006798e827f288bf7a8bfb0d15f0e7225f6925d5fd19c5f4e163e1118c3b912e3cd1a28790463fe7bd8582d893a369bcab05991aabb229f23e5dea15ee119c2f20a90c554f4fe918f39aaabc40cf9be727cfadafbe5cc62807f02468b3bdb7796bc9c04d176b9b3dc60adb079a370f19f1571c5a76daee11b4c6c8169a2a2ef561c883cd93b00813f3fa8173422c8dc735126bfc5e7d10f911efe5c5ffe3809ef47ca4248e88b9ebe6a39b17a71ca85e2ca42f6cccb677ca14b1d1cbf53e9bc18422af1e28b21aa786c61c99eff6f5cdb659a271b70a24909fb2702cd2b79e79d372841f30232eedfb06946788b0c0f09008df8725e78cad7a0724a5ab04d232db6eceddbf6dc1b45a236fcd0e9275169dd479898a5e503797dcdc16ea02011abed4a3870c1197deb42fc1c1395291c7328fa1140279286696c05623da21f02fab113d4f9ffd08eef5d12b157e77caf1a6fdab7ebece092ea957c4af53397dbe30e25d2dd648fd282d73f866cfb8c842fa139d25576ddd39e06f39afc392f478b4e89c875d8c3000eb2bc6b1225700b980af9db72975aeec4bc58c7fbdde5d4e54ccf7798c38c47a3eb32b69253807489496ca41259935906ae29bb94353f97df6d0f0f34236863cb36a991a36e8551b959b2a18943be5df0c70e7f9077189e429dcfaa9cc3d0f922d578d78db1476f7b6ef30eadb4e209a8c621a3f2120d8811b53212cabf58627506a90349f11bda2348a18676a2ccdfcd9ae4971e6ef1c834cc11f54da42898700d9fe63f42570147ccfff5d9d8939492c04cad39f1352e78471ec85a6b8e36f9a74123a01c42c9e86c09207e548b80764a233e5a4388dcb594fe5c361478d83aa9464da903a5bdd1756b85a37ac3dee8c1e95749250d6f524ac9b2d6b87458abf6337cd533d5faf8e5df33849777e6e5ed541a4c2be8631628cf4ecf7128e9276e671cd3f59c5751e026cb5c64260dc7a531bdf26eca1631264d3d1bcc0c6fbab35fa25f0526deac5033b67de30583b038b81234455ddc6e42968cdd8ac5fd9c98de43a158538bf0695d95916ed262172032d8d6c6ba37b646b03bf73953a174e1789b15bd98f05353abfedd313cfaad9223695633ad331c4d3a8411984c454b2e6382968ecbcc2dcef32c66efee319498106c11b92af4396f0df2f70cc67344fb06c53946003e2e053f9026d23566d76cf19bd4ed40707fd559e5175a70d122ad47f3278295f2bafc2d96021b17f156086bb5eeca1551ab1baddc47bdf8af20e5ddfced734181974c5c09d9683eddc5b059711ff535d0ab0cb9d93354266643f89eab02c8da03d2f0dfbb3aaf03127ea4b95c4f6ad07f6577b3042fec36a8e4062b9db97ef3fab86af8a2b4f99faa75ad4d5bdc8e4db22d3619a88f40e414366da3cb38a450f5e7681d0923377889b9f55fda21872d39d7bfe0f5591eb5764d4ad6c52b563a448022eac3958a93594f9d9d0cd05454785d6263e022459508315724c6d7dc84668dcfefc3c8cff53c0c59adf3faaf2d0e6afd7990ef36e910070c709d1e5928a5632c7dbba7da166e3a659ff8d847cf12f461170a507f35ab6c806f3b8cefc864b8215bd088e4393e6b07446562194ac9becbf17a3b2bb488fff5eeabf746cc5c1daa1187b4da518a706d9317ee22a1bac9b615b675689f388406d4f98e62be1e3db52c372dbfd59cb06737f9ef8ba58f97d04d16cfb2883ebcc5f26360f528a1f4d1fc577ef3ca1f6ace5e75c3c7ed4545821ccf5b28514ba1a92a228eb28945970d6a9d3f0627c9018a88eff62008671db6b6ec7a4c21a0f8211133cfbdde7e1afe8a3c597f2b7d1c7f07c933f56d6b6ace600590a1f94d0caf40fc11f73201c89019e1c327c94540ea69580c34b9f3a8235bcc4d8dcd92d5eb9d4f4c4e3b1d77c7930bfec29900313ae54663d890deeb146874f4fa7b8b50b201b4b6703722659f5ff53b8c7ae33d90eac56e3923e5b1f2a56d68d529856dcf8adbf42de57898b2f8576a2a5d48201062ff64213b05cb2b9c08947b4e96857632cc5def61d0bf09463b89abce76a476a2a8e7ced23ef3969b43929e90f74af75b5e7c847d608bc5675032e7a4de47277ae02d7547d3bda2ae431476a3ea0447cb4be805498592a18cf6379a0617fbfb1a4918c483345251e69df2666d6bc2a0368ab8d024da57fd71f19c7e5f9f44b17d619ea03d44f5cd02ba2990281084481dc14826f025d6627114ff2f4c6efb5a0a1d8b5eaa5f37e239a822a73cffb3e3b5a1fd5d2aa05bc52c7f04c517868735c6bed6798713dc57bcec29b439e74a08ff109c9e1c1000d6d8fdff8753cb28edbfd2080ae89585c980813ad094ab3a6257c1a2f3a0b0b4a0b66d3d5e1236df1bc3848a213b4f761242e88e533a655591ad80598dc69e3249e644e2aae988fb256f0a142c015531d71397babe563bf714b12f98b0328b5f4f672328ccdcfbff8e5dbd78c64d3c2c7d3fa27be76fa4d336d37126fad1657dce2a621e65011358975fb96e8abf123ba757015fd7d38b1ecff5a8abd6e2c0ea7e89145cc7031ed3f99925165e60bbaba51441a324bd1b653614de57c6413215f22481adf3af92dee2bde188356c35a7f232cc3d507bee18257d98d014a4426ca18079af"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x14b4}}, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc0400f67f08000b"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) kernel console output (not intermixed with test programs): T8592] Bluetooth: MGMT ver 1.23 [ 177.533508][ T8594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.661125][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 178.204923][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 178.244098][ T8626] netlink: 'syz.4.704': attribute type 1 has an invalid length. [ 178.268488][ T8626] netlink: 'syz.4.704': attribute type 2 has an invalid length. [ 178.625041][ T8652] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.829391][ T4923] Bluetooth: hci4: command 0x0405 tx timeout [ 179.562232][ T8685] erspan0: entered promiscuous mode [ 179.867993][ T8682] erspan0: left promiscuous mode [ 180.334528][ T8719] syzkaller1: entered promiscuous mode [ 180.359465][ T8719] syzkaller1: entered allmulticast mode [ 180.606883][ T8733] __nla_validate_parse: 10 callbacks suppressed [ 180.606903][ T8733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.723'. [ 180.654933][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 180.664096][ T8737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.726'. [ 180.684968][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 180.865457][ T8737] team0: Port device team_slave_0 removed [ 180.946338][ T8754] xt_CONNSECMARK: invalid mode: 254 [ 180.984598][ T8756] syzkaller0: entered promiscuous mode [ 180.991472][ T8756] syzkaller0: entered allmulticast mode [ 181.381766][ T8777] xt_hashlimit: size too large, truncated to 1048576 [ 181.583027][ T8790] FAULT_INJECTION: forcing a failure. [ 181.583027][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 181.612329][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 181.621499][ T8790] CPU: 0 UID: 0 PID: 8790 Comm: syz.3.740 Not tainted syzkaller #0 PREEMPT(full) [ 181.621526][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.621546][ T8790] Call Trace: [ 181.621554][ T8790] [ 181.621563][ T8790] dump_stack_lvl+0xe8/0x150 [ 181.621596][ T8790] should_fail_ex+0x40c/0x560 [ 181.621627][ T8790] _copy_from_user+0x2d/0xb0 [ 181.621656][ T8790] ___sys_sendmsg+0x1c6/0x360 [ 181.621679][ T8790] ? __lock_acquire+0x683/0x2cf0 [ 181.621710][ T8790] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.621771][ T8790] ? __fget_files+0x2a/0x420 [ 181.621796][ T8790] ? __fget_files+0x3a2/0x420 [ 181.621831][ T8790] __x64_sys_sendmsg+0x1b1/0x290 [ 181.621852][ T8790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.621885][ T8790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.621909][ T8790] do_syscall_64+0x174/0x580 [ 181.621934][ T8790] ? trace_irq_disable+0x3b/0x140 [ 181.621954][ T8790] ? clear_bhb_loop+0x70/0xc0 [ 181.621974][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.621990][ T8790] RIP: 0033:0x7f98b219e0d9 [ 181.622006][ T8790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.622019][ T8790] RSP: 002b:00007f98b310d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.622045][ T8790] RAX: ffffffffffffffda RBX: 00007f98b2425fa0 RCX: 00007f98b219e0d9 [ 181.622059][ T8790] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 181.622069][ T8790] RBP: 00007f98b310d090 R08: 0000000000000000 R09: 0000000000000000 [ 181.622078][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.622088][ T8790] R13: 00007f98b2426038 R14: 00007f98b2425fa0 R15: 00007fffa5517f88 [ 181.622119][ T8790] [ 182.060995][ T8806] SET target dimension over the limit! [ 182.197656][ T8811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.283062][ T8817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.515708][ T8819] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 183.138841][ T29] audit: type=1800 audit(1786242529.896:4): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.758" name=680B20 dev="tmpfs" ino=733 res=0 errno=0 [ 183.204324][ T29] audit: type=1800 audit(1786242529.966:5): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.758" name=680B20 dev="tmpfs" ino=733 res=0 errno=0 [ 183.211286][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'. [ 183.265507][ T8863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 183.297686][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 183.382163][ T7661] IPVS: starting estimator thread 0... [ 183.498576][ T8866] IPVS: using max 28 ests per chain, 67200 per kthread [ 183.822672][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 184.028519][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 184.033316][ T4923] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.072067][ T8892] syzkaller1: entered promiscuous mode [ 184.090324][ T8892] syzkaller1: entered allmulticast mode [ 184.195479][ T8898] veth0: entered promiscuous mode [ 184.242642][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 184.543431][ T8890] veth0: left promiscuous mode [ 184.977604][ T8941] wlan0: mtu greater than device maximum [ 184.988017][ T8943] netlink: 'syz.4.782': attribute type 13 has an invalid length. [ 185.011956][ T8943] netlink: 'syz.4.782': attribute type 17 has an invalid length. [ 185.070350][ T8943] erspan0: refused to change device tx_queue_len [ 185.119888][ T8948] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 185.127468][ T8943] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 185.360346][ T8955] bond2: option arp_interval: invalid value (18446744073709551615) [ 185.378304][ T8955] bond2: option arp_interval: allowed values 0 - 2147483647 [ 185.397798][ T8955] bond2 (unregistering): Released all slaves [ 185.620423][ T8971] syzkaller0: entered promiscuous mode [ 185.644802][ T8971] syzkaller0: entered allmulticast mode [ 185.946982][ T8988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.265348][ T8992] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 186.281475][ T8992] syzkaller1: linktype set to 823 [ 186.606297][ T9014] __nla_validate_parse: 5 callbacks suppressed [ 186.606345][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 186.902996][ T9016] xt_CT: No such helper "netbios-ns" [ 186.923438][ T9021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.805'. [ 186.973135][ T9027] netlink: 52 bytes leftover after parsing attributes in process `syz.0.806'. [ 186.997902][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 187.037069][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.806'. [ 187.053980][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 187.072359][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.806'. [ 187.195038][ T9014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.502295][ T9047] GUP no longer grows the stack in syz.2.812 (9047): 200000003000-20000000a000 (200000001000) [ 187.508480][ T9048] IPv6: addrconf: prefix option has invalid lifetime [ 187.536759][ T9047] CPU: 0 UID: 0 PID: 9047 Comm: syz.2.812 Not tainted syzkaller #0 PREEMPT(full) [ 187.536787][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.536798][ T9047] Call Trace: [ 187.536806][ T9047] [ 187.536815][ T9047] dump_stack_lvl+0xe8/0x150 [ 187.536849][ T9047] __get_user_pages+0x238c/0x2720 [ 187.536886][ T9047] ? __gup_longterm_locked+0xc3b/0x15c0 [ 187.536936][ T9047] __gup_longterm_locked+0xd52/0x15c0 [ 187.536972][ T9047] ? lock_acquire+0x106/0x350 [ 187.537018][ T9047] gup_fast_fallback+0x1d8c/0x20e0 [ 187.537072][ T9047] ? __pfx_gup_fast_fallback+0x10/0x10 [ 187.537093][ T9047] ? futex_unqueue+0x22/0x240 [ 187.537121][ T9047] ? is_valid_gup_args+0x11f/0x200 [ 187.537155][ T9047] ? get_user_pages_fast+0x4d/0xb0 [ 187.537178][ T9047] __iov_iter_get_pages_alloc+0x378/0xa40 [ 187.537212][ T9047] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 187.537249][ T9047] iov_iter_get_pages2+0x5e/0xa0 [ 187.537279][ T9047] __se_sys_vmsplice+0x7b5/0x1660 [ 187.537327][ T9047] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 187.537357][ T9047] ? __pfx_futex_wait+0x10/0x10 [ 187.537411][ T9047] ? 0xffffffffff600000 [ 187.537464][ T9047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.537488][ T9047] do_syscall_64+0x174/0x580 [ 187.537521][ T9047] ? clear_bhb_loop+0x70/0xc0 [ 187.537546][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.537585][ T9047] RIP: 0033:0x7f103b19e0d9 [ 187.537605][ T9047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.537622][ T9047] RSP: 002b:00007f103c06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 187.537644][ T9047] RAX: ffffffffffffffda RBX: 00007f103b426090 RCX: 00007f103b19e0d9 [ 187.537659][ T9047] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 187.537671][ T9047] RBP: 00007f103b235024 R08: 0000000000000000 R09: 0000000000000000 [ 187.537682][ T9047] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 187.537694][ T9047] R13: 00007f103b426128 R14: 00007f103b426090 R15: 00007ffc70a51168 [ 187.537728][ T9047] [ 187.954757][ T9057] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 187.993100][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.814'. [ 188.002228][ T9057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.122639][ T9057] bond2: (slave dummy0): making interface the new active one [ 188.144221][ T9057] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 188.154644][ T9061] netlink: 120 bytes leftover after parsing attributes in process `syz.2.815'. [ 188.197603][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 188.231353][ T9061] tipc: Enabling of bearer rejected, media not registered [ 188.457201][ T9077] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 2, id = 0 [ 189.036249][ T9094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.152737][ T9091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.379270][ T9109] netlink: 'syz.1.828': attribute type 3 has an invalid length. [ 189.393775][ T9109] netlink: 'syz.1.828': attribute type 1 has an invalid length. [ 189.398734][ T9091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.413932][ T9109] NCSI netlink: No device for ifindex 2147483648 [ 189.721270][ T9091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.085725][ T9091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.288636][ T9148] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 190.529042][ T7637] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.649372][ T53] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.689397][ T53] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.828780][ T53] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.526039][ T9206] macsec1: entered promiscuous mode [ 191.542609][ T9201] syzkaller0: entered promiscuous mode [ 191.572864][ T9201] syzkaller0: entered allmulticast mode [ 192.242159][ T9225] netlink: 'syz.4.856': attribute type 1 has an invalid length. [ 192.311614][ T9225] __nla_validate_parse: 15 callbacks suppressed [ 192.311633][ T9225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.856'. [ 