last executing test programs: 1m59.611352543s ago: executing program 3 (id=1477): unshare(0x20a80) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="b2", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00', @ANYRES32=r1], 0x18, 0x20040801}}], 0x1, 0x20040014) accept4$unix(r1, 0x0, 0x0, 0x80800) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 1m58.42744774s ago: executing program 3 (id=1479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000041000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00400000", 0x54}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2567bfde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f", 0x407}], 0x2}, 0x10049014) 1m58.421839983s ago: executing program 2 (id=1481): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000009a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/188, 0xbc}, {&(0x7f0000001e00)=""/74, 0x4a}], 0x5}, 0x8}], 0x3, 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x14000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000800)="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"/476, 0x1dc}], 0x2}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000004900), 0x4) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/227, 0xe3}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r7, &(0x7f0000000240)="001494", 0x3, 0x4040081, 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x10102, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x21}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r10, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x404, 0x4e23, 0x1}, {0x0, 0x0, 0x0, 0x6cc, 0xa975, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) 1m58.421430697s ago: executing program 3 (id=1482): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x4}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)={0xa0000001}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x27, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r1, @ANYRES8=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000600000018690000080000000000000001040000183b0000040000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001847ff00000080a44d3e17fdd7fcc3ebfb0000181100009808d2929f9a0cdc54f6e560a98208bee9e7dd38948e9f6c7a0ee4bd18f7df825e881af9ea75fd6ede38b6da5312206e820cf3ecc26595460a98876b74c224a48d3e16ee794958dc6cfa1254840a8020f6a6d8458876bb4acf7259959456ff1082425b0e7ad2f2ef6307fc8a6d7e70a9c8295e57ff39e6", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180000000000000000000000ff01000085100000050000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x1e2e5ac185c9ddf4, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xf, 0x7c7, 0xffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000004c0)=[r5], &(0x7f0000000500)=[{0x3, 0x3, 0x0, 0xb}, {0x1, 0x3, 0x0, 0xc}, {0x2, 0x5, 0xc, 0x8}, {0xffffffff, 0x5, 0xa, 0xc}, {0x4, 0x3, 0x8eea, 0x6}, {0x3, 0x1, 0x10, 0xc}, {0x1, 0x4, 0x2, 0x7}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r6, 0x0, 0x5f, 0x13, &(0x7f0000000640)="e0d5230f302f8663c86f4e116dd0f0cf9c98ede6416dc672856693b30d0c5eee394a144622bc5269895935dc9c2921bf31713d8981899553aac887128b0139ad422556718a5d8e937598a0dfe6d7b42e1648de674e2628abe1b27487268326", &(0x7f00000006c0)=""/19, 0xfff, 0x0, 0x19, 0x8b, &(0x7f0000000700)="8ec4a0776533382d8429da0bf62bb4bdd263e9887c4a48522a", &(0x7f0000000740)="ee7d6a2f36cbb50c712d324e9028f31f57d8947956c2af10eea4b7a2a4001cd2e01c635a69ea2e811af4ca4165aa9a64de2fe2dd3835053cc989ebec29d9cff2c1eed4d989dad41867609f49091c9cc9ea0dc9ab3fb969e2d3eacb1fd4b46abe84b8d583efa3277d95990fe88932ac19d51b3d00fa5c98c4467779fb7b622fdecf0827e5c27bf84d540c73", 0x5, 0x0, 0x10001}, 0x50) close(r5) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20010010) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYRES16=r0], 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xe22, 0x4790, @mcast2, 0x64f}, 0x1c) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000069078ac1e01010000000000004e22", @ANYRES32=0x41424344, @ANYRES32=r11, @ANYBLOB='T\b\x00\x00\x00\x00\x00\x00'], 0x0) getpid() bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r7, 0x0, &(0x7f0000001d40)=@udp6, 0x1}, 0x20) epoll_wait(r3, &(0x7f00000000c0)=[{}, {}], 0x2, 0x4000005) 1m58.41231747s ago: executing program 0 (id=1483): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016020000b30000007f00000000000000", @ANYRES32, @ANYBLOB="00000000f2ffffffffffffff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (fail_nth: 1) 1m58.411464696s ago: executing program 3 (id=1484): unshare(0x6a040000) r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x432, 0x0) (async) socket$inet(0x2, 0x4000000805, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8eb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='bcache_btree_write\x00', r3, 0x0, 0x8}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000001c0)="4d72544978793f0d24212142d3ab5ebd666992a806445b1e368079490881196e86fc672d08406de88ffcf96f7afc4c83515160fd7edc208c613bb58417e71e8cebae2b73e3bad867f4e4ff76dcbcb4de24fa5903426b371991", 0x59, 0x24000000, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x24000082) socket$inet(0x2, 0x80000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 1m58.411331833s ago: executing program 0 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) 1m58.411150245s ago: executing program 0 (id=1486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r0, 0x0, 0x0) 1m58.407706284s ago: executing program 0 (id=1489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x44040) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x1, r4, 0x2000000}, 0xc) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x100}, 0xc) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r5, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='C', 0x1}], 0x1}}], 0x1, 0x20044840) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f80080001"], 0x88}}, 0x4008000) 1m58.264996759s ago: executing program 0 (id=1490): unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltaction={0x38, 0x18, 0x1, 0x3, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x40, 0x7c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c005}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa0000000000007910a800000000199500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 1m58.218352638s ago: executing program 4 (id=1491): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00070cfffffffffddbdf", @ANYRES32=r1, @ANYBLOB="0200640b0a000200aaaaaaaaaabb00000c000e8005000100"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=ANY=[], 0x50}}, 0x40008014) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m58.206230075s ago: executing program 2 (id=1492): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000000)="4ac0d4f8ee66d36796c70b40bf480fc32be26c95248b10e1c8e6159c5518f67858801390376c26672166e84321674015e0048b307e8de46b92f9c8dd2502076098f35d6df424e35f92687a4018bda61550d17d42256812e60d9b26308dfcf67a3678a84503bf390dc5a2e115ba8630d06176184d4c0717ed8af04f90d03ae07e8971370993b3e0de9cd76eafc4d1c9721cc882cb", 0x94, 0x20004012, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x1ec1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={0xffffffffffffffff, r3}, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x80}, &(0x7f0000000240)=0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000f00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000340)={0xb58, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0xb00, 0x111, 0x0, 0x1, {0xafc, 0x5, 0x0, 0x1, [{0x380, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x19c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x96}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x114, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x294, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x21c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbe5c}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3b}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x173}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}]}, {0x480, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x414, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x96}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbddb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xebb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x83}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa1a6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffffff81}]}, 0xb58}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000f40)={'wlan1\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0xf, 0x4, &(0x7f0000000f80)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xc}], &(0x7f0000000fc0)='syzkaller\x00', 0x7, 0x73, &(0x7f0000001000)=""/115, 0x41000, 0x41, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000010c0)={0x4, 0x7, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001100)=[{0x3, 0x2, 0x8, 0x2}, {0x2, 0x2, 0x4, 0x9}, {0x3, 0x5, 0xb, 0x3}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r9, 0x0, 0xbd, 0x4a, &(0x7f0000001200)="58338260436755bde56d528a41c1bc1535ceb5a4e6bad8ca56a9066d63e9812ac9e31159916ff9cb21a521231ef71cb80964d566f7b98cca9a84be084047f2b2def03028cd997161a61313b95b0dc1e7aa7aee76e6c0938f08aa51af7bfc83a6c47bbfccd5b9a3525f366850593ed34330eeaf6c83783769d746ce7684f7cd8900d939755699f731a278ecb7feaf19a27cca4a75c90afc407c673aafe79ea424c6e6e2e2f6db635c0f64e5a16b39fced5c76ab976307a5b3e836c31fb2", &(0x7f00000012c0)=""/74, 0x200, 0x0, 0x9b, 0xc7, &(0x7f0000001340)="1f70d94415c605bd23ec84b2b85721438cb502c1303a803bc64453cd6140b3ab20563a0139b35742fd53ddc4340578f5e187732c3791e5ff0e56dd7351686185765f32bd746e0bfdd29840ec2ac038ecab1275ee016ef123c13d43c1643c784050c6863242b17dea61a384243d3c0938bd26451ab43733263296943be41926068f828fd7ba4de6588a2d84639923109a776ba35c9f0a83cbe843b4", &(0x7f0000001400)="497627a66566d8441f9465a7e6a943d9659cae013e62af41ef4f284512d43ae8672b1def6775ba158557a46d0499c941861290987cc21222f2fe314f204bdff77bd5d6946cff0c152b61680eb61ac1d08dc4acda4151c11ca651f67ff08ae29e7c706f985492f76d4cbbd09a7a45f6a39ddec6a27a4549f02000620f1623f2712a62b7370ad76351d2848386e482a2692262a4aa3e21e707cc52fb2854575bb0ae7eb18b5134e51821dc28aab01405b454cb55e69b11d103c6cb26ff16a536042b3048ecab36bc", 0x4, 0x0, 0x3ff}, 0x50) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000001580)={r6, 0x7, 0x7, 0x9, 0x9, 0x3}, &(0x7f00000015c0)=0x14) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0xbc, 0x2, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x17}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xa}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf0d2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2}, 0xc080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000017c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001800)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000001900)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001940)={0x0, 0x0}, &(0x7f0000001980)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000001d00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001cc0)={&(0x7f00000019c0)=@updsa={0x2c4, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfc, {{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x49}, 0x4e24, 0x0, 0x4e24, 0x6, 0x2, 0x20, 0x30, 0x5c, r10, r11}, {@in=@private=0xa010102, 0x4d3, 0x32}, @in6=@rand_addr=' \x01\x00', {0x3, 0x8, 0x81, 0x0, 0x9, 0x2, 0x8000000000000001, 0xc782}, {0x0, 0x75b8, 0x5, 0x8}, {0xfff, 0x7fe, 0xa6}, 0x70bd2a, 0x34ff, 0xa, 0x1, 0xdb, 0xc9}, [@sa={0xe4, 0x6, {{@in6=@private2, @in=@loopback, 0x4e22, 0x13, 0x4e21, 0x3, 0xa, 0x0, 0x80, 0xfe14195e7e6c9432, 0x0, r12}, {@in=@broadcast, 0x4d3, 0x32}, @in=@rand_addr=0x64010102, {0x6, 0x9, 0x595, 0x0, 0xf8, 0xf, 0x8, 0xe000000000000000}, {0x9, 0x8000000000000000, 0x3b, 0x9}, {0x9, 0x0, 0x2}, 0xff, 0x3503, 0xa, 0x2, 0x0, 0x2}}, @replay_thresh={0x8, 0xb, 0x8}, @sec_ctx={0xc9, 0x8, {0xc5, 0x8, 0x0, 0x8, 0xbd, "68e79007d64f1709e92b9a47693f11151c82fe0efae3d655ff23bdd07acc1a30723354e93717d3a27602d75f6d4a9ac3b4b160b99385ff085cd91a1abb43b0a6d96e7e2916526201c920d6e90a906abb039c36d4678425dc38d82c4c19e3fef12c81ff5f729dba0f91da8c5331cf39c51e4ee685d9b5cd521009d6fe6c0fa25a06ac9d622bc83666cd73cd7077fe80f62c0d408ebd371e1f8b28da9e1293d4d764029efb5b8278ccd22f57353bf502a80a3102ef664b7344a98ed73ad9"}}, @encap={0x1c, 0x4, {0x3, 0x4e23, 0x4e22, @in6=@mcast2}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4040}, 0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000001fc0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e00)={0x168, r7, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xe9a3, 0x80}}}}, [@NL80211_ATTR_IE={0x116, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xc, 0xa}}, @random={0xc, 0x39, "66f7cd249f5fff1559887f3a27b90f4b88a037bd4771fe67990a09db3017d92671130c1c93714fe0fd61c4da3ba75c4d1b8d457c2092bbd2bc"}, @random_vendor={0xdd, 0xd0, "eeb60772e89ef1eb30ff8bd09c1945e51ff08dd922b2234c103e15d2b61af2978c7971d4085bb403d89ae97f0fac2e06c83298de993a7a423a17b3bc8305b54324feb50f6162165252af5043555e4221b9e4fb7807a6069f7a4f8e9299f98949d351b352388c3f73abb1de05abffa33732c6559592b4bd7eb7194c3a369be3886fc91de0d79f5353d3a04b324730cb7d16bfbc7a3abb380f03d16e7cb9e95d6f9700cf9aec889f7f1eea42d60f3c60fa7a9834ae74448b499d3ee8199ed32882cf578187fe92110e4718d9816a380a0e"}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3e}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x81}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x168}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, r14, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040000) sendto$inet6(r4, &(0x7f0000002140)="636caec96035d68b3dffa0ec4d59b8497a3b5a2af17bdde940613870d5d0b8a3cfe5194886b89580a174e0d8148ccc37c22d2651a931a236a1999b0cd3c4b4c3521b92bfc9b3edff7010748e7d56f295ed38df49c0b763899d7c1409e78e3a19b727ce4cd0029769b316c1bd78f08eab8e63b54f4071904623a01e8f458d9631624268803ecd7359a65b102052c8ffcfa2df307e2626", 0x96, 0x20000000, 0x0, 0x0) 1m58.084031878s ago: executing program 3 (id=1493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) getsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x8001, @loopback}}, 0x0, 0x0, 0x47, 0x0, "5d9ed5ab7ede314f73742bc31906cf9f79450c8b48aaf9a42d97f58da594d5eb926f70f0372da3f374a69bcbd8e470061600"}, 0xd8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000487bc1e39dc038bc00000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000908000340000000610800024000000002080006400000000208000740000000080900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) 1m57.996774714s ago: executing program 2 (id=1495): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'bridge_slave_1\x00', {0x4}, 0x8}) 1m57.995614205s ago: executing program 4 (id=1496): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8, 0x20, 0x401, 0xdd2, {{0x9, 0x4, 0x1, 0x38, 0x24, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @rand_addr=0x640100fe, {[@timestamp={0x44, 0x10, 0xfb, 0x0, 0x6, [0x7fffffff, 0x3ff, 0x80000000]}]}}}}}) (rerun: 64) 1m57.994663172s ago: executing program 0 (id=1497): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016020000b30000007f00000000000000", @ANYRES32, @ANYBLOB="00000000f2ffffffffffffff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (fail_nth: 2) 1m57.846707897s ago: executing program 2 (id=1499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) 1m57.778898812s ago: executing program 4 (id=1500): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x7, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbb50a245d5cde00800450000280000000000029078000000000000000011e09078000000000001000100000000000000004813fbbd52aee2a56131af681f62bf25d78747"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000300)=ANY=[], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x238, 0x258, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x81}, {0x1}}}, @common=@rt={{0x138}, {0x3, [0x5, 0x6], 0xff, 0x4, 0x7, [@empty, @mcast1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x2}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a8) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000700)="a46fab7b242fbc3d7855e6c19914456c293b1bb6ae89db00823e7bee4331eea9ef5ba41f1fec4fc9a1c71a9fed5743ed5a84a8fc105d1d247a2f85541e6e343d8cf3276b5aa0eed00a282b6ad4c204fbd690b6315eaea2ce041d16f5a096c52563a3b835da9607fad00f07befee31b6c7c66acf192416ef69b31b98743aee4e9f12af7f30bd27049a1a15e6033169d91fc447576d47da941d01314c031568df5a3a78fba83c7edc5f8d9a317446a584017385b9a", 0xb4}, {&(0x7f00000007c0)="9c6a8bdec606f219e9c6d59bf908f4086c91790469b6053a62c224d83679482dceece6dcd846456dc68f10d8fd02c75e3352da9b108b54a2052c3d25a5e420e193d6ed89b7daaa02629df175b355ded6e9e8bd5324949a4aec2a9a9adfeb3d5ff90e41d6b863d87840566f9331719ca9460c5825fad2f82ce63de01cb9471a66e096900113878b2c302b1a92e909aa2cfa2d0cade9d3be2a3f18d7da5c237a22a71ae2358e6c651bc54d15da7580861753bbfe662af05de873080904eae542b66ab9f6e78f058949904e8e94682c1c2652dde8bac625ce6ad956b3a7362e882f87d16878", 0xe4}, {&(0x7f00000008c0)="bc29ad674b6d668c25fab662d5b2922e1d4babcdfac6c0b493b5831fe5c6a456b6bdfbf5aaa9a2fa1365b041ad488e1d3a317330240494ff9cba3da08fac5686fe4a08ee60a5938b167d77", 0x4b}, {&(0x7f0000000940)="559c47093a7c169938ccb8b83971f7881fa5dc135d871b40348ee2dc5dbf8dd1695bb3a3a300d10ee5ecbb7f41d44aed87f8300f244c10bc055fe32ab5fc150857bd0f4884e172f3e166029010bd0a8aff55954102c580174cfd51e3717016763e908ea97400fc148004ccfcda4da37e40d272ceaec452fe8bdfb79bfc00a4cfa2b1d1440168cb88ff5b87999237eda95bdf07d7cfad2924d6350c5831d495d4e64976a315f78aa4c64a40a181623cd9345a0cf6cd7e1e02d71c", 0xba}, {&(0x7f0000000a00)="fdd34ce27c4693b96398aa1b095b2a18cd577549585481ee6403d45dc8ae64c48bdde3aabfc33223a8e63deb10f1af9769c9f0f672072b5b6a2430d604483d5b9c01c2c2f318fb8f7e6534233ccce6918c534d10e292ebb0c9369a612591b191dd883cf378e6f44bb92209d6182a4c673b8594c382447a783ff9d903ed584cf8453d01f3c15af233fc828a05332dd01191d55c4ec4839f595cdf75ba3f99556aabce95dfa15bc27f286b64372e9028d0", 