last executing test programs: 2m0.861489377s ago: executing program 2 (id=2681): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x1}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r1, 0x3fcb7000) 1m59.828641208s ago: executing program 2 (id=2683): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000}, [@alu={0x4, 0x0, 0x8, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62}, 0x94) 1m58.186867293s ago: executing program 2 (id=2688): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 1m56.011922287s ago: executing program 2 (id=2694): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb2c087d18ee1ece8}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x298, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x231, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6cb}, @broadcast, @initial, @random="365868986c88", {0x0, 0x40}, "", @value={0x8, 0x0, 0x1, 0x1, 0x2}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="65848ac8fd52", @broadcast}}]}, 0x298}, 0x1, 0x0, 0x0, 0x8001}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r2, 0x1, 0x70fd2d, 0x4, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x47, 0x4d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m54.350229827s ago: executing program 2 (id=2698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000180)=""/129, &(0x7f0000000040)=0x81) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="13000000", @ANYRES16=r5, @ANYBLOB="ffff26bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 1m53.285141038s ago: executing program 2 (id=2703): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 1m37.799285412s ago: executing program 32 (id=2703): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 17.601292537s ago: executing program 4 (id=2901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) read$alg(r5, &(0x7f0000000040)=""/136, 0x88) close(r1) socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800098004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 16.661512734s ago: executing program 1 (id=2903): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x92, "14013b1fd6d43f522002ce12fc9bafe7c1a9791171b5751ad88c9e819dd4c8bb1631cc9f37f4a59b3f8d06c3526616318791e11eae661dac3da0b58145dc62aa8c4de4c09379bac401a3b402cd93067f244f63b05f1da54e00923ffdf5afeeefc1b6d2e908acfe1165ade8a5be6e0f49d68fe258a342be8b5c4ea1c27f469b752889bfc69e32570f89ec735c66670aa2eeca"}, &(0x7f00000000c0)=0x9a) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r0, 0xfffffffe}, 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='@[@%\x00', 0x20000, &(0x7f0000000180)={@align=0x8, {0x3, 0x7, 0x67491544, 0x8}}, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0xa}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000280)=""/201, &(0x7f0000000380)=0xc9) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f00000003c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000002200)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000021c0)={&(0x7f0000000480)={0x1cd8, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x19}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x318}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CSA_IES={0x3c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x0, 0xb, 0xfeff, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0xf, 0x940, 0xb5c, 0xee, 0x4, 0x5, 0x36c1, 0xfff, 0xfff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0x7, 0xff, 0x2, 0x7fff, 0x3, 0x1]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}], @NL80211_ATTR_CSA_IES={0x1b98, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xd6, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0xad, 0xa}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xd, 0xb0, 0x4}}, @random={0x5, 0xbd, "db2bae88dee9dee586becd5064554decf4adcae101ba911830b3d922851396107fe3b15d62d192c3c0ed47ddf093c2e050eae602bed8e0574eb2ce2101fbecdb185b08865084fb16ad6b1adea3b1f1e2c72672e3d85e07840c63c7b8711e20a9849c9b9ed653874ce59a18e863beeb487a373435bbafc29707b7b5c86682da5a7ab65d4fd915173b4241d1ed63ea031137bec19eee6a14b0f90840e21a562f43c9e050314c635bf3fd92b3933778f3312a724b3179dcb1d47de3f92284"}]}, @NL80211_ATTR_FTM_RESPONDER={0xa8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x9d, 0x2, "4ad3776ec27c6d9b198fe5164015bfafb64e5240687eecb03672e18c76aa5e78ad63c6e9334c5847147ebb1be2a55d269e674c8c57c8602fbce05d02082921adb1a43b299c0e3222197a5e31030f397c58379eb3599984cd36670877a1509089e20faa80e5d2f54d629a60f95e92d7545aad9d2abe8a5ea1dedfc885e08c0f876df48716f7603dfcb6471bf72c2ae5677f91943affbf816d06"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1234, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xac, 0x3, "0b403dedeafe9d4c0a02c40d79edff4c420998a6af085b869bd49443b4571c409d5fe653d78bab0cd4c080ce8898262f469573b3f92571bfcc101c53328604ddc0dd99bbe4ad77cde9b64edb396dd765658fd067623e683eff6acd35440a1808cd756b141108f8580a4a3589d3c99a3d33b6bdda8f01a70fade281948267c541480a7fcf17ff131f56793c7a4f6737ac48544eeece8c3027682b4ce63b5b644b43399169db26f91a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7b, 0x3, "b278c22cdfba347ede8e995165556354af835954441d22f1e486e5bb528ce809b7eca85bdb882e45369aed474881f551246c943e79d5294d07374fb92c1c9fd58d6342a6e91ce5952da2b5f97b4abdcc7e89e8caa0822897fa7597a76e154ba4d4918cbc9d9fbe7cc15d3a51dfb4a03cce5036280b577f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xfa, 0x3, "953ea032359ca5e637d7d2a15877ef9f2380797aed55b9784c1101aa7d2393c98d71532f887a5c7b700e6bf95c68019fb29a24b5519d9ac48b1724d670f5b43233b81f6493be2bc4442928433a99db379973d7dad2fbf455ac44a4b1a017eec49ceab2ab8e21993ccb3373f210b1090d73f24298621f9386c7cb7f60ad0b614ed1c652a09a789c6881e68e17f2033f2ca75e6ae574f42fc7f84a1a941ea459011ca4b595180246047b90037e5b304333fff0aef3eb3900a2ef07e96118404a6de7e941de7b35f56e36b5865010617066dec1daff297174c9029643c630b1ef76d3815c80d8226c98d6ea300f9bc628305124f525ba64"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "678cdb94c9ea364715403649f0638ac6b72a95d9a29c7ef2cace835d571eb515b37aadd7277f2e57e578c9b3cbd65183fb3bc8b749666eabb8035f2c0f199f9a70f75a3640739373ab71448af8e78bd56001f2a57e9bcfd53418fb1aaabf31990621686fa74fd1b5637eb03342f722ee8f6c6cbb542079aa41dbc700e546e0c9a8fef1effbe80534be5f18d89792dbdf5a6e10e4b17989dfe6213d38c90070f9a7192ab20a57f9f129420126ed838369f6dd2381151c7aa423d4d56dbe8367275a3b4087ef717c3711ca438c31a8424d8c21b5c75e495daea1a8a2befb59557353c156502efd8174d260821745d92831dfd92c6689bac8cfb7f55619b4185bdce2cd153f09384670ba636638939b8c86abfccb5469f3373e7e64f963658f391729f9d07ff58731ac9480c8ffa714eb349f9b454e5a4f1728cc7d1f38c8177a261587f7655708e32f09f2553fe1af566eeaa720668dc003f31de5db3b203688bd0afca7d9dc556e712dac079b3d2b39ac875cdae1bbb9507c33861179c1b34a52760ac8e82b638b7306a9dd67b27f6b961b4598b57a120ddca4b4144b0b4fb23f721999d428dba2cc1a80fc74d23cd74bcca30d805e4ffbab914031c5c2d8352ff718775f4d48906cb5d4dee3e1b0c5008979cfc64ebbf0dce41c2c925ef7fbe3e805be1e4845d874a1a4e8cf665ac33be748f11d497917169377b98333e98ebd4ae11f31e11abd462be7388a19a5c64ec71bcdb82f1022a789faadd4207cdc6b02e0f1398a1f79884ee0d56041266a38419b6d99818ccbf7dc466f3ed229706b0cc107dd25447f26c493a6508aec0d9fe0790802669128594ff803fb7a43eebdfac63cea50c3071933542ecb9eaafd3fe89fd649755b483840b0095fbaf340ed2634330160e91036f4fd39dd501237468d3fc1124e9a0f447766d6ec815219dc8e767bd9290e85b94de93e0c329625124165be1870f8b0d7e5169aa73403d6dd6c3412b5cf30055e2a427473bde4c6c59c63d4cc80c6f2d1487dd5c32ac17a6efe7a68caaf54efaf3cfdf4c3253ad75551f8e96f98d125bf95deddb1cfd7546b5412fafb74436a4159949da607b753859b6d63354e5cbee01b0155f70d80cc218a07a3bd29ab473371cd87df7d63ca698cb7a75082e7cd1b30f19fd0b99799bdf997ec9c9603019e585f5eb517fb5a504539289197ed14371b1bad5b68e5c8ef6df6b9123aac02e2bcb631979606ca99bac51aa5dd8802867d2db8935bd8c22739b81eccd0a707ddb808afb173a527df886c838e517712ddb4143501f5cb384ccd85a5191a31c91836cca6b79cd7c00483aedc08992d01a39e28245f42ba542f0ee83e9b6dde6add83ecb1d8d26daf5e3a4615cd6f1fac38e53bbc352607373dcf644cff2f0b39f97a26e48843965896b39630e3dcbd30946350480013d77a496febcd114a3a9e3f409253afeea622200f6292594b70effc828a5a5f7e3de64b9e12cdb07edec874b5f9e436a7d381569a5acef2781a882c509d5fe6d77846b26e4bd6ef965b5b6fbf19c1052b7dd28105ebb53515ae19941511e2919fa6b9a531656b0aab55343f1e54a5c6002f348f0b3baee9235d538cdd6a8b51137371cc79abffa5c557105066538df9bac51003c2a651a0589c9fe324284782dae41134a19049a8d2d19ed6715a64bfee026a19c6d6870bab438a19113ac720fb8b95bbcac0992dcca04635f8ccf4c30a3ffa3ccfe431b3f6b616aa8e8d4b6bcc125ad6936d4875b78055a1351f190d485e4dc47c91779a9a3f4fb060501366da5c72e60c2f6f5af262767e7da25c7a9738e9bbaf2d033d0afa128355da3988b3c4848e542117628950cf193ef6fd1744450282af72df4d7671b011f18bbd0ff822427fd103247e4667c9c42944608420aece98ab57ba6ec1bb1af14e9cca90dc80e9269300e62a7980f07229b2b8ea48f22c5412959bba666a365040744bb347cc50bf97aff8d7956b90c459654a08b4dddcfe8421fb828d937241420523479053830a9aae43e8a3593af74282dd5f7e3434566dc922e196e708b9f11eb5cca5b7f2d80f80e9c1b8ad2647cf42d15e27c5244f81e46577b5ce27c462b0604f9ccc6733f5eeb0025bfd94cfb33e3ebf11f3f2e34216fb99ecca5d09b56b210ed881aa1b4922aa92cc6358867c0608b03e9b60f695e9380987f40614a7a2019f35ec67f7a3edc9711c74d8957007b30bf66222bed569ef87813689b455fb2c241e7b83d2e7fb720f59b06a2a38d61300a550b8f51601e7013b77fb2c147245745b9af83d84786804a85ffa5a83a24cb937ffa0f8892659319a687c72fc831237272f3dca67e04519992fdeec4925aaf387c823ea1966a170f11d98e062b84b2180fa904a4a5a1192dde802325a030b4fc563d588f650e45997bdee500825147c0537d966bcd9d4ce36ca26270e97e4b5fbd947fe13be690c1f0b3904b15a93e4d199929efb808a2bcfc61f8e17efaa1a15adcf29da478e099efae0b9f7fac119a3222793748bbece6a8aa0cf63192b0f10439b71f2d02d55d5577d69c04427033bd3572bb62f1604aace29fee19b660bdf2f2936dcd4a1bf28321f6623bb737f1e5139b62c1ddfa707d7d7bed46e0875826c3fff635e950c4ea960cb7b4b3cee5c1836c525865cd964b2f579ce71ecdcac4556a76b87b673febae25035bc2aff7dbc8df51aa088e2826981bb69f99a567c29b2ec3d462dbc8a4941d0770734a316c948f4ee3de4e8d8bbe2c225c23d6cd04f933ca104c8d34df8da51ce2594e8cfae8a6988dc7a5dd9872f1702c00f5c6f328cecfb57933b386c1b679b5a4b2c824b98dead0b96ff78afd09369fc6348c2ad9816c0f70317be420762943b373a6e98b76ad81d2f3263d9f1233bd5593f4ed779955d966d54b6724492ed19e5d0c6031baaf1db92e603fb9e4dac91a24ec96023d9101ca6ccd3d1928bae42eb02d746631e248cd7fcbcbc02d2a5627b847310347bcc28b7cc7165e18c2af57de0f62d8889220ef06270a72fddd183fc7a89bd0fccae5d8fe4cd6ac79c1cd01022c8143cf99534f9d2e7d6505258e9c72062a07b635f09270a190b1ed7b7951eb9d2fffc9ae8af55876cf57479a68a07d9f3cfbf5ff6d53f205fd4e7f6346a379907c88c17b40a08713248535df31adecbe770a61390e10e14c556fa2c9b15f7368cadfcf3cd41702c6a1758658d464dd3f4a536b2444e7c881c1090324cb51de44353f7e270d189e000c07462659f8bfc9e4321adbabc76c7ef5129f9484f525f77283e356e3164a31fdc9a532ad2cee1aa0d012e695be8b1f13dff50a8407673e75bfe1e5a9a477692f35faa7b585c01afa7703d65b39676f79d76facc667b1ea79ba3a8078af72257123445a655058d24919e7a5a5063c6b9ed10f022f887374ee1e9c6fbc56239b2f768a83883dcf052f14b19ce36f42105073d740ecb69e5729b56a7813eb02fe2f0caf245bf0aa02612ff5ff97ebba430cdc0efc5e27864f22a94e4e552afa3d2554eb6682147e3de5d70f89f6b7d072c159889191e1a5c887465c0b318c4917e47116326356c74603e9a393afbfdfb75ace7d06cc1e9639c3d9a25ef29365443ffd2b6f58922ed33d68f99e639a4d6d8da124288fa875aaa28adaa8a351a504f1e692cba58acc1910315398c016d9d103a4435ad76fe502d43ecae39ff5a6061c2d0694c0b8838217f72be165db106b89a55f4e5b393cb9a6712485a95e5f950e8c1b1cf26a6caf62030003f74dfad959ca4225e8c25cb913f3c9055ec3666c2573abd81c546509772baf9e2a291350b458317ea2485b436b5106fa6a533b0de07d9e2d68a50ddf6a61723d0380a2294c37df4e7c2a001ceae9b216deae02b4b60ab9172c15d022201f6434274377d0d99f26a8678430ff81b57052d983d65de7d68f072e13f7cfd03d8c5cadb23de9c9c1fc9f944ef3e745cd882e990826af0e9258d5b739bdc335c9c91fa2f4996292af506202c2229b6c0ee44a3efaad71f2c37055d67c66ecb513b3d8c9949e0a6494a0442b28e386f8df6e27bfc2dd8b5699fd17bfa49f3f664f531fcb6877770f2f51c1e6aefcc8c1862e2909f3eb2c62cfcbb9370af310fbb15cc05d15dd44a7ae2090122851ef234559f32a418fe8a2fefcff52c6dd0d9926da5ec3d9e28a4c1a8e3fef7382eac969015942a1824286befff6f4725355ba6f275233c1b2a4e5401a64952a8f778994f1fadc75b6234c8082449ed50c4936c29f571d1b099195c50ce8af9f9ace40bc7f209a4aee97476422aed626996014334253c21b9426c1cf177bcdcc7b11854ab59037b0a05cf668f648804e5165074bcd200a434b238b0d8eb70d4d88e07c84181e3aad21beb77e05e286810018726b98daf20f7d7ecb8b5512477c34ee33112ef56512bc728b8ad703aae27ef7709c731dd78f7a3849c390b93645ee6309089e55a330bcb7743a8eaa5415823a31cb1481b3476178cd96f85b51bcb5a5abc66a0021f21acf3b4a69c62ade31621076ee1a19f412939ce649c45f37d9b13c540a7a5479e00ea742bf5ee86305aae1e54a6734630d0be7e5fd5b20312bf9d6def4d0b09356b120f06d1cdf01c9f17a99a8e948c75f0fed9eb67b06fb8e104cffd7ee2a73872f1541ad293d14a911e9f05aa949bd9b92ef88d2c4f73179f4b11b3daca6fd2984a46ffc8010cb9bd582f777b920e9d9fc84c5b76272905b3c4ec9529bce0d08013e4424bacced6fa8ffe0c83f61a27e0b4dde167d76b77091cde2be625ed86d65455a8283264f4c152bbf6ddcb792fc7644781a6b529ec9b4b508bb0c15fe3e88caa2a947f2f419242cc218414a3c934f56c4ac917c86a0ee491615538c60c9543c4deccec7b8996ac95f9f23a4bffc7f63eb8e94ff0e653a418eae9dece77f692d9a0e0978fe7730008f63d5e2dbf0ef2df904a5fde53bd721001e446b1f8f7fcbb39f3456234217ab33af41e69de80e5f51907f3520e0fd46c48cd33ac8bff20eda8e0931e4092747275e9bc81d0dc34993718c9ccfff727afb499d5acbf02251ef7fd7374a972463e87d616e69920ec4bed481aaa033157a74e2543ed70d167d171a56478ee981fede207fb6c79eadc63b2cc45a67bbb0656f01527a4049c57f608cfca4002784c50036708df2ff3f246cc6504fa150c15fd14fa58d67ffe2ef3ac0aab9a3f3d0f07228b55f6121c9865959b6858bd495a844e052ee6beb4abd6cb723128caf2359d1e10752f9df94df8150344b0ca6dc8bf854f436513277fa4aff39776df5e5c6c49c762d671fc93cce53444f675180489ee517169f836529bca368bb702f6d924591d19bcc885d06b40ef0e11bd8edde1543c133f15d1348c927bb5d7692f16424ee96d74d5c5ce8489eed411b95358b51a1a305a81ba505f8e269ffa26ae157b5627df067c7e8084f3aa00863346e0358b92df4b52ac30f31dba3937491bdbf136e3b2b8de6eaa533821151c5af3681c6cc5af33df6b3ff636459e9037995a0b0085b1015e3394e5235742e1e04d8aff2aced7da777939f20ecd71beb76d3b8d79a708f575474b8a6ad334b04d042aa531de6c26762600dbb0426a3f524c476608442055c773928d3ea2dea931e6d0618444fefc06f24ef621486738711c28be9c50c9722d786e014a641d84122baee71d0b2745befea6be6064638688b8e5260e02f43a9deea39d65e2fff6c5e6873a7991e325520c49af382d6a98a86924d7d38e8812070c10ed75e16c9c2a0e48012c2d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x3a, 0x7f, [@mesh_chsw={0x76, 0x6, {0x6, 0xd, 0x1f, 0x8}}, @erp={0x2a, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xae, 0x20}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x49}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x40, 0x1}}, @supported_rates={0x1, 0x6, [{0x16}, {0x3}, {0x24}, {0x48, 0x1}, {0x1b, 0x1}, {0x6c}]}, @cf={0x4, 0x6, {0x6, 0x2, 0x4, 0xd}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x146, 0x7f, [@gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x5, 0x0, {0x4, 0x1800, 0x0, 0x40, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x300, 0x6, 0x2}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xc}}, @mic={0x8c, 0x10, {0x34a, "723052de44eb", @short="5fd25c602a51504a"}}, @mesh_chsw={0x76, 0x6, {0x7a, 0x5, 0x35, 0x9}}, @channel_switch={0x25, 0x3, {0x0, 0x7c, 0x9}}, @chsw_timing={0x68, 0x4, {0xa, 0x9}}, @perr={0x84, 0xe3, {0x8, 0xf, [{{}, @device_b, 0x9, @void, 0x1a}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x42}, {{}, @broadcast, 0x5, @void, 0x3c}, {{}, @broadcast, 0x1, @void, 0x3e}, {{0x0, 0x1}, @device_a, 0xe, @value, 0x18}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@broadcast, 0x31}, {{}, @device_a, 0x100, @void, 0xd}, {{}, @broadcast, 0x8, @void, 0x2c}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x8}, {{}, @broadcast, 0x100, @void, 0x10}, {{}, @device_b, 0x10000000, @void, 0x2b}, {{}, @device_a, 0x1, @void, 0x2c}, {{}, @device_b, 0x0, @void, 0x26}, {{0x0, 0x1}, @broadcast, 0x11, @value=@device_b, 0x41}, {{}, @device_b, 0x8000, @void, 0x8}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@dsss={0x3, 0x1, 0x88}]}, @NL80211_ATTR_IE_PROBE_RESP={0x7c, 0x7f, [@random={0x4, 0x70, "fad66b6ce7b92038fa7d80c394f1225a538daa7ae20c9e2a36198cc4175ea528ff82e8ecdb8e37478fc9f337680c52e11365741617266b99be4bb2053298844825625d91837ad17d8b77ce5fce486e7d489a0051271a07f0f349022599911eb198ecf750f6dad9804ca84d395a5326ac"}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @erp={0x2a, 0x1, {0x1, 0x1}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x66, 0x9, 0x400, 0x1]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4b, 0x80, [@challenge={0x10, 0x1, 0x9d}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0xde, 0x5, @device_a, 0x682b, 0x20000}}, @cf={0x4, 0x6, {0xbe, 0x7b, 0x401, 0x7}}, @erp={0x2a, 0x1, {0x1}}, @cf={0x4, 0x6, {0x80, 0x0, 0x3, 0x6}}, @chsw_timing={0x68, 0x4, {0x3e09, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x12, 0x80, [@challenge={0x10, 0x1, 0x11}, @mesh_chsw={0x76, 0x6, {0xa8, 0x4, 0x36, 0x8}}, @challenge={0x10, 0x1, 0x49}]}, @NL80211_ATTR_BEACON_TAIL={0x121, 0xf, [@ssid={0x0, 0x19, @random="d9f4f10999ee17eec9197c06980da0c1be5c519c499d8b7a59"}, @dsss={0x3, 0x1, 0x78}, @measure_req={0x26, 0xfd, {0x1, 0xd, 0x7, "26ba44c4a8a05889159bd0a44740096a51f0ecf363caf4c3ffde3248aadc32c63060cc48f86ff3c7edf81feb14cf6a09a86d163c5e95a2aee830c4b5f7556c8ee2096cebc4cd92028089a0ef02ac4422577700ed8ecb0277d1f35e67eb0e1b75f42a56f430d33ce4ae62636cc26e6a1a069f08efbfd630fd8fdc77741dba44d060339eb7cd8cec88d65eac8b56d363d20203f08386b34ecce25635732e7afbed3887271138ca9f258751e075ae27acac846c1da8688fa2c79aa5b8002fd5013a25af487859e61110d7eef5bab5d32499e548aa06c178dcabadfe7112f895bba5262d669e6ceba58c4224e2a6401df6b3c9c140443e78d8d5d309"}}]}, @NL80211_ATTR_IE={0xb3, 0x2a, [@fast_bss_trans={0x37, 0x82, {0x80, 0x3, "148b13645ac0cf434b1ca2562c1a2a06", "03158877e79a8bed458ae4fbb4f327356e446d5078c84dc498ef49cd473aa16d", "90b531b0a660464b3761a1dacf58de5c339dbf54aa676c923db584e2a5e33cb0", [{0x4, 0x1, 'S'}, {0x3, 0x9, "b79a48c6c434145528"}, {0x2, 0x20, "1b954c626784888e1ea7e58830981ce806ec05db896f33f5d7a2fad0ffe113b9"}]}}, @mic={0x8c, 0x18, {0xc68, "6ac5039d914b", @long="bd493e35abc6ea5d7681487264b08c1f"}}, @ssid={0x0, 0x7, @random="be80c289ab0dbb"}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0x8c, 0x6}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x97, 0x80, [@channel_switch={0x25, 0x3, {0x1, 0xb7, 0x8}}, @random={0x9, 0x5f, "8c1186006da8406ceb13a80ea3dd9fadc5e2a01f1d98d4146985e16250dc8c948634a2d3c4ce6f2dcd7ce42f0fd51ae90d367bc326f64fa330a6e1a122512abf6c2e46a077c10002f6a3d883ede284fd4ac0f6a7d8852829e5eca60212757f"}, @link_id={0x65, 0x12, {@random="750ec1522fc4", @device_b, @device_b}}, @sec_chan_ofs={0x3e, 0x1}, @dsss={0x3, 0x1, 0xb3}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0x94, 0x2, 0x101, 0x1}}]}, @NL80211_ATTR_IE={0x15e, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @random_vendor={0xdd, 0x98, "c9b725a5593d01e84bf3ae090f628bd750dd3d9a86c18e741024e9d9cd47641109298eda8b0dae11826c6881497612f995576fec494952df02d69de9e44f6598a2da3af5a5864cbd349d82426c56f5317dca8507419a146a3b9f76434a9798cde7caaa5eb89f9e215eee6263f53f10ac8d564de36125a18e4e1d8faacda9252a078fb77af8802cc1e4f8a775b04bc42faef14f195862e60c"}, @random={0x3, 0xaa, "343419613ae65a68e1b503d4655db6721cce0a84da2a65eafc48ec242b3e6e648d9d9d62c569eecd03ab9d432f969d153274c71e19b508b0c7c2e253d5b70650e64e421ad5ee432f6ded912e296bff029326e6a571d84458e89c882dd92b624134522735a3bc7e6a532baf6bff5968a4880184749511d84aaf1027c25f37d8b03588279ff0e32415102cba363b35cced9f28d17362bba6cbf988586d5dd2e546ee6cfa6abd482b669908"}]}, @NL80211_ATTR_IE={0x188, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @chsw_timing={0x68, 0x4, {0x2}}, @random={0xe0, 0xeb, "03628a408ebd0a882b20414babdd54e104121cd2642cf619e3e8744621f6c4d364137813783eebfb7328902d7863b1b5d6bd354423970dca5a8bfb03dfc991e70a302fcf1adc1a93d3ed4b6d5ad589f56fc07805c416fa6eb849bccb8408941d008eb11fd0b5692932e9f90bc292d11bca11ac7bcd24078eb12c5030ccd6be1285837b98a772387902870435e3a72eee9424cc4482f076abe4f032ceec316dc4b213c5d16554a9d2063f750b37e061ec029bc312131ee2824a337891608b95c070a61e69f642aafdcf97e8ef71cd6ffd47d90b2b337f9b323c267eefbe71817e471e7d7dacf1e4312b3090"}, @mesh_chsw={0x76, 0x6, {0x7, 0x5, 0x14, 0x2}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x7c, {0x5, 0x0, 0x4, "1d4ac79c4ab84be41439cf52ce1845d62b7a241667bc9ce2622d3a5448f794aeb7b37810b65378e0a1fa754d6216e5f4212db366c2ee1d150cf59f653e7f40d432a2c8fdb6e487784b728c6dcb4938edebafd025921b64ddcfdeea4a19a2973eeaaab3dc275f6de421b216baefba3946cc16d6db29be7320e6"}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x37}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}]]}, 0x1cd8}, 0x1, 0x0, 0x0, 0x4800}, 0x4880) pwritev(r1, &(0x7f0000002380)=[{&(0x7f0000002240)="6a04d4b707a0ab58a0ed5148110821d8697709571c9a4a1e525534005c574bcee7cceb7f8e7bc412fc42dece4337bde357bac06db3988dbe384b202a3dff08813552893447c644240c41de75fc5262be2b1a135be00db1e08f1ea1701004015b", 0x60}, {&(0x7f00000022c0)="89ceace216f22611812a87de629dd2e76f5f87ff563d42a08e1ac3cbf6a0565abfb34443dada255e511e20a11051e0c92b25f6917befd5", 0x37}, {&(0x7f0000002300)="b7c81406fd4c16962eeb3007001636f46d11bf54e288be884cd7f4bfbf8b4df3c2f3f75bff34054a31d6e25708441fabc11d43e6135cd21e584af2e6dc74f61eb83823e6a8d07176", 0x48}], 0x3, 0x52cc, 0x55) recvfrom$phonet(r1, &(0x7f00000023c0)=""/131, 0x83, 0x10020, &(0x7f0000002480)={0x23, 0x0, 0xc0, 0xa}, 0x10) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f00000024c0)=0x1, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000002500)=0x1, 0x4) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f0000002680)={&(0x7f0000002540)=[{0x6, 0x6, 0x400}, {0x4, 0x6, 0x8000000000000001, 0x8, 0xa}, {0x6, 0x81, 0x6, 0x1, 0x2}, {0x5, 0xd11, 0x9, 0x7, 0xfffff1ef}, {0xbe51, 0xffffffffffffff01, 0xd, 0x0, 0x5}, {0x0, 0x1, 0xbcb, 0x1, 0xf4}, {0xa3b0, 0x7fffffffffffffff, 0x3, 0x6, 0x800}, {0xc000000000, 0x1, 0x3, 0x5, 0x81}], 0x8, 0x28, 0x0, 0x2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000026c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000027c0)=0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) openat$cgroup_int(r1, &(0x7f0000002840)='cpuset.mem_exclusive\x00', 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000002880)={@dev={0xac, 0x14, 0x14, 0x18}, @broadcast, @multicast1}, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x20, 0x5, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40440}, 0x24000840) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000029c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x5, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0xc, r3, r4}, {0xffffffffffffffff, 0x8c4, 0x0, 0x1f, 0x1, 0x2, 0x8000000000000001, 0x3}, {0xbb, 0x7, 0x100000000, 0x2}, 0x8d0d, 0x6e6bbd, 0x2, 0x1, 0x2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d4, 0x2b}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3507, 0x1, 0x2, 0x5, 0x6385, 0x1, 