192.380338][ T9225] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.529363][ T9225] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.544688][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 192.585615][ T9225] bond5: (slave geneve3): making interface the new active one [ 192.619920][ T9225] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 192.660350][ T7661] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.839984][ T7655] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.878427][ T7661] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.894946][ T9244] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 192.904369][ T7661] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.950669][ T9244] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.063081][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 193.334135][ T9250] bond6: (slave veth5): Enslaving as an active interface with a down link [ 193.363193][ T9244] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 193.373818][ T9244] bond6: (slave batadv1): making interface the new active one [ 193.385416][ T9244] batadv1: entered promiscuous mode [ 193.391768][ T9244] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 194.281772][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.288127][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.458349][ T7659] batadv1: left promiscuous mode [ 206.588354][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 206.597210][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.604911][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 206.605989][ T4923] Bluetooth: hci1: command 0x0406 tx timeout [ 209.432500][ T9265] netlink: 68 bytes leftover after parsing attributes in process `syz.4.868'. [ 209.516854][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.867'. [ 209.732946][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 210.005006][ T9281] bond3: option lacp_active: invalid value (5) [ 210.120353][ T9281] bond3 (unregistering): Released all slaves [ 210.330122][ T9297] netlink: 'syz.3.873': attribute type 3 has an invalid length. [ 210.372876][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 210.414006][ T9297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.873'. [ 210.514669][ T9287] xfrm0 speed is unknown, defaulting to 1000 [ 211.289853][ T9327] syz_tun: entered allmulticast mode [ 211.350664][ T9327] dvmrp8: entered allmulticast mode [ 211.389012][ T9325] syz_tun: left allmulticast mode [ 211.475273][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 212.853268][ T9356] netlink: 76 bytes leftover after parsing attributes in process `syz.3.887'. [ 213.165613][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.889'. [ 213.374322][ T9371] syzkaller0: entered promiscuous mode [ 213.381301][ T9371] syzkaller0: entered allmulticast mode [ 214.030443][ T9397] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.256714][ T9402] netlink: 'syz.0.899': attribute type 1 has an invalid length. [ 214.285308][ T9402] netlink: 224 bytes leftover after parsing attributes in process `syz.0.899'. [ 214.304430][ T9403] netlink: 'syz.0.899': attribute type 1 has an invalid length. [ 214.318105][ T9380] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.325864][ T9380] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.334879][ T9403] netlink: 224 bytes leftover after parsing attributes in process `syz.0.899'. [ 214.917180][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.986451][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.034482][ T5624] Bluetooth: hci4: link tx timeout [ 215.041798][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.313188][ T9411] netlink: 165 bytes leftover after parsing attributes in process `syz.3.901'. [ 215.687224][ T188] syz2: Port: 1 Link DOWN [ 215.692754][ T53] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.719422][ T53] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.808364][ T7652] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.828783][ T7652] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.853850][ T7652] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.896155][ T7652] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.932861][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 215.948546][ T53] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.985287][ T53] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.184411][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 216.355582][ T9440] netlink: 52 bytes leftover after parsing attributes in process `syz.1.908'. [ 216.376553][ T9440] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.068457][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 217.421388][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 217.550236][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 217.560108][ T9458] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 218.978134][ T9422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.145173][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.915'. [ 219.404140][ T9470] netlink: 'syz.0.915': attribute type 3 has an invalid length. [ 219.560085][ T9475] netlink: 'syz.4.920': attribute type 10 has an invalid length. [ 219.569821][ T9475] TCP: TCP_TX_DELAY enabled [ 219.604240][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 219.774033][ T9478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.921'. [ 219.974895][ T9490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.926'. [ 220.296062][ T9505] netlink: 'syz.1.929': attribute type 7 has an invalid length. [ 220.398591][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 220.596936][ T9509] nbd: socks must be embedded in a SOCK_ITEM attr [ 220.626573][ T9509] block nbd0: shutting down sockets [ 220.807501][ T9521] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 220.861902][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 220.951033][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 220.996416][ T9521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.109917][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 221.211138][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 221.234946][ T9535] netlink: 'syz.1.938': attribute type 10 has an invalid length. [ 221.254745][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'. [ 221.413351][ T9537] tipc: Started in network mode [ 221.432041][ T9537] tipc: Node identity 0e60a2343a3d, cluster identity 4711 [ 221.460629][ T9537] tipc: Enabled bearer , priority 0 [ 221.653746][ T9540] syzkaller0: entered promiscuous mode [ 221.662044][ T9540] syzkaller0: entered allmulticast mode [ 221.670863][ T9540] tipc: Resetting bearer [ 221.932506][ T53] tipc: Resetting bearer [ 222.053235][ T9553] syzkaller0: entered promiscuous mode [ 222.060910][ T9553] syzkaller0: entered allmulticast mode [ 222.072631][ T9540] tipc: Resetting bearer [ 223.851887][ T9540] tipc: Disabling bearer [ 225.819343][ T9573] ip6gre1: entered promiscuous mode [ 225.824726][ T9573] ip6gre1: entered allmulticast mode [ 225.833079][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.848825][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.858370][ T7800] tipc: Node number set to 878551604 [ 225.873880][ T7800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.291530][ T5788] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.471857][ T9614] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 226.589979][ T5788] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.613822][ T9630] netlink: 'syz.2.960': attribute type 7 has an invalid length. [ 226.640183][ T9614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.752098][ T9630] netlink: 'syz.2.960': attribute type 10 has an invalid length. [ 226.792791][ T9630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.960'. [ 226.815721][ T9622] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 226.829842][ T9634] ªªªªªª: renamed from vlan0 [ 226.850479][ T9630] dummy0: entered promiscuous mode [ 227.315222][ T9643] batman_adv: batadv0: Adding interface: macvtap0 [ 227.349205][ T9643] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.415524][ T9643] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 227.511235][ T9646] batman_adv: batadv0: Removing interface: macvtap0 [ 227.657833][ T9662] netlink: 156 bytes leftover after parsing attributes in process `syz.3.971'. [ 228.300362][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'. [ 228.792572][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 229.217109][ T9708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.989'. [ 229.243683][ T9708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.264670][ T9715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.990'. [ 229.548465][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.816223][ T9730] syzkaller0: entered promiscuous mode [ 229.844800][ T9730] syzkaller0: entered allmulticast mode [ 229.935964][ T9738] netlink: 'syz.4.996': attribute type 23 has an invalid length. [ 230.336236][ T9749] ip6t_rpfilter: unknown options [ 230.356544][ T9749] Cannot find add_set index 34 as target [ 230.381624][ T29] audit: type=1107 audit(1786242577.146:6): pid=9746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='•,ʸ¯¼)ÛùwH›fCŒ$ËѨÏBVc[u/ûrEÔ8±µ@ÞgªÚ%EÆtr«_ˆš+ºà…»¢½kNRÂó' [ 230.524657][ T9757] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 230.544594][ T9756] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1000'. [ 230.763062][ T9764] xfrm0 speed is unknown, defaulting to 1000 [ 231.014523][ T9772] bridge0: port 3(vlan3) entered blocking state [ 231.030017][ T9772] bridge0: port 3(vlan3) entered disabled state [ 231.049673][ T9772] vlan3: entered allmulticast mode [ 231.058388][ T9772] batadv0: entered allmulticast mode [ 231.074740][ T9772] vlan3: entered promiscuous mode [ 231.080330][ T9772] batadv0: entered promiscuous mode [ 231.091539][ T9772] bridge0: port 3(vlan3) entered blocking state [ 231.098007][ T9772] bridge0: port 3(vlan3) entered forwarding state [ 232.223100][ T9800] Can't find ip_set type hash:net,po [ 232.249371][ T9799] Can't find ip_set type hash:net,po [ 232.401289][ T9769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1003'. [ 232.492695][ T9810] syzkaller0: entered promiscuous mode [ 232.505383][ T9810] syzkaller0: entered allmulticast mode [ 232.892116][ T9820] geneve2: entered allmulticast mode [ 233.641325][ T9839] vxcan2: entered allmulticast mode [ 233.876667][ T9842] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 234.028748][ T9843] tipc: New replicast peer: 255.255.255.255 [ 234.061804][ T9843] tipc: Enabled bearer , priority 10 [ 234.103122][ T9843] netlink: 'syz.3.1022': attribute type 10 has an invalid length. [ 235.136632][ T9866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1028'. [ 235.188809][ T9] tipc: Node number set to 3001845189 [ 235.844345][ T9896] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1037'. [ 235.867823][ T9898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1038'. [ 235.984585][ T9901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1039'. [ 236.013574][ T9892] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 236.041315][ T9892] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 236.077059][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'. [ 236.138331][ T9906] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 236.145855][ T9906] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 236.310899][ T9904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1040'. [ 236.557656][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1046'. [ 236.580902][ T9923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1044'. [ 237.053835][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1051'. [ 237.094479][ T9944] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.149885][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.187731][ T9954] FAULT_INJECTION: forcing a failure. [ 237.187731][ T9954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.248263][ T9954] CPU: 0 UID: 0 PID: 9954 Comm: syz.2.1056 Not tainted syzkaller #0 PREEMPT(full) [ 237.248291][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.248303][ T9954] Call Trace: [ 237.248311][ T9954] [ 237.248320][ T9954] dump_stack_lvl+0xe8/0x150 [ 237.248354][ T9954] should_fail_ex+0x40c/0x560 [ 237.248381][ T9954] _copy_from_user+0x2d/0xb0 [ 237.248409][ T9954] sk_setsockopt+0x2b5/0x2f10 [ 237.248435][ T9954] ? __pfx_sk_setsockopt+0x10/0x10 [ 237.248459][ T9954] ? aa_sk_perm+0x6d5/0x900 [ 237.248489][ T9954] ? __fget_files+0x2a/0x420 [ 237.248520][ T9954] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.248550][ T9954] ? __fget_files+0x2a/0x420 [ 237.248573][ T9954] ? aa_sock_opt_perm+0xff/0x1a0 [ 237.248606][ T9954] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 237.248629][ T9954] do_sock_setsockopt+0x11b/0x1b0 [ 237.248656][ T9954] __x64_sys_setsockopt+0x13d/0x1b0 [ 237.248680][ T9954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.248702][ T9954] do_syscall_64+0x174/0x580 [ 237.248731][ T9954] ? trace_irq_disable+0x3b/0x140 [ 237.248756][ T9954] ? clear_bhb_loop+0x70/0xc0 [ 237.248782][ T9954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.248802][ T9954] RIP: 0033:0x7f103b19e0d9 [ 237.248821][ T9954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.248838][ T9954] RSP: 002b:00007f103c06d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.248859][ T9954] RAX: ffffffffffffffda RBX: 00007f103b426090 RCX: 00007f103b19e0d9 [ 237.248874][ T9954] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 237.248886][ T9954] RBP: 00007f103c06d090 R08: 0000000000000004 R09: 0000000000000000 [ 237.248899][ T9954] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 237.248911][ T9954] R13: 00007f103b426128 R14: 00007f103b426090 R15: 00007ffc70a51168 [ 237.248942][ T9954] [ 237.649392][ T9964] netlink: 'syz.4.1057': attribute type 1 has an invalid length. [ 237.679875][ T9964] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 237.872107][ T9968] __nla_validate_parse: 1 callbacks suppressed [ 237.872125][ T9968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1059'. [ 237.890640][ T9970] netlink: 'syz.4.1060': attribute type 1 has an invalid length. [ 237.899183][ T9968] netlink: 'syz.3.1059': attribute type 12 has an invalid length. [ 237.946515][ T9970] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.502163][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1065'. [ 238.737529][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 238.840046][T10007] gretap0: entered promiscuous mode [ 238.906287][T10008] veth1_to_bond: entered allmulticast mode [ 238.957659][T10007] Bluetooth: MGMT ver 1.23 [ 239.049146][T10007] veth1_to_bond: entered promiscuous mode [ 239.081946][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 239.117755][T10007] veth1_to_bond (unregistering): left allmulticast mode [ 239.135368][T10007] veth1_to_bond (unregistering): left promiscuous mode [ 239.160236][T10007] bond0: (slave bond_slave_1): Releasing backup interface [ 239.173610][T10007] bond_slave_1 (unregistering): left promiscuous mode [ 239.181599][T10007] bond_slave_1 (unregistering): left allmulticast mode [ 239.661024][T10035] netlink: 'syz.0.1074': attribute type 3 has an invalid length. [ 241.404355][ T9996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.663059][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 241.777667][T10041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.831076][T10041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.957615][T10055] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1079'. [ 241.974971][T10041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.991284][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 242.004139][T10047] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1078'. [ 242.016654][T10041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.041474][T10041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.057174][T10041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.071320][T10041] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 242.120380][T10041] veth1_vlan: left promiscuous mode [ 242.132773][T10041] veth0_vlan: left promiscuous mode [ 242.143380][T10041] veth0_vlan: entered promiscuous mode [ 242.158273][T10041] veth1_vlan: entered promiscuous mode [ 242.195845][T10041] veth1_macvtap: left promiscuous mode [ 242.207550][T10041] veth0_macvtap: left promiscuous mode [ 242.217255][T10041] veth0_macvtap: entered promiscuous mode [ 242.225501][T10041] veth1_macvtap: entered promiscuous mode [ 242.267673][T10041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.280160][T10041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.290244][T10041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.304326][T10041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.329160][T10041] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 242.346169][T10041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.368375][T10041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.404717][T10041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.434233][T10041] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.456061][T10041] ip6gre1: left promiscuous mode [ 242.466483][T10041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.489873][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.497671][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.506089][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.527281][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.534527][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.550412][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.610014][ T9] bond_slave_0: entered promiscuous mode [ 242.616712][ T9] bond_slave_1: entered promiscuous mode [ 242.790765][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 242.813423][ T7645] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.888930][ T169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.941503][ T169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.986622][ T169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.095063][T10083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.191815][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1088'. [ 243.261485][T10087] IPv6: NLM_F_CREATE should be specified when creating new route [ 243.412845][T10096] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1090'. [ 243.554988][T10106] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 243.845999][T10115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1095'. [ 244.007391][T10091] xfrm0 speed is unknown, defaulting to 1000 [ 244.337381][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 244.590874][T10121] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1097'. [ 244.806481][T10112] xfrm0 speed is unknown, defaulting to 1000 [ 245.485730][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1100'. [ 245.548878][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1101'. [ 246.254402][T10157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1104'. [ 246.297159][T10157] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1104'. [ 246.569274][T10158] syzkaller0: entered promiscuous mode [ 246.575955][T10158] syzkaller0: entered allmulticast mode [ 247.829822][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1113'. [ 249.576371][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 249.622230][T10206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1116'. [ 249.645558][T10212] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1116'. [ 249.770399][T10217] batman_adv: batadv0: Adding interface: veth0 [ 249.798683][T10217] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.842964][T10217] batman_adv: batadv0: Interface activated: veth0 [ 250.198570][T10229] netlink: 'syz.3.1118': attribute type 1 has an invalid length. [ 251.078508][T10244] FAULT_INJECTION: forcing a failure. [ 251.078508][T10244] name failslab, interval 1, probability 0, space 0, times 0 [ 251.105898][T10244] CPU: 0 UID: 0 PID: 10244 Comm: syz.3.1122 Not tainted syzkaller #0 PREEMPT(full) [ 251.105926][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.105955][T10244] Call Trace: [ 251.105964][T10244] [ 251.105973][T10244] dump_stack_lvl+0xe8/0x150 [ 251.106007][T10244] should_fail_ex+0x40c/0x560 [ 251.106034][T10244] should_failslab+0xa8/0x100 [ 251.106065][T10244] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 251.106088][T10244] ? local_lock_release+0x9c/0x160 [ 251.106121][T10244] ? __alloc_skb+0x1d7/0x7a0 [ 251.106138][T10244] ? __alloc_skb+0x1d7/0x7a0 [ 251.106163][T10244] __alloc_skb+0x1d7/0x7a0 [ 251.106187][T10244] netlink_sendmsg+0x5d4/0xb40 [ 251.106222][T10244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.106251][T10244] ? aa_sock_msg_perm+0xf1/0x1b0 [ 251.106287][T10244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.106310][T10244] sock_sendmsg_nosec+0x13a/0x180 [ 251.106340][T10244] ____sys_sendmsg+0x54e/0x850 [ 251.106368][T10244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.106399][T10244] ? import_iovec+0x73/0xa0 [ 251.106429][T10244] ___sys_sendmsg+0x2a5/0x360 [ 251.106450][T10244] ? __lock_acquire+0x683/0x2cf0 [ 251.106489][T10244] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.106546][T10244] ? __fget_files+0x2a/0x420 [ 251.106572][T10244] ? __fget_files+0x3a2/0x420 [ 251.106607][T10244] __x64_sys_sendmsg+0x1b1/0x290 [ 251.106633][T10244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.106673][T10244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.106696][T10244] do_syscall_64+0x174/0x580 [ 251.106726][T10244] ? trace_irq_disable+0x3b/0x140 [ 251.106750][T10244] ? clear_bhb_loop+0x70/0xc0 [ 251.106774][T10244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.106795][T10244] RIP: 0033:0x7f98b219e0d9 [ 251.106814][T10244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.106830][T10244] RSP: 002b:00007f98b310d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.106855][T10244] RAX: ffffffffffffffda RBX: 00007f98b2425fa0 RCX: 00007f98b219e0d9 [ 251.106870][T10244] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 251.106882][T10244] RBP: 00007f98b310d090 R08: 0000000000000000 R09: 0000000000000000 [ 251.106894][T10244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.106905][T10244] R13: 00007f98b2426038 R14: 00007f98b2425fa0 R15: 00007fffa5517f88 [ 251.106936][T10244] [ 251.554800][T10246] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 251.592123][T10247] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 251.794995][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1126'. [ 251.878458][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.952958][T10257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1124'. [ 252.531812][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 252.561634][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 253.165607][T10317] pim6reg: entered allmulticast mode [ 253.207638][T10323] pim6reg: left allmulticast mode [ 253.503748][T10330] netlink: 'syz.2.1139': attribute type 25 has an invalid length. [ 253.589471][T10332] bond5: option arp_all_targets: invalid value (3) [ 253.606020][T10332] bond5 (unregistering): Released all slaves [ 254.143752][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1142'. [ 254.770894][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 255.713150][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.721872][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.816555][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1157'. [ 255.852426][T10416] syzkaller0: entered promiscuous mode [ 255.875153][T10416] syzkaller0: entered allmulticast mode [ 255.910934][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'. [ 255.951922][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'. [ 255.993654][T10416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'. [ 256.003312][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'. [ 256.251677][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 257.110771][T10465] syzkaller0: entered promiscuous mode [ 257.130790][T10465] syzkaller0: entered allmulticast mode [ 257.262501][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1172'. [ 257.666899][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1175'. [ 257.943918][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 257.965065][T10503] SET target dimension over the limit! [ 258.384309][T10518] syzkaller0: entered promiscuous mode [ 258.402646][T10518] syzkaller0: entered allmulticast mode [ 258.524199][T10521] netlink: 'syz.4.1183': attribute type 3 has an invalid length. [ 258.561731][T10521] netlink: 'syz.4.1183': attribute type 4 has an invalid length. [ 258.640943][T10516] gtp0: entered allmulticast mode [ 258.881688][T10521] xt_CT: No such helper "snmp_trap" [ 258.917037][T10537] netlink: 'syz.3.1187': attribute type 2 has an invalid length. [ 259.012609][T10531] siw: device registration error -23 [ 259.233530][T10545] syzkaller0: entered promiscuous mode [ 259.257460][T10545] syzkaller0: entered allmulticast mode [ 260.019864][T10581] netlink: 'syz.2.1195': attribute type 12 has an invalid length. [ 260.202741][T10586] ip6tnl4: entered allmulticast mode [ 260.367513][T10599] C: renamed from veth1_to_team (while UP) [ 260.408558][T10599] __nla_validate_parse: 6 callbacks suppressed [ 260.408574][T10599] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1198'. [ 260.456118][T10597] tipc: Enabled bearer , priority 0 [ 260.652796][T10617] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1201'. [ 260.704975][T10617] sctp: [Deprecated]: syz.1.1201 (pid 10617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.704975][T10617] Use struct sctp_sack_info instead [ 260.739976][T10592] syzkaller0: entered promiscuous mode [ 260.745903][T10617] sctp: [Deprecated]: syz.1.1201 (pid 10617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.745903][T10617] Use struct sctp_sack_info instead [ 260.764414][T10592] syzkaller0: entered allmulticast mode [ 260.773723][T10592] tipc: Resetting bearer [ 260.786977][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'. [ 260.830429][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 260.838080][ T5624] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 260.924767][T10283] tipc: Resetting bearer [ 260.943591][T10589] tipc: Resetting bearer [ 261.049645][T10626] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 263.032308][T10589] tipc: Disabling bearer [ 263.390755][T10649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1207'. [ 263.574717][T10660] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 263.704942][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 263.749774][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1212'. [ 264.416369][T10688] syzkaller1: entered promiscuous mode [ 264.434185][T10688] syzkaller1: entered allmulticast mode [ 264.547742][T10700] --map-set only usable from mangle table [ 264.783381][ T29] audit: type=1800 audit(1786242611.546:7): pid=10710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1226" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1290 res=0 errno=0 [ 265.006376][T10714] openvswitch: netlink: Message has -2 unknown bytes. [ 265.026138][T10714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.047756][T10717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1227'. [ 265.239870][T10727] bridge2: entered promiscuous mode [ 265.268584][T10727] bridge2: entered allmulticast mode [ 265.316697][T10727] team0: Port device bridge2 added [ 265.368540][T10731] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1228'. [ 265.495451][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'. [ 265.909643][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 267.002234][T10802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1241'. [ 267.074652][T10804] netlink: 'syz.3.1242': attribute type 2 has an invalid length. [ 267.299489][T10804] : entered promiscuous mode [ 267.774067][T10823] netlink: 'syz.3.1244': attribute type 1 has an invalid length. [ 267.881426][T10823] bond5: entered promiscuous mode [ 267.930450][T10823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.027508][T10829] sctp: [Deprecated]: syz.2.1245 (pid 10829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.027508][T10829] Use struct sctp_sack_info instead [ 268.226342][T10826] xfrm0 speed is unknown, defaulting to 1000 [ 268.513234][T10856] netlink: 'syz.3.1251': attribute type 1 has an invalid length. [ 268.533299][T10857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1250'. [ 268.603223][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1250'. [ 268.955889][T10862] gretap1: entered allmulticast mode [ 268.984734][T10862] bond6: (slave gretap1): making interface the new active one [ 269.018088][T10862] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 269.097695][T10877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1253'. [ 269.344271][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 269.580582][ T9261] block nbd64: NBD_DISCONNECT [ 269.742810][T10895] ieee802154 phy0 wpan0: encryption failed: -90 [ 