last executing test programs: 3m3.182288588s ago: executing program 0 (id=3062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800e4ffb7030000eb0000008500000094000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0xfffffffffffffe58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x5) 3m3.02583399s ago: executing program 0 (id=3063): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002540)=""/4091, 0xffffffffffffff24, 0x202d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x1, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10001}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x3c}}, 0x24008084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_newneigh={0x28, 0x1d, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0x32}, [@NDA_LLADDR={0xa, 0x2, @random}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={0x2d0, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x84, 0x3, "f104818918e48dc723f2e0bfcc4d2925efed433e2a8592e6e41a2a638908b39c0b5b5f72dc6c1b5dfd6c25fd71046168a7483c1981eb517ebe81d4257cd2ccb077c0a2b8f7866735e9c88b4033772d8828d69317ca84a4efee586b577f7f3116b75ae7427549e525edf3fe232d3c7b4b5b093a32bda655a6d02f08b468d3fb41"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_WOL_SOPASS={0x60, 0x3, "5109d4403edc3f9443bd443b353cea407c649ccc5892e4c0a11057222227afd9d68ad18e8aad1c37620347d8daf04386623a92ab9e911639f07328b636a2851f15ca2ef559bb21470baa078440bf4a08a33af2c2e08c30b0bb0c42ca"}, @ETHTOOL_A_WOL_MODES={0x1c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x44, 0x5, "aeacf88368547540401e468a25428c138757b48eb394b316bbb1ff7f76f1b6a7fab945a6a9611bf4283b21c0d62798742fa1bec86cc68af51a758d89fd57973e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_VALUE={0x53, 0x4, "f7ea94f474fd86b3432c37ba2a4f5ed682704dd2bb0e6d800368107a07c79c35fec52b81fbd052419b6dd6909479200109e606c552f60a8bc72d6633b51aae8184869ce0d0231c413a063e8e355339"}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20000001}, 0x24044844) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r8, &(0x7f0000002300)=""/4103, 0x1007, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) sendto(r8, &(0x7f0000000440)="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", 0x122, 0x8000, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x1ac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22f0}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}]}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xfbfb}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xfb, 0x7, 0x1, 0x0, "80172fcea6bf0081d4605e4a6adc9f9a5409442425a26c961fed9e863cd2a0302515ce8ae1cde7929b414a2659196e16374887f7c7d9108fe454d9dbf2f4f0a5f2da5c41953c606717cdcc6f7f68be6cb508a3b21f5ba0cd86517b9d0223650c9db0e2e61e96245f44d8e5cf7364b1f8d6ca00e81a33fca19b7e67541c456034749cbb29b2a6d640186f94083a002c3580d42ff100c50662d66a1c8ce20d2fca58b03ff26d17db7acd20debb654914cd4916d58c05f6a20b825ab5821677132347fa72dc8132cbc20274a9aee345282b3ae8138e22fb0ecdfb11ac8bb33c39e83a4d57589aa55f9e85cef75a46c52ef60a64629c65bcf7"}]}], {0x14}}, 0x20c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0), 0x0) 3m2.842070095s ago: executing program 0 (id=3066): r0 = socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xff88}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2m55.618736627s ago: executing program 1 (id=3115): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x20044140) 2m55.384396644s ago: executing program 1 (id=3116): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x3}, [@TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = gettid() (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x9, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0]}, 0x40) (async, rerun: 64) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r3, 0x25, 0x0, @val=@iter={&(0x7f0000000380)=@task={r4, r4, r5}, 0x10}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000040000000000000002d0000091114a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeff9}, 0x94) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async, rerun: 64) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@union={0xc, 0x2, 0x0, 0x5, 0x1, 0x7, [{0xb}, {0xd, 0x2, 0x200}]}, @const={0xf}, @ptr={0xa, 0x0, 0x0, 0x2, 0x1}, @const={0xe, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000880)=""/7, 0x65, 0x7, 0x0, 0x3}, 0x28) (rerun: 64) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r10, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r11}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x9, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @generic={0x12, 0x3, 0x2, 0x10, 0xea9}, @cb_func={0x18, 0x5}]}, &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x61, &(0x7f0000000540)=""/97, 0x40f00, 0x7c, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000000900)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r12, r6, 0xffffffffffffffff, r6, r6], &(0x7f0000000ac0), 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6, r6}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2m55.169963716s ago: executing program 3 (id=3117): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000380)=""/40, &(0x7f00000003c0)=0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000000)=0x3ff, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='\x00', &(0x7f0000000140)=[0x1], 0x0, 0x5, 0x1, 0x0, r3}}, 0x40) 2m54.842129835s ago: executing program 1 (id=3118): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x106, 0xb}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000580)=0x4) r7 = socket(0xa, 0x5, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000080)) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1e4, 