0xb0}, {&(0x7f0000000fc0)="2041f32b9ae9b352f356edb4ba2d7138198bbf9d6948a33e3bebd9c6dcd2b908a81af227b395993d25a8a293f2b731bfa188c645b8ec66703e3d15a2e832e71d601379a2bea8e0934ff3446dad2e4c10975e9924cea8db427df9c3731ce58b3fb1fe4294a894d91931325c17297ef748d332cc5c8bf34ee8171333685aab1ae36cf44f11c0b711135a1162ce97512feebf614c5edf03a152b8058c1aa6d3bc780e7f1dc562dbebcbc148368348663fe57b2d2d3eb8aa8ff74ef4db15d076a32c93a936e2e9f662c404e97edb8e148313b2fdb3b7aa9d438ed89fa796ed88f29487f20c63e193a115151bb1a5632d4b2af9", 0xf1}, {&(0x7f00000010c0)="1b6ff6174173f8d3c66234ee3bbbb5b84a9b689ff31a0aeee75ecc924dd4e5962c6cf8993eaed52f89041bf931499ae3e97905a99d1f168ec3f2db10c5b863760926897ba32739b251fc42311537cac80a3903b36d90208713ffa926aeeebceea3bbbc60981cef1eba51ad8ce30a2d48e920a666213594c073c0b52ef0824243fc741cd975b8cbee4e16285327db099c09b417251d236b643cf07f012ce39864094b5cd75d9ab3e431d42a6448cb5819ddfe06786e113f3c1879209ff455", 0xbe}, {&(0x7f0000000000)="fb8507d51d734e50a0dc883ecfaf1ba2bc7fecc0fd589fa1ad5a4dec56dc5a8bd0334dd5f698154457", 0x29}], 0x8, 0x0, 0x0, 0x2c}, 0x2004c004) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000001300)={'tunl0\x00', 0x0, 0x8, 0x10, 0x8, 0x7fff, {{0x2c, 0x4, 0x1, 0x7, 0xb0, 0x65, 0x0, 0x10, 0x35, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xc2, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa963}, {@local, 0x7}, {@loopback, 0x3}]}, @cipso={0x86, 0x4b, 0x3, [{0x1, 0xf, "5a96285ad6d6b4cfab7c296ad7"}, {0x5, 0x2}, {0x7, 0xc, "13cf6c58409572ff67ae"}, {0x6, 0xb, "9d828e28091d44254e"}, {0x7, 0xb, "d6599b7531de735c3f"}, {0x5, 0x12, "303cd1c980d2a23f64fbea455716baee"}]}, @generic={0x89, 0x12, "faf794f1c11427fa7a90cdee39f8e89e"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x16, 0x0, [{0x5, 0x10, "e634b71f81b949d80c62019058c1"}]}, @timestamp={0x44, 0x8, 0xf3, 0x0, 0xd, [0xef]}, @noop]}}}}}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)=r6) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="38eb8b49000000000c002b80080001008c1c6b06f7f0b8a7517591c29dd2fdc7beb62a52370630cbc7bd260b238c124b64bbdd724d070d7d8014d6226ac81648188a694f689bf7a7b1d10f16a8edd0f910a62c3ccc5c11cd50a9a535dd7c05009b73ec05c13ac9f15a061e1dec0f1a8871575bdd1a8eaac1fac9e8a047b18009a14175df993296dda958ec8c9a636495c4372175222574a6cbbbeed4", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) 1m57.725448054s ago: executing program 1 (id=1501): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f00000017c0)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x81, 0x0, 0x4}, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @none, 0x0, 0x1}, 0xe) 1m57.395537725s ago: executing program 2 (id=1502): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000009a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/188, 0xbc}, {&(0x7f0000001e00)=""/74, 0x4a}], 0x5}, 0x8}], 0x3, 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x14000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000800)="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"/476, 0x1dc}], 0x2}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000004900), 0x4) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/227, 0xe3}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r7, &(0x7f0000000240)="001494", 0x3, 0x4040081, 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x10102, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x21}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r10, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x404, 0x4e23, 0x1}, {0x0, 0x0, 0x0, 0x6cc, 0xa975, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) 1m57.286863529s ago: executing program 1 (id=1503): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x7b7f000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x44}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='\t\x00\x00', 0x3) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x200, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='pimreg\x00', 0x6, 0xa, 0xde}) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000040)=0x13, 0x4) getsockopt(r3, 0x400000000000003a, 0x1, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=@mpls_delroute={0x1c, 0x19, 0x300, 0x70bd29, 0x25dfdbfa, {0x1c, 0x0, 0x20, 0x10, 0xfe, 0x4, 0xfd, 0x2, 0x3d00}}, 0x1c}, 0x1, 0x0, 0x0, 0x404c080}, 0x6044090) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54010000180001002bbd7000000000001d010300150004000100008000010000a67494fcd3a42289070000001e010600f80100000071ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe16c93e15e556c2baed7f897fe841c155aab2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c035c8d586b2a88d81866930fca15c8a95d29e5b2ea0000080005"], 0x154}}, 0x0) 1m57.248346132s ago: executing program 4 (id=1504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x20, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x44, r7, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x89}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x287}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x44}, 0x1, 0x0, 0x0, 0x26040084}, 0x80000) (async, rerun: 64) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async, rerun: 64) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4000044) 1m56.775372825s ago: executing program 1 (id=1505): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m56.774393142s ago: executing program 4 (id=1506): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) 1m56.568755669s ago: executing program 1 (id=1507): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00070cfffffffffddbdf", @ANYRES32=r1, @ANYBLOB="0200640b0a000200aaaaaaaaaabb00000c000e8005000100"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=ANY=[], 0x50}}, 0x40008014) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m56.404070949s ago: executing program 1 (id=1508): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@deltaction={0x14, 0x31, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc080) r0 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x400) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 1m56.298487447s ago: executing program 1 (id=1509): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="70840500"], 0x2e0}}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffd, @empty}, 0x1c) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x150, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x21}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0xcb1}, {0x8, 0xb, 0xfffffff7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xaff9}, {0x6, 0x16, 0x70}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x77c}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) 1m55.904007523s ago: executing program 4 (id=1510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@report={0x4c, 0x20, 0xf9128716ead1105d, 0x70bd2b, 0x25dfdbff, {0x6c, {@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x0, 0x4e23, 0x0, 0x2, 0x80, 0xa0, 0x3b}}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044044}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4c, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x4d2, 0x33}, @in6=@empty, {0x0, 0x0, 0x129b, 0xfffffffffffffffc, 0x4, 0x4, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1a0b1}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x5010}, 0x4000) 1m55.74666164s ago: executing program 3 (id=1511): unshare(0x22020400) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0x1a, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r3}) sendmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000280)="32f8", 0xffd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a255c1", 0x3}], 0x1}}], 0x2, 0x4000) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e28, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xd13, 0x0, 0x9}, 0x10) 1m54.395003263s ago: executing program 2 (id=1512): unshare(0x22020400) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0x1a, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r4, r2}) sendmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000280)="32f8", 0xffd8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a255c1", 0x3}], 0x1}}], 0x2, 0x4000) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e28, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xd13, 0x0, 0x9}, 0x10) 0s ago: executing program 32 (id=1497): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016020000b30000007f00000000000000", @ANYRES32, @ANYBLOB="00000000f2ffffffffffffff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (fail_nth: 2) kernel console output (not intermixed with test programs): ibutes in process `syz.2.238'. [ 123.343132][ T6873] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.347407][ T6877] netlink: 'syz.2.238': attribute type 4 has an invalid length. [ 123.390999][ T5154] Bluetooth: hci4: command 0x041b tx timeout [ 123.417913][ T6871] netlink: 'syz.2.238': attribute type 4 has an invalid length. [ 123.557289][ T6873] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.769147][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 123.805751][ T6873] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.906651][ T6893] pim6reg: entered allmulticast mode [ 123.938384][ T6898] pim6reg: left allmulticast mode [ 124.079694][ T6886] "syz.2.241" (6886) uses obsolete ecb(arc4) skcipher [ 124.113815][ T6873] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.186237][ T6904] smc: net device bond0 applied user defined pnetid SYZ2 [ 124.359467][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 124.406470][ T6605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.449032][ T6605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.540557][ T6605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.609586][ T6919] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.618726][ T6919] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.625836][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 124.628222][ T6919] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.645160][ T6919] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.680701][ T6605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.762882][ T6927] ipt_ECN: cannot use operation on non-tcp rule [ 124.985511][ T6942] syzkaller0: entered allmulticast mode [ 125.175908][ T6873] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.235981][ T6942] syzkaller0 (unregistering): left allmulticast mode [ 125.415183][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.448256][ T6873] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.476057][ T5154] Bluetooth: hci4: command 0x041b tx timeout [ 125.509079][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.544725][ T6873] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.559083][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.566322][ T6734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.638445][ T6873] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.712367][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.719639][ T6734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.000595][ T6973] netlink: 'syz.2.257': attribute type 21 has an invalid length. [ 126.127094][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 126.248045][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.316729][ T6990] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.550778][ T6605] veth0_vlan: entered promiscuous mode [ 126.569343][ T6996] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 126.658117][ T6605] veth1_vlan: entered promiscuous mode [ 126.770001][ T6605] veth0_macvtap: entered promiscuous mode [ 126.848628][ T6605] veth1_macvtap: entered promiscuous mode [ 126.863284][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 126.896703][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 126.945442][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.986669][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.033134][ T6605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.083105][ T6605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.113486][ T6605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.150029][ T6605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.491188][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.272'. [ 127.502575][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.272'. [ 127.595798][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.272'. [ 127.596294][ T7030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.661889][ T7036] : entered promiscuous mode [ 127.689194][ T6737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.758806][ T6737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.905262][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.921509][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.019226][ T7050] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 128.169083][ T7050] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.282166][ T7050] bond0: (slave team0): Enslaving as an active interface with an up link [ 128.971143][ T7084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.283'. [ 129.205186][ T7090] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 129.365819][ T7090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.845419][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 130.317967][ T7127] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 130.897261][ T7152] IPv6: NLM_F_REPLACE set, but no existing node found! [ 131.191703][ T7162] sctp: [Deprecated]: syz.4.302 (pid 7162) Use of int in max_burst socket option. [ 131.191703][ T7162] Use struct sctp_assoc_value instead [ 131.557426][ T7181] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 131.585147][ T7176] 8021q: VLANs not supported on vxcan1 [ 131.980486][ T7197] netlink: 48 bytes leftover after parsing attributes in process `syz.4.313'. [ 132.018791][ T7197] netlink: 136784 bytes leftover after parsing attributes in process `syz.4.313'. [ 132.044490][ T7197] netlink: zone id is out of range [ 132.063126][ T7197] netlink: zone id is out of range [ 132.074672][ T7197] netlink: zone id is out of range [ 132.086280][ T7197] netlink: zone id is out of range [ 132.119957][ T7197] netlink: zone id is out of range [ 132.135593][ T7197] netlink: zone id is out of range [ 132.165615][ T7197] netlink: zone id is out of range [ 132.175746][ T7197] netlink: zone id is out of range [ 132.203832][ T7197] netlink: zone id is out of range [ 132.261091][ T7205] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20001 [ 132.437988][ T7214] netlink: 192 bytes leftover after parsing attributes in process `syz.1.317'. [ 132.708820][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 132.846316][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856967][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.059361][ T7286] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 134.109719][ T7288] 8021q: VLANs not supported on gre0 [ 134.589765][ T7304] netlink: 92 bytes leftover after parsing attributes in process `syz.4.337'. [ 135.088203][ T7327] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.343'. [ 135.131349][ T7327] net_ratelimit: 4060 callbacks suppressed [ 135.131452][ T7327] netlink: zone id is out of range [ 135.204225][ T7327] netlink: zone id is out of range [ 135.210585][ T7327] netlink: zone id is out of range [ 135.215741][ T7327] netlink: zone id is out of range [ 135.221443][ T7327] netlink: zone id is out of range [ 135.226616][ T7327] netlink: zone id is out of range [ 135.254636][ T7327] netlink: zone id is out of range [ 135.271372][ T7336] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.290406][ T7327] netlink: zone id is out of range [ 135.295581][ T7327] netlink: zone id is out of range [ 135.312324][ T7336] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.331120][ T7327] netlink: zone id is out of range [ 135.338011][ T7336] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.348292][ T7336] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.360095][ T7336] geneve2: entered allmulticast mode [ 135.547733][ T7344] TCP: TCP_TX_DELAY enabled [ 136.079204][ T7361] netlink: 72 bytes leftover after parsing attributes in process `syz.3.354'. [ 136.112205][ T7361] netlink: 72 bytes leftover after parsing attributes in process `syz.3.354'. [ 136.594579][ T7379] netlink: 830 bytes leftover after parsing attributes in process `syz.2.359'. [ 137.153535][ T7390] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 137.182891][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 137.220571][ T7392] netlink: 'syz.3.362': attribute type 21 has an invalid length. [ 137.337860][ T7401] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 137.677046][ T7403] xt_CT: No such helper "syz0" [ 137.896303][ T7416] netlink: 44 bytes leftover after parsing attributes in process `syz.0.370'. [ 137.924121][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 137.948170][ T7416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.370'. [ 138.111299][ T5844] Bluetooth: hci4: command 0x041b tx timeout [ 138.446816][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 138.479001][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 138.693669][ T7444] netlink: 252 bytes leftover after parsing attributes in process `syz.3.379'. [ 138.952012][ T7447] bridge1: entered promiscuous mode [ 139.684903][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 140.119686][ T7482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.191601][ T7482] team0: Port device bond1 added [ 140.228875][ T7492] netlink: 76 bytes leftover after parsing attributes in process `syz.3.390'. [ 140.677269][ T7503] netlink: 788 bytes leftover after parsing attributes in process `syz.1.392'. [ 141.739643][ T7528] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 141.768467][ T7528] netlink: 'syz.3.400': attribute type 10 has an invalid length. [ 143.297368][ T7582] FAULT_INJECTION: forcing a failure. [ 143.297368][ T7582] name failslab, interval 1, probability 0, space 0, times 1 [ 143.362116][ T7582] CPU: 0 UID: 0 PID: 7582 Comm: syz.2.414 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 143.362146][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.362166][ T7582] Call Trace: [ 143.362175][ T7582] [ 143.362184][ T7582] dump_stack_lvl+0x189/0x250 [ 143.362230][ T7582] ? __pfx____ratelimit+0x10/0x10 [ 143.362262][ T7582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.362296][ T7582] ? __pfx__printk+0x10/0x10 [ 143.362324][ T7582] ? __pfx___might_resched+0x10/0x10 [ 143.362354][ T7582] ? fs_reclaim_acquire+0x7d/0x100 [ 143.362384][ T7582] should_fail_ex+0x414/0x560 [ 143.362413][ T7582] should_failslab+0xa8/0x100 [ 143.362437][ T7582] __kmalloc_cache_noprof+0x70/0x3d0 [ 143.362457][ T7582] ? cgw_create_job+0x1ee/0xca0 [ 143.362481][ T7582] cgw_create_job+0x1ee/0xca0 [ 143.362508][ T7582] ? __pfx___mutex_lock+0x10/0x10 [ 143.362537][ T7582] ? __pfx_cgw_create_job+0x10/0x10 [ 143.362566][ T7582] ? __pfx_cgw_create_job+0x10/0x10 [ 143.362585][ T7582] rtnetlink_rcv_msg+0x779/0xb70 [ 143.362611][ T7582] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 143.362631][ T7582] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.362650][ T7582] ? ref_tracker_free+0x63a/0x7d0 [ 143.362676][ T7582] ? __copy_skb_header+0xa7/0x550 [ 143.362705][ T7582] ? __pfx_ref_tracker_free+0x10/0x10 [ 143.362746][ T7582] netlink_rcv_skb+0x205/0x470 [ 143.362772][ T7582] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.362797][ T7582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.362837][ T7582] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.362861][ T7582] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.362892][ T7582] netlink_unicast+0x758/0x8d0 [ 143.362926][ T7582] netlink_sendmsg+0x805/0xb30 [ 143.362963][ T7582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.362993][ T7582] ? aa_sock_msg_perm+0x94/0x160 [ 143.363021][ T7582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.363047][ T7582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.363073][ T7582] __sock_sendmsg+0x219/0x270 [ 143.363110][ T7582] ____sys_sendmsg+0x505/0x830 [ 143.363148][ T7582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.363186][ T7582] ? import_iovec+0x74/0xa0 [ 143.363212][ T7582] ___sys_sendmsg+0x21f/0x2a0 [ 143.363242][ T7582] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.363312][ T7582] ? __fget_files+0x2a/0x420 [ 143.363335][ T7582] ? __fget_files+0x3a0/0x420 [ 143.363371][ T7582] __x64_sys_sendmsg+0x19b/0x260 [ 143.363402][ T7582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.363441][ T7582] ? __pfx_ksys_write+0x10/0x10 [ 143.363458][ T7582] ? rcu_is_watching+0x15/0xb0 [ 143.363506][ T7582] ? do_syscall_64+0xbe/0x3b0 [ 143.363529][ T7582] do_syscall_64+0xfa/0x3b0 [ 143.363546][ T7582] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.363575][ T7582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.363597][ T7582] ? clear_bhb_loop+0x60/0xb0 [ 143.363621][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.363642][ T7582] RIP: 0033:0x7f7c2118e929 [ 143.363667][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.363685][ T7582] RSP: 002b:00007f7c21f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.363706][ T7582] RAX: ffffffffffffffda RBX: 00007f7c213b5fa0 RCX: 00007f7c2118e929 [ 143.363721][ T7582] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 143.363733][ T7582] RBP: 00007f7c21f13090 R08: 0000000000000000 R09: 0000000000000000 [ 143.363746][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.363757][ T7582] R13: 0000000000000000 R14: 00007f7c213b5fa0 R15: 00007ffcd06f9d18 [ 143.363790][ T7582] [ 143.741067][ T7584] __nla_validate_parse: 4 callbacks suppressed [ 143.741086][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.415'. [ 143.997775][ T7599] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.420'. [ 144.036834][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 144.390635][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 144.401458][ T7615] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 144.446613][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 144.525320][ T7629] x_tables: duplicate underflow at hook 1 [ 144.755908][ T7636] FAULT_INJECTION: forcing a failure. [ 144.755908][ T7636] name failslab, interval 1, probability 0, space 0, times 0 [ 144.791109][ T7636] CPU: 1 UID: 0 PID: 7636 Comm: syz.2.429 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 144.791139][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.791152][ T7636] Call Trace: [ 144.791161][ T7636] [ 144.791170][ T7636] dump_stack_lvl+0x189/0x250 [ 144.791209][ T7636] ? __pfx____ratelimit+0x10/0x10 [ 144.791241][ T7636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.791275][ T7636] ? __pfx__printk+0x10/0x10 [ 144.791315][ T7636] ? __pfx___might_resched+0x10/0x10 [ 144.791348][ T7636] ? fs_reclaim_acquire+0x7d/0x100 [ 144.791379][ T7636] should_fail_ex+0x414/0x560 [ 144.791413][ T7636] should_failslab+0xa8/0x100 [ 144.791438][ T7636] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 144.791460][ T7636] ? __alloc_skb+0x112/0x2d0 [ 144.791488][ T7636] __alloc_skb+0x112/0x2d0 [ 144.791517][ T7636] netlink_ack+0x146/0xa50 [ 144.791539][ T7636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.791559][ T7636] ? ref_tracker_free+0x63a/0x7d0 [ 144.791586][ T7636] ? __copy_skb_header+0xa7/0x550 [ 144.791616][ T7636] ? __pfx_ref_tracker_free+0x10/0x10 [ 144.791657][ T7636] netlink_rcv_skb+0x28c/0x470 [ 144.791683][ T7636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.791707][ T7636] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.791747][ T7636] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.791771][ T7636] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.791802][ T7636] netlink_unicast+0x758/0x8d0 [ 144.791836][ T7636] netlink_sendmsg+0x805/0xb30 [ 144.791872][ T7636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.791902][ T7636] ? aa_sock_msg_perm+0x94/0x160 [ 144.791931][ T7636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.791958][ T7636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.791985][ T7636] __sock_sendmsg+0x219/0x270 [ 144.792020][ T7636] ____sys_sendmsg+0x505/0x830 [ 144.792054][ T7636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.792091][ T7636] ? import_iovec+0x74/0xa0 [ 144.792117][ T7636] ___sys_sendmsg+0x21f/0x2a0 [ 144.792147][ T7636] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.792216][ T7636] ? __fget_files+0x2a/0x420 [ 144.792239][ T7636] ? __fget_files+0x3a0/0x420 [ 144.792274][ T7636] __x64_sys_sendmsg+0x19b/0x260 [ 144.792312][ T7636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.792350][ T7636] ? __pfx_ksys_write+0x10/0x10 [ 144.792367][ T7636] ? rcu_is_watching+0x15/0xb0 [ 144.792405][ T7636] ? do_syscall_64+0xbe/0x3b0 [ 144.792429][ T7636] do_syscall_64+0xfa/0x3b0 [ 144.792447][ T7636] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.792478][ T7636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.792499][ T7636] ? clear_bhb_loop+0x60/0xb0 [ 144.792525][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.792545][ T7636] RIP: 0033:0x7f7c2118e929 [ 144.792564][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.792581][ T7636] RSP: 002b:00007f7c21f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.792604][ T7636] RAX: ffffffffffffffda RBX: 00007f7c213b5fa0 RCX: 00007f7c2118e929 [ 144.792624][ T7636] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 144.792637][ T7636] RBP: 00007f7c21f13090 R08: 0000000000000000 R09: 0000000000000000 [ 144.792649][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.792661][ T7636] R13: 0000000000000000 R14: 00007f7c213b5fa0 R15: 00007ffcd06f9d18 [ 144.792695][ T7636] [ 145.193562][ T7635] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 145.358679][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 145.626267][ T7647] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 145.636314][ T7647] netlink: 'syz.2.433': attribute type 2 has an invalid length. [ 145.655990][ T7651] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 145.678713][ T7651] net_ratelimit: 18 callbacks suppressed [ 145.678733][ T7651] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 145.703083][ T7662] x_tables: duplicate underflow at hook 1 [ 145.907714][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 146.518195][ T7692] netlink: 'syz.4.445': attribute type 39 has an invalid length. [ 147.144549][ T7714] C: renamed from team_slave_0 (while UP) [ 147.182735][ T7714] netlink: 164 bytes leftover after parsing attributes in process `syz.4.450'. [ 147.212372][ T7714] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 147.230545][ T5154] Bluetooth: hci3: command 0x0401 tx timeout [ 147.253648][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.450'. [ 147.455463][ T7727] openvswitch: netlink: Duplicate or invalid key (type 0). [ 147.480527][ T7727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.818591][ T7740] FAULT_INJECTION: forcing a failure. [ 147.818591][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 147.917164][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.1.455 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 147.917195][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.917208][ T7740] Call Trace: [ 147.917217][ T7740] [ 147.917227][ T7740] dump_stack_lvl+0x189/0x250 [ 147.917267][ T7740] ? __pfx____ratelimit+0x10/0x10 [ 147.917300][ T7740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.917334][ T7740] ? __pfx__printk+0x10/0x10 [ 147.917375][ T7740] should_fail_ex+0x414/0x560 [ 147.917408][ T7740] should_failslab+0xa8/0x100 [ 147.917434][ T7740] kmem_cache_alloc_noprof+0x73/0x3c0 [ 147.917468][ T7740] ? skb_clone+0x212/0x3a0 [ 147.917502][ T7740] skb_clone+0x212/0x3a0 [ 147.917535][ T7740] __netlink_deliver_tap+0x404/0x850 [ 147.917575][ T7740] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.917610][ T7740] netlink_deliver_tap+0x19c/0x1b0 [ 147.917637][ T7740] netlink_sendskb+0x68/0x140 [ 147.917662][ T7740] netlink_rcv_skb+0x28c/0x470 [ 147.917688][ T7740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.917713][ T7740] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.917753][ T7740] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.917777][ T7740] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.917809][ T7740] netlink_unicast+0x758/0x8d0 [ 147.917844][ T7740] netlink_sendmsg+0x805/0xb30 [ 147.917881][ T7740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.917910][ T7740] ? aa_sock_msg_perm+0x94/0x160 [ 147.917940][ T7740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.917967][ T7740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.917994][ T7740] __sock_sendmsg+0x219/0x270 [ 147.918038][ T7740] ____sys_sendmsg+0x505/0x830 [ 147.918072][ T7740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.918111][ T7740] ? import_iovec+0x74/0xa0 [ 147.918137][ T7740] ___sys_sendmsg+0x21f/0x2a0 [ 147.918172][ T7740] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.918242][ T7740] ? __fget_files+0x2a/0x420 [ 147.918265][ T7740] ? __fget_files+0x3a0/0x420 [ 147.918302][ T7740] __x64_sys_sendmsg+0x19b/0x260 [ 147.918333][ T7740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.918371][ T7740] ? __pfx_ksys_write+0x10/0x10 [ 147.918388][ T7740] ? rcu_is_watching+0x15/0xb0 [ 147.918428][ T7740] ? do_syscall_64+0xbe/0x3b0 [ 147.918452][ T7740] do_syscall_64+0xfa/0x3b0 [ 147.918470][ T7740] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.918502][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.918523][ T7740] ? clear_bhb_loop+0x60/0xb0 [ 147.918550][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.918570][ T7740] RIP: 0033:0x7fbae338e929 [ 147.918589][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.918606][ T7740] RSP: 002b:00007fbae427c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.918628][ T7740] RAX: ffffffffffffffda RBX: 00007fbae35b5fa0 RCX: 00007fbae338e929 [ 147.918644][ T7740] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 147.918657][ T7740] RBP: 00007fbae427c090 R08: 0000000000000000 R09: 0000000000000000 [ 147.918669][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.918681][ T7740] R13: 0000000000000000 R14: 00007fbae35b5fa0 R15: 00007fff094b1f38 [ 147.918715][ T7740] [ 148.815467][ T7767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 149.279443][ T7788] sctp: [Deprecated]: syz.4.466 (pid 7788) Use of int in max_burst socket option. [ 149.279443][ T7788] Use struct sctp_assoc_value instead [ 149.452477][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.466'. [ 150.224640][ T7814] FAULT_INJECTION: forcing a failure. [ 150.224640][ T7814] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.271537][ T7814] CPU: 0 UID: 0 PID: 7814 Comm: syz.1.470 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 150.271568][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.271581][ T7814] Call Trace: [ 150.271589][ T7814] [ 150.271598][ T7814] dump_stack_lvl+0x189/0x250 [ 150.271639][ T7814] ? __pfx____ratelimit+0x10/0x10 [ 150.271672][ T7814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.271706][ T7814] ? __pfx__printk+0x10/0x10 [ 150.271751][ T7814] should_fail_ex+0x414/0x560 [ 150.271784][ T7814] _copy_to_user+0x31/0xb0 [ 150.271808][ T7814] simple_read_from_buffer+0xe1/0x170 [ 150.271837][ T7814] proc_fail_nth_read+0x1df/0x250 [ 150.271867][ T7814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.271896][ T7814] ? rw_verify_area+0x258/0x650 [ 150.271928][ T7814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.271956][ T7814] vfs_read+0x200/0x980 [ 150.271996][ T7814] ? __pfx___mutex_lock+0x10/0x10 [ 150.272017][ T7814] ? __pfx_vfs_read+0x10/0x10 [ 150.272051][ T7814] ? __fget_files+0x2a/0x420 [ 150.272081][ T7814] ? __fget_files+0x3a0/0x420 [ 150.272103][ T7814] ? __fget_files+0x2a/0x420 [ 150.272137][ T7814] ksys_read+0x145/0x250 [ 150.272173][ T7814] ? __pfx_ksys_read+0x10/0x10 [ 150.272202][ T7814] ? rcu_is_watching+0x15/0xb0 [ 150.272242][ T7814] ? do_syscall_64+0xbe/0x3b0 [ 150.272266][ T7814] do_syscall_64+0xfa/0x3b0 [ 150.272284][ T7814] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.272314][ T7814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.272335][ T7814] ? clear_bhb_loop+0x60/0xb0 [ 150.272362][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.272382][ T7814] RIP: 0033:0x7fbae338d33c [ 150.272400][ T7814] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.272418][ T7814] RSP: 002b:00007fbae427c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.272440][ T7814] RAX: ffffffffffffffda RBX: 00007fbae35b5fa0 RCX: 00007fbae338d33c [ 150.272455][ T7814] RDX: 000000000000000f RSI: 00007fbae427c0a0 RDI: 0000000000000004 [ 150.272467][ T7814] RBP: 00007fbae427c090 R08: 0000000000000000 R09: 0000000000000000 [ 150.272480][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.272492][ T7814] R13: 0000000000000000 R14: 00007fbae35b5fa0 R15: 00007fff094b1f38 [ 150.272531][ T7814] [ 150.526081][ T7829] sctp: [Deprecated]: syz.2.474 (pid 7829) Use of int in max_burst socket option deprecated. [ 150.526081][ T7829] Use struct sctp_assoc_value instead [ 150.654524][ T7836] IPVS: length: 61 != 24 [ 151.376031][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 151.938734][ T7876] ipvlan2: entered promiscuous mode [ 151.955355][ T7876] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 152.242131][ T7891] nbd: socks must be embedded in a SOCK_ITEM attr [ 152.263485][ T7891] block nbd1: shutting down sockets [ 153.084221][ T7927] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 153.297263][ T7936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 153.534360][ T7941] syzkaller1: entered promiscuous mode [ 153.546669][ T7941] syzkaller1: entered allmulticast mode [ 154.164798][ T7963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 155.314826][ T8003] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 156.059079][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 156.228596][ T8043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.239723][ T8043] bridge0: port 3(bond2) entered blocking state [ 156.263974][ T8043] bridge0: port 3(bond2) entered disabled state [ 156.286320][ T8043] bond2: entered allmulticast mode [ 156.339306][ T8043] bond2: entered promiscuous mode [ 156.537304][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 156.592954][ T8062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.803385][ T8067] ipt_ECN: cannot use operation on non-tcp rule [ 156.946214][ T8079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.953555][ T8079] IPv6: NLM_F_CREATE should be set when creating new route [ 156.960973][ T8079] IPv6: NLM_F_CREATE should be set when creating new route [ 156.968243][ T8079] IPv6: NLM_F_CREATE should be set when creating new route [ 156.982012][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 156.996796][ T8082] syzkaller0: entered allmulticast mode [ 157.228927][ T8091] netlink: 'syz.1.541': attribute type 10 has an invalid length. [ 157.693374][ T8066] syzkaller0: left allmulticast mode [ 157.735438][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 157.764484][ T8107] netlink: 'syz.0.546': attribute type 5 has an invalid length. [ 157.790385][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 157.899178][ T8107] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 157.950585][ T8107] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 157.959265][ T8107] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 158.018842][ T8107] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 158.041150][ T8107] geneve2: entered promiscuous mode [ 158.046913][ T8107] geneve2: entered allmulticast mode [ 158.242017][ T8132] openvswitch: netlink: Duplicate or invalid key (type 0). [ 158.260702][ T8132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.684229][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 158.868613][ T8166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.562'. [ 158.950485][ T8174] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 158.957222][ T8174] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 159.045663][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 159.116897][ T8178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.128548][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.567'. [ 159.156119][ T8177] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 159.170383][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 159.232498][ T8180] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 159.240189][ T8180] netlink: 'syz.3.568': attribute type 2 has an invalid length. [ 159.306868][ T8180] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 159.318630][ T8180] netlink: 'syz.3.568': attribute type 2 has an invalid length. [ 159.337326][ T8180] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 159.362968][ T8180] netlink: 'syz.3.568': attribute type 2 has an invalid length. [ 159.384158][ T8180] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 159.397867][ T8180] netlink: 'syz.3.568': attribute type 2 has an invalid length. [ 160.261857][ T43] IPVS: starting estimator thread 0... [ 160.342758][ T8235] delete_channel: no stack [ 160.360532][ T8234] IPVS: using max 27 ests per chain, 64800 per kthread [ 160.867941][ T8258] syzkaller1: entered promiscuous mode [ 160.873522][ T8258] syzkaller1: entered allmulticast mode [ 161.019397][ T8263] syzkaller0: entered promiscuous mode [ 161.037051][ T8263] syzkaller0: entered allmulticast mode [ 161.270321][ T8269] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 162.163361][ T8302] __nla_validate_parse: 71 callbacks suppressed [ 162.163454][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 162.619022][ T8317] syz_tun: entered allmulticast mode [ 162.674021][ T8315] syz_tun: left allmulticast mode [ 162.802742][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 163.579102][ T8349] syzkaller1: entered promiscuous mode [ 163.602900][ T8349] syzkaller1: entered allmulticast mode [ 163.615753][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 163.664494][ T8349] bridge0: entered promiscuous mode [ 163.670206][ T8349] macvtap0: entered promiscuous mode [ 163.678669][ T8349] macvtap0: entered allmulticast mode [ 163.686906][ T8349] bridge0: entered allmulticast mode [ 163.790219][ T8360] bridge0: left allmulticast mode [ 163.805191][ T8360] bridge0: left promiscuous mode [ 163.925679][ T8365] IPv6: NLM_F_REPLACE set, but no existing node found! [ 164.096907][ T8373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.628'. [ 164.158301][ T8379] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 164.485696][ T8391] validate_nla: 59 callbacks suppressed [ 164.485717][ T8391] netlink: 'syz.4.633': attribute type 4 has an invalid length. [ 164.658491][ T8394] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 165.362911][ T8420] IPv6: addrconf: prefix option has invalid lifetime [ 165.387689][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 165.661963][ T8439] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 165.995821][ T8451] netlink: 'syz.1.651': attribute type 9 has an invalid length. [ 166.003724][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 166.119388][ T8452] batman_adv: batadv0: Adding interface: dummy0 [ 166.154196][ T8452] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.185991][ T8452] batman_adv: batadv0: Interface activated: dummy0 [ 166.487209][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a184400: rx timeout, send abort [ 166.988214][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b04400: rx timeout, send abort [ 166.997434][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a184400: abort rx timeout. Force session deactivation [ 167.496559][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b04400: abort rx timeout. Force session deactivation [ 167.797652][ T8512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.814913][ T8512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.827820][ T8512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 167.922169][ T8502] veth0_to_bond: entered allmulticast mode [ 168.031164][ T8512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.088094][ T8512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.161612][ T8512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.444797][ T8512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.470787][ T8512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.483006][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 168.499705][ T8512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.605973][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 168.704037][ T8512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.727298][ T8512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.755211][ T8512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.801174][ T8546] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 169.203497][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 169.213351][ T8512] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.250647][ T8512] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.267390][ T8512] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 169.308285][ T8512] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.351841][ T8512] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.360187][ T8512] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 169.383241][ T8566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.682'. [ 169.392606][ T8566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.682'. [ 169.401976][ T8566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.682'. [ 169.420690][ T8566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.682'. [ 169.443865][ T8512] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.464875][ T8512] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.477193][ T8512] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 169.611973][ T8512] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.651080][ T8512] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 169.670189][ T8512] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 170.436856][ T8594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.444668][ T8594] IPv6: NLM_F_CREATE should be set when creating new route [ 170.452073][ T8594] IPv6: NLM_F_CREATE should be set when creating new route [ 170.688704][ T8600] macvlan2: entered promiscuous mode [ 170.695919][ T8600] macvlan2: entered allmulticast mode [ 170.728439][ T8600] netlink: zone id is out of range [ 170.792592][ T8600] netlink: 64 bytes leftover after parsing attributes in process `syz.0.695'. [ 170.962784][ T8614] x_tables: duplicate underflow at hook 1 [ 171.349526][ T8629] x_tables: duplicate underflow at hook 1 [ 171.758743][ T8650] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 171.891129][ T8656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.716'. [ 172.177929][ T8668] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 172.897576][ T8693] netlink: 72 bytes leftover after parsing attributes in process `syz.4.730'. [ 172.929523][ T8697] netlink: 'syz.0.729': attribute type 20 has an invalid length. [ 173.021994][ T8701] netlink: 'syz.2.732': attribute type 13 has an invalid length. [ 173.052179][ T8701] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 173.659341][ T8736] __nla_validate_parse: 6 callbacks suppressed [ 173.659363][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 174.296439][ T8767] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 174.448418][ T8775] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 174.456645][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 174.529184][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 174.662474][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 174.923802][ T8789] netlink: 'syz.2.758': attribute type 10 has an invalid length. [ 174.980912][ T8789] syz_tun: entered promiscuous mode [ 175.039393][ T8789] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 175.066644][ T8795] sctp: [Deprecated]: syz.0.760 (pid 8795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.066644][ T8795] Use struct sctp_sack_info instead [ 175.090522][ T8798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.761'. [ 175.155901][ T8797] sctp: [Deprecated]: syz.0.760 (pid 8797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.155901][ T8797] Use struct sctp_sack_info instead [ 175.424250][ T8810] netlink: 84 bytes leftover after parsing attributes in process `syz.1.764'. [ 175.591923][ T8819] netlink: 252 bytes leftover after parsing attributes in process `syz.2.766'. [ 175.753362][ T8827] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 175.798011][ T8830] syz_tun: entered allmulticast mode [ 176.008733][ T8834] syz_tun: left allmulticast mode [ 176.029648][ T8836] netlink: 252 bytes leftover after parsing attributes in process `syz.3.773'. [ 176.192706][ T8842] netlink: 'syz.1.775': attribute type 4 has an invalid length. [ 176.257713][ T8842] IPv6: sit1: Disabled Multicast RS [ 176.301878][ T8842] sit1: entered allmulticast mode [ 176.406686][ T8850] xt_policy: output policy not valid in PREROUTING and INPUT [ 176.873355][ T30] audit: type=1804 audit(1750044445.213:2): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.783" name="/newroot/168/cgroup.controllers" dev="tmpfs" ino=880 res=1 errno=0 [ 176.952807][ T30] audit: type=1800 audit(1750044445.213:3): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.783" name="cgroup.controllers" dev="tmpfs" ino=880 res=0 errno=0 [ 177.009908][ T8880] Cannot find set identified by id 2 to match [ 177.286754][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 177.331447][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 177.921445][ T30] audit: type=1800 audit(1750044446.273:4): pid=8893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.787" name="cgroup.controllers" dev="tmpfs" ino=886 res=0 errno=0 [ 178.686355][ T8961] ªªªªª@: renamed from bridge_slave_0 (while UP) [ 178.749860][ T8966] __nla_validate_parse: 2 callbacks suppressed [ 178.749881][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.799'. [ 178.813086][ T8967] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 178.871740][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 178.889001][ T8974] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 179.000804][ T8966] netlink: 'syz.2.799': attribute type 7 has an invalid length. [ 179.095970][ T8966] : entered promiscuous mode [ 179.521784][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 179.865814][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 180.162169][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 180.252417][ T9043] tipc: Started in network mode [ 180.277884][ T9043] tipc: Node identity ac14140f, cluster identity 4711 [ 180.338860][ T9043] tipc: New replicast peer: 255.255.255.255 [ 180.424144][ T9043] tipc: Enabled bearer , priority 10 [ 180.467994][ T9053] netlink: 'syz.3.819': attribute type 12 has an invalid length. [ 180.558150][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 180.589084][ T9050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.620183][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 180.655347][ T9050] team0: Port device bond2 added [ 180.920183][ T9064] IPVS: set_ctl: invalid protocol: 153 127.0.0.1:20002 [ 181.226581][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 181.531337][ T5832] tipc: Node number set to 2886997007 [ 182.514272][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 182.550688][ T9138] macvlan0: entered allmulticast mode [ 182.565311][ T9138] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 182.576490][ T9131] netlink: 'syz.4.842': attribute type 21 has an invalid length. [ 182.600945][ T9138] netlink: 'syz.0.843': attribute type 2 has an invalid length. [ 182.708482][ T9135] dvmrp0: entered allmulticast mode [ 183.000517][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 183.757275][ T9183] __nla_validate_parse: 2 callbacks suppressed [ 183.757297][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 183.984872][ T9196] wg2: entered promiscuous mode [ 183.989967][ T9196] wg2: entered allmulticast mode [ 184.024767][ T9196] x_tables: duplicate underflow at hook 1 [ 184.197460][ T9203] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 184.456447][ T9208] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 184.487593][ T9211] netlink: 164 bytes leftover after parsing attributes in process `syz.4.862'. [ 184.934991][ T9235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.958422][ T9236] veth0: entered promiscuous mode [ 184.974680][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 185.017692][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.870'. [ 185.027453][ T9236] netlink: 36 bytes leftover after parsing attributes in process `syz.0.868'. [ 185.119308][ T9243] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 185.128729][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'. [ 185.203058][ T9239] bridge1: entered promiscuous mode [ 185.208788][ T9239] bridge1: entered allmulticast mode [ 185.246279][ T9239] team0: Port device bridge1 added [ 185.287726][ T9252] netlink: 'syz.1.872': attribute type 4 has an invalid length. [ 185.616301][ T9266] ªªªªª@: renamed from bridge_slave_0 (while UP) [ 186.036344][ T9284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.880'. [ 186.465646][ T9295] netem: incorrect gi model size [ 186.472373][ T9295] netem: change failed [ 186.994255][ T9323] netlink: 2116 bytes leftover after parsing attributes in process `syz.4.890'. [ 187.126069][ T9327] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.894'. [ 187.192128][ T9329] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 187.194013][ T9327] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 187.800124][ T9348] pim6reg: entered allmulticast mode [ 187.807150][ T9348] pim6reg: left allmulticast mode [ 188.191914][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 188.245481][ T9363] netlink: 'syz.0.904': attribute type 12 has an invalid length. [ 188.286144][ T9363] netlink: 'syz.0.904': attribute type 11 has an invalid length. [ 188.739125][ T9372] xt_CT: No such helper "pptp" [ 188.981108][ T9405] __nla_validate_parse: 1 callbacks suppressed [ 188.981129][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 189.329990][ T9416] can: request_module (can-proto-0) failed. [ 190.008695][ T9442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.923'. [ 190.198870][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 190.287411][ T9448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.925'. [ 190.702987][ T9463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.826893][ T9466] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 191.207777][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 191.218483][ T9480] tipc: Can't bind to reserved service type 0 [ 191.337643][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 191.357865][ T9486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.936'. [ 191.636544][ T9501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.942'. [ 191.778032][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.945'. [ 191.796980][ T9509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.945'. [ 192.450070][ T9542] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 192.483693][ T9542] netlink: 'syz.3.954': attribute type 3 has an invalid length. [ 192.718486][ T9546] xt_CT: No such helper "netbios-ns" [ 192.952732][ T9554] netlink: 'syz.1.957': attribute type 11 has an invalid length. [ 193.208330][ T9567] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 194.103374][ T9606] __nla_validate_parse: 8 callbacks suppressed [ 194.103396][ T9606] netlink: 504 bytes leftover after parsing attributes in process `syz.2.974'. [ 194.145462][ T9606] sctp: [Deprecated]: syz.2.974 (pid 9606) Use of int in max_burst socket option. [ 194.145462][ T9606] Use struct sctp_assoc_value instead [ 194.211242][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 194.276533][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.283726][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.324747][ T9614] erspan0: entered promiscuous mode [ 194.339350][ T9614] macsec1: entered promiscuous mode [ 194.413765][ T9614] erspan0: left promiscuous mode [ 194.668418][ T9627] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 194.729307][ T9629] vlan2: entered promiscuous mode [ 194.734596][ T9629] bond0: entered promiscuous mode [ 194.752995][ T9629] bond_slave_0: entered promiscuous mode [ 194.758912][ T9629] bond_slave_1: entered promiscuous mode [ 195.164378][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.172218][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.549102][ T9662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.986'. [ 195.551764][ T9637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.576458][ T5844] Bluetooth: hci4: command 0x041b tx timeout [ 195.587361][ T9637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.659998][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 195.662355][ T9671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 195.930634][ T9637] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 195.959759][ T9637] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.970530][ T9637] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.982275][ T9637] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.991201][ T9637] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.005553][ T9637] syzkaller0: left promiscuous mode [ 196.011319][ T9637] syzkaller0: left allmulticast mode [ 196.026523][ T9637] bridge1: left promiscuous mode [ 196.032188][ T9637] bridge1: left allmulticast mode [ 196.556388][ T9703] netlink: 44 bytes leftover after parsing attributes in process `syz.0.991'. [ 196.583791][ T9701] netlink: 'syz.1.994': attribute type 2 has an invalid length. [ 196.609149][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 196.701991][ T9712] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 196.859218][ T9719] Cannot find del_set index 2 as target [ 196.901688][ T9721] Cannot find del_set index 2 as target [ 197.137607][ T9734] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 197.168557][ T9734] veth1_vlan: entered allmulticast mode [ 197.256106][ T9734] team0: Device veth1_vlan failed to register rx_handler [ 197.343050][ T9742] netlink: 320 bytes leftover after parsing attributes in process `syz.3.1004'. [ 197.453815][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 197.596677][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 197.659746][ T9754] syzkaller0: entered promiscuous mode [ 197.670550][ T9754] syzkaller0: entered allmulticast mode [ 197.721651][ T9747] x_tables: duplicate underflow at hook 3 [ 197.735451][ T9767] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1010'. [ 197.770533][ T9767] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 197.872412][ T9774] netlink: del zone limit has 4 unknown bytes [ 199.620848][ T9782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.739492][ T9796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.857727][ T9796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.204484][ T9813] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1022'. [ 200.297272][ T9823] syzkaller1: entered promiscuous mode [ 200.308424][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 200.329794][ T9823] syzkaller1: entered allmulticast mode [ 200.422541][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'. [ 200.509491][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1027'. [ 200.518913][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1027'. [ 200.536512][ T9837] syz_tun: entered promiscuous mode [ 200.544260][ T9837] syz_tun: left promiscuous mode [ 200.644505][ T9840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1029'. [ 200.675236][ T9840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1029'. [ 200.696744][ T9840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1029'. [ 200.871154][ T9850] tc_dump_action: action bad kind [ 200.888858][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 201.047939][ T9863] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 201.236214][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1038'. [ 201.553593][ T9884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.912674][ T9909] netlink: 'syz.0.1050': attribute type 3 has an invalid length. [ 201.936843][ T9909] netlink: 'syz.0.1050': attribute type 1 has an invalid length. [ 202.289384][ T9921] FAULT_INJECTION: forcing a failure. [ 202.289384][ T9921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.326481][ T9921] CPU: 1 UID: 0 PID: 9921 Comm: syz.4.1054 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 202.326515][ T9921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.326528][ T9921] Call Trace: [ 202.326537][ T9921] [ 202.326546][ T9921] dump_stack_lvl+0x189/0x250 [ 202.326596][ T9921] ? __pfx____ratelimit+0x10/0x10 [ 202.326642][ T9921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.326675][ T9921] ? __pfx__printk+0x10/0x10 [ 202.326699][ T9921] ? __might_fault+0xb0/0x130 [ 202.326734][ T9921] should_fail_ex+0x414/0x560 [ 202.326767][ T9921] _copy_from_user+0x2d/0xb0 [ 202.326790][ T9921] ___sys_sendmsg+0x158/0x2a0 [ 202.326821][ T9921] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.326892][ T9921] ? __fget_files+0x2a/0x420 [ 202.326914][ T9921] ? __fget_files+0x3a0/0x420 [ 202.326956][ T9921] __x64_sys_sendmsg+0x19b/0x260 [ 202.326987][ T9921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.327026][ T9921] ? __pfx_ksys_write+0x10/0x10 [ 202.327043][ T9921] ? rcu_is_watching+0x15/0xb0 [ 202.327082][ T9921] ? do_syscall_64+0xbe/0x3b0 [ 202.327107][ T9921] do_syscall_64+0xfa/0x3b0 [ 202.327125][ T9921] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.327157][ T9921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.327177][ T9921] ? clear_bhb_loop+0x60/0xb0 [ 202.327204][ T9921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.327224][ T9921] RIP: 0033:0x7f799178e929 [ 202.327248][ T9921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.327265][ T9921] RSP: 002b:00007f7992655038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.327295][ T9921] RAX: ffffffffffffffda RBX: 00007f79919b5fa0 RCX: 00007f799178e929 [ 202.327310][ T9921] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 202.327324][ T9921] RBP: 00007f7992655090 R08: 0000000000000000 R09: 0000000000000000 [ 202.327336][ T9921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.327348][ T9921] R13: 0000000000000000 R14: 00007f79919b5fa0 R15: 00007ffc93fd9d28 [ 202.327383][ T9921] [ 202.599222][ T9924] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 203.214706][ T9956] FAULT_INJECTION: forcing a failure. [ 203.214706][ T9956] name failslab, interval 1, probability 0, space 0, times 0 [ 203.258430][ T9956] CPU: 1 UID: 0 PID: 9956 Comm: syz.2.1065 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 203.258464][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.258477][ T9956] Call Trace: [ 203.258485][ T9956] [ 203.258495][ T9956] dump_stack_lvl+0x189/0x250 [ 203.258537][ T9956] ? __pfx____ratelimit+0x10/0x10 [ 203.258569][ T9956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.258603][ T9956] ? __pfx__printk+0x10/0x10 [ 203.258632][ T9956] ? __pfx___might_resched+0x10/0x10 [ 203.258670][ T9956] should_fail_ex+0x414/0x560 [ 203.258702][ T9956] should_failslab+0xa8/0x100 [ 203.258727][ T9956] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 203.258748][ T9956] ? __alloc_skb+0x112/0x2d0 [ 203.258776][ T9956] __alloc_skb+0x112/0x2d0 [ 203.258804][ T9956] netlink_sendmsg+0x5c6/0xb30 [ 203.258840][ T9956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.258869][ T9956] ? aa_sock_msg_perm+0x94/0x160 [ 203.258898][ T9956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.258924][ T9956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.258950][ T9956] __sock_sendmsg+0x219/0x270 [ 203.258986][ T9956] ____sys_sendmsg+0x505/0x830 [ 203.259019][ T9956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.259055][ T9956] ? import_iovec+0x74/0xa0 [ 203.259080][ T9956] ___sys_sendmsg+0x21f/0x2a0 [ 203.259109][ T9956] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.259180][ T9956] ? __fget_files+0x2a/0x420 [ 203.259202][ T9956] ? __fget_files+0x3a0/0x420 [ 203.259236][ T9956] __x64_sys_sendmsg+0x19b/0x260 [ 203.259266][ T9956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.259304][ T9956] ? __pfx_ksys_write+0x10/0x10 [ 203.259320][ T9956] ? rcu_is_watching+0x15/0xb0 [ 203.259358][ T9956] ? do_syscall_64+0xbe/0x3b0 [ 203.259382][ T9956] do_syscall_64+0xfa/0x3b0 [ 203.259399][ T9956] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.259429][ T9956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.259450][ T9956] ? clear_bhb_loop+0x60/0xb0 [ 203.259475][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.259495][ T9956] RIP: 0033:0x7f7c2118e929 [ 203.259513][ T9956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.259532][ T9956] RSP: 002b:00007f7c21f13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.259554][ T9956] RAX: ffffffffffffffda RBX: 00007f7c213b5fa0 RCX: 00007f7c2118e929 [ 203.259569][ T9956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 203.259581][ T9956] RBP: 00007f7c21f13090 R08: 0000000000000000 R09: 0000000000000000 [ 203.259594][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.259606][ T9956] R13: 0000000000000000 R14: 00007f7c213b5fa0 R15: 00007ffcd06f9d18 [ 203.259638][ T9956] [ 203.911248][ T9977] netlink: 'syz.0.1071': attribute type 10 has an invalid length. [ 203.919310][ T9977] veth0_vlan: entered allmulticast mode [ 203.929758][ T9977] bridge0: port 3(veth0_vlan) entered blocking state [ 203.937326][ T9977] bridge0: port 3(veth0_vlan) entered disabled state [ 203.942214][ T9982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.953915][ T9977] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 203.978386][ T9982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.039098][ T9982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.233498][ T9992] netlink: 'syz.0.1075': attribute type 4 has an invalid length. [ 204.267217][ T9992] macvlan0: left allmulticast mode [ 204.618059][T10014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.707851][T10016] erspan0: entered promiscuous mode [ 204.728733][T10016] macsec1: entered promiscuous mode [ 204.759784][T10016] erspan0: left promiscuous mode [ 204.802200][T10025] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 204.806846][T10022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.974118][T10033] tipc: Enabled bearer , priority 0 [ 204.990914][T10029] tipc: Enabling of bearer rejected, already enabled [ 205.004345][T10033] syzkaller0: entered promiscuous mode [ 205.012144][T10033] syzkaller0: entered allmulticast mode [ 205.038067][T10029] tipc: Resetting bearer [ 205.119336][T10039] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 205.213110][T10044] __nla_validate_parse: 7 callbacks suppressed [ 205.213129][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 205.668392][T10060] trusted_key: syz.4.1097 sent an empty control message without MSG_MORE. [ 205.739209][T10028] tipc: Resetting bearer [ 205.747608][T10066] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1099'. [ 205.763252][T10066] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1099'. [ 205.783010][T10028] tipc: Disabling bearer [ 205.833029][T10076] syzkaller0: entered promiscuous mode [ 205.838711][T10076] syzkaller0: entered allmulticast mode [ 205.867691][T10066] syzkaller0: entered allmulticast mode [ 206.343532][T10092] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1108'. [ 206.453710][T10094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1109'. [ 206.496451][T10098] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1110'. [ 206.744591][T10103] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1110'. [ 207.205378][T10122] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1115'. [ 207.226212][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 207.844827][T10141] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 207.946782][T10158] !: renamed from dummy0 [ 208.444821][T10187] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1134'. [ 208.470554][T10182] sit0: entered promiscuous mode [ 208.478398][T10182] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 209.512027][T10232] netlink: 'syz.2.1148': attribute type 21 has an invalid length. [ 210.286309][T10255] __nla_validate_parse: 3 callbacks suppressed [ 210.286330][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 211.303499][T10300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1164'. [ 211.329184][T10301] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 211.713050][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 211.719128][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 211.728815][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.352218][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 212.366422][T10347] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1180'. [ 212.405031][T10347] batadv1: entered promiscuous mode [ 212.416195][T10347] batadv1: entered allmulticast mode [ 212.567090][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1183'. [ 212.589830][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 212.617683][T10353] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 212.639934][T10353] netlink: 'syz.4.1183': attribute type 2 has an invalid length. [ 212.776975][T10358] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002 [ 212.806235][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'. [ 212.820411][T10360] nbd: must specify a size in bytes for the device [ 213.631148][T10383] netlink: 'syz.1.1195': attribute type 2 has an invalid length. [ 213.654978][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 213.899174][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'. [ 214.171844][T10400] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 214.385841][T10409] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1203'. [ 214.410791][T10413] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 214.464876][T10413] netlink: 'syz.4.1202': attribute type 2 has an invalid length. [ 214.479380][T10413] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 214.534275][T10413] netlink: 'syz.4.1202': attribute type 2 has an invalid length. [ 215.104687][T10446] netlink: 'syz.3.1213': attribute type 19 has an invalid length. [ 215.244124][T10448] bond0: (slave team0): Releasing backup interface [ 215.267788][T10448] team0 (unregistering): Port device team_slave_0 removed [ 215.294278][T10448] team0 (unregistering): Port device team_slave_1 removed [ 216.255409][T10488] netlink: 'syz.1.1224': attribute type 2 has an invalid length. [ 216.543000][T10497] wg2: entered promiscuous mode [ 216.551372][T10497] wg2: entered allmulticast mode [ 216.654113][T10504] bond0: (slave syz_tun): Releasing backup interface [ 216.713439][T10504] bond0: (slave bridge0): Releasing backup interface [ 216.739757][T10504] batman_adv: batadv0: Interface deactivated: dummy0 [ 216.747193][T10504] batman_adv: batadv0: Removing interface: dummy0 [ 216.786156][T10504] ªªªªª@: left allmulticast mode [ 216.803682][T10504] ªªªªª@: left promiscuous mode [ 216.809068][T10504] bridge0: port 1(ªªªªª@) entered disabled state [ 216.820321][T10504] bridge_slave_1: left allmulticast mode [ 216.826092][T10504] bridge_slave_1: left promiscuous mode [ 216.833142][T10504] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.848381][T10504] bond0: (slave bond_slave_0): Releasing backup interface [ 216.876288][T10504] bond0: (slave bond_slave_1): Releasing backup interface [ 216.924696][T10504] team0: Port device team_slave_0 removed [ 216.959813][T10504] team0: Port device team_slave_1 removed [ 216.981722][T10504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.005400][T10504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.017689][T10504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.025471][T10504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.064524][T10504] team0: Port device geneve0 removed [ 217.087463][T10504] team0: Port device bond1 removed [ 217.105119][T10504] bond2: left allmulticast mode [ 217.110084][T10504] bond2: left promiscuous mode [ 217.123130][T10504] bridge0: port 3(bond2) entered disabled state [ 217.137710][T10516] __nla_validate_parse: 5 callbacks suppressed [ 217.137731][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 217.455370][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 217.797711][T10544] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 217.876709][T10546] tipc: Started in network mode [ 217.892885][T10546] tipc: Node identity 4eac2aa174fe, cluster identity 4711 [ 217.928692][T10546] tipc: Enabled bearer , priority 0 [ 218.062894][T10550] syzkaller0: entered promiscuous mode [ 218.068509][T10550] syzkaller0: entered allmulticast mode [ 218.074884][T10550] tipc: Resetting bearer [ 218.100474][T10541] tipc: Resetting bearer [ 218.353955][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1251'. [ 218.955780][ T9665] tipc: Node number set to 978463393 [ 219.683170][T10541] tipc: Disabling bearer [ 219.868515][T10580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1255'. [ 220.055767][T10587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.134406][T10587] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 220.569390][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 220.833020][T10621] SET target dimension over the limit! [ 220.859877][T10619] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1266'. [ 220.907326][T10623] x_tables: unsorted entry at hook 2 [ 221.247515][T10638] bridge0: port 3(gretap0) entered blocking state [ 221.266668][T10638] bridge0: port 3(gretap0) entered disabled state [ 221.287224][T10638] gretap0: entered allmulticast mode [ 221.337988][T10638] gretap0: entered promiscuous mode [ 221.345463][T10638] bridge0: port 3(gretap0) entered blocking state [ 221.352122][T10638] bridge0: port 3(gretap0) entered forwarding state [ 221.611632][T10652] Bluetooth: MGMT ver 1.23 [ 221.664082][T10648] bridge3: entered promiscuous mode [ 221.733182][T10647] bridge4: entered promiscuous mode [ 221.742565][T10657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1279'. [ 222.166680][T10673] sch_tbf: burst 4398 is lower than device lo mtu (39799) ! [ 222.318855][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 222.358638][T10683] syz_tun: entered promiscuous mode [ 222.728171][T10698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.207188][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1297'. [ 223.448000][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 224.024397][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1304'. [ 224.050522][T10749] netlink: 'syz.3.1304': attribute type 1 has an invalid length. [ 224.058296][T10749] netlink: 'syz.3.1304': attribute type 2 has an invalid length. [ 224.083420][T10749] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1304'. [ 224.098342][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 