269.864711][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 269.938383][T10288] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.989529][T10288] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.048916][T10288] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.093567][T10288] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.226017][ T9260] udevd[9260]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 270.467903][T10924] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 272.043723][T10983] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 272.057175][T10979] xt_TPROXY: Can be used only with -p tcp or -p udp [ 272.081175][T10983] netlink: 'syz.0.1278': attribute type 2 has an invalid length. [ 272.492802][T10994] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1282'. [ 273.056125][T11017] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1285'. [ 273.117764][T11017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1285'. [ 273.964674][T11030] x_tables: duplicate underflow at hook 1 [ 273.973999][T11032] x_tables: duplicate underflow at hook 1 [ 274.102640][T11035] syzkaller1: entered promiscuous mode [ 274.115334][T11035] syzkaller1: entered allmulticast mode [ 274.491052][T11050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1293'. [ 274.975922][T11063] syzkaller0: entered promiscuous mode [ 274.989386][T11063] syzkaller0: entered allmulticast mode [ 275.074244][T11065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 275.085834][T11065] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1299'. [ 275.098512][T11065] netlink: 'syz.0.1299': attribute type 2 has an invalid length. [ 275.106479][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 275.121528][T11065] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1299'. [ 275.590556][T11072] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1301'. [ 275.628097][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'. [ 275.784020][T11087] netlink: 'syz.4.1308': attribute type 1 has an invalid length. [ 276.280484][T11105] bridge0: port 3(vlan3) entered disabled state [ 276.287021][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.383796][T11110] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 276.623032][T11110] bond4: entered promiscuous mode [ 276.628962][T11110] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.660365][T11114] macvtap2: entered allmulticast mode [ 276.693740][T11110] macvtap3: entered allmulticast mode [ 276.707550][T11119] syzkaller0: entered promiscuous mode [ 276.718699][T11119] syzkaller0: entered allmulticast mode [ 276.799057][T11114] bond4: (slave bridge0): making interface the new active one [ 276.816819][T11114] bridge0: entered promiscuous mode [ 276.842422][T11114] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 276.902283][T11125] IPv6: NLM_F_CREATE should be specified when creating new route [ 277.302981][T11136] tc_dump_action: action bad kind [ 277.571656][T11150] block nbd0: shutting down sockets [ 277.614992][T11159] __nla_validate_parse: 7 callbacks suppressed [ 277.615019][T11159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1322'. [ 277.659557][T11148] block nbd0: shutting down sockets [ 277.831610][T11168] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 277.925554][T11170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1326'. [ 278.100391][T11185] netlink: 'syz.4.1331': attribute type 23 has an invalid length. [ 278.227775][T11170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.271558][T11183] netlink: 810 bytes leftover after parsing attributes in process `syz.4.1331'. [ 278.300374][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 278.405942][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'. [ 278.495998][T11184] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.548070][T11184] bond5: (slave geneve3): making interface the new active one [ 278.561873][T11184] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 278.618745][T10286] netdevsim netdevsim2 €Â: set [1, 1] type 2 family 0 port 20004 - 0 [ 278.633063][T11170] openvswitch: ovs-system: Dropping previously announced user features [ 278.659543][ T169] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 278.710859][ T53] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 278.742442][ T53] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 278.944984][T11210] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 278.985331][T11210] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 279.212448][T11223] xt_bpf: check failed: parse error [ 279.347798][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1337'. [ 279.491087][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 279.500424][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 279.559117][T11226] xfrm0 speed is unknown, defaulting to 1000 [ 279.580887][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 279.605349][T11236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 280.319810][T11256] syzkaller0: entered promiscuous mode [ 280.335771][T11258] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 280.341524][T11256] syzkaller0: entered allmulticast mode [ 280.605478][T11258] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.658888][T11264] bond7: (slave veth4): Enslaving as an active interface with a down link [ 280.697220][T11267] bond7: (slave veth6): Enslaving as an active interface with a down link [ 280.713211][T11269] bond7: entered allmulticast mode [ 281.127644][T11261] siw: device registration error -23 [ 281.323952][T11283] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 282.588482][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.941767][T11331] __nla_validate_parse: 10 callbacks suppressed [ 282.941817][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1368'. [ 282.966891][T11333] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20002 [ 283.173375][T11336] openvswitch: netlink: Message has 4 unknown bytes. [ 283.745967][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'. [ 284.333617][T11376] bond6: (slave macvlan1): Enslaving as an active interface with an up link [ 284.483689][T11389] bond6 (unregistering): (slave macvlan1): Releasing backup interface [ 284.595162][T11389] bond6 (unregistering): Released all slaves [ 284.620945][T10283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.641652][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.877594][T11396] netlink: 'syz.3.1378': attribute type 2 has an invalid length. [ 284.909959][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.127425][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 285.429757][T11417] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1383'. [ 285.493837][T11418] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 285.514419][T11424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 285.539292][T11418] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 285.554201][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.676786][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.718502][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.770766][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.798407][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.842038][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.277531][T11450] IPv6: sit1: Disabled Multicast RS [ 286.752726][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.937221][T11483] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1398'. [ 287.009571][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 287.071127][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1399'. [ 287.462691][T11504] netlink: 'syz.0.1403': attribute type 2 has an invalid length. [ 287.484740][T11499] team0: Port device syz_tun added [ 287.490168][T11504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1403'. [ 287.774151][T11514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1405'. [ 287.979637][T11523] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 288.437197][T11548] __nla_validate_parse: 2 callbacks suppressed [ 288.437242][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 288.466071][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1413'. [ 288.752363][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 288.795632][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 288.834892][T11561] netlink: 'syz.0.1416': attribute type 20 has an invalid length. [ 288.856572][T11565] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1419'. [ 289.514161][T11593] netlink: 'syz.0.1424': attribute type 1 has an invalid length. [ 289.629037][ T169] net_ratelimit: 6 callbacks suppressed [ 289.629053][ T169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.677879][T11600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1427'. [ 289.716752][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 289.784483][T11600] macvlan1: entered promiscuous mode [ 289.807627][T11600] macvlan1: entered allmulticast mode [ 289.839619][T11600] veth1_vlan: entered allmulticast mode [ 289.874045][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.994647][T11611] IPVS: set_ctl: invalid protocol: 51 172.30.1.5:20001 [ 290.320795][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.397798][T11624] netlink: 'syz.3.1435': attribute type 1 has an invalid length. [ 290.476841][T11627] netlink: 'syz.0.1436': attribute type 1 has an invalid length. [ 290.537712][T11627] bond5: entered promiscuous mode [ 290.546736][T11627] bond5: entered allmulticast mode [ 290.554391][T11627] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.598104][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1438'. [ 290.627650][T11632] erspan2: entered allmulticast mode [ 290.640145][T11632] bond5: (slave erspan2): making interface the new active one [ 290.647779][T11632] erspan2: entered promiscuous mode [ 290.656622][T11632] bond5: (slave erspan2): Enslaving as an active interface with an up link [ 290.696562][T11627] syz.0.1436 (11627) used obsolete PPPIOCDETACH ioctl [ 290.721974][T11631] xfrm0 speed is unknown, defaulting to 1000 [ 290.911959][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.931825][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 290.990027][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.416443][T11653] netlink: 'syz.3.1443': attribute type 14 has an invalid length. [ 291.426127][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 291.449146][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.565476][T11653] netlink: 'syz.3.1443': attribute type 14 has an invalid length. [ 291.808529][ T169] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.873407][T10286] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.901793][T10286] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.951994][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.038576][T10283] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.190046][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.485731][T11674] syzkaller1: entered promiscuous mode [ 292.495389][T11674] syzkaller1: entered allmulticast mode [ 292.583246][T11676] netlink: 'syz.1.1449': attribute type 3 has an invalid length. [ 292.601563][T10283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.004983][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.543992][T11710] syzkaller1: entered promiscuous mode [ 293.556349][T11710] syzkaller1: entered allmulticast mode [ 293.764110][T11711] xfrm0 speed is unknown, defaulting to 1000 [ 294.644268][T11731] __nla_validate_parse: 4 callbacks suppressed [ 294.644314][T11731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1462'. [ 294.750500][ T169] net_ratelimit: 3 callbacks suppressed [ 294.750517][ T169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.834431][T11740] syzkaller0: entered promiscuous mode [ 294.849495][ T169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.861172][T11740] syzkaller0: entered allmulticast mode [ 294.932224][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 295.106419][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.259281][T11744] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 295.319395][T11744] bond8 (unregistering): Released all slaves [ 295.831390][ T5624] block nbd0: Receive control failed (result -32) [ 295.839520][ T5626] block nbd0: Receive control failed (result -32) [ 295.979781][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.108961][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.591916][T11771] xfrm0 speed is unknown, defaulting to 1000 [ 296.753477][T11790] netlink: 'syz.0.1476': attribute type 142 has an invalid length. [ 296.771086][T11791] netlink: 'syz.0.1476': attribute type 142 has an invalid length. [ 297.004117][T11800] netlink: 'syz.4.1479': attribute type 1 has an invalid length. [ 297.073909][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.149478][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.178567][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.276158][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 297.340841][T11810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1480'. [ 297.355180][T11810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 297.519948][T11800] bond8: entered promiscuous mode [ 297.526797][T11800] 8021q: adding VLAN 0 to HW filter on device bond8 [ 298.201417][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.314111][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.545972][T11804] 8021q: adding VLAN 0 to HW filter on device bond8 [ 299.554652][T11804] bond8: (slave ipip0): The slave device specified does not support setting the MAC address [ 299.564935][T11804] bond8: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 299.579647][T11804] bond8: (slave ipip0): making interface the new active one [ 299.589356][T11804] ipip0: entered promiscuous mode [ 299.603839][T11804] bond8: (slave ipip0): Enslaving as an active interface with an up link [ 300.087735][T11819] xfrm0 speed is unknown, defaulting to 1000 [ 300.108431][ T9] net_ratelimit: 2 callbacks suppressed [ 300.108448][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.237820][T11832] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1484'. [ 300.271050][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.513275][ T169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.542480][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.711300][T11842] netlink: 'syz.1.1488': attribute type 26 has an invalid length. [ 300.763151][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 301.171596][T11848] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1489'. [ 