0xfe}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002ac0)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000002c00)={&(0x7f0000002b00)={0x1d, r5}, 0x10, &(0x7f0000002bc0)={&(0x7f0000002b40)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "e645751a61026b477420720892015f800abb7f2181cf4140561951dd597b1defdd521a951f612268c5cdde60150daca385b7c7a1373dd0156a34ccb3284d8193"}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x40005) r6 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000002c40)={{{@in=@private, @in6=@private1}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000002d40)=0xe8) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000002d80)={'broute\x00', 0x0, 0x0, 0x0, [0x14a, 0x1, 0xfffffffffffffffd, 0x8, 0x100000000, 0xbe5d]}, &(0x7f0000002e00)=0x78) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000002e40)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r1, &(0x7f0000003000)={&(0x7f0000002e80)={0x1d, r7, 0x2, {0x0, 0xff}, 0x1}, 0x18, &(0x7f0000002fc0)={&(0x7f0000002ec0)="c98c3ed9b0b047e67ec545c6ec34defe42cca43108952ca3bbc7e49aafa077e946e9cff6dd2cf8d08e99b895cdc63251a3d661bb06b1813a91345ebce799800abe3b609075ae183b9bd11b66aaca52f2e83e90298eef71b562b282e9eb2c382376140670312e761212abdafa15bb7d36b450442b59169e6004e024cc5b935028d5152bd225fcec85e3e20b69921b252d1dfb22b8bb2a977bad34daa196676c3f67ceb3f7a4f2847bc4b53211a2d08612f16bc610e67221792456338fe91d8d293c33acd3393333e39e87799414de0db900e91d0ed5015799be", 0xd9}, 0x1, 0x0, 0x0, 0x2004c810}, 0x4008890) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003080), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x5c, r8, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x10}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000855) socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f00000031c0)={{0x73, @empty, 0x4e21, 0x3, 'sed\x00', 0xe, 0xfffffffb, 0x3b}, {@local, 0x4e21, 0x3, 0x9, 0x800, 0x40}}, 0x44) 14.638815409s ago: executing program 1 (id=2908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x25, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001a000100000000000000000080"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e22, 0x3, 'sh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xb2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x7c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, [@dev]}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010106000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x7c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414bb00000000000000000000000000000000000000000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000000000000000000000000010000000032000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000000000002bbd7000000000000200000000000000000000004c00120061656769733132386c2d6117736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x13c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000200000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) 13.729584192s ago: executing program 4 (id=2911): r0 = socket(0x2a, 0xa, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000810) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000200000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket(0x2a, 0xa, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000810) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000200000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000080)=0x2, 0x4) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) 13.200224789s ago: executing program 3 (id=2912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}, 0x0) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000280)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1, 0x3}}) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) 12.588684342s ago: executing program 1 (id=2913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005004dbd5a3f0800f04b36ad0000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@ipv6_deladdrlabel={0xa0, 0x49, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x18, 0x0, r2}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x3f, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0xa0}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5452, &(0x7f0000000c80)=0xf4e) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) writev(r4, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)="1902e902d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5c2df6b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000080)={@loopback, @multicast1, @local}, 0xc) 12.407927319s ago: executing program 0 (id=2914): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x800) 11.722017438s ago: executing program 4 (id=2915): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20040054) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r3, 0x300, 0x8002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}]}, 0x34}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) unshare(0x6020400) (async) unshare(0x6020400) socket(0x10, 0x80002, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc, 0xa) (async) connect$netlink(r5, &(0x7f00000014c0)=@proc, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002800500010000000020440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000000000080007400000000018000680140004"], 0xb4}}, 0x0) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0x75, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x14) 11.533690518s ago: executing program 3 (id=2916): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c045}, 0x80c4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x800, 0x1, 0xff, 0x8, 0x0, 0xfa}, 0x20) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r4, 0x0, 0x21, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) 9.776893042s ago: executing program 0 (id=2917): r0 = socket(0x840000000002, 0x3, 0xff) accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0x5}, 0x1c) 9.638746493s ago: executing program 1 (id=2918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xf, 0xb}, {0xa, 0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x7fff, 0x1, {{0x1f, 0x4, 0x1, 0x2, 0x7c, 0x64, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_addr={0x44, 0x14, 0xb2, 0x1, 0x2, [{@private=0xa010102, 0x1}, {@local, 0xdb}]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x1, 0xe, "4b61c862f5c4e90367e844c2"}, {0x2, 0x12, "2c1f814e2d90786ecea4ed8cba30f50a"}, {0x7, 0x8, "3282d3a76ee0"}, {0x0, 0x3, ' '}]}, @generic={0x88, 0xe, "be6a9669a1b79984a27661a9"}, @timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x9, [{@empty, 0x7}, {@private=0xa010102, 0x8}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r10, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000a80)={{0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x6000, &(0x7f00000002c0)={@_ha_fsid={[0x9, 0xffff7fff]}, {0xff01, 0x6, 0xffffffff, 0x8}}, 0x3, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0xb71a}, 0x6, &(0x7f00000009c0)=[{0x2, 0x9d1a, &(0x7f0000000380)='\xf6^\x00', &(0x7f00000003c0)="73658c2e7e1a507d1c650ace641df961fdd15d455a373d37861609efda1ec7d224aa81392394f264ebacd8ae93b401154ade92d9b036721d1bfb7c37f390eae693e5ad50a7d25d28a1d2acbb3a51feb422b6ec5185cb339218525e684fc1a3e5799705d975f52eb5c914caeb04722b7b9683c2b38bff813d4bd7f671ec389b16a4ce59d1d2a07e424355199a76e17d6a576b38fa1725018952c021921aa0a612c6dd5044662db9c8ddb49930c7f89592", 0xb0, 0x22}, {0x3, 0x80000001, &(0x7f0000000480)='hugetlb.2MB.usage_in_bytes\x00', &(0x7f0000000540)="5fd259d94e247f5ebfe824404b475dc7d0959efb78d0fa844ff0a883e9fba3f24bf55b88baa540911e9116866dc5ae86c630ead57ff7a4f898df16363ffbbd3f5b1c04d4d976524020cb8956582aaacc2fd36ffed2e843c817a150816c758344f77b38b8e3a3d7d3042dcca93cbdc305a05224bbe75adeef18505ee7e1cba4f0aaf12c8b52d1785c29bbc5d5f8734db8bab0057629d5ee970c67d398afd0ce445ac888c2be7a694bb664a4117f431f0008602734d44d3b08cfdbf1f1c99bbf5d71a4efe7c96428", 0xc7, 0x30}, {0x3, 0x7fff, &(0x7f0000000640)='\x00', &(0x7f0000000680)="bf870d3e1352c9a1e4e5d3d8800f6ab0acdf848e096ae7de059ec3c94eb628e0f7472a11803a1651f9b80c4e3a1614e1823ef2766f689d817b74583b35b85e5cc29acb856fc205cbfcbb2107b46bf4c539730707d546894010f6a76586be63f2384f86c162ec1f5463710176e63008b862dd0fc67b2dc66f0309b15413e10689f796fbde1843e862f012c095f6e178705c63299910762dd4d0e6f071bea74a9c28d08e48f45312c4cbd51fbad3db46ce4f95ddc519f2e60d06ca71d1779ddd41", 0xc0}, {0x1, 0x51c, &(0x7f0000000740)='hugetlb.2MB.usage_in_bytes\x00', &(0x7f00000007c0)="ad6ecaa1ff0edc786d2026da594f0ea86b54a977ad75a591ddbfd116cd2d93d45939b1222662ec2b99f97fc1fe25a6837d2903e8bd95e5a5d53e322c634b3c560bd0f29e524ade2fbdca496d4705c651adde", 0x52, 0x8}, {0x2, 0x8620, &(0x7f0000000840)='\x00', &(0x7f0000000880)="2ee155b6baf3481c43bad696564a5929f16bfcb0f3eefd7bda02ba0af0759a922464feb01814e011f47b2b9a51a0e34f81b4ab3ec1b22174c60caa4ae724f910fdefb62b8c07538692b076d1b9bbf865390eb92298a888ad824cdef26f2820fd9614ed8671083b7a60d90c346c30eceac54b34fa8bbcf359e5", 0x79, 0xa}, {0x2, 0x3, &(0x7f0000000900)='\x00', &(0x7f0000000980)="d6d70f702030a67866a1b195509646efb8cea5f972f852b678ca", 0x1a, 0x8}]}) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001980)=@newchain={0xe84, 0x64, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x8, 0x8}, {0xfff3, 0x7}, {0x1, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xe24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0xb14, 0x2, [@m_ife={0x88, 0x8, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x24}, @TCA_IFE_SMAC={0xa, 0x4, @random="a483864a0b98"}]}, {0xf, 0x6, "cc303b95d849eee53c2a44"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0xad457e81b8a26795, 0x2}}}}, @m_mirred={0xb0, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xbd, 0xc6b, 0x3, 0xb, 0x9}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x5, 0xfffffffb, 0xca1}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0xb6d7, 0x20000000, 0x97, 0xc}, 0x1}}]}, {0x22, 0x6, "28b4d3f7e4b7616fd3310c49d43f74e3444700dedd79172bf5942ebb4788"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x9d8, 0x15, 0x0, 0x0, {{0xb}, {0x8f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x9, 0x8, 0x4, {0x26, 0x1, 0x1, 0x8, 0x3ff, 0x4be}, {0xa, 0x1, 0x9, 0xab, 0x8, 0x80000001}, 0x7f, 0xa12, 0xe}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x10000, 0xff, 0x2, {0x6, 0x1, 0x7f, 0x0, 0x5, 0x5}, {0x8, 0x2, 0x3, 0xcf99, 0x3, 0x6}, 0x8001, 0x9, 0xd1d}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xa52, 0x4000000, 0xfffffffe, {0x4f, 0x2, 0xa, 0xffff, 0x9c, 0x5}, {0xe, 0x0, 0x9d1, 0xffff, 0x1, 0x6}, 0xc, 0x4e1cd116, 0xdff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7fff, 0xb0c95a, 0x7, 0x2, 0x101, 0x7, 0x1, 0x6, 0x200, 0xffffffff, 0xffffffff, 0xfff, 0x7f, 0xe, 0x7, 0x10000, 0x10000, 0xfffff801, 0xff, 0x8, 0xb94b, 0x4, 0xf, 0x1ff, 0x3, 0x17, 0x6, 0x6, 0x7ff, 0x4, 0xd5, 0x2255, 0x8, 0x1, 0x1, 0x8, 0x573, 0x7, 0x1, 0xd15, 0x2, 0x7, 0xd, 0xfffffff8, 0x8, 0x8, 0x1, 0x401, 0x2, 0xe73, 0x2, 0x1572, 0xd85, 0x8, 0x0, 0x7, 0x5, 0x6, 0x9, 0xc, 0x7ff, 0xa9c4, 0x9, 0x3, 0xe8, 0x6, 0x0, 0xeb, 0x7fff, 0x5, 0x8, 0x7f, 0x6, 0x3, 0x8, 0x10007, 0x0, 0x4, 0x2, 0x5, 0xfffffec9, 0x3, 0x0, 0x0, 0x7ff, 0x1, 0x80000000, 0xd, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x3, 0x0, 0x45f, 0x6, 0x5, 0xffff4190, 0x7, 0x10000, 0xfffffffc, 0x4, 0xff, 0x0, 0x77bf, 0xd76, 0x401, 0x2, 0x80000000, 0x4, 0xf73, 0x1, 0x1, 0x7fff, 0x1000, 0xb, 0x9, 0xfffffff9, 0x1, 0xff, 0xfffffff7, 0xd85, 0x7, 0x5, 0x401, 0x5, 0x0, 0x3, 0xca0, 0x3ff, 0x0, 0x8, 0x6, 0x9, 0x2, 0x6, 0x5, 0x7f, 0x5, 0x26df, 0x21, 0x14d, 0xff, 0x8, 0x8, 0xfffffffd, 0x36, 0x1ff, 0xc, 0x3, 0x7, 0x53031fc9, 0x3, 0xfffffff0, 0x5, 0x8, 0xaeae, 0x259, 0x40, 0x1, 0x7, 0x2, 0x10001, 0x1, 0x6, 0x2, 0x1, 0xff, 0x6, 0xa935, 0x9, 0x8, 0x400, 0xa, 0x6, 0x5, 0x800, 0x3ae, 0x3, 0x6, 0x0, 0x2b1f, 0x1, 0x80000001, 0x101, 0x4, 0x7fff, 0xfffffff7, 0xfffffff8, 0x2, 0x9, 0x2, 0x3975, 0xe, 0x4, 0x2, 0x100, 0x6, 0x9, 0x4, 0x0, 0x1, 0x4, 0xffff, 0x3, 0x100, 0x8001, 0x7, 0xd7f3, 0x175, 0x401, 0x1, 0x10000, 0xffffffff, 0x0, 0x6, 0xe, 0x81, 0x8, 0x1, 0x0, 0x9, 0x8, 0x40, 0x3, 0x1, 0x7f, 0xff, 0x5, 0x418, 0xfda1a4b0, 0x9, 0x4, 0xf, 0x1e3, 0x1, 0x1000, 0x1ff, 0x4, 0x7, 0xb, 0x8, 0x95c, 0x5, 0x5, 0x1000, 0x8, 0x8000, 0xa08, 0x1, 0x4, 0xd31, 0x5, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xaa, 0x3, 0xa2c, 0x9, 0x629, 0x4c, 0x0, 0xffffff01, 0x80, 0x4, 0xf, 0x1000, 0x7f, 0x7f, 0xa, 0x1, 0x3, 0x6, 0x2, 0xffffffc6, 0x80000000, 0x5, 0x7, 0x1000, 0x8, 0x8f7, 0x86b, 0x3, 0xd, 0x10001, 0x3, 0x5, 0x3, 0x9, 0x4, 0xffff, 0x8b800000, 0x0, 0x4, 0x2, 0xfff, 0x2, 0x0, 0x10, 0x10, 0x7, 0x3, 0xd8, 0x8, 0xfffffffc, 0x7, 0xfffffff7, 0x7, 0x5, 0x7fff, 0xffffffff, 0xc, 0x80, 0x8, 0x5, 0x7, 0x2, 0x5, 0xe0000000, 0xbd3, 0x5, 0x95, 0x3, 0x7fff, 0xffff8335, 0x2, 0x0, 0xc, 0x0, 0x7, 0x800, 0x10001, 0x5, 0xe, 0x80000000, 0xfffffffe, 0x5, 0x5, 0x1ff, 0x8, 0x5, 0x5, 0x40, 0xff, 0x9d0, 0x99, 0x9, 0x9, 0xeef1, 0x1000, 0x401, 0x7, 0x3, 0x0, 0x8, 0x1000, 0x3, 0x80000001, 0x8, 0x9, 0x8, 0x8, 0x9, 0xcf8, 0x6, 0x9, 0x9, 0x0, 0x0, 0xe, 0x596, 0x3, 0x400, 0x4cf9, 0x5, 0x7, 0x9, 0x3, 0xff, 0xfffffffe, 0x4, 0xe, 0x6, 0x4, 0x803, 0x334156c2, 0x0, 0x11a, 0xffffffff, 0x4, 0x0, 0xf, 0xfffffffe, 0x9, 0x6, 0xdd2, 0x8001, 0x2, 0x0, 0x1, 0x4, 0x4, 0x9, 0x5, 0x400, 0x4, 0x6, 0x3, 0x8, 0x2, 0x0, 0x81, 0x9, 0x7fffffff, 0x2, 0x8, 0xa, 0x4, 0xffffff6e, 0x4, 0x8, 0x6, 0xb63, 0x6, 0xc5, 0x5, 0xfffffff6, 0x9, 0x4, 0x3, 0x3, 0x1, 0xe1f, 0x5, 0x3, 0xffffff7f, 0x5, 0x0, 0x80000001, 0x5d, 0x100, 0xf, 0x5e, 0x7fffffff, 0x7ff, 0x8, 0x3, 0x69, 0x1, 0x8, 0x80000001, 0x9, 0xa9710000, 0xb, 0x10, 0x100, 0x0, 0x6, 0x4, 0x3, 0x3ff, 0x9, 0x3, 0x9, 0x2, 0xfffffff8, 0x10, 0x7, 0x8001, 0xadcc, 0x3d, 0x4, 0xf, 0x80000000, 0x400, 0x3, 0x60, 0xce2, 0x13, 0x101, 0xd9, 0x8, 0x800, 0x7c9d, 0xa13, 0x6, 0x9, 0x2, 0x2, 0x1702fdb0, 0xd3ca, 0x1, 0x7, 0x10000, 0x1, 0x6, 0xffffff80, 0x2, 0x7ff, 0x6, 0x8, 0x8, 0x401, 0x2, 0xf6, 0x3, 0x0, 0xfffeffff, 0x0, 0x3, 0x3]}]]}, {0xba, 0x6, "0980c82c49fff975ad78efa731e2b0ba2a6b20e06608c5b0cc4a4c027cb738f72185bdb0eec8d4f00d63f1027fa354de5f85a6c2a77af1b82754ce7a3b41daeda9307d7184f067a69201bc31f389c9e7b254e9ed456fc4c3bab9bb4d4e34bbc2b2b4005335ccb2b3df5874795de8dfe8379ee2634dcd56eaaa319149865e91951343037a5e1207ab42f9107e0381565601f0f86b5aa92ff79c211cb8e7bb3608f38a3dd780835def7e6a08aba5fc307610205bdeb607"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x2ec, 0x2, [@m_mirred={0xc8, 0x2, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x2, 0x10000000, 0xfffffff0, 0x9}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xcd0e, 0x10001, 0x1, 0x1, 0xfffffffb}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x200, 0x7, 0x3, 0x7}, 0x3, r13}}]}, {0x39, 0x6, "6f7060121a89137f2b79796aaa0adaaa5e2009623696a35f5a6d06e7335df067a30fd2f23bdcea91b4018245aa4f8cd0d285629569"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x10c, 0x8, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r14}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r15}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0xb7, 0x6, "5cb8f92a4adc0b278fa84708bd9e45cc0a127f676b1a1847fd998e5dafbb821ea494ae955c8a6eaa7cba7758fa70345fd05892a44a4998ae4fbd3af2715f7663eb6b6317c0a016718f0b22067217bea051e28abd707bfc3c8e2dcb5ceed649721333ceaf5cf7996f1b5f630aa0ef63ac9e37dd8b3508dc32f40123fc44a031484b130397adcbfac9f6fb4df84d2d13349af26c15e432730e1c4452a9ee2a4a27b20109b3c0e410434fa6624d4463d7527183ae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x114, 0x12, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r16}]}, {0xe2, 0x6, "3cc92f1ea048b59d5707b8e18ff3c30586e1b712860bc14999e620f21b5535ac10c85e335ebdc72ffd13369e77b0c80fd5cbf5805f007dcb7328a495f89e5e50ebd553e4d9dfacefaa9956c97ea77747a3df31ba2937d2fe6f6b6122199da26c8b8db297010a3ddca4da30ed9060705d8079ee79bbac1c6a3d7f5501a074de5dbfd4239114d2029ac730e0f8e7abf539745bd4d3d87a76d6643b89df41dd02c7eddf962458f03419ecf48a4128118be12d62566b2cdee31b5ff3309131d391750c21735fa1331be1c705f3b52cab8d702b2cdb38b2f18e1c4be88b7cf211"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x9}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r17) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r17, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 9.479938778s ago: executing program 4 (id=2919): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000003c0)=0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xb}, 0x90) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) r6 = socket$rds(0x15, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r6, r7, 0x0, 0x2) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000080), &(0x7f0000000280)=r9}, 0x20) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r9, r11, 0x25, 0x0, @val=@perf_event={0x9}}, 0x18) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x1d, &(0x7f00000001c0)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x80000001}], &(0x7f00000002c0)='syzkaller\x00', 0x7fffffff, 0xf7, &(0x7f0000000500)=""/247, 0x41100, 0x26, '\x00', r11, 0x5c2d9346281c707e, r12, 0x8, &(0x7f0000000640)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x6, 0x9, 0x100}, 0x10, 0x108a4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 9.158705923s ago: executing program 3 (id=2920): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000000)=0x9, 0x8) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x890}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/223, 0xdf}], 0x1}}], 0x1, 0x60, 0x0) 8.619054864s ago: executing program 0 (id=2921): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, r0, 0x2, 0xc, 0x0, @void, @value=r0}, 0x20) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r4, 0x90d, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x1ffe000, @l2={'eth', 0x3a, 'xfrm0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) writev(r3, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800", 0x2}], 0x1) (async) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x4000}], 0x1) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r7 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x1) (async, rerun: 64) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r6, &(0x7f0000000200)={0xa, 0xfdfc, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000100), 0x3) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_int(r6, 0x11a, 0x1, &(0x7f0000000140)=0x304, 0x4) (async, rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x54, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x2c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}]}, 0x54}}, 0x0) 7.445813754s ago: executing program 0 (id=2922): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 32) close(0x3) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="30000000111401000000000000000000080003000000000008004b001300000008004a0001000000080001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000700)={"4073d754346a234a192f12bed2ba4804", r6, r7, {0x9, 0x6}, {0x2, 0x9}, 0x10000, [0x6, 0x6, 0x9, 0x1, 0x9, 0xffff, 0x1f8, 0x2, 0x900000000000, 0xffff, 0x5, 0xfff, 0x2, 0x2, 0xfffffffffffffffd]}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4.105510176s ago: executing program 3 (id=2923): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1, 0x1}, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x7fff, 0xc, 0x0, 0x6, 0x2817c26c}}, &(0x7f00000000c0)=0xb0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.004421813s ago: executing program 0 (id=2924): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xaf, "f03cf2faffb0dd94ae4783e2d1d5686b3a1888fbfe4e4f7065da21a21a0d20b07b8e0e2d575e9a6b898a4e2d4e8c7150da77e09a06ef0dae729ab5559e6328378b595c2e72c61b1ea5fde3fa515d7a734861de986f057c1e3f8abcafc5743a821c146a60575e7e9b21b7e752f951bd9b6cff3abad551666ed8c1249fc5dccc1b65559d9a0a077a422ba0c7a63cbb9c3538a8a7b0789404e8ceeec173504999dc023c187cc44ddd0ff79d3ad59a4be5"}, &(0x7f00000000c0)=0xb7) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r1, 0x7fff}, &(0x7f0000000140)=0x8) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r2, 0x100}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r1, 0xa8, 0x9}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r3, 0x5a, "1305cf21de1be72b529ad888b0efabea8b22f6e1b62de5a8b5b012bb1a0026ec94965acd23365fbe2dd91869c620dc1426c0636773f4b5a272bec5a3750d1a46f5530df2fd1ebf86d78d389bf30b2beee53cc60be96f467be74c"}, &(0x7f0000000380)=0x62) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x8, 0x6, 0x28, 0x9, r4}, 0x10) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000440)={r4, 0x8e, "248125341b837f105ca72f548daceb7f77601013bbd0b43a609bcb2508d23d954c51e5aea6fe0b34beaad29a3cc9d7fa098f079af9017d2b532d5b76f13a3fc91ff68df9c93edef1e35b9a25a77bd1192b0464d5514a1d7c6f3540849b4bd0534e1c97d7ba155a0eac0f9f9319cd3a976662a0965eb5ca6d66a840694c69b54c2c2062d054cf3d4abb5fe2fcf054"}, &(0x7f0000000500)=0x96) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r5, 0x40106e8c, &(0x7f0000000540)=[0x81, 0x4564f562]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r6) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r7, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}}, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000700)={{0x0, 0xd, 0x0, 0x400, 0x1, 0x226d, 0x0, 0x8000, 0x9, 0x3, 0x800, 0xba1, 0x60bf, 0x7, 0x6bdb}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f00000007c0)={{r8, 0xdc7d, 0x7, 0x9, 0x7, 0x478, 0xffff, 0x7, 0xe, 0x6f65, 0x3, 0x400, 0xc96, 0x5, 0x1}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r9) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x64, r10, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c850}, 0x4990) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000001940)=[@in6={0xa, 0x4e20, 0x4, @mcast2, 0xe}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x12}, 0x1}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @private=0xa010101}], 0x68) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r11, 0xc020662a, &(0x7f00000019c0)={0x90a, 0x2, 0x4, 0x5, 0x2, 0x0, [{0x7, 0xc1ff, 0x7732, '\x00', 0x1800}, {0xde15, 0x4, 0x2, '\x00', 0x1001}]}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, r10, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) r12 = socket(0xb, 0x800, 0x3) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f0000001b80)=0x20000000, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001bc0)={r3, 0xfe5}, &(0x7f0000001c00)=0x8) r13 = accept$inet(r12, &(0x7f0000001c40)={0x2, 0x0, @multicast1}, &(0x7f0000001c80)=0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r13, 0x1, 0x53, &(0x7f0000001cc0)={0x7, 0x7, 0x3}, &(0x7f0000001d00)=0x28) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000001d40)={{0x5c, @multicast2, 0x4e20, 0x2, 'wrr\x00', 0x3, 0x7ff, 0x6a}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e23, 0x0, 0x800, 