224.394871][T10761] pimreg: entered allmulticast mode [ 224.480067][T10766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.533179][T10761] netlink: 'syz.3.1308': attribute type 10 has an invalid length. [ 224.598974][T10761] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 224.757127][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 225.091737][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 225.112839][T10782] netlink: 42 bytes leftover after parsing attributes in process `syz.2.1315'. [ 225.142653][T10799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1318'. [ 226.423760][T10850] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 226.846185][T10826] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 227.682207][T10913] __nla_validate_parse: 12 callbacks suppressed [ 227.682228][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'. [ 228.039154][T10926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1359'. [ 229.762210][T10983] smc: net device bond0 erased user defined pnetid SYZ2 [ 229.949206][T10985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.992502][T10985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.023042][T10985] bond0 (unregistering): Released all slaves [ 230.378691][T11000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1385'. [ 230.393527][T11000] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1385'. [ 230.411601][T10999] netlink: 'syz.4.1384': attribute type 16 has an invalid length. [ 230.457776][T10999] netlink: 'syz.4.1384': attribute type 17 has an invalid length. [ 230.589269][T11009] netlink: 'syz.3.1387': attribute type 10 has an invalid length. [ 230.607595][T11009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1387'. [ 230.628946][T11009] batadv0: entered promiscuous mode [ 230.650289][T11009] batadv0: entered allmulticast mode [ 230.656569][T11009] bridge0: port 4(batadv0) entered blocking state [ 230.669241][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 230.691838][T11009] bridge0: port 4(batadv0) entered disabled state [ 230.701779][T11009] bridge0: port 4(batadv0) entered blocking state [ 230.708381][T11009] bridge0: port 4(batadv0) entered forwarding state [ 230.724313][T11015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1390'. [ 230.735306][T11016] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1389'. [ 230.932051][ T6741] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 230.941844][ T6741] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 231.108065][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 231.153139][ T5840] Bluetooth: hci4: command 0x041b tx timeout [ 231.591402][T11048] netlink: 'syz.4.1399': attribute type 1 has an invalid length. [ 231.599549][T11048] nbd: error processing sock list [ 231.636386][T11048] block nbd1: shutting down sockets [ 231.896967][T11058] syzkaller0: entered promiscuous mode [ 231.904457][T11058] syzkaller0: entered allmulticast mode [ 232.880691][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 232.898258][T11094] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 232.906016][T11094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.986642][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'. [ 234.185932][T11110] !: renamed from dummy0 (while UP) [ 234.374639][T11124] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1419'. [ 234.430832][T11124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1419'. [ 234.552427][T11131] syzkaller0: entered promiscuous mode [ 234.557964][T11131] syzkaller0: entered allmulticast mode [ 234.584255][T11131] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 234.815534][T11149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1429'. [ 234.871218][T11149] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1429'. [ 234.896859][T11149] tipc: Invalid UDP bearer configuration [ 234.896927][T11149] tipc: Enabling of bearer rejected, failed to enable media [ 235.043900][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1432'. [ 235.278249][T11167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1435'. [ 235.294512][T11169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1436'. [ 235.319108][T11171] netlink: 'syz.0.1436': attribute type 10 has an invalid length. [ 235.382609][T11176] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1437'. [ 235.450480][T11179] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.543578][T11171] bridge0: port 3(team0) entered blocking state [ 235.590549][T11171] bridge0: port 3(team0) entered disabled state [ 235.608660][T11171] team0: entered allmulticast mode [ 235.620196][T11171] team_slave_0: entered allmulticast mode [ 235.627271][T11171] team_slave_1: entered allmulticast mode [ 235.656562][T11171] team0: entered promiscuous mode [ 235.680655][T11171] team_slave_0: entered promiscuous mode [ 235.696459][T11171] team_slave_1: entered promiscuous mode [ 235.714816][T11171] bridge0: port 3(team0) entered blocking state [ 235.721291][T11171] bridge0: port 3(team0) entered forwarding state [ 235.750372][T11176] 0ªX¹¦D: renamed from gretap0 (while UP) [ 235.759221][T11176] 0ªX¹¦D: entered allmulticast mode [ 235.764999][T11176] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 237.218142][T11241] bridge0: port 5(veth0_to_bridge) entered blocking state [ 237.230035][T11241] bridge0: port 5(veth0_to_bridge) entered disabled state [ 237.246522][T11241] veth0_to_bridge: entered allmulticast mode [ 237.256526][T11241] veth0_to_bridge: entered promiscuous mode [ 237.272590][T11241] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.293926][T11241] bridge0: port 5(veth0_to_bridge) entered blocking state [ 237.301250][T11241] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 237.312520][ T5154] Bluetooth: hci3: command 0x0401 tx timeout [ 237.408516][T11246] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 237.625526][T11253] FAULT_INJECTION: forcing a failure. [ 237.625526][T11253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.654994][T11253] CPU: 1 UID: 0 PID: 11253 Comm: syz.1.1465 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 237.655035][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.655048][T11253] Call Trace: [ 237.655057][T11253] [ 237.655066][T11253] dump_stack_lvl+0x189/0x250 [ 237.655106][T11253] ? __pfx____ratelimit+0x10/0x10 [ 237.655148][T11253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.655181][T11253] ? __pfx__printk+0x10/0x10 [ 237.655203][T11253] ? __might_fault+0xb0/0x130 [ 237.655236][T11253] should_fail_ex+0x414/0x560 [ 237.655268][T11253] _copy_from_user+0x2d/0xb0 [ 237.655290][T11253] __sys_bind+0x199/0x3e0 [ 237.655314][T11253] ? __pfx___sys_bind+0x10/0x10 [ 237.655348][T11253] ? __pfx_ksys_write+0x10/0x10 [ 237.655365][T11253] ? rcu_is_watching+0x15/0xb0 [ 237.655406][T11253] __x64_sys_bind+0x7a/0x90 [ 237.655429][T11253] do_syscall_64+0xfa/0x3b0 [ 237.655447][T11253] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.655477][T11253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.655498][T11253] ? clear_bhb_loop+0x60/0xb0 [ 237.655524][T11253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.655544][T11253] RIP: 0033:0x7fbae338e929 [ 237.655563][T11253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.655581][T11253] RSP: 002b:00007fbae427c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 237.655603][T11253] RAX: ffffffffffffffda RBX: 00007fbae35b5fa0 RCX: 00007fbae338e929 [ 237.655618][T11253] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 237.655631][T11253] RBP: 00007fbae427c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.655644][T11253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.655656][T11253] R13: 0000000000000000 R14: 00007fbae35b5fa0 R15: 00007fff094b1f38 [ 237.655688][T11253] [ 238.434804][T11287] __nla_validate_parse: 35 callbacks suppressed [ 238.434825][T11287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1476'. [ 238.836041][T11304] FAULT_INJECTION: forcing a failure. [ 238.836041][T11304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.881862][T11304] CPU: 0 UID: 0 PID: 11304 Comm: syz.0.1483 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 238.881899][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.881912][T11304] Call Trace: [ 238.881921][T11304] [ 238.881930][T11304] dump_stack_lvl+0x189/0x250 [ 238.881971][T11304] ? __pfx____ratelimit+0x10/0x10 [ 238.882006][T11304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.882041][T11304] ? __pfx__printk+0x10/0x10 [ 238.882065][T11304] ? __might_fault+0xb0/0x130 [ 238.882099][T11304] should_fail_ex+0x414/0x560 [ 238.882140][T11304] _copy_from_user+0x2d/0xb0 [ 238.882161][T11304] __sys_bpf+0x1ed/0x860 [ 238.882192][T11304] ? __pfx___sys_bpf+0x10/0x10 [ 238.882235][T11304] ? ksys_write+0x22a/0x250 [ 238.882258][T11304] ? __pfx_ksys_write+0x10/0x10 [ 238.882275][T11304] ? rcu_is_watching+0x15/0xb0 [ 238.882315][T11304] __x64_sys_bpf+0x7c/0x90 [ 238.882342][T11304] do_syscall_64+0xfa/0x3b0 [ 238.882361][T11304] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.882392][T11304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.882412][T11304] ? clear_bhb_loop+0x60/0xb0 [ 238.882437][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.882457][T11304] RIP: 0033:0x7fa95238e929 [ 238.882476][T11304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.882494][T11304] RSP: 002b:00007fa9501f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.882517][T11304] RAX: ffffffffffffffda RBX: 00007fa9525b5fa0 RCX: 00007fa95238e929 [ 238.882533][T11304] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 238.882547][T11304] RBP: 00007fa9501f6090 R08: 0000000000000000 R09: 0000000000000000 [ 238.882560][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.882573][T11304] R13: 0000000000000000 R14: 00007fa9525b5fa0 R15: 00007ffeccb17438 [ 238.882607][T11304] [ 239.590029][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 239.614188][T11330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1489'. [ 239.761647][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1490'. [ 239.794427][T11334] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.832838][T11334] netlink: 'syz.0.1490': attribute type 21 has an invalid length. [ 239.847821][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1491'. [ 239.890669][T11334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1490'. [ 240.077446][T11355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 240.187881][T11352] FAULT_INJECTION: forcing a failure. [ 240.187881][T11352] name failslab, interval 1, probability 0, space 0, times 0 [ 240.226936][T11352] CPU: 0 UID: 0 PID: 11352 Comm: syz.0.1497 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 240.226969][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.226982][T11352] Call Trace: [ 240.226991][T11352] [ 240.227000][T11352] dump_stack_lvl+0x189/0x250 [ 240.227039][T11352] ? __pfx____ratelimit+0x10/0x10 [ 240.227071][T11352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.227105][T11352] ? __pfx__printk+0x10/0x10 [ 240.227136][T11352] ? __pfx___might_resched+0x10/0x10 [ 240.227174][T11352] should_fail_ex+0x414/0x560 [ 240.227207][T11352] should_failslab+0xa8/0x100 [ 240.227233][T11352] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 240.227255][T11352] ? __get_vm_area_node+0x13f/0x300 [ 240.227281][T11352] __get_vm_area_node+0x13f/0x300 [ 240.227309][T11352] __vmalloc_node_range_noprof+0x301/0x12f0 [ 240.227333][T11352] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 240.227365][T11352] ? is_bpf_text_address+0x26/0x2b0 [ 240.227425][T11352] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.227447][T11352] ? __might_fault+0xb0/0x130 [ 240.227465][T11352] ? __pfx_aa_get_newest_label+0x10/0x10 [ 240.227492][T11352] ? _parse_integer_limit+0x1ae/0x1f0 [ 240.227527][T11352] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 240.227554][T11352] __vmalloc_noprof+0xb1/0xf0 [ 240.227577][T11352] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 240.227611][T11352] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 240.227647][T11352] bpf_prog_alloc+0x3c/0x1a0 [ 240.227679][T11352] bpf_prog_load+0x735/0x1930 [ 240.227722][T11352] ? __pfx_bpf_prog_load+0x10/0x10 [ 240.227778][T11352] ? bpf_lsm_bpf+0x9/0x20 [ 240.227814][T11352] ? security_bpf+0x7e/0x300 [ 240.227841][T11352] __sys_bpf+0x5f1/0x860 [ 240.227872][T11352] ? __pfx___sys_bpf+0x10/0x10 [ 240.227913][T11352] ? ksys_write+0x22a/0x250 [ 240.227935][T11352] ? __pfx_ksys_write+0x10/0x10 [ 240.227951][T11352] ? rcu_is_watching+0x15/0xb0 [ 240.227999][T11352] __x64_sys_bpf+0x7c/0x90 [ 240.228026][T11352] do_syscall_64+0xfa/0x3b0 [ 240.228044][T11352] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.228076][T11352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.228098][T11352] ? clear_bhb_loop+0x60/0xb0 [ 240.228124][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.228145][T11352] RIP: 0033:0x7fa95238e929 [ 240.228165][T11352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.228183][T11352] RSP: 002b:00007fa9501f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.228207][T11352] RAX: ffffffffffffffda RBX: 00007fa9525b5fa0 RCX: 00007fa95238e929 [ 240.228222][T11352] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 240.228236][T11352] RBP: 00007fa9501f6090 R08: 0000000000000000 R09: 0000000000000000 [ 240.228249][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.228262][T11352] R13: 0000000000000000 R14: 00007fa9525b5fa0 R15: 00007ffeccb17438 [ 240.228295][T11352] [ 240.229696][T11352] syz.0.1497: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 240.364952][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 240.366424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 240.367344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 240.368244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 240.369137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 240.370038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 240.370962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 240.371825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 240.372759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 240.373699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 240.384329][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'. [ 241.478320][T11389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1507'. [ 241.647815][T11352] ,cpuset=/,mems_allowed=0-1 [ 241.653083][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.0.1497 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 241.653114][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.653127][T11352] Call Trace: [ 241.653136][T11352] [ 241.653146][T11352] dump_stack_lvl+0x189/0x250 [ 241.653188][T11352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.653222][T11352] ? __pfx__printk+0x10/0x10 [ 241.653246][T11352] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.653271][T11352] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.653297][T11352] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 241.653323][T11352] warn_alloc+0x214/0x310 [ 241.653356][T11352] ? __pfx_warn_alloc+0x10/0x10 [ 241.653383][T11352] ? __get_vm_area_node+0x13f/0x300 [ 241.653409][T11352] ? __get_vm_area_node+0x2b5/0x300 [ 241.653438][T11352] __vmalloc_node_range_noprof+0x326/0x12f0 [ 241.653465][T11352] ? is_bpf_text_address+0x26/0x2b0 [ 241.653524][T11352] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 241.653546][T11352] ? __might_fault+0xb0/0x130 [ 241.653566][T11352] ? __pfx_aa_get_newest_label+0x10/0x10 [ 241.653593][T11352] ? _parse_integer_limit+0x1ae/0x1f0 [ 241.653637][T11352] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 241.653667][T11352] __vmalloc_noprof+0xb1/0xf0 [ 241.653690][T11352] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 241.653724][T11352] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 241.653760][T11352] bpf_prog_alloc+0x3c/0x1a0 [ 241.653794][T11352] bpf_prog_load+0x735/0x1930 [ 241.653838][T11352] ? __pfx_bpf_prog_load+0x10/0x10 [ 241.653893][T11352] ? bpf_lsm_bpf+0x9/0x20 [ 241.653923][T11352] ? security_bpf+0x7e/0x300 [ 241.653950][T11352] __sys_bpf+0x5f1/0x860 [ 241.653981][T11352] ? __pfx___sys_bpf+0x10/0x10 [ 241.654024][T11352] ? ksys_write+0x22a/0x250 [ 241.654047][T11352] ? __pfx_ksys_write+0x10/0x10 [ 241.654068][T11352] ? rcu_is_watching+0x15/0xb0 [ 241.654109][T11352] __x64_sys_bpf+0x7c/0x90 [ 241.654136][T11352] do_syscall_64+0xfa/0x3b0 [ 241.654155][T11352] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.654187][T11352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.654208][T11352] ? clear_bhb_loop+0x60/0xb0 [ 241.654235][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.654256][T11352] RIP: 0033:0x7fa95238e929 [ 241.654275][T11352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.654294][T11352] RSP: 002b:00007fa9501f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.654316][T11352] RAX: ffffffffffffffda RBX: 00007fa9525b5fa0 RCX: 00007fa95238e929 [ 241.654332][T11352] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 241.654346][T11352] RBP: 00007fa9501f6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.654360][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.654373][T11352] R13: 0000000000000000 R14: 00007fa9525b5fa0 R15: 00007ffeccb17438 [ 241.654405][T11352] [ 241.654548][T11352] Mem-Info: [ 242.115870][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 242.180410][T11352] active_anon:3717 inactive_anon:0 isolated_anon:0 [ 242.180410][T11352] active_file:1473 inactive_file:39890 isolated_file:0 [ 242.180410][T11352] unevictable:768 dirty:135 writeback:0 [ 242.180410][T11352] slab_reclaimable:11066 slab_unreclaimable:100285 [ 242.180410][T11352] mapped:29105 shmem:1371 pagetables:968 [ 242.180410][T11352] sec_pagetables:0 bounce:0 [ 