301.262381][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 301.308778][T11852] block nbd1: server does not support multiple connections per device. [ 301.319749][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.333555][T11848] hsr_slave_0: left promiscuous mode [ 301.372738][T11848] hsr_slave_1: left promiscuous mode [ 301.385724][T11852] block nbd1: shutting down sockets [ 301.683011][T10283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.789673][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.964990][T11870] netlink: 'syz.0.1494': attribute type 10 has an invalid length. [ 301.989647][T11870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1494'. [ 302.046769][T11855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.069898][T11855] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 302.157282][T11855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.181147][T11855] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 302.194097][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 302.273923][T11855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 302.295847][T11855] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 302.349328][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.398591][T11855] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 302.422513][T11855] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 302.833529][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.013585][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 303.152092][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.119578][T10288] net_ratelimit: 3 callbacks suppressed [ 305.119610][T10288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.595383][ T5788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.771640][T11945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1509'. [ 306.188808][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.280810][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.290935][ T169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.427025][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1512'. [ 306.467953][T11968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1510'. [ 306.549623][T11966] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 306.713836][T11963] xfrm0 speed is unknown, defaulting to 1000 [ 306.715721][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.449186][ T169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.806671][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.252521][T12027] netlink: 'syz.3.1525': attribute type 11 has an invalid length. [ 308.378747][T12036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1527'. [ 308.416929][T12027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1525'. [ 308.578415][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.832632][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.468027][T12062] xfrm0 speed is unknown, defaulting to 1000 [ 310.534782][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 310.834688][T10283] net_ratelimit: 4 callbacks suppressed [ 310.834705][T10283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.923942][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.979728][T12117] netlink: 'syz.2.1543': attribute type 1 has an invalid length. [ 311.002855][T12117] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1543'. [ 311.060861][T12121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1541'. [ 311.388429][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.664967][T12135] tipc: Failed to remove unknown binding: 66,0,0/2758628448:3991370890/3991370891 [ 311.953662][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.023283][T12142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1549'. [ 312.029198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.045003][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.065572][T10274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.080568][T12144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1548'. [ 312.276950][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.472682][T12158] erspan0: entered promiscuous mode [ 312.492420][T12158] erspan0: entered allmulticast mode [ 312.541820][T12157] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 312.988519][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.022425][T12176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1556'. [ 313.135967][T12174] veth1_vlan (unregistering): left allmulticast mode [ 313.261033][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.707236][T12198] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 313.763677][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 313.800179][T12202] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1560'. [ 313.857032][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 313.945816][T12216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1561'. [ 314.197287][T12208] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.537403][T12241] netlink: 'syz.2.1565': attribute type 3 has an invalid length. [ 314.590259][T12241] netlink: 'syz.2.1565': attribute type 1 has an invalid length. [ 314.645817][T12241] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1565'. [ 315.587562][T12275] bond9: option primary_reselect: invalid value (6) [ 315.605440][T12275] bond9 (unregistering): Released all slaves [ 315.867163][T12302] netlink: 'syz.4.1579': attribute type 29 has an invalid length. [ 315.881948][T12302] net_ratelimit: 5 callbacks suppressed [ 315.881962][T12302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.189700][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.669105][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.152623][T10275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.161621][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.167988][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.230025][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.779586][T10274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.103663][T12311] __nla_validate_parse: 2 callbacks suppressed [ 318.103680][T12311] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1584'. [ 318.229424][T12331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1582'. [ 318.287423][T12334] netlink: 'syz.2.1582': attribute type 3 has an invalid length. [ 318.374382][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 318.462833][T12333] ipvlan3: entered promiscuous mode [ 318.472049][T12333] team0: Device ipvlan3 failed to register rx_handler [ 318.797477][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 318.894527][T12348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1592'. [ 319.025783][T12364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.067956][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1594'. [ 319.115655][T12370] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1595'. [ 319.130612][T12370] ÿ: renamed from bond_slave_0 (while UP) [ 319.187017][T12371] syz.3.1597: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 319.198002][T12370] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1595'. [ 319.253886][T12371] CPU: 0 UID: 0 PID: 12371 Comm: syz.3.1597 Not tainted syzkaller #0 PREEMPT(full) [ 319.253910][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.253922][T12371] Call Trace: [ 319.253931][T12371] [ 319.253939][T12371] dump_stack_lvl+0xe8/0x150 [ 319.253990][T12371] warn_alloc+0x24c/0x270 [ 319.254023][T12371] ? __pfx_warn_alloc+0x10/0x10 [ 319.254046][T12371] ? xskq_create+0x56/0x220 [ 319.254074][T12371] ? xsk_setsockopt+0x52a/0x960 [ 319.254100][T12371] ? do_syscall_64+0x174/0x580 [ 319.254130][T12371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.254169][T12371] __vmalloc_node_range_noprof+0x12c/0x1730 [ 319.254224][T12371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 319.254250][T12371] ? __kmalloc_cache_noprof+0x32d/0x660 [ 319.254275][T12371] ? __kmalloc_cache_noprof+0x150/0x660 [ 319.254301][T12371] ? xskq_create+0x56/0x220 [ 319.254333][T12371] xskq_create+0x148/0x220 [ 319.254363][T12371] ? xsk_init_queue+0x8a/0xe0 [ 319.254392][T12371] xsk_init_queue+0x8a/0xe0 [ 319.254421][T12371] xsk_setsockopt+0x52a/0x960 [ 319.254448][T12371] ? __fget_files+0x2a/0x420 [ 319.254475][T12371] ? __pfx_xsk_setsockopt+0x10/0x10 [ 319.254503][T12371] ? __pfx_aa_sk_perm+0x10/0x10 [ 319.254536][T12371] ? aa_sock_opt_perm+0xff/0x1a0 [ 319.254570][T12371] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 319.254589][T12371] ? __pfx_xsk_setsockopt+0x10/0x10 [ 319.254617][T12371] do_sock_setsockopt+0x17c/0x1b0 [ 319.254647][T12371] __x64_sys_setsockopt+0x13d/0x1b0 [ 319.254672][T12371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.254695][T12371] do_syscall_64+0x174/0x580 [ 319.254727][T12371] ? clear_bhb_loop+0x70/0xc0 [ 319.254751][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.254772][T12371] RIP: 0033:0x7f98b219e0d9 [ 319.254792][T12371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.254810][T12371] RSP: 002b:00007f98b310d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.254832][T12371] RAX: ffffffffffffffda RBX: 00007f98b2425fa0 RCX: 00007f98b219e0d9 [ 319.254848][T12371] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 319.254861][T12371] RBP: 00007f98b2235024 R08: 0000000000000004 R09: 0000000000000000 [ 319.254881][T12371] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.254895][T12371] R13: 00007f98b2426038 R14: 00007f98b2425fa0 R15: 00007fffa5517f88 [ 319.254927][T12371] [ 319.501949][T12371] Mem-Info: [ 319.506435][T12371] active_anon:5944 inactive_anon:0 isolated_anon:0 [ 319.506435][T12371] active_file:0 inactive_file:43328 isolated_file:0 [ 319.506435][T12371] unevictable:0 dirty:133 writeback:0 [ 319.506435][T12371] slab_reclaimable:10937 slab_unreclaimable:110998 [ 319.506435][T12371] mapped:29411 shmem:523 pagetables:1233 [ 319.506435][T12371] sec_pagetables:0 bounce:0 [ 319.506435][T12371] kernel_misc_reclaimable:0 [ 319.506435][T12371] free:1308421 free_pcp:10000 free_cma:0 [ 319.586231][T12371] Node 0 active_anon:23676kB inactive_anon:0kB active_file:0kB inactive_file:173100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117644kB dirty:432kB writeback:100kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14392kB pagetables:4784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 319.621816][T12371] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 319.673082][T12371] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.705974][T12371] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 319.713654][T12371] Node 0 DMA32 free:1270284kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23576kB inactive_anon:0kB active_file:0kB inactive_file:173100kB unevictable:0kB writepending:432kB zspages:0kB present:3129332kB managed:2548612kB mlocked:0kB bounce:0kB free_pcp:40932kB local_pcp:22088kB free_cma:0kB [ 319.746534][T12371] lowmem_reserve[]: 0 0 0 0 0 [ 319.751553][T12371] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.782957][T12371] lowmem_reserve[]: 0 0 0 0 0 [ 319.787797][T12371] Node 1 Normal free:3948040kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.873871][T12390] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 319.883809][T12371] lowmem_reserve[]: 0 0 0 0 0 [ 319.893556][T12371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 319.910866][T12371] Node 0 DMA32: 829*4kB (UME) 411*8kB (UME) 346*16kB (UME) 137*32kB (UME) 45*64kB (UM) 33*128kB (UME) 4*256kB (M) 5*512kB (ME) 6*1024kB (UME) 6*2048kB (ME) 299*4096kB (UM) = 1270348kB [ 319.934511][T12371] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 319.982946][T12371] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 8*16kB (UM) 9*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3948040kB [ 320.042715][T12371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.070325][T12371] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 320.098195][T12371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.123885][T12371] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 320.151755][T12371] 43871 total pagecache pages [ 320.167733][T12371] 0 pages in swap cache [ 320.177989][T12371] Free swap = 124996kB [ 320.189614][T12371] Total swap = 124996kB [ 320.198491][T12371] 2097051 pages RAM [ 320.208237][T12371] 0 pages HighMem/MovableOnly [ 320.213224][T12371] 428217 pages reserved [ 320.233201][T12371] 0 pages cma reserved [ 320.372020][T12411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1606'. [ 320.432289][T12416] netlink: 'syz.0.1606': attribute type 1 has an invalid length. [ 320.563392][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1607'. [ 320.741177][T12425] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 321.006150][T12441] xfrm0 speed is unknown, defaulting to 1000 [ 321.089743][T12444] netlink: 'syz.3.1613': attribute type 2 has an invalid length. [ 322.064550][T12457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.270479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.900732][T12528] xt_hashlimit: size too large, truncated to 1048576 [ 323.065077][ T29] audit: type=1804 audit(1786242669.826:8): pid=12533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1633" name="/newroot/300/memory.events" dev="tmpfs" ino=1559 res=1 errno=0 [ 323.500525][T12552] __nla_validate_parse: 4 callbacks suppressed [ 323.500542][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1635'. [ 323.612521][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1635'. [ 323.875714][T12563] netlink: 'syz.1.1637': attribute type 38 has an invalid length. [ 323.895613][T12559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1636'. [ 323.926573][T12565] batman_adv: batadv0: Interface deactivated: veth0 [ 323.946536][T12565] batman_adv: batadv0: Removing interface: veth0 [ 323.976352][T12565] bridge0: port 5(veth0) entered blocking state [ 323.995548][T12565] bridge0: port 5(veth0) entered disabled state [ 324.013565][T12565] veth0: entered allmulticast mode [ 324.035889][T12565] veth0: entered promiscuous mode [ 324.046663][T12565] bridge0: port 5(veth0) entered blocking state [ 324.053093][T12565] bridge0: port 5(veth0) entered forwarding state [ 324.069564][T12571] bridge0: port 6(veth1) entered blocking state [ 324.082167][T12571] bridge0: port 6(veth1) entered disabled state [ 324.090760][T12571] veth1: entered allmulticast mode [ 324.100122][T12571] veth1: entered promiscuous mode [ 324.105920][T12571] bridge0: port 6(veth1) entered blocking state [ 324.112396][T12571] bridge0: port 6(veth1) entered forwarding state [ 