0x4, 0xd21b}}, 0x44) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x5c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf0}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x95a0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 3.904703506s ago: executing program 1 (id=2925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x8000000, 0x3, {0x6, 0x7c}}, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x8000000, 0x3, {0x6, 0x7c}}, 0x14}}, 0x0) (async) 3.247454172s ago: executing program 4 (id=2926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x140, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6002}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x701, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0xa5, 0x7, 0x1, 0x0, "3ce028744385013aa53f7e52183166dc7365133cdb40c0f829190f08ac54c2c20d3093a2df86cca093d8604a934599f5d2eac0f638b020136762d433f2f0b893f574a34dc696db5e7ef559d215b00f79e1f0902114e329c08540e25d96bb0d5730154f1e0fb91290631a225589b0df8785fc22ffcdb0a10b51426c1395a5332379d306389a9d6e9285f411740d07019c65b6700ba6fa66489ebbbc3cf0a9acf768"}]}, @NFT_MSG_DELSETELEM={0x141c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13e8, 0x3, 0x0, 0x1, [{0x12cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x1214, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "741c7867b3eda0853d0d79d0234b6f4a0833917b6b091a1d4986f68068fe47879c752f0fb34e9eb6d050201a8192748a93e3ede053b64d978750b628b2e926e3bf2b890dc95aeb08471f0eb6bedada90c07a6d7974c708b458a87e028d13b94f9d1e56029f58b2db0c92a0166289f7dd39d7f5d3a4f112bd5619f29921679dc52f7f95f411196534e5478c1f2f879cd14209ccc266ed067591e7baac86f22f99c7a79c453687604d6041d1fc307752ed0ea46c3234aed332624d4ee079c7d7f339ae69aa831d602e0d1bc1aab4d944abb1bcfb5e9b1467dcba66a6f4633097ed91eaa4e1649619e0bd754b93a447722964532b22d460be018b084682fea12f82237ddcdd4ff115bfc840ea01eb7f1cf3645c690c324b14cb1a8fcc3ace21c6415c138e206201acb205c2897ed9eaa9ba05e1dab1b3f96082e76ef6e8c5c463a7b98e2e5b5611ed0fce4c995651b55b66454a684fcd753a8902f66e7c66abfce9fd8db9c8a9a6ae10ecaba354cb5ca4bc23b7078c56505a8019ab1b29197b36e321d896fa1084198701dc1b2d3f60e6efdd60e57267762da20f260784484896a47d97cc8ecf9680a85518b35a3f5e52792c0c419117204857861062e563924c85e0ff5c0028a95120f9f828ac5e6f21a909eabee38c73ae8243f145822ff5bca2426cca528eb06385eb747836577e52ed7741ca2b6661b919ad6d1757e5e7b486bf0a874e9ba766f79b2976d908f2b3a38f2b7e784206612166c3a733a0a63b59e40d086175be4683b1d9fb46d00e7c112544ef775452d2337881190d79647c4d391eb061048cb583f3572f3aef13d6ca0cbf8f556794130ef23fb8968cd515cf82beb21b3c6efb78967cc791c7d6f6041d8e0924d2c3c4f896e32c0b5213e3413253c7bbdbf5062ad03ac59cbb8e05c9c70eb8e9b05d1ca1d7b705ce166544a51b676daecc527f75c11ddcc65f23d9571feb104156d84bd951d41b406df9adef98830fe0e9c9fc54e92626c46f5b6f855dd5d300f13b66a83aec924914fb3550289fdecffdf2a793c9d0107409ccc6feab0e2e303f9426f56da620ff2887181a95138600b3c6af195a7f6947ce37d4c22a2b3cbcfd6fdac944e909f0a0dfe5ec52f9d60296a3356f3d276e5c0ce452ed16e06ba475dc9a00ea58cd5f7768fb0efbc925530e6d338fa8c414be55eb8de1a1644085c2c28d418b3ada2edb1e95fa48e89cdf467d54db4edc41a316a9c9792bebcae4675139150762b695b28e175318abae6c267e76c9ba206106f6fccde9220d047ab43b77ee99c6228b611f36bf57f66a0efb9d6deaed710e578371cb8af084b63b2407db826c2f9a43725b0cd6e5d8b4bae704e93785f428e69d12b6d1a7a00f65304449150005504040a53e915ef4cfe3850bc267855619d1aafbeb13b10e1145462b94b7bad15458bca0704496789dfec7c03d7b0e2000605d7b014527d6a59e21fb1d3529bd65ccda1abdb4c2862c65654e90d3c16d96685fc188efd710dc62764426796182aa9e51c9879559e032f955d9628675638e25ddca55724fc6f58bb4c787e1fcc01cfaa509724ceb29b2dc2c29ba296a0213e2208ec22525c760dee5a89eba9ff60fe14a5103ae87344c3fa3add4ebee02a986a32f9f3d97072302bff8b1ef4ad42dda6a72490608d36f09076abf6a45c900129f37e9427ee74bd2a30fab5f2aa6079a2d99414d48a29ff3a91f8072fe33c1611a68602965eefd867eabfc801bb1ff7bf98153e9246f5bea5a376f1a50c5a20bce466e06a017de8041a1ac991f8a242f36eea0077a1fbdde98c5a156d59797b37b96f79030a7b9f3d7139a8e4f29616e590b6b99c836b68e681d50075c4f81d42849a01b8995871da0ccf7cbbf54b7aa649512b18eb5e0da551dd8ef4971f6b36a18c732a48811728e7bcecf2c9562b7acf5e4eb86d6c7a85264e0e2606607ea327acc9c7828e5b04c07f2ff1374f3b3c1067b141ffccaf6821a18dbe20d521cc69c3f198ef3d8c21c3eaebe43bc6121ee9f3e9b07bd5b3170f2875ab35f9382c6f753ea6a495832cc95ab4aa51ff7db313531322a1ac69150f7eafa3b6b491d44f6136c3912870744e33587d5b4c874f031bc79d5135a2305f474b6a07cb8f577c76a76f629ea1026d12508e07251032a0405c6fc0b25d91dae8b990b2de1a8a10278918b315ae2e573470d856fda090f886ddc68e461a0f8c14b1f83780fff810fdc1339d79be7d2b233500cac8fc27967dbff0f59790c2862337c21d82561a650a8c4bfa0fb2605e9d592c19ecab353db5c5eab4187d932ccf7dcf02df6c033ad3a0cc12b75e9a37099099fc533e205ef2e8e23a48d4afedddab46da9dd52754af55225fc5f403ba894795e8caba3e54d3198fac1ed2d9b7fc42421d2e23feb44128e62fc4810f8f8d4841bcf59398c38443e131d25855b86be164db802176af35a57f98bf9ab3aefb289f04b4d936f47a59ba085522ab519ce248a7e3b6ba3906f5380f8161a1bb7e3bf8ace562268c1ce72496632f17ae53c6bd2e184f03b144683ad48dec9e9c80eb63f12c80f42e250c0332b25040165e5464046d1f47270b1d2cb656adf4bf44266d182f30980d4f8008294c1f61f42cc8315afb85e08e86d7c16edd9baadd5fc530746085c50475722e37d7f94eca63faa29585246494b6b8c0564355feccd5a4706529c4fcb9e46024278badd06f477f559219a5b2ca60bb824aac22e16f6a89a08255442e887fb840805d6b45d1398ddeb544015bbad80d5210b337ba9694ff1ba848a8e34d02f986529a59b74d8da34ea23ba8bb359d4bd66f9cd728c4d86d18a406cc41ee5087a53c3827bc653cb949743681430ae61348e79486f6864d812e1ec9f2a0ae22c7610dc2a860ca312971f1e511d1abbac39bba298fe862530e18acabdb5256c47719e73d92fc1d4c34a2189300c05564e89d3bb326ae737edbafa09bac2262fe987e6268970d4c0aae3e289786bd1eb4aef296da4e8c8454badf667b2e2630eaf6a873cc7f669396e0780e9efa95fc8d8e2543e5f640734b4c519046261ceb627d37166052e2137ecddbf16511d5fa8b180dade608d8f3a4484a2e9e414c207a51a129db6eb904a72ca732e87fa92904cbb25042cdc9e33a5597cb50794f0180b2b17a9e46647a046401fb044bd3c6fdcf1c4da12490b0de27afa1d05c07be1e7f761f443cc4f6701f37b6893e10e13382d76b204bd245bcc292142e64d6162475bf57ba7e3ee2d88f9e5c32b8b6e1c708e7359ec227fe0272d677857dd555ffabf57e128f385453b7e9a8de227a980c440fc971f141e735eb4956f1d9f53abf1ef0f26e5e783b65c783936745e5296826a80fc40a527b78035b139ace02c9f5d94555c5e1fcd04b01d8e7b57edf7aa925cb26605b1bf77efae1a49f8318baf890c0e794261caed7bf40cebf9d5d28089f339dc465022639ebe60b31fd2f257a934149cd47fcf5cbe5a335a48ecfd2f83bb08eb5864c08d9e7a117b8ad741eab22f38a4981983deddcfb2cefb51df5ba5108f4d08d134a2e84c92bbff105c82721f697fb7193d83033c9c95783166869a0ca224225ac2f8010a18d0aa7b690a9841334c6761d1bc38b77e6157a2fbe238696729f7504d3d1f427e7051605b9eb5d5b718f460fb5915115021040a362a1c61b92554b5410b16c6be0651000db2fa18047f13e667ea08f5f7fd834e4eb4df7f6857954e4c5cc93d65d9607f407e0c9346aa834c483a4e9f530256c79cd9d91937ee5ae544fee63be84b307c5a3e1b30d08c95c78583c111374a55fe87d9385dc740e32998b8a875fec7ad1f04bb076f19c24c1a11cd468148d81ff0bd3d47d2a2b9849cc41a09b4c1e63dabfaac9a0bf8d0e2c19e2f951f630024eaa01acc076e9809a04d37a3f7d31530c908072f1677947b2a082180a862e4d95eb80e024cfdc90c47538107a62580a93a380ca1aca9590fb3a535c374389fca3c0bb5c6bd465f2905957616b56d85f548bb060d50124b903ff1937d3ef2c22d8dcf388f7aafca62006eded4102e55e280ec1e227e56fcf2a41c43ff922e52e75f1446df70cb083c374134142937de4be5b09610d5fa0f3a837cd455af009064cf9cb10c80ed32cd022d6f67b618abe0ac26979930fb5fe1df2b807c80c8cb73dafd1f7f18c7f0a1b43ae337568155eaa8a979c94883ad2867e0f431e2ab7226ffb68725876b596774d29102f7baf5b94c901bd19c2f01d852a17538982f19d434558c094d71fd81a2388dddaf685b32af992a26db81b0f9d38ec92cb0e2cceb024a91fa69f2bee59e8da7dfe05c82b7cbb6614317e9d149dca412db3b006d6ca76abcc7aa9801bed04043afd4f0c3770c26bee5ff61df78ace37245c98368d6d4a461179d9e1b1cc4e1dae010f9f2d28a104157f8f967e39f83721a70a5a6864806872ac4a27857b49d1e4d1762d8ce516aac8712bd326a0df47aec928a8f8146c7e9ff77fef16087c19b17d41f52f0c06d5286c499e292c95c4380b7d71cb517d642f952554f1423ea42473b8619cb808cf7378497dad6089e42d82f5404a3385d89f8319f18fc74c3a93296bb0cf2677ec31b6b32eea6b0ae203056fa11bc56256934088a89e61d5187b020e460952f7370bddada07c40725f99f15fabd59ba89d287ee1b65da918c373e2a788fecefbe5100132c3fd8f76bd32828b97b737408fe34e5d16e6e0df6aec69d223d19675304c8c07b7ac25cffd56212d514ad1727f3c653976a7fc6e3876a19deb432dfdcd4778f321a4525e5628242f5d2518b98138e55c206af37218b1840f04fe1bf54a833d41db22bfcea609286b72d15da063069ce72e63800840a2f59177fd83c4dd43a11c38f31511b3fd90a964de0c0f9fccc368efbe201a73053af0cb99ca235f8c14f4e47f33166e9d4768d6e79e0c66c67038dd412183db26c100da0ea54cf6e5ef341da9c78491958322620db8f188a43089efff1d31f15d64801dbbee3edbe9a30686c69129ecd0779ec573b934ef28984ca7bbbffea5d50206ae4660333521a0a9b44ccbb86bd19ea9d9e8fa277e3d96c6d93b3aa896ecbe31d73c8038fd99b63e6a9c00f822f46f6b6f6726ef45d5239bdfd1dfbe9dc85ca6e08c447414dce4704903e0e8f10384ce5c9b67c70d63d6a4d18b8d2cdc543dec5ac9e08ecdb2b77270be25449fdc719ae5df64b7b1c53cbd5dc826c3f9935824a2f3a3c98ec30cbadea921c72cad4b3c2ee547c9d6572d82cdf53132bfb4fd3fc69d7f00151f5c69e729b6573c1a0f9569302a32960bd63c8a6fc904fb401364f5bbfe48c4e7f2436f8e106932945f69f8ee6b13dcee65ce5a1625d1460ed788517e048e19f4fdceb31c84d17a0cdae65b7f29426e710f07f7d8f5454e5098e93b7d8c88a8676205fa1845942c28ca5250e1dc48c2c84b92397b99064b853d5f790050d65924f0c5b134462cbbac4c6f5dac9ed6dc4e226edcdc7119633502a574c26e5dfb1372c41820442f588f28087c8c24e19c93beaacde22ca45ce3ab0dcd2b975ce71ea69aa260f24a6f5edfd5a3821a60621c0fce59519d902109ae957c7c54a5044dcce4698388142a1ac0b97f747612f5e3fc7352db176a4dce3b267f5ce305015f4a4f372053975ae3e45a54ef46f0490a6b8cc4ea9bcf18c0291493752564c5c34db15f3a2e7f1e23ab9646436c615f61cf10b6ef86611c2835c7677ca348677dfa9eb16f37d9ced6a84c565d8d945aed5ddd8cd32707d6a4fd9680259278de7365f"}, @NFTA_DATA_VALUE={0x2c, 0x1, "5c97fc0c989e34f28903f472bac10caed299450f62ec32ea1fc594bf1002aabdeb7af5d21f1d98a9"}, @NFTA_DATA_VALUE={0x67, 0x1, "78a203c6a1b3bdb7ac08f44b9256df65df9eac3c8292df74d7683602a7fc82efa045a85d65eecbf6a033d3d72e7999a8875fb9d84e6b753158a8de57fd5dd1989272d90b70223cb180a185a6a6a6a49b09490751e0c935baa7a27d9acc6393225ec86b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x42, 0x1, "078e7f42bcab44d2feb88d03f14356e14a2f07cdc3afa2f3b9b8a5b0ef4083ce739f280ab79860e180266585e89ea1ceb245c1c9dc9e8a6b30e576454bca"}, @NFTA_DATA_VALUE={0x10, 0x1, "893f291f79ecc067ee9c56da"}, @NFTA_DATA_VALUE={0x77, 0x1, "33a6321e64a66d6aa582874b4bfe053504fdaa3f5fabf3bcf124edb317bffbd6794deb51a572282bc1a0bb19470567f61c246398357091d51b01bde786861fd59afe034551687d9348e39ebdf874c822ab334be82d3ff45a5b69fb4e8896a42b56c4b12ceacd6b83b2572225edf66fe709fe61"}, @NFTA_DATA_VALUE={0x7d, 0x1, "dac3a8b53a6a41c09c535738cee53910aa7563c772746db83bce59735f9d06af156cdfcfbf1dd1a688aa5148f3e2d5aa5852eae85222793e810fc28c059b369340b0f1f72969ccd0ebc8ecb5e73c13ea5d030b2bed62dc89a40454a2fc77b48ad412506e6fa2ef19a2832d31fc7d2f00d12df20cf6f68d142e"}, @NFTA_DATA_VALUE={0x1d, 0x1, "fb457d8e9d437e8f789fcdb83166b5e30c5a6ad1f341c2f930"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x82}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xe4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdf, 0x1, "711067ece98f49f4873a65625da2f7260a79c46afe88b2d193077892ed0ba583c6ad6e327790ea3ad23611786aee474458bcb8afcfd436646a32ce9c0b71dd15fdad5802d3fdd15aefc36177575abc23aa0cc4578a729eb7f064edeaddd7e49fee628e359108c6def953899c1c446ae162b1f7354bdcd381c0b95f6d7186b4fae6de5bf94068a74c72457aeea5d3350a972c44da9c240715d288f87837cdfa8c24115a432116d42265eb74c329bb5372e73db1e64372444e5382abd8b419f7ee5c9e6f2bfe89475278d2a44d4bf1bce6009e8a2ff90ae5b696214f"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}]}, @NFT_MSG_NEWTABLE={0x50, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x3b, 0x6, "032febeb2b959ec9b43647d7b8b99671dc601a233acdc6fb263f4c4347ec616a438975c2da11464f070b79bfbcc9b3e22a1a03140a9ab8"}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELCHAIN={0x6c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x545afeb3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4943bf64}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x12c, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xf8, 0x3, 0x0, 0x1, [{0x4}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xec, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "c50032061749dc42fb288342e38f74d7f739e9ffe9a17948315cfad3b1e98877cff540fb8ba1fd6f8a2c605006db7f170ed770f38051d7d5a57b21c47a11e31ec282575cc005fc3f7df3bc0aa6cbc08d107760c4d9e64e9f315ccff115ff6e95a6f873e98ab37ed7983dbfae748b210ccc5b344c71faff68501588f3080d0cf7fce4039a09c2abad306f394a9fdf8a60fb11939aa3ca1152f95ebc3dfcdd71f3185f1f629c6de3f7d659379be93d623ca262f9e5f7b2fb11204947562ffbed8b029186693ada1b9442c6257119531efd981304e21593a090a8c46a552ca1fe7e42fb5e"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x8e, 0x7, 0x1, 0x0, "6729f0ee28459d58cc78d178ae73a55636d4698cdc409a15d0f67a70e2f7715583fda8cd72debe06e1508084f29e39022f64267d0da8a9a77bd246b7785f1c0b3d334732929158dfd5bf194e8ecec6d0820eab1ffca2d475de137661f1f6f64c43dba23d3894669535cd2e4c3cc73f4c54f95867278d10cc9dbdf3807745c35e9c5313dd3cad9db7d5ab"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0x19cc}, 0x1, 0x0, 0x0, 0x40010}, 0x404c000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0x15}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8}]}, 0x44}, 0x9}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x29c, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, {0x4}, [@nested={0x116, 0xcc, 0x0, 0x1, [@typed={0xc, 0xc9, 0x0, 0x0, @u64=0xfec}, @generic="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", @nested={0x4, 0x119}, @nested={0x4, 0x12}]}, @typed={0x88, 0xbc, 0x0, 0x0, @binary="e244a0ada689bef20f7bea8802e2f0e73746a7d98e22d07db40bb27c6f251e645c8b4a38f84453bd9acae6d90f2ed410fc02976225ffdd90d9ccd2386314deed48ae90aec7de8b6386588284729f150404cc2995a8bb491f816d70cd832aa872dc248be4a9d77e273df4b71415bb3eac0338629cc9cf79f6eff07d27149701bd0dd94fae"}, @generic="755283f3fddb4fa762a03d8392822680abe4577f23c428f29b1c829a86cecade6c2922b6b52c46ce841c880571f45b6573630fcd3421e9ff92d1625e12cb6374a3925af8db79705f0d6504a70b872eadede6c73f56f58ca54ebb83d39a6f2fc89c6d811c45f015a1aa39dad8211be48c9b1b80c2bba5ecf8d6e80f92d4b82626e1f4200e974757d726ee9ecb4e2c81364f4e92b74859cd5fccc288f40ccd806437073a60ebbe984d35e6208f35dfd98432e54c210576de11ded02f87772f839d2822623dc2e969fc3d94b0eb10c0bc29dfc124396f3874edc2bbfa35cd94af0a02b5a9d4bb"]}, 0x29c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002540)={0xffffffffffffffff, 0x0, 0x2b, 0xc9, &(0x7f0000000140)="f698a6c6c8f00680ca2dcc76c2cb5c0c9df14a05b75b9bf541189d8a83d623e284d42194b8a516d35d7ea2", &(0x7f0000000480)=""/201, 0x0, 0x0, 0x9f, 0x20, &(0x7f0000002440)="29648271694910364ce8c51d2a12e7534076cc2c9342d528cc7a95c1d0dda8bef065bdd439be0f2290329a5e51dc68838c229d67275727b008f420b868edcaa91c1707d3db711c03e06e6684e98e07a47976f55fbab0512635e859a62d91ef2089340574ed90b81400f91b1e54b00057da9c51e6331d2a7f7c3fbdbb4466ebdd2133c3cc55b19f1f2930c7b009cb33206b79cf80be9cc961c1a42e0aaae31d", &(0x7f0000002500)="3ca6b2e2a41521a77e1bc650ddcab3819f628772dac83917304cd60997899566", 0x0, 0x0, 0x7f}, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.034766208s ago: executing program 0 (id=2927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0x2}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r9, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20040050) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x7f}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.034444534s ago: executing program 3 (id=2928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@dellink={0x74, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x19a2, 0x40000}, [@IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 1.068192785s ago: executing program 1 (id=2929): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000040)="94", 0x1}], 0x1}}], 0x1, 0x4000800) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01046abd7000fbdbdf251000000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40b0}, 0x20000080) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000200)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) (async) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000040)="94", 0x1}], 0x1}}], 0x1, 0x4000800) (async) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01046abd7000fbdbdf251000000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40b0}, 0x20000080) (async) 646.382298ms ago: executing program 4 (id=2930): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465000000000000004000"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x31b100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0x14, 0x3, 0xff, 0xfffff01a}, {0x6, 0x1, 0x1, 0x80100000}]}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0x14, 0x3, 0xff, 0xfffff01a}, {0x6, 0x1, 0x1, 0x80100000}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x8, 0x1, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @broadcast}}}}) socket$inet_mptcp(0x2, 0x1, 0x106) 0s ago: executing program 3 (id=2931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x3}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000140)=0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) kernel console output (not intermixed with test programs): netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.842566][ T3304] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.882029][ T3304] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 38502 - 0 [ 199.932002][ T3304] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.976920][ T3304] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.052851][ T3304] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 38502 - 0 [ 200.121640][ T3304] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.173274][ T3304] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.212121][ T3304] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 38502 - 0 [ 200.274831][ T76] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.319457][ T76] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.375940][ T76] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 38502 - 0 [ 201.391845][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 201.392215][ T5664] Bluetooth: hci1: command 0x0406 tx timeout [ 201.398059][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 201.398089][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 201.546609][T10851] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 201.930179][T10864] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 202.218583][T10864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.760070][T10889] x_tables: duplicate underflow at hook 2 [ 202.866625][T10894] netlink: 'syz.1.1399': attribute type 10 has an invalid length. [ 202.892980][T10894] veth0_vlan: left promiscuous mode [ 202.919586][T10894] veth0_vlan: entered promiscuous mode [ 202.974893][T10894] team0: Device veth0_vlan failed to register rx_handler [ 203.032876][T10894] tipc: Resetting bearer [ 203.053766][T10898] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 203.339755][T10907] netlink: 'syz.2.1405': attribute type 5 has an invalid length. [ 203.376202][T10907] netlink: 'syz.2.1405': attribute type 16 has an invalid length. [ 203.955134][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1417'. [ 204.041047][T10936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1416'. [ 204.411965][T10949] syzkaller0: entered promiscuous mode [ 204.453994][T10949] syzkaller0: entered allmulticast mode [ 205.371879][T10973] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1431'. [ 205.697941][T10983] syzkaller0: entered promiscuous mode [ 205.726167][T10983] syzkaller0: entered allmulticast mode [ 205.901073][T10983] ipt_ECN: cannot use operation on non-tcp rule [ 205.984165][T10991] C: renamed from lo [ 206.008944][T10991] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.049355][T10999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1442'. [ 209.921918][T11028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.339234][T11095] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1465'. [ 210.601548][T11104] netlink: 'syz.1.1470': attribute type 1 has an invalid length. [ 210.697136][T11111] x_tables: duplicate entry at hook 2 [ 210.759907][T11111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1471'. [ 210.839664][T11104] bond6: entered promiscuous mode [ 210.866670][T11121] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1473'. [ 210.896149][T11104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.921827][T11121] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1473'. [ 210.966535][T11121] netlink: 'syz.0.1473': attribute type 6 has an invalid length. [ 211.025251][T11121] netlink: 'syz.0.1473': attribute type 5 has an invalid length. [ 211.063333][T11121] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1473'. [ 211.347233][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1478'. [ 211.400184][T11140] netlink: 'syz.0.1479': attribute type 21 has an invalid length. [ 211.578214][T11148] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1481'. [ 211.678756][T11140] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 211.747947][T11140] bond4 (unregistering): Released all slaves [ 211.748151][T11153] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1481'. [ 211.768344][T11151] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 211.837094][T11151] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1482'. [ 211.913494][T11161] netlink: 'syz.4.1483': attribute type 5 has an invalid length. [ 211.937908][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 214.761252][T11250] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 214.771249][T11250] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 215.927064][T11280] __nla_validate_parse: 5 callbacks suppressed [ 215.927084][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1518'. [ 216.404452][T11289] syzkaller1: entered promiscuous mode [ 216.420022][T11289] syzkaller1: entered allmulticast mode [ 216.642493][T11302] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 217.057468][T11324] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 217.107703][T11325] xt_hashlimit: size too large, truncated to 1048576 [ 217.180095][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 217.207388][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 217.211168][T11333] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 217.656953][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1540'. [ 218.089988][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1544'. [ 218.328425][T11372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1549'. [ 218.608822][T11368] tipc: Disabling bearer [ 218.727861][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 219.203239][T11400] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 