242.180410][T11352] kernel_misc_reclaimable:0 [ 242.180410][T11352] free:1333058 free_pcp:12036 free_cma:0 [ 245.370501][ C0] net_ratelimit: 5554 callbacks suppressed [ 245.370524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 245.389872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 245.402593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 245.415466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 245.428459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 245.441297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 245.454143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 245.467040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 245.479893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 245.492872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 245.990233][ C0] sched: DL replenish lagged too much [ 250.381061][ C0] net_ratelimit: 5884 callbacks suppressed [ 250.381085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 250.399849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 250.412760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 250.425526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 250.438594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 250.451533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 250.464448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 250.477358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 250.490412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 250.503264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.390676][ C0] net_ratelimit: 6097 callbacks suppressed [ 255.390698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.409498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.422228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.435188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.448148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.460894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.473640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.486487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.499496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.512217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 255.924143][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.946250][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.400492][ C0] net_ratelimit: 6456 callbacks suppressed [ 260.400515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 260.419240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 260.432073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 260.444804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 260.457780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 260.470744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 260.483609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 260.496485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 260.509325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 260.522462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 263.085246][T11352] Node 0 active_anon:14696kB inactive_anon:0kB active_file:5892kB inactive_file:159380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116228kB dirty:136kB writeback:404kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12080kB pagetables:3680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.410673][ C0] net_ratelimit: 5991 callbacks suppressed [ 265.410697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 265.429640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 265.442608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 265.455799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 265.468626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 265.481605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 265.494380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 265.507333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 265.520365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 265.533324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 270.420951][ C0] net_ratelimit: 6006 callbacks suppressed [ 270.420976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 270.439809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 270.452675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 270.466148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 270.478910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 270.491808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 270.504676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 270.517680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 270.530885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 270.543766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 275.430745][ C0] net_ratelimit: 6167 callbacks suppressed [ 275.430770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 275.449605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 275.462406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 275.475437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 275.488512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 275.501548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 275.514528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 275.527500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 275.540479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 275.553310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 280.440706][ C0] net_ratelimit: 5977 callbacks suppressed [ 280.440728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 280.459508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 280.472284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 280.485232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 280.498208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 280.511120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 280.524389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 280.537204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 280.550293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 280.563226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 284.626379][T11352] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.450345][ C0] net_ratelimit: 6016 callbacks suppressed [ 285.450369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 285.469283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 285.482150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 285.495166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 285.508099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 285.521117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 285.534132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 285.547055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 285.560045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 285.573014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 290.460475][ C0] net_ratelimit: 5959 callbacks suppressed [ 290.460498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 290.479713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 290.492767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 290.505878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 290.518847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 290.531905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 290.544845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 290.557830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 290.570881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 290.583850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 295.470498][ C0] net_ratelimit: 6002 callbacks suppressed [ 295.470522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 295.489444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 295.502536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 295.515503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 295.528260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 295.541638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 295.554725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 295.567663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 295.580685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 295.593466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 300.480342][ C0] net_ratelimit: 6034 callbacks suppressed [ 300.480366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 300.499259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 300.512384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 300.525388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 300.538319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 300.551230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 300.564058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 300.577137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 300.590061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 300.603525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 305.490300][ C0] net_ratelimit: 6047 callbacks suppressed [ 305.490328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 305.509146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 305.522195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 305.535174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 305.548167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 305.561154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 305.573933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 305.587045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 305.599845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 305.612790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 310.500768][ C0] net_ratelimit: 6111 callbacks suppressed [ 310.500792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 310.519522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 310.532541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 310.545288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 310.558329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 310.571316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 310.584027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 310.596766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 310.609642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 310.622578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 315.510774][ C0] net_ratelimit: 6103 callbacks suppressed [ 315.510796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 315.529763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 315.542615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 315.555884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 315.568948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 315.582056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 315.594872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 315.607880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 315.620914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 315.633685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 318.326774][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.350793][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.520353][ C0] net_ratelimit: 6157 callbacks suppressed [ 320.520377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 320.539009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 320.551974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 320.564807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 320.577920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 320.591043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 320.603858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 320.616928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 320.629937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 320.642748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 325.530564][ C0] net_ratelimit: 5980 callbacks suppressed [ 325.530588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 325.549588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 325.562667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 325.575772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 325.588549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 325.601658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 325.614761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 325.627698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 325.640492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 325.653422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 326.430437][T11352] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 330.540332][ C0] net_ratelimit: 5888 callbacks suppressed [ 330.540354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 330.559135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 330.571883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 330.584935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 330.598037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 330.610963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 330.623889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 330.636976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 330.650042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 330.663124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 335.550564][ C0] net_ratelimit: 6229 callbacks suppressed [ 335.550588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 335.569391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 335.582347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 335.595265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 335.608133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 335.620986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 335.633968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 335.646826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 335.659660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 335.672596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 340.560298][ C0] net_ratelimit: 6174 callbacks suppressed [ 340.560322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 340.579149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 340.591941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 340.604918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 340.617923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 340.630960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 340.644109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 340.656929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 340.669900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 340.683039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 345.570741][ C0] net_ratelimit: 5877 callbacks suppressed [ 345.570764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 345.589572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 345.602496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 345.615403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 345.628401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 345.641274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 345.654179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 345.667209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 345.680118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 345.693056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 350.580197][ C1] net_ratelimit: 7217 callbacks suppressed [ 350.580221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.580671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 350.587251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.598954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.613953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.623105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 350.634948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.646824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.662210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.670980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 355.590403][ C0] net_ratelimit: 8176 callbacks suppressed [ 355.590426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 355.591644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.597156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.609254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.621229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 355.636056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.645177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.657243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.669378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 355.684099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.600458][ C1] net_ratelimit: 8120 callbacks suppressed [ 360.600483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.600654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.610623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.619441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 360.631300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.643198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.658726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.668130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 360.679536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.691186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.610540][ C1] net_ratelimit: 8141 callbacks suppressed [ 365.610563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.610690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.617404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.629505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 