324.212540][T12580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.551100][T12603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1649'. [ 324.571132][T12602] x_tables: duplicate underflow at hook 1 [ 324.644949][T12605] syzkaller0: entered promiscuous mode [ 324.654922][T12605] syzkaller0: entered allmulticast mode [ 324.676380][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 324.906926][ T29] audit: type=1804 audit(1786242671.666:9): pid=12620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1654" name="/newroot/306/cgroup.controllers" dev="tmpfs" ino=1590 res=1 errno=0 [ 324.954747][ T29] audit: type=1800 audit(1786242671.666:10): pid=12620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1654" name="cgroup.controllers" dev="tmpfs" ino=1590 res=0 errno=0 [ 325.052272][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'. [ 325.069387][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 325.088198][T12624] netlink: 'syz.3.1656': attribute type 15 has an invalid length. [ 325.126561][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'. [ 325.138730][T10275] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 325.158672][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 325.171169][T10275] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 325.184082][T12624] netlink: 'syz.3.1656': attribute type 15 has an invalid length. [ 325.193745][T10275] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 325.258713][T10287] netdevsim netdevsim3 netdevsim3: set [0, 2] type 1 family 0 port 60387 - 0 [ 325.275156][T10287] netdevsim netdevsim3 netdevsim2: set [0, 2] type 1 family 0 port 60387 - 0 [ 325.304490][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1661'. [ 325.314226][T10287] netdevsim netdevsim3 netdevsim1: set [0, 2] type 1 family 0 port 60387 - 0 [ 325.347939][T10287] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 325.388318][T10287] netdevsim netdevsim3 netdevsim0: set [0, 2] type 1 family 0 port 60387 - 0 [ 325.581314][T12654] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 325.599543][T12654] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 325.673162][T12661] syzkaller0: entered promiscuous mode [ 325.687869][T12661] syzkaller0: entered allmulticast mode [ 325.707241][T12661] tipc: Enabled bearer , priority 0 [ 325.732425][T12661] tipc: Resetting bearer [ 325.960634][T12658] tipc: Resetting bearer [ 326.022565][T12658] tipc: Disabling bearer [ 326.257205][T12692] sock: sock_timestamping_bind_phc: sock not bind to device [ 326.397565][T12703] netlink: 'syz.0.1679': attribute type 1 has an invalid length. [ 326.453046][T12703] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.633527][T12703] team0: No ports can be present during mode change [ 327.173279][T12747] batadv0: entered promiscuous mode [ 327.201156][T12748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.299549][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.364549][T12757] 8021q: VLANs not supported on ipvlan0 [ 327.642001][T12775] ipvlan0: entered promiscuous mode [ 327.673336][T12775] ipvlan0: entered allmulticast mode [ 327.695463][T12779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.699286][T12775] veth0_vlan: entered allmulticast mode [ 328.901463][T12837] __nla_validate_parse: 10 callbacks suppressed [ 328.901482][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'. [ 329.270873][T12862] netlink: 'syz.2.1719': attribute type 21 has an invalid length. [ 329.296036][T12862] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1719'. [ 329.336186][T12862] netlink: 'syz.2.1719': attribute type 4 has an invalid length. [ 329.359429][T12862] netlink: 'syz.2.1719': attribute type 5 has an invalid length. [ 329.369745][T12862] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1719'. [ 329.386521][T12865] netlink: 'syz.4.1721': attribute type 1 has an invalid length. [ 329.440712][T12865] 8021q: adding VLAN 0 to HW filter on device bond12 [ 329.577984][T12888] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 329.730685][T12894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1728'. [ 329.772043][T12891] veth9: entered allmulticast mode [ 329.784487][T12891] bond6: (slave veth9): Enslaving as an active interface with a down link [ 329.799562][T12894] bridge0: port 3(dummy0) entered blocking state [ 329.806437][T12894] bridge0: port 3(dummy0) entered disabled state [ 329.813046][T12894] dummy0: entered allmulticast mode [ 329.820322][T12894] dummy0: entered promiscuous mode [ 329.826383][T12894] bridge0: port 3(dummy0) entered blocking state [ 329.832929][T12894] bridge0: port 3(dummy0) entered forwarding state [ 329.866210][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'. [ 330.059387][T12913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1733'. [ 330.215432][T12922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1735'. [ 330.529571][T12942] netlink: 'syz.4.1743': attribute type 13 has an invalid length. [ 330.557086][T12942] netlink: 'syz.4.1743': attribute type 13 has an invalid length. [ 330.610505][T12942] netlink: 'syz.4.1743': attribute type 13 has an invalid length. [ 330.641988][T12942] netlink: 'syz.4.1743': attribute type 13 has an invalid length. [ 330.791765][T12958] xfrm0 speed is unknown, defaulting to 1000 [ 330.935776][T12969] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 330.935776][T12969] Please contact the netfilter-devel mailing list or update your nftables rules. [ 331.053258][ T5624] block nbd1: Receive control failed (result -32) [ 331.054112][ T5626] block nbd1: Receive control failed (result -32) [ 331.107301][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 332.934160][T12967] xfrm0 speed is unknown, defaulting to 1000 [ 334.143859][T12979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.478375][T13010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1758'. [ 334.519984][T13013] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 334.536937][T13010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1758'. [ 334.647398][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 334.837446][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 334.866321][T13032] netlink: 'syz.3.1764': attribute type 10 has an invalid length. [ 334.884541][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 334.949640][T13032] geneve3: entered promiscuous mode [ 334.967324][T13032] geneve3: entered allmulticast mode [ 335.286749][T13059] bridge0: port 4(veth1_to_bridge) entered blocking state [ 335.294582][T13059] bridge0: port 4(veth1_to_bridge) entered disabled state [ 335.303528][T13059] veth1_to_bridge: entered allmulticast mode [ 335.318556][T13059] veth1_to_bridge: entered promiscuous mode [ 335.616040][T13070] netlink: 'syz.3.1773': attribute type 39 has an invalid length. [ 335.628506][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'. [ 335.643733][T13072] xfrm0 speed is unknown, defaulting to 1000 [ 335.924502][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1779'. [ 336.331393][T13100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1784'. [ 336.371688][T13106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1785'. [ 336.578655][T13068] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1774'. [ 336.658346][T13068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.617470][T13137] x_tables: duplicate underflow at hook 4 [ 338.449028][T13167] ipt_REJECT: ECHOREPLY no longer supported. [ 338.512261][T13167] netlink: 'syz.1.1803': attribute type 10 has an invalid length. [ 338.543515][T13167] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 339.453141][T13220] openvswitch: netlink: IP tunnel dst address not specified [ 340.049003][T13250] ipvlan3: entered promiscuous mode [ 340.084693][T13250] batman_adv: batadv0: Adding interface: ipvlan3 [ 340.106218][T13250] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.167249][T13250] batman_adv: batadv0: Interface activated: ipvlan3 [ 341.044099][T13290] xt_hashlimit: size too large, truncated to 1048576 [ 341.374479][T13303] __nla_validate_parse: 5 callbacks suppressed [ 341.374497][T13303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1841'. [ 341.482558][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1842'. [ 341.491927][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1842'. [ 341.546703][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'. [ 341.581434][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.049795][T13332] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003 [ 342.181069][T13335] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 342.382133][T13340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1852'. [ 342.404583][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 342.442483][T13342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 342.455985][T13342] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 342.752434][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 342.764470][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 342.776113][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 342.787807][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 342.799425][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 342.811246][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 342.822898][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 342.834467][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 342.846046][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 342.857640][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 343.069568][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 343.735992][T13391] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.1865'. [ 343.837866][T13391] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.1865'. [ 344.282816][T13402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1868'. [ 344.635431][T13408] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 345.538261][T13420] xfrm0 speed is unknown, defaulting to 1000 [ 346.384671][T13452] bond_slave_0: left promiscuous mode [ 346.464100][T13452] bond_slave_1: left promiscuous mode [ 346.706899][T13452] bond3: (slave macvlan2): Releasing active interface [ 346.715520][T13463] xt_hashlimit: size too large, truncated to 1048576 [ 346.945108][T13452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.013088][T13452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.050496][T13452] bond0 (unregistering): Released all slaves [ 347.390590][T13467] xfrm0 speed is unknown, defaulting to 1000 [ 347.758327][ C1] net_ratelimit: 10568 callbacks suppressed [ 347.758347][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.776016][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.787837][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.799600][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.811394][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.823129][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.834869][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.846661][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.858430][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.870219][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 347.886567][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.944915][T13484] geneve0: entered promiscuous mode [ 348.982555][T13484] macvlan2: entered promiscuous mode [ 349.083076][T13485] syzkaller0: entered promiscuous mode [ 349.140719][T13485] syzkaller0: entered allmulticast mode [ 349.202543][T13488] tipc: Enabled bearer , priority 0 [ 349.545292][T13486] tipc: Resetting bearer [ 349.680573][T13483] tipc: Resetting bearer [ 349.819463][T13483] tipc: Disabling bearer [ 350.474645][T13512] __nla_validate_parse: 3 callbacks suppressed [ 350.474665][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1894'. [ 350.491174][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 351.203051][T13523] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1897'. [ 351.618757][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1897'. [ 352.057310][T13535] netlink: 75 bytes leftover after parsing attributes in process `syz.4.1900'. [ 352.768199][ C1] net_ratelimit: 9787 callbacks suppressed [ 352.768220][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.786030][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.797913][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.809755][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.821586][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.833727][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.845449][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.857275][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.869082][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 352.880886][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 355.065483][T13554] gtp0: entered promiscuous mode [ 355.088572][T13554] gtp0: entered allmulticast mode [ 355.123994][T13554] team0: Device gtp0 is of different type [ 355.397477][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1906'. [ 355.964998][T13577] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 356.042584][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 356.087306][T13581] netlink: 'syz.3.1910': attribute type 30 has an invalid length. [ 356.145747][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 356.190895][T13577] 8021q: adding VLAN 0 to HW filter on device bond7 [ 356.207760][T13585] netlink: 'syz.3.1910': attribute type 30 has an invalid length. [ 356.458257][T13580] bond7: (slave veth7): Enslaving as an active interface with a down link [ 356.786136][T13606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1907'. [ 357.778404][ C1] net_ratelimit: 9709 callbacks suppressed [ 357.778426][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.795862][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.807475][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.819054][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.830721][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.842408][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.854220][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.865833][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.877463][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 357.889228][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 361.794797][ C0] sched: DL replenish lagged too much [ 362.788265][ C0] net_ratelimit: 20404 callbacks suppressed [ 362.788288][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.788611][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 362.795548][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.806903][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 