219.238845][T11403] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1558'. [ 219.586030][T11417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.142444][T11439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.227570][T11443] netlink: 'syz.4.1571': attribute type 29 has an invalid length. [ 220.255627][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1571'. [ 220.404337][T11450] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 220.633027][T11458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1577'. [ 220.742600][ T8048] tipc: Subscription rejected, illegal request [ 220.834227][T11464] Cannot find set identified by id 0 to match [ 220.872111][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ab33c00: rx timeout, send abort [ 221.268483][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1585'. [ 221.372386][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880799ee800: rx timeout, send abort [ 221.388518][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ab33c00: abort rx timeout. Force session deactivation [ 221.410391][T11495] FAULT_INJECTION: forcing a failure. [ 221.410391][T11495] name failslab, interval 1, probability 0, space 0, times 0 [ 221.447671][T11495] CPU: 1 UID: 0 PID: 11495 Comm: syz.2.1587 Not tainted syzkaller #0 PREEMPT(full) [ 221.447697][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.447707][T11495] Call Trace: [ 221.447714][T11495] [ 221.447722][T11495] dump_stack_lvl+0xe8/0x150 [ 221.447748][T11495] should_fail_ex+0x40c/0x560 [ 221.447773][T11495] should_failslab+0xa8/0x100 [ 221.447801][T11495] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 221.447826][T11495] ? __alloc_skb+0x189/0x7a0 [ 221.447848][T11495] ? __alloc_skb+0x1d7/0x7a0 [ 221.447869][T11495] ? __local_bh_enable_ip+0xd0/0x130 [ 221.447891][T11495] __alloc_skb+0x1d7/0x7a0 [ 221.447918][T11495] netlink_ack+0x136/0xb30 [ 221.447947][T11495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.447968][T11495] ? ref_tracker_free+0x689/0x830 [ 221.447991][T11495] ? __pfx_ref_tracker_free+0x10/0x10 [ 221.448020][T11495] netlink_rcv_skb+0x2a4/0x4a0 [ 221.448046][T11495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.448070][T11495] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.448107][T11495] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.448130][T11495] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.448160][T11495] netlink_unicast+0x7bb/0x940 [ 221.448193][T11495] netlink_sendmsg+0x813/0xb40 [ 221.448226][T11495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.448254][T11495] ? aa_sock_msg_perm+0xf1/0x1b0 [ 221.448280][T11495] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.448302][T11495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.448328][T11495] ____sys_sendmsg+0x9b9/0xa20 [ 221.448357][T11495] ? __might_fault+0xaf/0x130 [ 221.448385][T11495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.448419][T11495] ? import_iovec+0x73/0xa0 [ 221.448443][T11495] ___sys_sendmsg+0x2a5/0x360 [ 221.448467][T11495] ? __lock_acquire+0x683/0x2cd0 [ 221.448489][T11495] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.448549][T11495] ? __fget_files+0x2a/0x420 [ 221.448569][T11495] ? __fget_files+0x3a2/0x420 [ 221.448600][T11495] __x64_sys_sendmsg+0x1bd/0x2a0 [ 221.448628][T11495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.448662][T11495] ? __pfx_ksys_write+0x10/0x10 [ 221.448695][T11495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.448715][T11495] do_syscall_64+0x174/0x580 [ 221.448732][T11495] ? trace_irq_disable+0x3b/0x140 [ 221.448756][T11495] ? clear_bhb_loop+0x40/0x90 [ 221.448778][T11495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.448795][T11495] RIP: 0033:0x7fdd1659ce59 [ 221.448813][T11495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.448826][T11495] RSP: 002b:00007fdd1742f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.448845][T11495] RAX: ffffffffffffffda RBX: 00007fdd16815fa0 RCX: 00007fdd1659ce59 [ 221.448858][T11495] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000005 [ 221.448868][T11495] RBP: 00007fdd1742f090 R08: 0000000000000000 R09: 0000000000000000 [ 221.448879][T11495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.448889][T11495] R13: 00007fdd16816038 R14: 00007fdd16815fa0 R15: 00007ffe8ac05878 [ 221.448918][T11495] [ 221.883003][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880799ee800: abort rx timeout. Force session deactivation [ 221.999593][T11506] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 222.067883][T11508] IPVS: length: 221 != 8 [ 222.298002][T11513] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1593'. [ 222.311188][T11514] IPVS: set_ctl: invalid protocol: 44 172.20.20.43:20001 [ 222.359917][T11513] netlink: 'syz.3.1593': attribute type 1 has an invalid length. [ 222.419840][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1593'. [ 222.763595][T11528] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 223.000807][T11541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1604'. [ 223.049642][T11542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1604'. [ 223.204656][T11552] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 223.299517][T11547] xt_hashlimit: size too large, truncated to 1048576 [ 223.480065][T11550] xt_CT: No such helper "pptp" [ 223.488091][T11566] netem: change failed [ 223.557408][T11572] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1609'. [ 223.590452][T11572] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1609'. [ 224.139449][T11562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.184606][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 225.498483][T11636] bond4: option lp_interval: invalid value (0) [ 225.528199][T11636] bond4: option lp_interval: allowed values 1 - 2147483647 [ 225.609273][T11636] bond4 (unregistering): Released all slaves [ 225.749644][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 225.797767][T11641] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 226.207849][T11656] syzkaller0: entered promiscuous mode [ 226.251690][T11656] syzkaller0: entered allmulticast mode [ 226.358795][T11669] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 0, id = 0 [ 226.685629][T11679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.192756][T11692] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1642'. [ 229.203010][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 229.214145][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 229.667347][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1644'. [ 229.684778][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'. [ 229.686835][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1644'. [ 229.764667][T11698] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 229.775356][T11698] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1644'. [ 230.327576][T11729] openvswitch: netlink: IP tunnel attribute has 22 unknown bytes. [ 230.511900][T11738] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 230.571345][T11738] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 230.584351][T11738] netlink: 'syz.4.1654': attribute type 7 has an invalid length. [ 230.587469][T11742] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1656'. [ 230.683688][T11742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1656'. [ 230.856373][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1660'. [ 230.977145][T11755] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 232.346604][T11798] tc_dump_action: action bad kind [ 232.455207][T11798] openvswitch: netlink: IP tunnel dst address not specified [ 232.546624][T11811] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 232.831439][T11823] sit0: entered promiscuous mode [ 232.845682][T11823] sit0: entered allmulticast mode [ 233.500806][T11856] syzkaller0: entered promiscuous mode [ 233.536039][T11856] syzkaller0: entered allmulticast mode [ 233.910655][T11878] netlink: 'syz.4.1696': attribute type 1 has an invalid length. [ 234.064287][T11886] netlink: 'syz.4.1696': attribute type 10 has an invalid length. [ 234.266544][T11878] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.279146][T11902] __nla_validate_parse: 8 callbacks suppressed [ 234.279163][T11902] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1704'. [ 234.351133][T11886] dummy0: entered promiscuous mode [ 234.404512][T11896] netlink: 'syz.1.1703': attribute type 2 has an invalid length. [ 234.624442][T11918] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1706'. [ 234.927794][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 234.973885][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 236.038836][T11975] netlink: 'syz.4.1728': attribute type 1 has an invalid length. [ 236.275057][T11990] x_tables: duplicate underflow at hook 1 [ 236.829655][T12013] netlink: 'syz.0.1738': attribute type 7 has an invalid length. [ 236.881521][T12013] netlink: 'syz.0.1738': attribute type 7 has an invalid length. [ 237.613338][T12040] vlan3: entered promiscuous mode [ 237.638922][T12040] hsr0: entered promiscuous mode [ 237.671601][T12051] x_tables: duplicate underflow at hook 1 [ 237.682182][T12040] vlan3: entered allmulticast mode [ 237.709446][T12040] hsr0: entered allmulticast mode [ 237.749688][T12040] hsr_slave_0: entered allmulticast mode [ 237.785193][T12040] hsr_slave_1: entered allmulticast mode [ 237.917978][T12040] syz.3.1745 (12040) used obsolete PPPIOCDETACH ioctl [ 238.328123][T12073] netlink: zone id is out of range [ 238.346392][T12073] netlink: zone id is out of range [ 238.365239][T12073] netlink: zone id is out of range [ 238.378395][T12073] netlink: zone id is out of range [ 238.410706][T12073] netlink: zone id is out of range [ 238.455501][T12073] netlink: zone id is out of range [ 238.509061][T12073] netlink: zone id is out of range [ 238.561947][T12073] netlink: zone id is out of range [ 238.586712][T12073] netlink: zone id is out of range [ 238.620240][T12073] netlink: zone id is out of range [ 239.534970][T12115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.898463][T12128] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 239.911925][T12128] syzkaller1: linktype set to 823 [ 240.266318][T12138] netlink: 'syz.3.1773': attribute type 1 has an invalid length. [ 240.301310][T12138] netlink: 'syz.3.1773': attribute type 2 has an invalid length. [ 240.312781][T12140] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1774'. [ 240.347882][T12138] netlink: 'syz.3.1773': attribute type 1 has an invalid length. [ 240.825874][ T7474] wlan1: Trigger new scan to find an IBSS to join [ 241.556362][T12197] netlink: 'syz.1.1784': attribute type 10 has an invalid length. [ 241.607163][T12197] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1784'. [ 241.992841][T12213] Bluetooth: MGMT ver 1.23 [ 241.994651][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 242.016299][T12214] netlink: 'syz.3.1788': attribute type 8 has an invalid length. [ 242.080104][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'. [ 242.146895][T12218] netlink: 'syz.3.1788': attribute type 3 has an invalid length. [ 242.154256][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1789'. [ 242.167627][T12218] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1788'. [ 242.490090][T12226] netlink: 'syz.2.1794': attribute type 3 has an invalid length. [ 242.523435][T12226] netlink: 'syz.2.1794': attribute type 1 has an invalid length. [ 242.536912][T12226] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1794'. [ 242.630204][T12233] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 243.796850][ T76] wlan1: Trigger new scan to find an IBSS to join [ 244.989132][T12226] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1794'. [ 244.998745][T12226] tipc: Enabling of bearer rejected, failed to enable media [ 245.008508][T12233] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 245.210036][T12248] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 245.234618][T12248] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1801'. [ 245.915715][T12279] xt_hashlimit: size too large, truncated to 1048576 [ 246.080055][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1810'. [ 246.282331][T12296] netlink: 'syz.1.1814': attribute type 33 has an invalid length. [ 246.544426][T12303] xt_hashlimit: size too large, truncated to 1048576 [ 246.745922][ T8048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.795322][T12316] tipc: Started in network mode [ 246.816664][T12316] tipc: Node identity fbffffffffffffffb6, cluster identity 3 [ 247.015914][T12327] netlink: 'syz.0.1823': attribute type 11 has an invalid length. [ 247.041605][T12327] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1823'. [ 247.477103][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 247.818594][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 247.830877][T12353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1830'. [ 247.846490][ T3367] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 248.115378][T12365] netlink: 'syz.0.1834': attribute type 29 has an invalid length. [ 248.866863][T12391] netlink: 'syz.3.1839': attribute type 49 has an invalid length. [ 249.004705][T12391] ip6gretap0: entered promiscuous mode [ 249.010666][T12391] ip6gretap0: entered allmulticast mode [ 249.105728][T12394] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 250.561661][T12343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.832723][T12398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1841'. [ 251.240780][T12414] sctp: [Deprecated]: syz.2.1847 (pid 12414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.240780][T12414] Use struct sctp_sack_info instead [ 251.341706][T12417] sctp: [Deprecated]: syz.2.1847 (pid 12417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.341706][T12417] Use struct sctp_sack_info instead [ 251.432513][T12414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.762074][T12426] erspan0: entered promiscuous mode [ 251.786168][T12426] erspan0: entered allmulticast mode [ 251.797125][T12431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.005581][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 252.169915][T12402] net_ratelimit: 820 callbacks suppressed [ 252.169935][T12402] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 252.325841][T12447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1856'. [ 253.762948][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'. [ 253.774127][T12503] syzkaller0: entered promiscuous mode [ 253.781490][T12503] syzkaller0: entered allmulticast mode [ 253.937673][T12510] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1864'. [ 255.091049][T12454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.563870][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1870'. [ 255.585372][T12530] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1870'. [ 255.598303][T12530] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1870'. [ 255.631422][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.952431][T12553] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 255.983379][T12553] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 256.442095][T12572] netlink: 'syz.2.1879': attribute type 4 has an invalid length. [ 256.767554][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 256.986098][T12593] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1887'. [ 256.995401][T12593] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1887'. [ 257.313676][T12601] __nla_validate_parse: 1 callbacks suppressed [ 257.313721][T12601] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1888'. [ 257.361985][T12607] netlink: 'syz.3.1890': attribute type 178 has an invalid length. [ 257.432150][T12610] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1891'. [ 257.458032][T12609] gre1: entered promiscuous mode [ 257.638890][T12619] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1893'. [ 257.928991][T12634] IPVS: set_ctl: invalid protocol: 103 172.30.0.2:20000 [ 258.214547][T12641] bond0: left promiscuous mode [ 258.247721][T12641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.297712][T12644] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1900'. [ 258.362481][T12644] netlink: 'syz.2.1900': attribute type 12 has an invalid length. [ 258.395466][T12644] netlink: 'syz.2.1900': attribute type 29 has an invalid length. [ 258.414111][T12644] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1900'. [ 258.546578][T12656] FAULT_INJECTION: forcing a failure. [ 258.546578][T12656] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 258.577967][T12656] CPU: 1 UID: 0 PID: 12656 Comm: syz.3.1905 Not tainted syzkaller #0 PREEMPT(full) [ 258.577992][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.578003][T12656] Call Trace: [ 258.578011][T12656] [ 258.578018][T12656] dump_stack_lvl+0xe8/0x150 [ 258.578045][T12656] should_fail_ex+0x40c/0x560 [ 258.578069][T12656] _copy_from_iter+0x1d3/0x1660 [ 258.578092][T12656] ? rcu_is_watching+0x15/0xb0 [ 258.578118][T12656] ? __pfx__copy_from_iter+0x10/0x10 [ 258.578134][T12656] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 258.578167][T12656] ? netlink_sendmsg+0x650/0xb40 [ 258.578191][T12656] ? skb_put+0x112/0x210 [ 258.578219][T12656] netlink_sendmsg+0x6c0/0xb40 [ 258.578251][T12656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.578280][T12656] ? aa_sock_msg_perm+0xf1/0x1b0 [ 258.578306][T12656] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.578329][T12656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.578356][T12656] ____sys_sendmsg+0x9b9/0xa20 [ 258.578382][T12656] ? __might_fault+0xaf/0x130 [ 258.578409][T12656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.578443][T12656] ? import_iovec+0x73/0xa0 [ 258.578467][T12656] ___sys_sendmsg+0x2a5/0x360 [ 258.578490][T12656] ? __lock_acquire+0x683/0x2cd0 [ 258.578513][T12656] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.578570][T12656] ? __fget_files+0x2a/0x420 [ 258.578590][T12656] ? __fget_files+0x3a2/0x420 [ 258.578621][T12656] __x64_sys_sendmsg+0x1bd/0x2a0 [ 258.578649][T12656] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.578683][T12656] ? __pfx_ksys_write+0x10/0x10 [ 258.578715][T12656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.578734][T12656] do_syscall_64+0x174/0x580 [ 258.578758][T12656] ? trace_irq_disable+0x3b/0x140 [ 258.578782][T12656] ? clear_bhb_loop+0x40/0x90 [ 258.578804][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.578820][T12656] RIP: 0033:0x7fe4ba79ce59 [ 258.578836][T12656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.578850][T12656] RSP: 002b:00007fe4bb6d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.578870][T12656] RAX: ffffffffffffffda RBX: 00007fe4baa15fa0 RCX: 00007fe4ba79ce59 [ 258.578882][T12656] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 258.578894][T12656] RBP: 00007fe4bb6d9090 R08: 0000000000000000 R09: 0000000000000000 [ 258.578905][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.578915][T12656] R13: 00007fe4baa16038 R14: 00007fe4baa15fa0 R15: 00007ffe40690aa8 [ 258.578944][T12656] [ 259.203117][T12675] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1910'. [ 259.645483][T12687] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1914'. [ 260.448404][T12708] ip6gre1: entered allmulticast mode [ 260.804789][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1929'. [ 260.935034][T12742] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 261.171032][T12744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.227387][T12747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1934'. [ 261.241596][T12748] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1933'. [ 261.511569][T12755] bond7: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 261.532608][T12755] bond7 (unregistering): Released all slaves [ 262.304025][T12737] infiniband syz2: set down [ 262.319116][T12737] infiniband syz2: added ipvlan0 [ 262.410997][T12737] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 262.451042][T12737] infiniband syz2: Couldn't open port 1 [ 262.494316][T12737] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 262.537230][T12737] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 262.603248][T12737] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 262.723501][T12800] __nla_validate_parse: 3 callbacks suppressed [ 262.723521][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1948'. [ 262.914995][T12737] RDS/IB: syz2: added [ 262.937352][T12737] smc: adding ib device syz2 with port count 1 [ 262.946189][T12737] smc: ib device syz2 port 1 has no pnetid [ 263.370458][T12816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 263.475583][T12821] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1952'. [ 263.791230][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 263.929996][T12827] 8021q: adding VLAN 0 to HW filter on device bond7 [ 263.980372][T12827] bond7 (unregistering): Released all slaves [ 264.410091][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1956'. [ 264.605330][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1956'. [ 265.011892][T12872] syzkaller0: entered promiscuous mode [ 265.040791][T12872] syzkaller0: entered allmulticast mode [ 265.274282][T12879] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1962'. [ 265.601165][T12893] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1966'. [ 265.881016][T12901] ip6tnl2: entered promiscuous mode [ 266.256865][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 266.802347][T12931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1976'. [ 266.926510][T12940] bridge0: port 3(ipvlan0) entered blocking state [ 266.942635][T12940] bridge0: port 3(ipvlan0) entered disabled state [ 266.958717][T12940] ipvlan0: entered allmulticast mode [ 266.988636][T12940] bridge0: entered allmulticast mode [ 267.063559][T12940] ipvlan0: left allmulticast mode [ 267.105792][T12940] bridge0: left allmulticast mode [ 268.092282][T12970] tipc: Invalid UDP bearer configuration [ 268.095953][T12970] tipc: Enabling of bearer rejected, failed to enable media [ 268.137594][T12971] tipc: Invalid UDP bearer configuration [ 268.137647][T12971] tipc: Enabling of bearer rejected, failed to enable media [ 268.432008][T12974] __nla_validate_parse: 1 callbacks suppressed [ 268.432026][T12974] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1989'. [ 268.716977][T12977] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1990'. [ 268.753971][T12981] xt_hashlimit: size too large, truncated to 1048576 [ 268.892858][T12984] xt_hashlimit: size too large, truncated to 1048576 [ 269.170765][T12994] bridge0: port 1(veth1_to_bridge) entered blocking state [ 269.230893][T12994] bridge0: port 1(veth1_to_bridge) entered disabled state [ 269.281195][T12994] veth1_to_bridge: entered allmulticast mode [ 269.327111][T12994] veth1_to_bridge: entered promiscuous mode [ 269.372256][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 269.410985][T13001] netlink: 'syz.3.1999': attribute type 27 has an invalid length. [ 269.441947][T13001] netlink: 'syz.3.1999': attribute type 4 has an invalid length. [ 269.487021][T13001] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1999'. [ 269.993272][T13031] netlink: 'syz.0.2005': attribute type 23 has an invalid length. [ 270.260547][T13044] syzkaller0: entered promiscuous mode [ 270.284958][T13044] syzkaller0: entered allmulticast mode [ 270.492395][T13054] x_tables: unsorted entry at hook 2 [ 270.526920][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 270.561669][T13054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2011'. [ 270.766818][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2014'. [ 270.894017][T13060] bond7 (unregistering): Released all slaves [ 271.114684][T13076] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 271.880788][T13100] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2027'. [ 271.921571][T13100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 271.954043][T13103] netlink: 'syz.0.2028': attribute type 5 has an invalid length. [ 271.999515][T13106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2027'. [ 272.231107][T13108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.589818][T13116] xt_hashlimit: size too large, truncated to 1048576 [ 273.300862][T13142] bond7: (slave gre0): Device is not bonding slave [ 273.323620][T13142] bond7: option active_slave: invalid value (gre0) [ 273.342419][T13142] bond7 (unregistering): Released all slaves [ 273.394676][T13137] netlink: 'syz.2.2040': attribute type 8 has an invalid length. [ 273.927722][T13171] __nla_validate_parse: 4 callbacks suppressed [ 273.927750][T13171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2050'. [ 274.067199][T13183] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2052'. [ 274.159561][T13186] netlink: 'syz.2.2053': attribute type 21 has an invalid length. [ 274.399752][T13186] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 274.482329][T13186] bond4 (unregistering): Released all slaves [ 274.594044][T13196] netdevsim netdevsim3 : renamed from netdevsim0 [ 274.866177][T13210] netlink: 'syz.2.2058': attribute type 2 has an invalid length. [ 275.225368][T13225] xt_hashlimit: size too large, truncated to 1048576 [ 275.422688][T13236] veth0: entered promiscuous mode [ 275.652079][T13238] veth0: left promiscuous mode [ 276.698319][T13284] syzkaller0: entered promiscuous mode [ 276.706774][T13284] syzkaller0: entered allmulticast mode [ 277.053030][T13307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2080'. [ 278.910347][T13256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.246318][T13314] xt_hashlimit: size too large, truncated to 1048576 [ 279.306511][ T6257] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 280.143284][T13309] macvlan0: entered promiscuous mode [ 280.148648][T13309] macvlan0: entered allmulticast mode [ 280.175516][T13309] batadv_slave_1: entered allmulticast mode [ 280.195075][T13309] batadv_slave_1: entered promiscuous mode [ 280.219879][T13309] team0: Port device macvlan0 added [ 280.245478][T13313] netlink: 'syz.3.2082': attribute type 5 has an invalid length. [ 280.304102][T13323] syz_tun: entered allmulticast mode [ 280.329143][T13323] syz_tun: left allmulticast mode [ 280.456371][T13328] netlink: 'syz.2.2086': attribute type 4 has an invalid length. [ 280.578472][T13331] pim6reg527: entered allmulticast mode [ 280.641569][T13334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2087'. [ 280.692181][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'. [ 280.717771][T13338] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2089'. [ 280.729048][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 280.751662][T13338] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2089'. [ 280.786721][T13344] netlink: 'syz.0.2090': attribute type 1 has an invalid length. [ 280.810353][T13345] IPVS: length: 86 != 8 [ 281.006572][T13352] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 281.074928][T13344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.220995][T13354] bond4: (slave geneve4): making interface the new active one [ 281.227362][T13361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2095'. [ 281.250181][T13354] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 281.261446][T13358] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2095'. [ 281.608081][T13378] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2098'. [ 281.619926][T13376] openvswitch: netlink: Multiple metadata blocks provided [ 281.831982][T13374] syzkaller0: entered promiscuous mode [ 281.878967][T13374] syzkaller0: entered allmulticast mode [ 282.408696][T13405] sctp: [Deprecated]: syz.2.2110 (pid 13405) Use of int in max_burst socket option. [ 282.408696][T13405] Use struct sctp_assoc_value instead [ 283.275623][T13437] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2115'. [ 283.872600][T13462] netlink: 'syz.4.2122': attribute type 1 has an invalid length. [ 283.892245][T13466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2123'. [ 283.966058][T13462] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.642741][T13521] syzkaller0: entered promiscuous mode [ 285.658774][T13521] syzkaller0: entered allmulticast mode [ 285.668885][T13531] syzkaller0: entered promiscuous mode [ 285.676267][T13531] syzkaller0: entered allmulticast mode [ 286.456376][T13547] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 288.564905][T13523] tipc: Enabled bearer , priority 0 [ 288.626377][T13522] tipc: Resetting bearer [ 288.668877][T13522] tipc: Disabling bearer [ 288.745791][T13546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 288.935989][T13555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2149'. [ 288.982167][T13553] syzkaller0: entered promiscuous mode [ 289.008294][T13553] syzkaller0: entered allmulticast mode [ 289.045185][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 289.068798][T13553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2148'. [ 289.111846][T13562] sctp: [Deprecated]: syz.3.2150 (pid 13562) Use of int in maxseg socket option. [ 289.111846][T13562] Use struct sctp_assoc_value instead [ 289.737464][T13585] netlink: 'syz.4.2154': attribute type 9 has an invalid length. [ 290.205093][T13602] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2159'. [ 290.645655][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'. [ 290.813347][T13614] bond4: entered promiscuous mode [ 290.847070][T13614] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.959436][T13627] bond8 (unregistering): Released all slaves [ 291.116813][T13632] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2167'. [ 291.302389][T13631] syzkaller0: entered promiscuous mode [ 291.308384][T13631] syzkaller0: entered allmulticast mode [ 291.354401][T13641] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2170'. [ 291.626645][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 291.653995][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 294.359179][T13656] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2173'. [ 294.640731][T13666] netlink: 'syz.1.2178': attribute type 178 has an invalid length. [ 294.657731][T13670] sit2: entered promiscuous mode [ 294.664414][T13670] sit2: entered allmulticast mode [ 294.900624][T13674] netlink: 'syz.3.2180': attribute type 9 has an invalid length. [ 294.982873][T13676] syzkaller1: entered promiscuous mode [ 294.999446][T13676] syzkaller1: entered allmulticast mode [ 295.661897][T13692] tipc: Enabling of bearer rejected, already enabled [ 295.672853][T13712] netlink: 'syz.3.2190': attribute type 1 has an invalid length. [ 295.716305][T13716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.794759][T13712] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.899221][T13710] syzkaller0: entered promiscuous mode [ 295.914631][T13710] syzkaller0: entered allmulticast mode [ 296.041176][T13724] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2192'. [ 296.053769][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2192'. [ 296.072023][T13724] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2192'. [ 296.085649][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2192'. [ 296.097142][T13724] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2192'. [ 296.110880][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2192'. [ 296.149715][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2194'. [ 296.221928][T13733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2194'. [ 299.176942][T13747] tipc: Enabled bearer , priority 10 [ 299.682274][T13778] netdevsim netdevsim0 : renamed from netdevsim0 [ 300.055615][T13798] IPVS: Error connecting to the multicast addr [ 300.107942][T13802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2208'. [ 300.147362][T13801] netlink: 'syz.4.2207': attribute type 3 has an invalid length. [ 300.281361][T13807] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2211'. [ 300.474767][T13805] syzkaller0: entered promiscuous mode [ 300.480383][T13805] syzkaller0: entered allmulticast mode [ 300.654334][T13825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2217'. [ 300.729602][T13831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2214'. [ 304.039627][T13853] netlink: 'syz.4.2221': attribute type 29 has an invalid length. [ 304.068823][T13858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.164481][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'. [ 304.476355][T13867] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.574725][T13867] bond6 (unregistering): Released all slaves [ 304.801087][T13888] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2227'. [ 304.970666][T13892] ip6t_srh: unknown srh match flags 4000 [ 305.014809][T13875] syzkaller0: entered promiscuous mode [ 305.036009][T13875] syzkaller0: entered allmulticast mode [ 305.065383][T13888] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 308.042065][T13897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.476198][ T3367] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 308.485028][ T3367] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 308.496542][T13938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.655720][T13930] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 308.664235][T13949] netlink: 'syz.1.2234': attribute type 10 has an invalid length. [ 308.692627][T13930] team0: Port device batadv1 added [ 308.700962][T13953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2236'. [ 309.041265][T13963] netlink: 'syz.4.2239': attribute type 11 has an invalid length. [ 309.062728][T13963] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2239'. [ 309.112925][T13963] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2239'. [ 309.529481][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2243'. [ 309.550057][T13987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.638605][T13987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2247'. [ 309.836778][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'. [ 310.203878][T14018] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 310.375422][T14024] netlink: zone id is out of range [ 310.395346][T14024] netlink: zone id is out of range [ 310.406091][T14025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2255'. [ 310.419512][T14024] netlink: zone id is out of range [ 310.429090][T14027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2257'. [ 310.439871][T14024] netlink: zone id is out of range [ 310.445654][T14024] netlink: zone id is out of range [ 310.466736][T14024] netlink: zone id is out of range [ 310.498585][T14024] netlink: zone id is out of range [ 310.520463][T14024] netlink: zone id is out of range [ 310.551034][T14024] netlink: zone id is out of range [ 310.894254][T14042] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2261'. [ 311.250587][T14062] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 311.270011][T14062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 311.281290][T14062] netlink: 'syz.1.2265': attribute type 7 has an invalid length. [ 311.290232][T14062] netlink: 'syz.1.2265': attribute type 8 has an invalid length. [ 311.323913][T14062] gretap0: entered promiscuous mode [ 311.332902][T14062] gretap0: left promiscuous mode [ 311.449818][T14072] syzkaller0: entered promiscuous mode [ 311.466465][T14072] syzkaller0: entered allmulticast mode [ 311.496506][T14071] tipc: Enabled bearer , priority 0 [ 311.596921][T14071] tipc: Resetting bearer [ 311.686191][T14071] tipc: Disabling bearer [ 311.951648][T14090] syzkaller0: entered promiscuous mode [ 311.958620][T14090] syzkaller0: entered allmulticast mode [ 311.972850][T14090] netlink: 'syz.4.2273': attribute type 21 has an invalid length. [ 312.715909][T14084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.842249][T14094] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 312.911002][T14124] 8021q: VLANs not supported on sit0 [ 312.962612][T14124] 8021q: VLANs not supported on sit0 [ 313.012749][T14126] FAULT_INJECTION: forcing a failure. [ 313.012749][T14126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.061012][T14126] CPU: 1 UID: 0 PID: 14126 Comm: syz.2.2284 Not tainted syzkaller #0 PREEMPT(full) [ 313.061038][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.061052][T14126] Call Trace: [ 313.061059][T14126] [ 313.061072][T14126] dump_stack_lvl+0xe8/0x150 [ 313.061097][T14126] should_fail_ex+0x40c/0x560 [ 313.061121][T14126] _copy_from_iter+0x1d3/0x1660 [ 313.061140][T14126] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 313.061170][T14126] ? __pfx_policy_nodemask+0x10/0x10 [ 313.061198][T14126] ? unwind_next_frame+0x8f/0x2550 [ 313.061219][T14126] ? __pfx__copy_from_iter+0x10/0x10 [ 313.061240][T14126] ? alloc_pages_mpol+0x24a/0x380 [ 313.061275][T14126] copy_page_from_iter+0x219/0x2d0 [ 313.061298][T14126] tun_get_user+0x1bd0/0x4350 [ 313.061331][T14126] ? tun_get_user+0x718/0x4350 [ 313.061368][T14126] ? aa_file_perm+0x4ed/0x15f0 [ 313.061385][T14126] ? __pfx_tun_get_user+0x10/0x10 [ 313.061412][T14126] ? __lock_acquire+0x683/0x2cd0 [ 313.061444][T14126] ? ref_tracker_alloc+0x341/0x4b0 [ 313.061462][T14126] ? get_pid_task+0x20/0x1f0 [ 313.061485][T14126] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 313.061506][T14126] ? tun_get+0x1c/0x2f0 [ 313.061530][T14126] ? tun_get+0x1c/0x2f0 [ 313.061558][T14126] ? tun_get+0x1c/0x2f0 [ 313.061583][T14126] ? tun_get+0x1c/0x2f0 [ 313.061609][T14126] tun_chr_write_iter+0x113/0x200 [ 313.061637][T14126] vfs_write+0x612/0xba0 [ 313.061668][T14126] ? __pfx_vfs_write+0x10/0x10 [ 313.061702][T14126] ? __fget_files+0x2a/0x420 [ 313.061731][T14126] ksys_write+0x150/0x270 [ 313.061758][T14126] ? __pfx_ksys_write+0x10/0x10 [ 313.061789][T14126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.061808][T14126] do_syscall_64+0x174/0x580 [ 313.061826][T14126] ? trace_irq_disable+0x3b/0x140 [ 313.061852][T14126] ? clear_bhb_loop+0x40/0x90 [ 313.061880][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.061898][T14126] RIP: 0033:0x7fdd1655d68e [ 313.061916][T14126] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.061931][T14126] RSP: 002b:00007fdd1742efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 313.061951][T14126] RAX: ffffffffffffffda RBX: 00007fdd1742f6c0 RCX: 00007fdd1655d68e [ 313.061964][T14126] RDX: 000000000000004e RSI: 00002000000006c0 RDI: 00000000000000c8 [ 313.061976][T14126] RBP: 00007fdd1742f090 R08: 0000000000000000 R09: 0000000000000000 [ 313.061987][T14126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.061997][T14126] R13: 00007fdd16816038 R14: 00007fdd16815fa0 R15: 00007ffe8ac05878 [ 313.062026][T14126] [ 313.100322][T14132] xt_ecn: cannot match TCP bits for non-tcp packets [ 313.781863][T14155] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 313.861883][T14155] __nla_validate_parse: 4 callbacks suppressed [ 313.861922][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2293'. [ 313.937865][T14155] netlink: 'syz.0.2293': attribute type 58 has an invalid length. [ 313.992106][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2293'. [ 314.006431][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2293'. [ 314.166052][T14169] SET target dimension over the limit! [ 314.188863][T14171] Bluetooth: hci1: too big key_count value 32778 [ 314.312999][T14177] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20004 [ 314.388143][T14174] : entered promiscuous mode [ 314.421538][T14167] netlink: 'syz.4.2300': attribute type 3 has an invalid length. [ 314.709749][T14188] netlink: 'syz.3.2309': attribute type 49 has an invalid length. [ 314.749992][T14191] macvtap0: entered promiscuous mode [ 314.756885][T14191] bond0: entered promiscuous mode [ 314.762212][T14191] bond_slave_0: entered promiscuous mode [ 314.769457][T14191] bond_slave_1: entered promiscuous mode [ 314.791866][T14192] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2310'. [ 314.794208][T14191] macvtap0: entered allmulticast mode [ 314.823582][T14191] bond0: entered allmulticast mode [ 314.830626][T14198] net_ratelimit: 5 callbacks suppressed [ 314.830642][T14198] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 314.831219][T14191] bond_slave_0: entered allmulticast mode [ 314.854186][T14191] bond_slave_1: entered allmulticast mode [ 314.897245][T14191] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 315.044253][T14204] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 315.188044][T14211] sch_fq: defrate 0 ignored. [ 315.531074][T14223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2318'. [ 315.582223][T14223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2318'. [ 315.605760][T14228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.606761][T14223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2318'. [ 315.668273][T14223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2318'. [ 315.709714][T14223] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2318'. [ 315.805008][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 315.888150][T14208] 8021q: VLANs not supported on ip6gre0 [ 316.912794][T14281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.972839][T14284] nbd: couldn't find a device at index 0 [ 317.000440][T14288] nbd: couldn't find a device at index 0 [ 317.071017][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.761537][T14319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.528324][ T8049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.548669][T14349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.575089][ T8049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.601753][T14351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.691943][T14359] IPVS: set_ctl: invalid protocol: 224 224.0.0.2:20004 [ 318.749084][T14365] xt_l2tp: unknown flags: 10 [ 318.772442][T14365] netlink: 'syz.2.2358': attribute type 1 has an invalid length. [ 319.312297][T14391] __nla_validate_parse: 6 callbacks suppressed [ 319.312317][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 319.360812][T14391] netlink: 'syz.2.2367': attribute type 1 has an invalid length. [ 319.382015][T14391] netlink: 'syz.2.2367': attribute type 2 has an invalid length. [ 320.091548][T14426] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 320.249873][T14433] xt_TCPMSS: Only works on TCP SYN packets [ 320.292125][T14433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2379'. [ 320.656171][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 320.690152][T14439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.725933][T14439] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.774088][T14439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.789240][T14416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.000663][T14439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.044703][T14439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.088620][T14439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.127748][T14439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.190132][T14439] veth1_vlan: left promiscuous mode [ 321.218463][T14439] veth0_vlan: left promiscuous mode [ 321.265679][T14439] veth0_vlan: entered promiscuous mode [ 321.300798][T14439] veth1_vlan: entered promiscuous mode [ 321.341198][T14439] 8021q: adding VLAN 0 to HW filter on device  [ 321.369057][T14439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.386303][T14439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.397924][T14439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.418235][T14439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.447331][T14439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 321.457144][T14439] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 321.489311][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2381'. [ 321.516299][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.523535][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.533974][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.541139][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.588087][T10793] team_slave_0: entered promiscuous mode [ 321.595673][T10793] team_slave_1: entered promiscuous mode [ 321.603580][T10793] geneve1: entered promiscuous mode [ 321.615711][T14448] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 321.617410][T14455] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 321.641074][T14466] netlink: 'syz.4.2386': attribute type 29 has an invalid length. [ 321.641087][T10755] syz2: Port: 1 Link ACTIVE [ 321.660830][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 321.727853][ T76] netdevsim netdevsim0 : set [1, 1] type 2 family 0 port 54090 - 0 [ 321.784433][ T76] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 54090 - 0 [ 321.852984][ T76] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 54090 - 0 [ 321.907709][ T76] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 54090 - 0 [ 321.976651][T14478] ipt_REJECT: TCP_RESET invalid for non-tcp [ 321.990759][T14475] sctp: [Deprecated]: syz.1.2389 (pid 14475) Use of int in max_burst socket option deprecated. [ 321.990759][T14475] Use struct sctp_assoc_value instead [ 