365.645213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.653179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.665389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.677403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 365.692156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.701103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.100184][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 368.107186][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5831/1:b..l [ 368.115619][ C1] rcu: (detected by 1, t=10503 jiffies, g=37645, q=1474 ncpus=2) [ 368.123468][ C1] task:syz-executor state:R running task stack:21960 pid:5831 tgid:5831 ppid:5827 task_flags:0x400140 flags:0x00004000 [ 368.138109][ C1] Call Trace: [ 368.141428][ C1] [ 368.144414][ C1] __schedule+0x16f5/0x4d00 [ 368.148981][ C1] ? unwind_get_return_address+0x4d/0x90 [ 368.154672][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 368.160009][ C1] ? __pfx___schedule+0x10/0x10 [ 368.164894][ C1] ? stack_trace_save+0x9c/0xe0 [ 368.169777][ C1] ? stack_depot_save_flags+0x40/0x900 [ 368.175294][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 368.180629][ C1] preempt_schedule_irq+0xb5/0x150 [ 368.185800][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 368.191578][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 368.197432][ C1] irqentry_exit+0x6f/0x90 [ 368.201885][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.207912][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 368.213240][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b aa fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 368.232870][ C1] RSP: 0018:ffffc900044bf558 EFLAGS: 00000206 [ 368.239122][ C1] RAX: 327a7377289fad00 RBX: 0000000000000000 RCX: 327a7377289fad00 [ 368.247092][ C1] RDX: 0000000000000000 RSI: ffffffff8db6f5d0 RDI: ffffffff8be28300 [ 368.255059][ C1] RBP: ffffffff81729de5 R08: 0000000000000000 R09: ffffffff81729de5 [ 368.263115][ C1] R10: ffffc900044bf718 R11: ffffffff81acf990 R12: 0000000000000002 [ 368.271077][ C1] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000246 [ 368.279051][ C1] ? unwind_next_frame+0xa5/0x2390 [ 368.284170][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.290320][ C1] ? unwind_next_frame+0xa5/0x2390 [ 368.295451][ C1] ? unwind_next_frame+0xa5/0x2390 [ 368.300586][ C1] ? __se_sys_ioctl+0x47/0x170 [ 368.305354][ C1] ? unwind_next_frame+0xa5/0x2390 [ 368.310472][ C1] unwind_next_frame+0xc2/0x2390 [ 368.315415][ C1] ? unwind_next_frame+0xa5/0x2390 [ 368.320540][ C1] ? unwind_next_frame+0xa5/0x2390 [ 368.325656][ C1] ? security_file_ioctl+0xcb/0x2d0 [ 368.330856][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.337023][ C1] arch_stack_walk+0x11c/0x150 [ 368.341804][ C1] ? __se_sys_ioctl+0x47/0x170 [ 368.346595][ C1] stack_trace_save+0x9c/0xe0 [ 368.351318][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 368.356718][ C1] save_stack+0xf5/0x1f0 [ 368.360980][ C1] ? __pfx_save_stack+0x10/0x10 [ 368.365835][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 368.371127][ C1] ? __slab_free+0x326/0x400 [ 368.375747][ C1] ? qlist_free_all+0x97/0x140 [ 368.380537][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 368.386187][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 368.391237][ C1] ? __kmalloc_noprof+0x224/0x4f0 [ 368.396261][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.401985][ C1] ? tomoyo_path_number_perm+0x1e8/0x5a0 [ 368.407628][ C1] ? security_file_ioctl+0xcb/0x2d0 [ 368.412841][ C1] ? __se_sys_ioctl+0x47/0x170 [ 368.417629][ C1] ? page_ext_put+0x97/0xc0 [ 368.422144][ C1] __reset_page_owner+0x71/0x1f0 [ 368.427093][ C1] __free_frozen_pages+0xc71/0xe70 [ 368.432216][ C1] __slab_free+0x326/0x400 [ 368.436657][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 368.442726][ C1] ? __phys_addr+0xd3/0x180 [ 368.447336][ C1] qlist_free_all+0x97/0x140 [ 368.451946][ C1] kasan_quarantine_reduce+0x148/0x160 [ 368.457424][ C1] __kasan_slab_alloc+0x22/0x80 [ 368.462289][ C1] __kmalloc_noprof+0x224/0x4f0 [ 368.467150][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.472885][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 368.478446][ C1] ? tomoyo_domain+0xd9/0x130 [ 368.483138][ C1] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 368.488772][ C1] tomoyo_path_number_perm+0x1e8/0x5a0 [ 368.494234][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.500227][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 368.505552][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.510779][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.516029][ C1] security_file_ioctl+0xcb/0x2d0 [ 368.521054][ C1] __se_sys_ioctl+0x47/0x170 [ 368.525650][ C1] do_syscall_64+0xfa/0x3b0 [ 368.530151][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.535350][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.541423][ C1] ? clear_bhb_loop+0x60/0xb0 [ 368.546102][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.551994][ C1] RIP: 0033:0x7f7c2118e52b [ 368.556404][ C1] RSP: 002b:00007ffcd06fa040 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.564820][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7c2118e52b [ 368.572875][ C1] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 368.580841][ C1] RBP: 00007ffcd06fa0dc R08: 0000000000000000 R09: 00007ffcd06f9de7 [ 368.588809][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000013f [ 368.596775][ C1] R13: 00000000000927c0 R14: 000000000003af15 R15: 00007ffcd06fa130 [ 368.604755][ C1] [ 368.607784][ C1] rcu: rcu_preempt kthread starved for 278 jiffies! g37645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 368.618836][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 368.628836][ C1] rcu: RCU grace-period kthread stack dump: [ 368.634748][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 368.648309][ C1] Call Trace: [ 368.651617][ C1] [ 368.654577][ C1] __schedule+0x16f5/0x4d00 [ 368.659123][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 368.664368][ C1] ? schedule+0x165/0x360 [ 368.668735][ C1] ? __lock_acquire+0xab9/0xd20 [ 368.673625][ C1] ? __pfx___schedule+0x10/0x10 [ 368.678535][ C1] ? schedule+0x91/0x360 [ 368.682820][ C1] schedule+0x165/0x360 [ 368.687016][ C1] schedule_timeout+0x12b/0x270 [ 368.691901][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 368.697302][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 368.703233][ C1] ? __pfx_process_timeout+0x10/0x10 [ 368.708558][ C1] ? prepare_to_swait_event+0x341/0x380 [ 368.714148][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 368.719051][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 368.725332][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 368.730653][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 368.735899][ C1] ? finish_swait+0xcd/0x1f0 [ 368.740534][ C1] rcu_gp_kthread+0x99/0x390 [ 368.745167][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 368.750407][ C1] ? __kthread_parkme+0x7b/0x200 [ 368.755374][ C1] ? __kthread_parkme+0x1a1/0x200 [ 368.760452][ C1] kthread+0x70e/0x8a0 [ 368.764563][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 368.769796][ C1] ? __pfx_kthread+0x10/0x10 [ 368.774421][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.779658][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.784894][ C1] ? __pfx_kthread+0x10/0x10 [ 368.789525][ C1] ret_from_fork+0x3fc/0x770 [ 368.794152][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 368.799312][ C1] ? __switch_to_asm+0x39/0x70 [ 368.804107][ C1] ? __switch_to_asm+0x33/0x70 [ 368.808900][ C1] ? __pfx_kthread+0x10/0x10 [ 368.813526][ C1] ret_from_fork_asm+0x1a/0x30 [ 368.818340][ C1] [ 368.821376][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 368.827764][ C1] Sending NMI from CPU 1 to CPUs 0: [ 368.833013][ C0] NMI backtrace for cpu 0 [ 368.833035][ C0] CPU: 0 UID: 0 PID: 9675 Comm: kworker/0:7 Not tainted 6.16.0-rc1-syzkaller-00227-g8909f5f4ecd5 #0 PREEMPT(full) [ 368.833067][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.833085][ C0] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 368.833117][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x70 [ 368.833142][ C0] Code: 5b e9 f3 b0 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 e0 9c 92 <65> 8b 15 28 81 dc 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 368.833158][ C0] RSP: 0018:ffffc900000062f8 EFLAGS: 00000287 [ 368.833173][ C0] RAX: ffffffff8b327fe0 RBX: 000000000000008e RCX: ffff8880318fbc00 [ 368.833186][ C0] RDX: ffff8880318fbc00 RSI: 000000000000008e RDI: 00000000000000ba [ 368.833198][ C0] RBP: ffffc90000006430 R08: ffff88807e6f582b R09: 1ffff1100fcdeb05 [ 368.833211][ C0] R10: dffffc0000000000 R11: ffffed100fcdeb06 R12: 0000000000000000 [ 368.833224][ C0] R13: ffff8881497f9c80 R14: dffffc0000000000 R15: ffff8880598fe468 [ 368.833238][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 368.833253][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.833264][ C0] CR2: 00007f3c78800218 CR3: 000000000df38000 CR4: 00000000003526f0 [ 368.833280][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.833290][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.833301][ C0] Call Trace: [ 368.833308][ C0] [ 368.833314][ C0] batadv_interface_tx+0x760/0x14c0 [ 368.833335][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 368.833365][ C0] ? __pfx_batadv_interface_tx+0x10/0x10 [ 368.833390][ C0] dev_hard_start_xmit+0x2d4/0x830 [ 368.833422][ C0] __dev_queue_xmit+0x1adf/0x3a70 [ 368.833452][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 368.833485][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 368.833512][ C0] ? ip6t_do_table+0x1db/0x1560 [ 368.833537][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 368.833575][ C0] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 368.833597][ C0] br_dev_queue_push_xmit+0x6c5/0x890 [ 368.833616][ C0] ? br_nf_dev_queue_xmit+0x4fe/0x2680 [ 368.833639][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 368.833660][ C0] ? NF_HOOK+0x9e/0x6b0 [ 368.833682][ C0] NF_HOOK+0x61b/0x6b0 [ 368.833702][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 368.833722][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 368.833743][ C0] ? net_generic+0x1e/0x240 [ 368.833765][ C0] ? net_generic+0x1e/0x240 [ 368.833782][ C0] ? net_generic+0x1e/0x240 [ 368.833798][ C0] ? skb_pull+0xc1/0x1d0 [ 368.833824][ C0] br_nf_post_routing+0xb66/0xfe0 [ 368.833843][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 368.833866][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 368.833886][ C0] nf_hook_slow+0xc5/0x220 [ 368.833907][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 368.833923][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 368.833940][ C0] NF_HOOK+0x215/0x3c0 [ 368.833957][ C0] ? NF_HOOK+0x9e/0x3c0 [ 368.833972][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 368.833986][ C0] ? net_generic+0x1e/0x240 [ 368.834004][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 368.834024][ C0] ? net_generic+0x1e/0x240 [ 368.834043][ C0] br_forward_finish+0xd3/0x130 [ 368.834058][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 368.834077][ C0] br_nf_forward_finish+0xa40/0xe60 [ 368.834102][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 368.834124][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 368.834142][ C0] ? NF_HOOK+0x9e/0x6b0 [ 368.834160][ C0] ? NF_HOOK+0x9e/0x6b0 [ 368.834178][ C0] NF_HOOK+0x61b/0x6b0 [ 368.834198][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 368.834217][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 368.834243][ C0] br_nf_forward_ip+0x647/0x7e0 [ 368.834262][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 368.834284][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 368.834303][ C0] nf_hook_slow+0xc5/0x220 [ 368.834323][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 368.834339][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 368.834355][ C0] NF_HOOK+0x215/0x3c0 [ 368.834371][ C0] ? NF_HOOK+0x9e/0x3c0 [ 368.834386][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 368.834403][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 368.834425][ C0] __br_forward+0x41e/0x600 [ 368.834440][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 368.834460][ C0] ? __pfx___br_forward+0x10/0x10 [ 368.834478][ C0] ? skb_clone+0x246/0x3a0 [ 368.834503][ C0] maybe_deliver+0xb5/0x160 [ 368.834523][ C0] br_flood+0x31a/0x6a0 [ 368.834544][ C0] br_handle_frame_finish+0x14b4/0x19b0 [ 368.834571][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.834596][ C0] ? ip6t_do_table+0x1db/0x1560 [ 368.834620][ C0] ? nf_hook_slow+0x176/0x220 [ 368.834641][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.834660][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 368.834684][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 368.834705][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.834724][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 368.834745][ C0] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 368.834773][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.834797][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 368.834819][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 368.834842][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 368.834865][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 368.834886][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 368.834910][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 368.834928][ C0] br_handle_frame+0x97f/0x14c0 [ 368.834953][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 368.834971][ C0] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 368.834993][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 368.835012][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 368.835032][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 368.835053][ C0] __netif_receive_skb_core+0x10e1/0x4180 [ 368.835086][ C0] ? ip6_mc_input+0x9c3/0xbe0 [ 368.835118][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 368.835146][ C0] ? ip6_rcv_finish+0x29a/0x2d0 [ 368.835171][ C0] ? NF_HOOK+0x30c/0x3a0 [ 368.835193][ C0] ? skb_orphan+0xaf/0xd0 [ 368.835225][ C0] ? process_backlog+0x2d5/0x14f0 [ 368.835243][ C0] ? process_backlog+0x2d5/0x14f0 [ 368.835263][ C0] __netif_receive_skb+0x72/0x380 [ 368.835291][ C0] ? process_backlog+0x2d5/0x14f0 [ 368.835310][ C0] process_backlog+0x60e/0x14f0 [ 368.835327][ C0] ? __lock_acquire+0xab9/0xd20 [ 368.835359][ C0] ? __pfx_process_backlog+0x10/0x10 [ 368.835378][ C0] ? taprio_dequeue+0x26/0x550 [ 368.835400][ C0] __napi_poll+0xc7/0x480 [ 368.835415][ C0] ? net_rx_action+0x46d/0xe30 [ 368.835434][ C0] net_rx_action+0x707/0xe30 [ 368.835461][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 368.835498][ C0] handle_softirqs+0x286/0x870 [ 368.835528][ C0] ? do_softirq+0xec/0x180 [ 368.835556][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 368.835585][ C0] ? wg_packet_encrypt_worker+0x2dc/0x1720 [ 368.835612][ C0] do_softirq+0xec/0x180 [ 368.835636][ C0] [ 368.835642][ C0] [ 368.835648][ C0] ? __pfx_do_softirq+0x10/0x10 [ 368.835679][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 368.835704][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 368.835730][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 368.835766][ C0] ? wg_packet_encrypt_worker+0x2dc/0x1720 [ 368.835793][ C0] wg_packet_encrypt_worker+0x2dc/0x1720 [ 368.835835][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 368.835909][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 368.835939][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.835962][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 368.835988][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 368.836015][ C0] process_scheduled_works+0xae1/0x17b0 [ 368.836057][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.836092][ C0] worker_thread+0x8a0/0xda0 [ 368.836133][ C0] kthread+0x70e/0x8a0 [ 368.836153][ C0] ? __pfx_worker_thread+0x10/0x10 [ 368.836180][ C0] ? __pfx_kthread+0x10/0x10 [ 368.836200][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.836223][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.836249][ C0] ? __pfx_kthread+0x10/0x10 [ 368.836268][ C0] ret_from_fork+0x3fc/0x770 [ 368.836294][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 368.836322][ C0] ? __switch_to_asm+0x39/0x70 [ 368.836340][ C0] ? __switch_to_asm+0x33/0x70 [ 368.836357][ C0] ? __pfx_kthread+0x10/0x10 [ 368.836376][ C0] ret_from_fork_asm+0x1a/0x30 [ 368.836402][ C0] [ 370.620867][ C0] net_ratelimit: 6845 callbacks suppressed [ 370.620891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 370.622981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.627637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.639856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.651826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 370.666697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.675662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.687615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.699684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 370.714368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.630253][ C0] net_ratelimit: 8207 callbacks suppressed [ 375.630277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.632403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.637132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 375.649179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.661030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.675707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.685164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:4f:26:80:e9:69, vlan:0) [ 375.696958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.708829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.723632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)