362.817716][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.829168][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 362.839959][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.851331][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 362.862557][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.873876][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 367.798451][ C1] net_ratelimit: 20214 callbacks suppressed [ 367.798475][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 367.798492][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.805931][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 367.816927][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.828065][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 367.839471][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.850404][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 367.861517][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.872615][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 367.883739][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.808132][ C0] net_ratelimit: 19980 callbacks suppressed [ 372.808155][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.808155][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 372.809453][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 372.815404][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.826534][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 372.837814][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.848953][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 372.860004][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.871259][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 372.882316][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.818617][ C1] net_ratelimit: 19714 callbacks suppressed [ 377.818636][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.818644][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 377.821128][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 377.826602][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.837475][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 377.849016][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.859674][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 377.871197][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.881939][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 377.893621][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.482917][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.518627][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.828125][ C1] net_ratelimit: 19738 callbacks suppressed [ 382.828148][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 382.828766][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.835914][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 382.846747][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.857996][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 382.869060][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.880271][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 382.891690][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.902945][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 382.913961][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.838245][ C0] net_ratelimit: 20278 callbacks suppressed [ 387.838266][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.838297][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 387.845460][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 387.856613][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 387.867774][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.879265][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 387.890297][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.902496][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 387.913132][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 387.924497][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 392.848260][ C0] net_ratelimit: 19652 callbacks suppressed [ 392.848283][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.848781][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 392.855644][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.866685][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 392.878046][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 392.889475][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 392.900768][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.912597][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 392.923001][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.934049][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 397.858403][ C1] net_ratelimit: 14305 callbacks suppressed [ 397.858426][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 397.858687][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.868923][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 397.876970][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 397.891244][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 397.899790][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.913486][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 397.921677][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.938255][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 397.945047][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 402.868457][ C0] net_ratelimit: 12758 callbacks suppressed [ 402.868479][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.870407][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 402.875829][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 402.890275][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 402.898741][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.912263][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 402.920881][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.934584][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 402.943176][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 402.958762][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 407.878486][ C0] net_ratelimit: 12821 callbacks suppressed [ 407.878529][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.881945][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 407.885879][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.899973][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 407.908468][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 407.922250][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 407.930402][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.944308][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 407.952720][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.966673][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 412.888136][ C0] net_ratelimit: 13082 callbacks suppressed [ 412.888158][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.888327][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 412.895360][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 412.909453][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 412.918286][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.932010][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 412.941869][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.955822][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 412.964235][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 412.979455][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 417.898463][ C0] net_ratelimit: 13094 callbacks suppressed [ 417.898487][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 417.900538][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 417.905760][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.920698][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 417.928474][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.942669][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 417.950670][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 417.965583][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 417.973277][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.987806][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 422.908124][ C0] net_ratelimit: 12523 callbacks suppressed [ 422.908146][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 422.909252][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 422.915394][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.930207][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 422.938249][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.952197][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 422.960420][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 422.976298][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 422.983966][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.998853][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 427.918458][ C0] net_ratelimit: 12928 callbacks suppressed [ 427.918481][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.920476][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 427.925823][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 427.940994][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 427.949133][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.963077][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 427.971093][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.986260][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 427.993326][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 428.007746][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 432.928117][ C0] net_ratelimit: 12512 callbacks suppressed [ 432.928139][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.929033][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 432.935562][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.950203][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 432.957905][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 432.972366][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 432.980085][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.994837][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 433.002780][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.018363][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 437.938462][ C0] net_ratelimit: 12795 callbacks suppressed [ 437.938485][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.941817][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 437.945720][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.960058][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 437.968515][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 437.982937][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 437.990624][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.005280][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 438.012875][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.027247][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 442.948189][ C0] net_ratelimit: 12627 callbacks suppressed [ 442.948211][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 442.948645][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 442.955488][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.969351][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 442.977928][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.992446][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 443.000642][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 443.014024][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 443.022783][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.037091][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 444.194318][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.229127][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.958116][ C0] net_ratelimit: 13032 callbacks suppressed [ 447.958138][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 447.959691][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 447.965480][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.979638][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 447.988164][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.001876][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 448.010050][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 448.024674][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 448.032360][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.046795][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 452.968240][ C1] net_ratelimit: 12752 callbacks suppressed [ 452.968263][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 452.968279][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 452.969514][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.979865][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 452.986759][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.001928][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 453.009040][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 453.024427][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 453.031288][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.046992][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 457.978301][ C0] net_ratelimit: 12880 callbacks suppressed [ 457.978323][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.979710][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 457.985545][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.000185][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 458.007898][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 458.022175][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 458.030348][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.045010][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 458.052852][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.067138][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 462.988243][ C0] net_ratelimit: 13278 callbacks suppressed [ 462.988265][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.988758][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 462.995453][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 463.010227][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 463.018281][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.032972][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 463.040285][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.054790][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 