322.169350][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2391'. [ 322.301517][T14484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2392'. [ 322.344521][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2392'. [ 322.381609][T14488] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 322.436337][T14495] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2395'. [ 322.482262][T14484] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2392'. [ 347.998895][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2399'. [ 348.077205][T14513] tipc: Resetting bearer [ 348.168696][T14513] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 348.210305][T14513] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 348.441878][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 348.571516][T14513] bond6: left promiscuous mode [ 348.617302][T14513] batadv_slave_1: left allmulticast mode [ 348.633598][T14513] batadv_slave_1: left promiscuous mode [ 348.652035][T14513] macvlan0: left promiscuous mode [ 348.673265][T14513] macvlan0: left allmulticast mode [ 348.698235][T14528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.981852][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 349.499418][T14569] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 349.529953][T14557] bond6: entered promiscuous mode [ 350.192676][T14588] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2425'. [ 350.257743][T14588] hsr0: entered allmulticast mode [ 350.280039][T14588] hsr_slave_0: entered allmulticast mode [ 350.301993][T14588] hsr_slave_1: entered allmulticast mode [ 350.427033][T14603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.443402][T14603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.489726][T14603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.502033][T14603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.970431][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2434'. [ 351.120168][T14622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.189729][T14628] sctp: [Deprecated]: syz.2.2436 (pid 14628) Use of int in maxseg socket option. [ 351.189729][T14628] Use struct sctp_assoc_value instead [ 351.279019][T14635] xt_hashlimit: size too large, truncated to 1048576 [ 351.721238][T14641] xt_connbytes: Forcing CT accounting to be enabled [ 354.488594][T14645] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 354.578902][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 354.636890][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2443'. [ 354.881990][T14663] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 354.881990][T14663] Please contact the netfilter-devel mailing list or update your nftables rules. [ 354.935133][T14664] xt_hashlimit: size too large, truncated to 1048576 [ 355.076714][T14675] netlink: 'syz.3.2449': attribute type 10 has an invalid length. [ 355.105658][T14675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2449'. [ 355.258051][T14675] team0: Port device geneve1 added [ 355.292373][T14679] netlink: 'syz.0.2451': attribute type 14 has an invalid length. [ 355.309748][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2451'. [ 355.451212][ T135] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 355.474667][ T1056] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.526806][ T1056] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.621349][ T1056] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.846996][T14695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2455'. [ 355.938485][T14696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2455'. [ 356.167714][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2459'. [ 356.469439][T14721] xt_hashlimit: size too large, truncated to 1048576 [ 356.736204][T14729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2466'. [ 356.818273][T14722] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 356.868606][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'. [ 357.389138][T14748] syzkaller1: entered promiscuous mode [ 357.407686][T14748] syzkaller1: entered allmulticast mode [ 357.450514][T14751] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2470'. [ 357.761563][T14775] nft_compat: unsupported protocol 0 [ 357.908464][T14764] bond7: (slave gre0): Device is not bonding slave [ 357.930935][T14764] bond7: option active_slave: invalid value (gre0) [ 357.958758][T14764] bond7 (unregistering): Released all slaves [ 357.988149][T14783] netlink: 'syz.4.2476': attribute type 10 has an invalid length. [ 358.066532][T14783] syz_tun: entered promiscuous mode [ 358.109240][T14783] syz_tun: entered allmulticast mode [ 358.143085][T14783] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 358.204500][T14788] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 358.990494][T14814] x_tables: unsorted underflow at hook 1 [ 360.094998][T14846] __nla_validate_parse: 3 callbacks suppressed [ 360.095087][T14846] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2489'. [ 360.298027][T14856] netlink: 'syz.1.2492': attribute type 10 has an invalid length. [ 360.643010][T14865] netlink: 'syz.2.2494': attribute type 15 has an invalid length. [ 360.867916][T14840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.185520][T14874] atomic_op ffff88807e651198 conn xmit_atomic 0000000000000000 [ 361.252307][T14875] atomic_op ffff888055fa5198 conn xmit_atomic 0000000000000000 [ 361.333599][T14878] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 361.357509][T14882] bridge_slave_0: Caught tx_queue_len zero misconfig [ 361.672699][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2503'. [ 361.697811][T14899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2504'. [ 362.748449][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2518'. [ 362.758240][T14943] openvswitch: netlink: Key type 775 is out of range max 32 [ 362.878920][T14950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2519'. [ 363.095307][T14956] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 363.128027][T14956] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2522'. [ 363.533327][T14976] xt_hashlimit: size too large, truncated to 1048576 [ 363.536435][T14978] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2527'. [ 363.564332][T14978] 0ªX¹¦Dö»: renamed from gretap0 [ 363.799409][T14978] 0ªX¹¦Dö»: entered allmulticast mode [ 364.016158][T14984] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.075438][T14984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2528'. [ 364.192466][T14984] 8021q: adding VLAN 0 to HW filter on device bond8 [ 364.232322][T14995] x_tables: duplicate underflow at hook 2 [ 364.284224][T14992] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 364.333809][T14992] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 364.477132][T15006] netem: change failed [ 364.604730][T15012] bridge5: entered allmulticast mode [ 364.698366][T15016] xt_bpf: check failed: parse error [ 364.946316][T15026] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2540'. [ 365.026113][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2539'. [ 365.099688][T15036] netlink: Unknown conntrack attr (0) [ 365.171320][T15044] __nla_validate_parse: 3 callbacks suppressed [ 365.171340][T15044] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2544'. [ 365.189841][T15044] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2544'. [ 365.277821][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 365.295590][T15051] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2544'. [ 365.309664][T15051] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2544'. [ 365.494287][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2545'. [ 365.504407][T15061] openvswitch: netlink: Flow actions attr not present in new flow. [ 365.618732][T15064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2547'. [ 365.664162][T15064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2547'. [ 365.678017][T15064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2547'. [ 365.711744][T15064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2547'. [ 365.798355][T15069] sch_fq: defrate 0 ignored. [ 366.021647][T15073] veth1_to_bond: entered allmulticast mode [ 366.096004][T15075] veth1_to_bond: left allmulticast mode [ 367.850696][T15026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.890061][T15156] bridge0: port 3(veth1_to_bridge) entered blocking state [ 368.899044][T15156] bridge0: port 3(veth1_to_bridge) entered disabled state [ 368.945294][T15156] veth1_to_bridge: entered allmulticast mode [ 368.970235][T15156] veth1_to_bridge: entered promiscuous mode [ 368.978878][T15156] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 368.995059][T15156] bridge0: port 3(veth1_to_bridge) entered blocking state [ 369.003071][T15156] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 369.069953][T15151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.077306][T15151] IPv6: NLM_F_CREATE should be set when creating new route [ 369.114217][T15165] netlink: 'syz.2.2572': attribute type 32 has an invalid length. [ 369.180615][T15165] bond7: Setting coupled_control to off (0) [ 369.921398][T15174] gretap1: entered promiscuous mode [ 371.578840][T15137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.905862][T15186] __nla_validate_parse: 36 callbacks suppressed [ 371.911408][T15186] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2575'. [ 371.990095][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2575'. [ 372.092994][ T7474] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 372.157372][T15196] bond0: Device is already in use. [ 372.186682][T15195] syzkaller0: entered promiscuous mode [ 372.220601][T15195] syzkaller0: entered allmulticast mode [ 372.323425][T15204] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 374.837393][T15182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.296475][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'. [ 375.824519][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2594'. [ 375.990624][T15278] openvswitch: netlink: Message has 8 unknown bytes. [ 376.029620][T15278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.122618][ T8048] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 376.184128][T15284] netlink: 'syz.4.2597': attribute type 1 has an invalid length. [ 376.255380][T15284] 8021q: adding VLAN 0 to HW filter on device bond9 [ 376.494170][T15284] bond9: (slave geneve3): making interface the new active one [ 376.523991][T15284] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 378.506983][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.718954][T15269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.097706][T15323] sctp: [Deprecated]: syz.3.2606 (pid 15323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.097706][T15323] Use struct sctp_sack_info instead [ 379.158099][T15327] bond10: invalid ARP target 0.0.0.0 specified for addition [ 379.169368][T15327] bond10: option arp_ip_target: invalid value (0) [ 379.179430][T15327] bond10 (unregistering): Released all slaves [ 379.246510][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'. [ 379.292997][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2610'. [ 379.306848][T15341] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2609'. [ 379.382706][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2610'. [ 379.448966][T15340] vlan5: entered promiscuous mode [ 379.468853][T15340] erspan0: entered promiscuous mode [ 379.575096][T15343] vlan5: entered promiscuous mode [ 379.720218][T15347] tipc: Enabled bearer , priority 0 [ 379.762732][T15348] syzkaller0: entered promiscuous mode [ 379.781201][T15348] syzkaller0: entered allmulticast mode [ 379.952661][T15347] tipc: Resetting bearer [ 380.023008][T15346] tipc: Resetting bearer [ 380.097808][T15363] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2617'. [ 380.171402][T15346] tipc: Disabling bearer [ 380.257959][T15373] IPVS: set_ctl: invalid protocol: 51 172.20.20.22:20004 [ 380.308731][T15375] netlink: 'syz.3.2615': attribute type 16 has an invalid length. [ 380.386769][T15375] netlink: 'syz.3.2615': attribute type 17 has an invalid length. [ 380.606134][T15383] netlink: 'syz.4.2620': attribute type 11 has an invalid length. [ 380.644357][T15384] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2621'. [ 380.875857][T15398] netlink: 'syz.2.2622': attribute type 15 has an invalid length. [ 380.948549][T15375] tunl0: left promiscuous mode [ 381.034773][T15375] 1ªX¹¦Dö»: left allmulticast mode [ 381.200184][T15408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2624'. [ 381.397845][T15375] netdevsim netdevsim3 : left promiscuous mode [ 381.418727][T15375] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 381.432514][T15375] bridge1: left allmulticast mode [ 381.501458][T15375] vlan2: left allmulticast mode [ 381.507260][T15375] bond0: left allmulticast mode [ 381.522769][T15375] geneve2: left promiscuous mode [ 381.532385][T15375] vlan3: left promiscuous mode [ 381.540230][T15375] hsr0: left promiscuous mode [ 381.545533][T15375] vlan3: left allmulticast mode [ 381.550479][T15375] hsr0: left allmulticast mode [ 381.555929][T15375] hsr_slave_0: left allmulticast mode [ 381.561371][T15375] hsr_slave_1: left allmulticast mode [ 381.568522][T15375] ip6tnl2: left promiscuous mode [ 381.577365][T15375] sit2: left promiscuous mode [ 381.582113][T15375] sit2: left allmulticast mode [ 381.680163][ T6257] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.737359][ T6257] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.782970][ T6257] netdevsim netdevsim3 : unset [1, 1] type 2 family 0 port 46301 - 0 [ 381.834746][ T6257] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.925214][ T6257] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.051339][ T6257] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 46301 - 0 [ 382.466045][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 382.610453][ T6257] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.679266][ T6257] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.758009][ T6257] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 46301 - 0 [ 382.846183][ T6257] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.963431][ T6257] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.089013][ T6257] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 46301 - 0 [ 383.588962][T15424] netlink: 'syz.4.2630': attribute type 5 has an invalid length. [ 383.788398][T15424] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2630'. [ 384.349572][T15433] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2633'. [ 385.545131][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 385.558086][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 385.571137][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 385.584185][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 385.597272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 385.610266][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 385.623326][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 385.632991][T15446] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 385.636346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 385.658339][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 385.671361][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 386.661190][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2640'. [ 386.766452][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2640'. [ 386.841347][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'. [ 387.673500][T15469] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2640'. [ 388.949441][T15482] netlink: 'syz.1.2647': attribute type 2 has an invalid length. [ 390.498575][T15498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2650'. [ 390.554561][ C1] net_ratelimit: 5171 callbacks suppressed [ 390.554667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 390.574324][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 390.588007][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 390.601670][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 390.615363][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 390.631056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 390.644858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 390.658498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 390.672235][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 390.685900][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 390.968972][T15503] IPVS: set_ctl: invalid protocol: 45588 224.0.0.2:20000 [ 391.845778][T15513] netlink: 'syz.4.2657': attribute type 1 has an invalid length. [ 391.854886][T15515] netlink: 'syz.2.2658': attribute type 1 has an invalid length. [ 392.380305][T15513] bond10: entered promiscuous mode [ 392.423946][T15513] 8021q: adding VLAN 0 to HW filter on device bond10 [ 392.504531][T15515] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 392.648617][T15519] ip6gretap1: entered promiscuous mode [ 392.712112][T15532] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 392.736016][T15519] ip6gretap1: entered allmulticast mode [ 393.661764][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 393.817911][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2661'. [ 393.959821][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'. [ 394.080684][T15542] tipc: Enabling of bearer rejected, already enabled [ 394.193677][T15545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2664'. [ 394.875464][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 394.972233][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2661'. [ 395.085012][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'. [ 395.564412][ C1] net_ratelimit: 2350 callbacks suppressed [ 395.564437][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 395.585338][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 395.599688][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 395.614184][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 395.628482][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 395.642915][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 395.658188][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 395.672582][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 395.686930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 395.701325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 400.574434][ C1] net_ratelimit: 2102 callbacks suppressed [ 400.574456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 400.594630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 400.609070][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 400.623466][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 400.638353][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 400.653480][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 400.667816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 400.682227][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 400.696609][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 400.711002][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 401.807840][ C1] sched: DL replenish lagged too much [ 404.274432][T15601] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2676'. [ 404.338885][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 404.499284][T15602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2677'. [ 404.676180][T15599] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 404.842349][T15599] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 405.583845][ C1] net_ratelimit: 2026 callbacks suppressed [ 405.583866][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 405.604168][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 405.618528][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 405.632914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 405.647335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 405.662485][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 405.676868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 405.691317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 405.705750][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 405.720245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 405.790911][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 405.939981][T15602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2677'. [ 406.365718][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2680'. [ 406.644748][T15619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2682'. [ 407.083581][T15624] netlink: 'syz.2.2683': attribute type 12 has an invalid length. [ 407.171043][T15624] netlink: 'syz.2.2683': attribute type 29 has an invalid length. [ 407.345926][T15624] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2683'. [ 407.449512][T15624] netlink: 'syz.2.2683': attribute type 3 has an invalid length. [ 407.573714][T15624] netlink: 'syz.2.2683': attribute type 2 has an invalid length. [ 407.698323][T15624] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2683'. [ 407.890587][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 408.937127][T15642] vlan5: entered allmulticast mode [ 408.976089][T15647] netlink: 'syz.2.2688': attribute type 30 has an invalid length. [ 410.594715][ C1] net_ratelimit: 2037 callbacks suppressed [ 410.594736][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 410.615438][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 410.630242][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 410.645104][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 410.664556][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 410.679724][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 410.694776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 410.709866][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 410.724919][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 410.741486][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 411.130580][T15676] netlink: 'syz.1.2693': attribute type 1 has an invalid length. [ 412.286023][T15676] bond7: entered promiscuous mode [ 412.374277][T15676] 8021q: adding VLAN 0 to HW filter on device bond7 [ 412.655501][T15681] : renamed from bond0 [ 413.181793][T15674] bond7: (slave bridge6): making interface the new active one [ 413.249426][T15674] bridge6: entered promiscuous mode [ 413.391588][T15674] bridge6: left promiscuous mode [ 413.731764][T15707] __nla_validate_parse: 3 callbacks suppressed [ 413.731816][T15707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2702'. [ 415.604127][ C1] net_ratelimit: 2016 callbacks suppressed [ 415.604148][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 415.625047][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 415.640134][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 415.654541][ T29] audit: type=1804 audit(1781343600.687:9): pid=15737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2705" name="/newroot/522/cgroup.controllers" dev="tmpfs" ino=2686 res=1 errno=0 [ 415.655255][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 415.693193][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 415.708189][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 415.723237][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 415.738166][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 415.753165][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 415.768093][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 415.848303][ T29] audit: type=1800 audit(1781343600.697:10): pid=15737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2705" name="cgroup.controllers" dev="tmpfs" ino=2686 res=0 errno=0 [ 417.486141][T15778] syzkaller1: entered promiscuous mode [ 417.628090][T15778] syzkaller1: entered allmulticast mode [ 417.641663][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2712'. [ 417.947940][T15797] netlink: 'syz.1.2713': attribute type 1 has an invalid length. [ 418.108910][T15797] netlink: 'syz.1.2713': attribute type 2 has an invalid length. [ 420.613270][ C1] net_ratelimit: 1923 callbacks suppressed [ 420.613288][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 420.633465][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 420.647992][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 420.663211][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 420.677695][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 420.692318][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 420.708267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 420.722634][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 420.737039][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 420.751496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 424.086866][T15851] netlink: 'syz.3.2722': attribute type 9 has an invalid length. [ 424.883045][T15857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2723'. [ 425.045622][T15859] C: renamed from lo (while UP) [ 425.624704][ C1] net_ratelimit: 1990 callbacks suppressed [ 425.624726][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 425.645548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 425.652263][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2726'. [ 425.660463][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 425.682110][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 425.697032][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 425.714291][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 425.729312][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 425.744292][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 425.759224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 425.774252][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 426.876360][T15882] SET target dimension over the limit! [ 426.911088][T15884] 8021q: VLANs not supported on ip6tnl0 [ 427.359332][T15892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2733'. [ 427.396916][T15892] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2733'. [ 427.628011][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2733'. [ 427.731143][T15895] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 427.829283][T15895] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2734'. [ 427.922924][T15895] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2734'. [ 427.959923][T15895] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 427.993452][T15901] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 428.001482][T15895] netlink: 618 bytes leftover after parsing attributes in process `syz.1.2734'. [ 429.408614][T15919] netlink: 'syz.0.2740': attribute type 7 has an invalid length. [ 429.798599][T15921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2741'. [ 429.839803][T15921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2741'. [ 430.299441][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.321660][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.338260][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.350193][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.358787][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.485819][T15908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.636448][ C1] net_ratelimit: 1951 callbacks suppressed [ 430.636469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 430.656733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 430.671207][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 430.685589][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 430.700025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 430.715362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 430.729705][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 430.744366][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 430.758928][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 430.773382][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 432.551686][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2747'. [ 432.669970][ T4949] Bluetooth: hci5: command tx timeout [ 432.708772][T15955] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2747'. [ 433.120723][T15949] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2746'. [ 433.776907][T15961] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2749'. [ 434.743827][ T4949] Bluetooth: hci5: command tx timeout [ 435.643505][ C1] net_ratelimit: 2009 callbacks suppressed [ 435.643524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 435.664514][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 435.679094][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 435.693651][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 435.708155][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 435.722698][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 435.737878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 435.752474][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 435.767050][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 435.781561][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 436.825113][ T4949] Bluetooth: hci5: command tx timeout [ 437.246467][T16007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2756'. [ 438.903362][ T4949] Bluetooth: hci5: command tx timeout [ 439.969494][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.653795][ C1] net_ratelimit: 1947 callbacks suppressed [ 440.653816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 440.674091][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 440.688602][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 440.702998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 440.718325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 440.732773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 440.748098][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 440.762528][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 440.777083][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 440.791582][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 443.662242][T16076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2773'. [ 444.499747][T16082] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2775'. [ 444.650025][T16083] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2774'. [ 445.663659][ C1] net_ratelimit: 1993 callbacks suppressed [ 445.663679][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 445.683822][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 445.698194][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 445.712679][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 445.727118][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 445.741552][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 445.756577][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 445.770539][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 445.784881][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 445.799236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 445.881365][T16091] tipc: Enabling of bearer rejected, failed to enable media [ 449.818264][T16124] netlink: 'syz.3.2788': attribute type 2 has an invalid length. [ 450.470551][T16126] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2787'. [ 450.524358][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 450.673501][ C1] net_ratelimit: 2059 callbacks suppressed [ 450.673521][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 450.693656][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 450.706574][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 450.722749][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 450.735625][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 450.749727][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 450.762576][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 450.776716][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 450.789619][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 450.803732][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 450.879219][T15922] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.887610][T15922] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.896488][T15922] bridge_slave_0: entered allmulticast mode [ 450.908947][T15922] bridge_slave_0: entered promiscuous mode [ 451.049651][T15922] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.121870][T15922] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.180039][T15922] bridge_slave_1: entered allmulticast mode [ 451.283035][T15922] bridge_slave_1: entered promiscuous mode [ 452.566587][T15922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.832486][T15922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.656945][T16175] netlink: 'syz.3.2798': attribute type 4 has an invalid length. [ 453.730513][T16177] netlink: 'syz.3.2798': attribute type 4 has an invalid length. [ 453.859565][T15922] team0: Port device team_slave_0 added [ 453.916903][T16174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2800'. [ 454.298211][T15922] team0: Port device team_slave_1 added [ 454.857863][T16180] bridge6: entered promiscuous mode [ 454.903680][T16180] bridge6: entered allmulticast mode [ 455.293819][T15922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.372921][T15922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.685325][ C1] net_ratelimit: 3007 callbacks suppressed [ 455.685347][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 455.704143][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 455.718536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 455.731533][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 455.732868][T15922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.745902][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 455.769141][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 455.783567][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 455.796534][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 455.811905][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 455.824873][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 456.007312][T16184] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 456.416943][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'. [ 456.440780][T16195] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 456.629779][T16195] bond3: (slave lo): Enslaving as an active interface with an up link [ 456.648040][T15922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.699226][T15922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.004629][T15922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.324252][T16210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2808'. [ 457.437405][T16212] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2809'. [ 458.374606][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2810'. [ 458.437293][T16218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2811'. [ 459.330566][T15922] hsr_slave_0: entered promiscuous mode [ 459.455984][T15922] hsr_slave_1: entered promiscuous mode [ 459.543355][T15922] debugfs: 'hsr0' already exists in 'hsr' [ 459.616415][T15922] Cannot create hsr debugfs directory [ 459.712399][T16226] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2813'. [ 459.870696][T16226] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2813'. [ 460.693630][ C1] net_ratelimit: 3172 callbacks suppressed [ 460.693650][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 460.715232][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 460.728214][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 460.743278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 460.756218][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 460.771184][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 460.784110][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 460.800383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 460.813287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 460.828044][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 461.656021][T16253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2819'. [ 462.257666][T16260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2821'. [ 462.500841][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 462.625792][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 465.703225][ C1] net_ratelimit: 2597 callbacks suppressed [ 465.703245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 465.721990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 465.738514][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 465.751435][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 465.767297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 465.780284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 465.796211][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 465.809159][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 465.825822][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 465.838759][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.713539][ C1] net_ratelimit: 2088 callbacks suppressed [ 470.713560][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.732371][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.748191][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.761131][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.777784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.790733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.806647][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.819617][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.835553][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.848485][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 470.887150][T16265] hsr_slave_1 (unregistering): left promiscuous mode [ 471.016065][T16272] hsr0: entered promiscuous mode [ 471.122359][T16276] macsec0: entered promiscuous mode [ 471.213693][T16276] macsec0: entered allmulticast mode [ 471.318459][T16278] veth1_macvtap: entered allmulticast mode [ 471.441997][T16278] macsec0: left promiscuous mode [ 471.496854][T16278] macsec0: left allmulticast mode [ 471.531249][T16278] veth1_macvtap: left allmulticast mode [ 472.963458][T16298] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2829'. [ 474.414045][T16321] netlink: 4240 bytes leftover after parsing attributes in process `syz.3.2833'. [ 474.780804][T16328] netlink: 'syz.4.2834': attribute type 4 has an invalid length. [ 475.724765][ C1] net_ratelimit: 1917 callbacks suppressed [ 475.724787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 475.743624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 475.760297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 475.773339][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 475.789346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 475.802409][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 475.818457][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 475.831460][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 475.848382][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 475.861400][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 476.409998][T15922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.578607][T15922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.789039][T15922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.069976][T15922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.201900][T15922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.362143][T15922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.723971][T15922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.886323][T15922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.667234][T16373] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2847'. [ 479.031366][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2848'. [ 479.504472][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2849'. [ 480.198354][T16390] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2852'. [ 480.734251][ C1] net_ratelimit: 1981 callbacks suppressed [ 480.734272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 480.753031][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 480.768869][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 480.780733][T15922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.781793][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 480.803381][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 480.816330][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 480.833158][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 480.845999][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 480.861594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 480.874470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 481.089942][T15922] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.311877][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.319911][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.708315][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.716417][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.316419][T16417] syzkaller0: entered promiscuous mode [ 482.332372][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 482.370189][T16417] syzkaller0: entered allmulticast mode [ 483.296938][T16426] netlink: 'syz.0.2861': attribute type 32 has an invalid length. [ 483.406643][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 484.223045][T16428] bond6: (slave gre0): Device is not bonding slave [ 484.231409][T16428] bond6: option active_slave: invalid value (gre0) [ 484.284652][T16428] bond6 (unregistering): Released all slaves [ 484.495696][T16426] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 484.686275][ T8049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.705965][T16436] 8021q: VLANs not supported on gre0 [ 484.800103][ T8049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.746684][ C1] net_ratelimit: 2014 callbacks suppressed [ 485.746705][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 485.765516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 485.782207][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 485.795180][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 485.811096][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 485.824021][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 485.839793][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 485.852795][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 485.869345][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 485.882312][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 486.029641][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 486.577803][T16454] netlink: 'syz.4.2867': attribute type 9 has an invalid length. [ 486.686816][T16449] xt_CT: No such helper "pptp" [ 488.984549][T16479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2873'. [ 489.211546][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'. [ 489.308998][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2874'. [ 489.362176][T16482] netlink: 'syz.4.2874': attribute type 12 has an invalid length. [ 489.437688][T16482] netlink: 'syz.4.2874': attribute type 11 has an invalid length. [ 490.755180][ C1] net_ratelimit: 2070 callbacks suppressed [ 490.755202][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 490.759875][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'. [ 490.761857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 490.797864][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 490.810789][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 490.826626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 490.839587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 490.856025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 490.868911][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 490.884410][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 490.897254][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 492.342678][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 492.369619][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 492.397711][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 492.429657][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 492.451472][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 494.585136][ T5637] Bluetooth: hci6: command tx timeout [ 495.765387][ C1] net_ratelimit: 2171 callbacks suppressed [ 495.765407][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 495.784140][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 495.800624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 495.813570][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 495.829381][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 495.842261][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 495.858759][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 495.871740][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 495.887542][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 495.900470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 