463.062695][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 463.077020][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 463.278072][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 463.285115][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13579/1:b..l [ 463.293708][ C1] rcu: (detected by 1, t=10503 jiffies, g=66533, q=1814 ncpus=2) [ 463.301902][ C1] task:syz.4.1908 state:R running task stack:25552 pid:13579 tgid:13566 ppid:5606 task_flags:0x400040 flags:0x00080000 [ 463.316844][ C1] Call Trace: [ 463.320173][ C1] [ 463.323143][ C1] __schedule+0x17d9/0x56c0 [ 463.327713][ C1] ? unwind_next_frame+0x8f/0x2550 [ 463.332986][ C1] ? __lock_acquire+0x683/0x2cf0 [ 463.338011][ C1] ? __pfx___schedule+0x10/0x10 [ 463.342953][ C1] preempt_schedule_irq+0x4d/0xa0 [ 463.348026][ C1] irqentry_exit+0x14f/0x8f0 [ 463.352671][ C1] ? trace_irq_disable+0x3b/0x140 [ 463.357745][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 463.363786][ C1] RIP: 0010:__rcu_read_unlock+0x32/0xe0 [ 463.369419][ C1] Code: 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d 09 ea bf 11 48 8d 9f c4 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c <84> c0 75 4f ff 0b 75 1d 4c 8d b7 c8 04 00 00 4c 89 f0 48 c1 e8 03 [ 463.389082][ C1] RSP: 0018:ffffc90004d26f50 EFLAGS: 00000a03 [ 463.395201][ C1] RAX: 0000000000000000 RBX: ffff888054bc42c4 RCX: 0000000000000046 [ 463.403246][ C1] RDX: 0000000000000002 RSI: ffffffff8e4b12ad RDI: ffff888054bc3e00 [ 463.411360][ C1] RBP: 1ffffffff21f8b01 R08: ffffc90004d27440 R09: 0000000000000000 [ 463.419384][ C1] R10: ffffc90004d27078 R11: fffff520009a4e11 R12: 1ffff1100a978858 [ 463.427393][ C1] R13: ffffffff8177827f R14: ffffc90004d27028 R15: dffffc0000000000 [ 463.435413][ C1] ? unwind_next_frame+0x8f/0x2550 [ 463.440603][ C1] ? unwind_next_frame+0x8f/0x2550 [ 463.445783][ C1] unwind_next_frame+0x1baf/0x2550 [ 463.451048][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 463.456728][ C1] ? unwind_next_frame+0x8f/0x2550 [ 463.461894][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 463.468090][ C1] arch_stack_walk+0x11b/0x150 [ 463.472924][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 463.478008][ C1] stack_trace_save+0xa9/0x100 [ 463.482818][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 463.488242][ C1] save_stack+0x122/0x230 [ 463.492635][ C1] ? __pfx_save_stack+0x10/0x10 [ 463.497528][ C1] ? __free_frozen_pages+0xc1e/0xd10 [ 463.502857][ C1] ? __slab_free+0x274/0x2c0 [ 463.507489][ C1] ? qlist_free_all+0x99/0x100 [ 463.512306][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 463.518011][ C1] ? page_ext_put+0x97/0xc0 [ 463.523308][ C1] __reset_page_owner+0x71/0x1f0 [ 463.528529][ C1] __free_frozen_pages+0xc1e/0xd10 [ 463.533909][ C1] ? __free_slab+0x172/0x280 [ 463.538730][ C1] __slab_free+0x274/0x2c0 [ 463.543211][ C1] qlist_free_all+0x99/0x100 [ 463.547857][ C1] kasan_quarantine_reduce+0x148/0x160 [ 463.553367][ C1] __kasan_slab_alloc+0x22/0x80 [ 463.558279][ C1] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 463.563790][ C1] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 463.569472][ C1] ? ptlock_alloc+0x20/0x70 [ 463.574055][ C1] ? ptlock_alloc+0x20/0x70 [ 463.578632][ C1] ptlock_alloc+0x20/0x70 [ 463.583005][ C1] pte_alloc_one+0x7a/0x370 [ 463.587549][ C1] __pte_alloc+0x25/0x1a0 [ 463.591938][ C1] do_pte_missing+0x2db7/0x34b0 [ 463.596839][ C1] ? mtree_range_walk+0x707/0x8b0 [ 463.601926][ C1] handle_mm_fault+0x1b36/0x3080 [ 463.606925][ C1] ? handle_mm_fault+0xec/0x3080 [ 463.611909][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 463.617343][ C1] ? __lock_acquire+0x683/0x2cf0 [ 463.622333][ C1] ? lock_mm_and_find_vma+0xa7/0x340 [ 463.627796][ C1] do_user_addr_fault+0x744/0x1340 [ 463.632980][ C1] exc_page_fault+0x6a/0xc0 [ 463.637553][ C1] asm_exc_page_fault+0x26/0x30 [ 463.642443][ C1] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 463.648297][ C1] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 63 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 463.667943][ C1] RSP: 0018:ffffc90004d27a38 EFLAGS: 00050206 [ 463.674052][ C1] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 463.682061][ C1] RDX: 0000000000000001 RSI: 0000200000200000 RDI: ffffc90004d27ac0 [ 463.690065][ C1] RBP: ffffc90004d27c50 R08: ffffc90004d27af7 R09: 1ffff920009a4f5e [ 463.698073][ C1] R10: dffffc0000000000 R11: fffff520009a4f5f R12: ffffc90004d27bc0 [ 463.706083][ C1] R13: ffffc90004d27ac0 R14: ffffc90004d27ac0 R15: 0000200000200000 [ 463.714124][ C1] _copy_from_user+0x7a/0xb0 [ 463.718770][ C1] ___sys_recvmsg+0x173/0x5a0 [ 463.723501][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 463.728786][ C1] do_recvmmsg+0x31a/0x7f0 [ 463.733259][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 463.738238][ C1] ? hook_file_ioctl+0x1f0/0x5f0 [ 463.743237][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 463.748312][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 463.753386][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 463.758987][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.765094][ C1] do_syscall_64+0x174/0x580 [ 463.770259][ C1] ? trace_irq_disable+0x3b/0x140 [ 463.775339][ C1] ? clear_bhb_loop+0x70/0xc0 [ 463.780115][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.786052][ C1] RIP: 0033:0x7f59faf9e0d9 [ 463.790509][ C1] RSP: 002b:00007f59fbe92028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 463.799572][ C1] RAX: ffffffffffffffda RBX: 00007f59fb226270 RCX: 00007f59faf9e0d9 [ 463.807593][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 463.815604][ C1] RBP: 00007f59fb035024 R08: 0000000000000000 R09: 0000000000000000 [ 463.823707][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 463.831722][ C1] R13: 00007f59fb226308 R14: 00007f59fb226270 R15: 00007fffad21a348 [ 463.839762][ C1] [ 463.842835][ C1] rcu: rcu_preempt kthread starved for 1059 jiffies! g66533 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 463.853986][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 463.863993][ C1] rcu: RCU grace-period kthread stack dump: [ 463.869914][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 463.883542][ C1] Call Trace: [ 463.886993][ C1] [ 463.889964][ C1] __schedule+0x17d9/0x56c0 [ 463.894522][ C1] ? __lock_acquire+0x683/0x2cf0 [ 463.899536][ C1] ? __pfx___schedule+0x10/0x10 [ 463.904444][ C1] ? schedule+0x90/0x2b0 [ 463.908750][ C1] schedule+0x164/0x2b0 [ 463.912960][ C1] schedule_timeout+0x152/0x2c0 [ 463.917855][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 463.923269][ C1] ? __pfx_process_timeout+0x10/0x10 [ 463.928599][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 463.934462][ C1] ? prepare_to_swait_event+0x322/0x350 [ 463.940082][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 463.944983][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 463.950295][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 463.956197][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 463.962409][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 463.967747][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 463.973023][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 463.978887][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 463.983531][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 463.988780][ C1] ? __kthread_parkme+0x71/0x1f0 [ 463.993767][ C1] ? __kthread_parkme+0x196/0x1f0 [ 463.998851][ C1] kthread+0x388/0x470 [ 464.002967][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 464.008292][ C1] ? __pfx_kthread+0x10/0x10 [ 464.012928][ C1] ret_from_fork+0x514/0xb70 [ 464.017570][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 464.022726][ C1] ? __switch_to+0xc89/0x1420 [ 464.027449][ C1] ? __pfx_kthread+0x10/0x10 [ 464.032089][ C1] ret_from_fork_asm+0x1a/0x30 [ 464.036959][ C1] [ 464.040010][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 464.046370][ C1] Sending NMI from CPU 1 to CPUs 0: [ 464.051624][ C0] NMI backtrace for cpu 0 [ 464.051655][ C0] CPU: 0 UID: 0 PID: 10288 Comm: kworker/u8:38 Not tainted syzkaller #0 PREEMPT(full) [ 464.051684][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.051700][ C0] Workqueue: bat_events batadv_dat_purge [ 464.051735][ C0] RIP: 0010:unwind_next_frame+0x189/0x2550 [ 464.051772][ C0] Code: 85 92 1c 00 00 4c 89 7c 24 10 4c 89 6c 24 50 0f b6 1b 48 8b 44 24 20 42 80 3c 20 00 4d 8d 7e 48 74 08 4c 89 ff e8 37 18 bd 00 <49> 8b 2f 48 83 f3 01 48 c7 c2 20 b5 e9 8b 48 29 dd 0f 84 b5 02 00 [ 464.051787][ C0] RSP: 0018:ffffc90000006e68 EFLAGS: 00000246 [ 464.051802][ C0] RAX: 1ffff92000000df6 RBX: 0000000000000000 RCX: 0000000080000102 [ 464.051815][ C0] RDX: 000000008eba6367 RSI: ffffffff8c4bba60 RDI: ffffffff8c4bba20 [ 464.051828][ C0] RBP: 1ffff92000000df4 R08: ffffffff8177827f R09: 0000000000000000 [ 464.051840][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 464.051852][ C0] R13: ffffffff8177827f R14: ffffc90000006f68 R15: ffffc90000006fb0 [ 464.051866][ C0] FS: 0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 464.051880][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.051892][ C0] CR2: 00007f1892200218 CR3: 0000000037118000 CR4: 00000000003526f0 [ 464.051908][ C0] Call Trace: [ 464.051914][ C0] [ 464.051925][ C0] ? arch_stack_walk+0xe3/0x150 [ 464.051953][ C0] ? unwind_next_frame+0x8f/0x2550 [ 464.051982][ C0] __unwind_start+0x514/0x660 [ 464.052000][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 464.052021][ C0] arch_stack_walk+0xe3/0x150 [ 464.052050][ C0] ? arch_stack_walk+0xe3/0x150 [ 464.052078][ C0] stack_trace_save+0xa9/0x100 [ 464.052097][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 464.052118][ C0] ? NF_HOOK+0xa2/0x6e0 [ 464.052143][ C0] kasan_save_track+0x3e/0x80 [ 464.052196][ C0] __kasan_slab_alloc+0x6c/0x80 [ 464.052218][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 464.052255][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 464.052273][ C0] ? skb_clone+0x212/0x3a0 [ 464.052291][ C0] ? skb_clone+0x212/0x3a0 [ 464.052320][ C0] skb_clone+0x212/0x3a0 [ 464.052340][ C0] br_flood+0x3c3/0x8d0 [ 464.052367][ C0] br_handle_frame_finish+0x1119/0x1950 [ 464.052397][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 464.052420][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 464.052447][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 464.052474][ C0] ? nf_hook_slow+0x176/0x220 [ 464.052498][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 464.052519][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 464.052541][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 464.052564][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 464.052587][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 464.052610][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 464.052630][ C0] ? lock_acquire+0x106/0x350 [ 464.052654][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 464.052678][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 464.052705][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 464.052729][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 464.052753][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 464.052778][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 464.052802][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 464.052831][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 464.052852][ C0] br_handle_frame+0x127f/0x1510 [ 464.052880][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 464.052903][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 464.052927][ C0] ? __lock_acquire+0x683/0x2cf0 [ 464.052952][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 464.052973][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 464.053009][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 464.053045][ C0] ? process_backlog+0x3c3/0x1860 [ 464.053075][ C0] ? process_backlog+0x3c3/0x1860 [ 464.053099][ C0] ? process_backlog+0x3c3/0x1860 [ 464.053126][ C0] process_backlog+0x706/0x1860 [ 464.053154][ C0] ? process_backlog+0x3c3/0x1860 [ 464.053188][ C0] __napi_poll+0xaa/0x330 [ 464.053213][ C0] net_rx_action+0x61d/0xf50 [ 464.053246][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 464.053289][ C0] handle_softirqs+0x225/0x840 [ 464.053314][ C0] ? do_softirq+0x76/0xd0 [ 464.053334][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 464.053354][ C0] do_softirq+0x76/0xd0 [ 464.053370][ C0] [ 464.053376][ C0] [ 464.053382][ C0] __local_bh_enable_ip+0xf8/0x130 [ 464.053400][ C0] batadv_dat_purge+0x2d7/0x3c0 [ 464.053424][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 464.053442][ C0] process_scheduled_works+0xa8e/0x14e0 [ 464.053476][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.053497][ C0] ? assign_work+0x3cf/0x5d0 [ 464.053517][ C0] worker_thread+0xa47/0xfb0 [ 464.053551][ C0] kthread+0x388/0x470 [ 464.053573][ C0] ? __pfx_worker_thread+0x10/0x10 [ 464.053590][ C0] ? __pfx_kthread+0x10/0x10 [ 464.053613][ C0] ret_from_fork+0x514/0xb70 [ 464.053637][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 464.053660][ C0] ? __switch_to+0xc89/0x1420 [ 464.053680][ C0] ? __pfx_kthread+0x10/0x10 [ 464.053703][ C0] ret_from_fork_asm+0x1a/0x30 [ 464.053737][ C0] [ 467.998330][ C0] net_ratelimit: 10887 callbacks suppressed [ 467.998357][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.998523][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 468.005917][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.020004][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 468.027942][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 468.042266][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 468.050283][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.064445][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 468.072484][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.086641][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 473.008512][ C0] net_ratelimit: 13649 callbacks suppressed [ 473.008534][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.010233][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 473.015766][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 473.030289][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 473.038320][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.052539][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 473.060308][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.074934][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 473.082685][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 473.097312][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)