496.663610][ T5637] Bluetooth: hci6: command tx timeout [ 498.744595][ T5637] Bluetooth: hci6: command tx timeout [ 500.775268][ C1] net_ratelimit: 2132 callbacks suppressed [ 500.775289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 500.794004][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 500.813088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 500.825625][ T5637] Bluetooth: hci6: command tx timeout [ 500.826092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 500.846868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 500.859837][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 500.875772][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 500.888776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 500.906727][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 500.919800][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d6:30:eb:6a:54:5e, vlan:0) [ 501.389159][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.586920][T16541] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2885'. [ 502.979599][T16541] bond0 (unregistering): Released all slaves [ 504.487137][T16576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2892'. [ 504.609079][T16580] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2893'. [ 504.900347][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 505.790585][T16587] bridge0: port 3(veth1_to_bridge) entered disabled state [ 505.802288][T16587] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.814681][T16587] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.101696][T16593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2895'. [ 506.174708][T16593] netlink: 'syz.3.2895': attribute type 1 has an invalid length. [ 506.214581][T16593] netlink: 'syz.3.2895': attribute type 1 has an invalid length. [ 506.243426][T16593] netlink: 'syz.3.2895': attribute type 2 has an invalid length. [ 506.284187][T16593] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2895'. [ 507.591973][T16613] netlink: 'syz.1.2898': attribute type 4 has an invalid length. [ 508.659017][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2900'. [ 509.963850][T16626] syzkaller0: entered promiscuous mode [ 510.061577][T16626] syzkaller0: entered allmulticast mode [ 510.278505][T16634] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20001 [ 510.925696][T16641] x_tables: duplicate underflow at hook 4 [ 511.437934][T16648] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2907'. [ 512.302678][T15767] IPVS: starting estimator thread 0... [ 512.369358][T16655] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2908'. [ 512.473998][T16656] IPVS: using max 27 ests per chain, 64800 per kthread [ 513.976489][T16669] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2912'. [ 514.379502][T16675] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 515.637709][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'. [ 515.860629][T16675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.989875][T16677] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 516.101056][T16681] bond0: entered promiscuous mode [ 516.131663][T16681] bond0: entered allmulticast mode [ 516.991098][ T6254] bridge_slave_1: left allmulticast mode [ 517.123977][ T6254] bridge_slave_1: left promiscuous mode [ 517.302500][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.086593][ T6254] bridge_slave_0: left allmulticast mode [ 518.109760][T16719] netlink: 'syz.3.2920': attribute type 21 has an invalid length. [ 518.198827][ T6254] bridge_slave_0: left promiscuous mode [ 518.279641][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.616578][ T6254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.662941][ T6254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.690268][ T6254] bond0 (unregistering): Released all slaves [ 522.120071][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 525.229716][T16771] netlink: 'syz.0.2927': attribute type 13 has an invalid length. [ 563.758794][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 673.543151][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 673.550153][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24/2:b..l P8049/1:b..l P5000/1:b..l [ 673.560719][ C1] rcu: (detected by 1, t=10503 jiffies, g=82425, q=695 ncpus=2) [ 673.568464][ C1] task:udevd state:R running task stack:22472 pid:5000 tgid:5000 ppid:1 task_flags:0x400140 flags:0x00080000 [ 673.583274][ C1] Call Trace: [ 673.586658][ C1] [ 673.589676][ C1] __schedule+0x1840/0x57a0 [ 673.594390][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 673.599734][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 673.604955][ C1] ? __pfx___schedule+0x10/0x10 [ 673.609834][ C1] ? unwind_get_return_address+0x4d/0x90 [ 673.615535][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 673.621755][ C1] preempt_schedule_irq+0x4d/0xa0 [ 673.626808][ C1] irqentry_exit+0x14f/0x8e0 [ 673.631420][ C1] ? trace_irq_disable+0x3b/0x140 [ 673.636505][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 673.642553][ C1] RIP: 0010:lock_is_held_type+0x106/0x150 [ 673.648429][ C1] Code: 1a 00 00 b8 ff ff ff ff 65 0f c1 05 84 5d 94 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 4b f8 02 00 cc 90 0f 0b 90 48 c7 [ 673.668154][ C1] RSP: 0018:ffffc900026df9a8 EFLAGS: 00000206 [ 673.674317][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 673.682307][ C1] RDX: 0000000000000000 RSI: ffffffff8e213d22 RDI: ffffffff8c2899a0 [ 673.690295][ C1] RBP: 00000000ffffffff R08: ffffffff823a3c4e R09: 0000000000000000 [ 673.698282][ C1] R10: 0000000000000000 R11: ffffffff8e95c780 R12: 0000000000000246 [ 673.706282][ C1] R13: ffff88807cb59f00 R14: ffffffff8e95c780 R15: 0000000000000001 [ 673.714282][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 673.720619][ C1] page_ext_lookup+0xe7/0x180 [ 673.725327][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 673.731593][ C1] __update_page_owner_free_handle+0x104/0x470 [ 673.737774][ C1] ? page_ext_put+0x97/0xc0 [ 673.742308][ C1] __reset_page_owner+0x85/0x1f0 [ 673.747271][ C1] __free_frozen_pages+0xc0d/0xd20 [ 673.752456][ C1] ? __free_slab+0x172/0x280 [ 673.757079][ C1] __slab_free+0x274/0x2c0 [ 673.761536][ C1] qlist_free_all+0x99/0x100 [ 673.766150][ C1] ? do_getname+0x2e/0x250 [ 673.770620][ C1] kasan_quarantine_reduce+0x148/0x160 [ 673.776105][ C1] __kasan_slab_alloc+0x22/0x80 [ 673.780994][ C1] kmem_cache_alloc_noprof+0x2b8/0x650 [ 673.786473][ C1] ? do_getname+0x2e/0x250 [ 673.790913][ C1] ? kmem_cache_alloc_noprof+0x156/0x650 [ 673.796572][ C1] do_getname+0x2e/0x250 [ 673.800831][ C1] ? getname_flags+0x11/0x20 [ 673.805443][ C1] vfs_fstatat+0x45/0x170 [ 673.809793][ C1] __x64_sys_newfstatat+0x151/0x200 [ 673.815010][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 673.820764][ C1] ? rcu_is_watching+0x15/0xb0 [ 673.825589][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.831675][ C1] do_syscall_64+0x174/0x580 [ 673.836289][ C1] ? clear_bhb_loop+0x40/0x90 [ 673.841251][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.847160][ C1] RIP: 0033:0x7f8f41111b0a [ 673.851590][ C1] RSP: 002b:00007ffddbcefdc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 673.860022][ C1] RAX: ffffffffffffffda RBX: 00005601c5266410 RCX: 00007f8f41111b0a [ 673.868013][ C1] RDX: 00007ffddbcefdd0 RSI: 00005601c52542a8 RDI: 00000000ffffff9c [ 673.876003][ C1] RBP: 00005601fa94d148 R08: 00063478c1c69200 R09: 3fffffffffffffff [ 673.883993][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.891982][ C1] R13: 00007ffddbcefdd0 R14: 0000000000000000 R15: 00063478c1c69200 [ 673.899995][ C1] [ 673.903041][ C1] task:kworker/u8:17 state:R running task stack:21416 pid:8049 tgid:8049 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 673.916628][ C1] Workqueue: krds_cp_wq#14/0 rds_connect_worker [ 673.923007][ C1] Call Trace: [ 673.926300][ C1] [ 673.929335][ C1] __schedule+0x1840/0x57a0 [ 673.933892][ C1] ? __lock_acquire+0x683/0x2cd0 [ 673.938880][ C1] ? __pfx___schedule+0x10/0x10 [ 673.943755][ C1] ? __lock_acquire+0x683/0x2cd0 [ 673.948727][ C1] preempt_schedule_irq+0x4d/0xa0 [ 673.953775][ C1] irqentry_exit+0x14f/0x8e0 [ 673.958382][ C1] ? trace_irq_disable+0x3b/0x140 [ 673.963442][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 673.969456][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 673.974771][ C1] Code: ff ff ff e8 b1 10 01 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 ab 2b 95 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 0c 04 0a cc 48 8d 3d b8 a2 91 [ 673.994396][ C1] RSP: 0018:ffffc90005ac7200 EFLAGS: 00000286 [ 674.000487][ C1] RAX: aea9c93c91fae000 RBX: 0000000000000000 RCX: 0000000000000046 [ 674.008482][ C1] RDX: 000000004e1ebbf1 RSI: ffffffff8e213d22 RDI: ffffffff8c2899a0 [ 674.016472][ C1] RBP: ffffffff81769f7f R08: ffffffff81769f7f R09: 0000000000000000 [ 674.024463][ C1] R10: 0000000000000000 R11: ffffffff8e95c780 R12: 0000000000000002 [ 674.032454][ C1] R13: ffffffff8e95c780 R14: 0000000000000000 R15: 0000000000000246 [ 674.040445][ C1] ? unwind_next_frame+0x8f/0x2550 [ 674.045593][ C1] ? unwind_next_frame+0x8f/0x2550 [ 674.050734][ C1] ? stack_trace_save+0xa9/0x100 [ 674.055701][ C1] ? unwind_next_frame+0x8f/0x2550 [ 674.060837][ C1] unwind_next_frame+0xac/0x2550 [ 674.065791][ C1] ? unwind_next_frame+0x8f/0x2550 [ 674.070928][ C1] ? __unwind_start+0x4f2/0x640 [ 674.075801][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 674.081980][ C1] arch_stack_walk+0x11b/0x150 [ 674.086826][ C1] ? stack_trace_save+0xa9/0x100 [ 674.091799][ C1] stack_trace_save+0xa9/0x100 [ 674.096596][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 674.101998][ C1] ? stack_depot_save_flags+0x33/0x800 [ 674.107598][ C1] save_stack+0x122/0x230 [ 674.111954][ C1] ? __pfx_save_stack+0x10/0x10 [ 674.116846][ C1] __reset_page_owner+0x71/0x1f0 [ 674.121813][ C1] __free_frozen_pages+0xc0d/0xd20 [ 674.126951][ C1] ? __free_slab+0x172/0x280 [ 674.131736][ C1] __slab_free+0x274/0x2c0 [ 674.136183][ C1] ? qlist_free_all+0x8e/0x100 [ 674.141003][ C1] qlist_free_all+0x99/0x100 [ 674.145621][ C1] kasan_quarantine_reduce+0x148/0x160 [ 674.151106][ C1] __kasan_kmalloc+0x22/0xb0 [ 674.155728][ C1] __kmalloc_noprof+0x358/0x750 [ 674.160603][ C1] ? security_sk_alloc+0x52/0x360 [ 674.165745][ C1] ? __kmalloc_noprof+0x1b4/0x750 [ 674.170798][ C1] security_sk_alloc+0x52/0x360 [ 674.175671][ C1] sk_prot_alloc+0x101/0x210 [ 674.180436][ C1] sk_alloc+0x3a/0x390 [ 674.184547][ C1] inet_create+0x7a9/0xff0 [ 674.189113][ C1] ? inet_create+0x9d/0xff0 [ 674.193641][ C1] __sock_create+0x4b3/0x9d0 [ 674.198330][ C1] rds_tcp_conn_path_connect+0x2d8/0x920 [ 674.204059][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 674.209118][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 674.215300][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 674.220439][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 674.226217][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 674.231964][ C1] rds_connect_worker+0x1d8/0x290 [ 674.237008][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 674.242743][ C1] process_scheduled_works+0xa8e/0x14e0 [ 674.248340][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 674.254356][ C1] ? assign_work+0x3cf/0x5d0 [ 674.258977][ C1] worker_thread+0xa47/0xfb0 [ 674.263596][ C1] ? __kthread_parkme+0x71/0x1f0 [ 674.268563][ C1] kthread+0x389/0x470 [ 674.272655][ C1] ? __pfx_worker_thread+0x10/0x10 [ 674.277782][ C1] ? __pfx_kthread+0x10/0x10 [ 674.282395][ C1] ret_from_fork+0x514/0xb70 [ 674.287009][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 674.292137][ C1] ? __switch_to+0xc89/0x1420 [ 674.296843][ C1] ? __pfx_kthread+0x10/0x10 [ 674.301468][ C1] ret_from_fork_asm+0x1a/0x30 [ 674.306321][ C1] [ 674.309348][ C1] task:kworker/1:0 state:R running task stack:22688 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 674.322946][ C1] Workqueue: mld mld_ifc_work [ 674.327767][ C1] Call Trace: [ 674.331053][ C1] [ 674.334001][ C1] __schedule+0x1840/0x57a0 [ 674.338533][ C1] ? ktime_get_with_offset+0x93/0x2d0 [ 674.343927][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 674.350131][ C1] ? veth_xmit+0x66/0xe60 [ 674.354578][ C1] ? __pfx___schedule+0x10/0x10 [ 674.359472][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 674.364870][ C1] preempt_schedule_common+0x82/0xd0 [ 674.370179][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 674.375401][ C1] preempt_schedule_thunk+0x16/0x30 [ 674.380637][ C1] __local_bh_enable_ip+0xe1/0x130 [ 674.385790][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 674.390922][ C1] __dev_queue_xmit+0x1ed7/0x37f0 [ 674.395982][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 674.401113][ C1] ? __pfx___schedule+0x10/0x10 [ 674.405995][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 674.411385][ C1] ? neigh_resolve_output+0x428/0x720 [ 674.416877][ C1] ? eth_header+0x11b/0x200 [ 674.421477][ C1] ? __asan_memcpy+0x40/0x70 [ 674.426114][ C1] ? ip6_output+0x11e/0x540 [ 674.430748][ C1] ip6_output+0x337/0x540 [ 674.435102][ C1] ? __pfx_ip6_output+0x10/0x10 [ 674.439973][ C1] NF_HOOK+0x177/0x4f0 [ 674.444068][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 674.448677][ C1] ? icmp6_dst_alloc+0x39b/0x430 [ 674.453706][ C1] ? __pfx_dst_output+0x10/0x10 [ 674.458571][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 674.463871][ C1] ? icmp6_dst_alloc+0x39b/0x430 [ 674.468832][ C1] ? icmp6_dst_alloc+0x39b/0x430 [ 674.473793][ C1] mld_sendpack+0x890/0xe10 [ 674.478336][ C1] ? mld_sendpack+0x206/0xe10 [ 674.483036][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 674.488102][ C1] mld_ifc_work+0x839/0xe70 [ 674.492628][ C1] ? rcu_is_watching+0x15/0xb0 [ 674.497414][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 674.503154][ C1] process_scheduled_works+0xa8e/0x14e0 [ 674.508751][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 674.514768][ C1] ? assign_work+0x3cf/0x5d0 [ 674.519398][ C1] worker_thread+0xa47/0xfb0 [ 674.524047][ C1] kthread+0x389/0x470 [ 674.528136][ C1] ? __pfx_worker_thread+0x10/0x10 [ 674.533271][ C1] ? __pfx_kthread+0x10/0x10 [ 674.537889][ C1] ret_from_fork+0x514/0xb70 [ 674.542503][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 674.547634][ C1] ? __switch_to+0xc89/0x1420 [ 674.552335][ C1] ? __pfx_kthread+0x10/0x10 [ 674.556952][ C1] ret_from_fork_asm+0x1a/0x30 [ 674.561751][ C1] [ 674.564793][ C1] rcu: rcu_preempt kthread starved for 10312 jiffies! g82425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 674.575998][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 674.585982][ C1] rcu: RCU grace-period kthread stack dump: [ 674.591895][ C1] task:rcu_preempt state:R running task stack:27696 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 674.605410][ C1] Call Trace: [ 674.608708][ C1] [ 674.611666][ C1] __schedule+0x1840/0x57a0 [ 674.616189][ C1] ? __lock_acquire+0x683/0x2cd0 [ 674.621177][ C1] ? __pfx___schedule+0x10/0x10 [ 674.626066][ C1] ? schedule+0x90/0x360 [ 674.630334][ C1] schedule+0x164/0x360 [ 674.634519][ C1] schedule_timeout+0x152/0x2c0 [ 674.639482][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 674.644880][ C1] ? __pfx_process_timeout+0x10/0x10 [ 674.650198][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 674.656030][ C1] ? prepare_to_swait_event+0x322/0x350 [ 674.661612][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 674.666495][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 674.672668][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 674.677970][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 674.683201][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 674.689037][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 674.693648][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 674.698862][ C1] ? __kthread_parkme+0x71/0x1f0 [ 674.703823][ C1] ? __kthread_parkme+0x196/0x1f0 [ 674.708871][ C1] kthread+0x389/0x470 [ 674.712968][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 674.718177][ C1] ? __pfx_kthread+0x10/0x10 [ 674.722796][ C1] ret_from_fork+0x514/0xb70 [ 674.727414][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 674.732551][ C1] ? __switch_to+0xc89/0x1420 [ 674.737259][ C1] ? __pfx_kthread+0x10/0x10 [ 674.741961][ C1] ret_from_fork_asm+0x1a/0x30 [ 674.746765][ C1] [ 674.749794][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 674.756136][ C1] Sending NMI from CPU 1 to CPUs 0: [ 674.761357][ C0] NMI backtrace for cpu 0 [ 674.761376][ C0] CPU: 0 UID: 0 PID: 13346 Comm: kworker/R-bond4 Not tainted syzkaller #0 PREEMPT(full) [ 674.761411][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 674.761427][ C0] Workqueue: bond4 bond_alb_monitor [ 674.761534][ C0] RIP: 0010:lock_is_held_type+0x61/0x150 [ 674.761561][ C0] Code: 41 83 bd 8c 0b 00 00 00 0f 85 bf 00 00 00 89 f5 49 89 fe 9c 41 5c fa 48 c7 c7 26 ba fb 8d e8 66 1b 00 00 65 ff 05 0f 5e 94 07 <41> 83 bd 88 0b 00 00 00 7e 48 4c 89 eb 48 81 c3 90 0b 00 00 45 31 [ 674.761574][ C0] RSP: 0018:ffffc90000007128 EFLAGS: 00000002 [ 674.761586][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000080000100 [ 674.761596][ C0] RDX: ffff88805409dd00 RSI: ffffffff8dfbba26 RDI: ffffffff8c2899a0 [ 674.761607][ C0] RBP: 00000000ffffffff R08: ffffc900000073e0 R09: ffffc900000073f0 [ 674.761618][ C0] R10: ffffc90000007240 R11: fffff52000000e4a R12: 0000000000000246 [ 674.761629][ C0] R13: ffff88805409dd00 R14: ffffffff8e95c780 R15: ffffc900000073b8 [ 674.761640][ C0] FS: 0000000000000000(0000) GS:ffff8881252b9000(0000) knlGS:0000000000000000 [ 674.761652][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.761663][ C0] CR2: 00007fb31358d000 CR3: 0000000021af4000 CR4: 00000000003526f0 [ 674.761677][ C0] Call Trace: [ 674.761682][ C0] [ 674.761691][ C0] __find_rr_leaf+0x34d/0x760 [ 674.761747][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 674.761761][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 674.761780][ C0] ? netif_receive_skb+0x38b/0xbf0 [ 674.761799][ C0] ? __lock_acquire+0x683/0x2cd0 [ 674.761816][ C0] fib6_table_lookup+0x3c6/0xae0 [ 674.761840][ C0] ? ip6_pol_route+0x160/0x13d0 [ 674.761858][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 674.761876][ C0] ? br_handle_frame_finish+0x1115/0x1930 [ 674.761944][ C0] ip6_pol_route+0x228/0x13d0 [ 674.761961][ C0] ? ip6_pol_route+0x160/0x13d0 [ 674.761979][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 674.761997][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 674.762065][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 674.762084][ C0] fib6_rule_action+0x9d7/0xc00 [ 674.762127][ C0] ? fib_rules_lookup+0x99/0xeb0 [ 674.762197][ C0] ? lock_acquire+0x106/0x350 [ 674.762211][ C0] ? __pfx_fib6_rule_action+0x10/0x10 [ 674.762230][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 674.762272][ C0] ? fib6_rule_match+0x799/0xa80 [ 674.762288][ C0] ? __pfx_fib6_rule_action+0x10/0x10 [ 674.762305][ C0] fib_rules_lookup+0x770/0xeb0 [ 674.762328][ C0] ? fib_rules_lookup+0x99/0xeb0 [ 674.762350][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 674.762370][ C0] ? l3mdev_update_flow+0x26/0x610 [ 674.762417][ C0] ? l3mdev_update_flow+0x4ad/0x610 [ 674.762433][ C0] fib6_rule_lookup+0x1a0/0x730 [ 674.762449][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 674.762467][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 674.762485][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 674.762502][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 674.762524][ C0] ip6_route_input+0x78d/0xb20 [ 674.762544][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 674.762565][ C0] ? nf_nat_ipv6_in+0x200/0x2c0 [ 674.762646][ C0] ? lock_acquire+0x106/0x350 [ 674.762662][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 674.762678][ C0] ip6_rcv_finish+0x141/0x280 [ 674.762692][ C0] NF_HOOK+0x336/0x3c0 [ 674.762706][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 674.762719][ C0] ? NF_HOOK+0x9e/0x3c0 [ 674.762732][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 674.762745][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 674.762763][ C0] process_backlog+0x774/0x1860 [ 674.762810][ C0] ? process_backlog+0x3c3/0x1860 [ 674.762832][ C0] __napi_poll+0xaa/0x330 [ 674.762850][ C0] net_rx_action+0x61d/0xf50 [ 674.762872][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 674.762889][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 674.762951][ C0] ? net_tx_action+0xbff/0xc30 [ 674.762971][ C0] handle_softirqs+0x225/0x840 [ 674.762986][ C0] ? __irq_exit_rcu+0xca/0x220 [ 674.763003][ C0] __irq_exit_rcu+0xca/0x220 [ 674.763017][ C0] irq_exit_rcu+0x9/0x30 [ 674.763029][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 674.763050][ C0] [ 674.763055][ C0] [ 674.763061][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 674.763076][ C0] RIP: 0010:queue_delayed_work_on+0x17a/0x1e0 [ 674.763094][ C0] Code: 00 4d 85 f6 75 16 e8 65 56 38 00 eb 15 e8 5e 56 38 00 e8 39 6b 15 0a 4d 85 f6 74 ea e8 4f 56 38 00 fb 65 48 8b 05 36 86 a9 11 <48> 3b 44 24 20 75 56 89 d8 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f [ 674.763106][ C0] RSP: 0018:ffffc90004c5f960 EFLAGS: 00000293 [ 674.763118][ C0] RAX: 1a05e84afcf63800 RBX: ffff888035bc9201 RCX: ffff88805409dd00 [ 674.763129][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.763139][ C0] RBP: 0000000000000008 R08: ffffffff902f88f7 R09: 1ffffffff205f11e [ 674.763149][ C0] R10: dffffc0000000000 R11: fffffbfff205f11f R12: 0000000002000001 [ 674.763164][ C0] R13: 0000000000000000 R14: 0000000000000200 R15: 0000000000000000 [ 674.763180][ C0] ? bond_alb_monitor+0xf3/0x17c0 [ 674.763196][ C0] bond_alb_monitor+0x122e/0x17c0 [ 674.763213][ C0] ? bond_alb_monitor+0xf3/0x17c0 [ 674.763227][ C0] ? __pfx_bond_alb_monitor+0x10/0x10 [ 674.763241][ C0] ? rcu_is_watching+0x15/0xb0 [ 674.763259][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 674.763273][ C0] process_scheduled_works+0xa8e/0x14e0 [ 674.763297][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 674.763317][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 674.763339][ C0] ? assign_work+0x3af/0x5d0 [ 674.763361][ C0] rescuer_thread+0x7b6/0x10b0 [ 674.763379][ C0] ? rescuer_thread+0xb8/0x10b0 [ 674.763401][ C0] kthread+0x389/0x470 [ 674.763418][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 674.763433][ C0] ? __pfx_kthread+0x10/0x10 [ 674.763450][ C0] ret_from_fork+0x514/0xb70 [ 674.763466][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 674.763481][ C0] ? __switch_to+0xc89/0x1420 [ 674.763501][ C0] ? __pfx_kthread+0x10/0x10 [ 674.763518][ C0] ret_from_fork_asm+0x1a/0x30 [ 674.763540][ C0]