0x1, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "206a126f2afaa0acf2146de461ead69c5a32baf6ad4f5069c81e99c530ca540f108ac62365c20348046da42e62c0e9751f1e66741ea225e3e2ca5cd3eac78026885a46954719a8661183628cd5163f532105e5289691db24db38d7154a315c56585a65b4ef086f27b74fa7d0cbc8457be679cd4ccac748db1942cc6054d42ff65a193c84925d17c68cd8755f44bed781b08ded6369ba0908769edb4465b2ba8f2eb7fd80e9a1fcd1c485df2ef174e5565124fb90f7"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xee, 0x6, "73d0914ba1d9eacf131a6c4a797a1e7dc81314fbbafc2252d10f7a66d8c99fc1b245387dd159f57779d56dcea0ad2e8d10acad8a0d08315aa760f1df68c2a6658c9ffbfbf4a5fd9171eee3978eaf53fc84a35077b50a4b0f031def39791e0a4a6eb7bd2273a4171abceadb06c8260571bbe5b7823db5938f0eeacb63e19864aff62bcdca88debcfc48a3efaa43e489d1a1e44d9e568e8f9176902606e2c1ffbc2e444eee95f64db5c04823ef7363dfdb81f278025b95ea5a509912c93f239502520986d78d79f542f79a5eae1f73837341ac0b1852714f330cc394fdbdc618d453adf90cd8a7449ff8d1"}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) 2m54.639992012s ago: executing program 1 (id=3119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="bc01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m54.291288908s ago: executing program 3 (id=3122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e0001006309000000000000000000000c00028008000140fffff27414000000110001d7ec71fa9e802d5554586bd2c11a0bd5ba16828eda8f58de891f64ffeee145267119efc1d1d388fec40f031116211070b0c3cecca90c32674cd493b252a6a86776fd7a203d72b6e3f3850c9f428fd2c5eecb4878"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 2m54.181431691s ago: executing program 1 (id=3124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r8}, 0xc) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x48, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r5, {0xf, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r11, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)="03", 0x1}, {&(0x7f00000005c0)="21920152b5aba5c23f7cf374e3cc4c", 0xf}], 0x2}, 0x20004014) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="5fd63edbfd8ad8de16e68701009a", 0x0, 0x707, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m53.61804344s ago: executing program 2 (id=3127): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r1, 0x301}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) 2m53.525294737s ago: executing program 3 (id=3128): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200afff00000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m53.523330846s ago: executing program 2 (id=3129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000000)='$', 0x1) setsockopt$inet6_mreq(r6, 0x29, 0x14, 0x0, 0x0) 2m53.356585145s ago: executing program 3 (id=3130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, [@generic={0x91, 0x1, 0x1, 0xa0}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r2}, 0x20) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000680)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0x0) r11 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) ioctl$int_in(r11, 0x5452, &(0x7f0000000000)=0xe) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000080), &(0x7f0000000100)=r9}, 0x20) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @extra_flags={0x8, 0x18, 0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0x48841}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="80200100420000002c0012800e00010069703665727370616e00000018000280040012000500160002000000080005"], 0x4c}, 0x1, 0xba01, 0x0, 0x20008812}, 0x20004014) 2m53.350043603s ago: executing program 4 (id=3131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0xe, 0x80, 0x3, 0xb, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x5, 0x1, 0x2, 0x8, 0x3}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_lifetime={0x4, 0x3, 0x8, 0x8000000000000001, 0x1, 0x5}]}, 0x58}}, 0x4) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r4, 0x8) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000003ac0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c40)="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", 0xa6a}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r8, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r10, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {0x0, 0x400b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x5, 0x80000000, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, [@IFLA_PHYS_PORT_ID={0x1e, 0x22, "92fe6bd175cfd5a4e7197c2abaf16ca590b3837b2c61ee428859"}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x40000) 2m53.19819595s ago: executing program 1 (id=3132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a010400000000000000000a0004050900010073797a3100000000200004801c0001800a00010071756575650000000c000293080004400000000d0900020073797a32000000000500074089000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4031}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0xa6, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x11}, 0x0) 2m52.983261344s ago: executing program 4 (id=3133): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffff"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="bc01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m52.898334174s ago: executing program 2 (id=3134): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000e1419da9e3009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r7, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r8 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r8, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) 2m52.897663837s ago: executing program 0 (id=3068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r12}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r13, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r2, 0x2}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x80, r1}, 0x38) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r14, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x20, 0x26, 0x723, 0x0, 0x0, "", [@nested={0xd, 0xa9, 0x0, 0x1, [@generic="57d753865b", @nested={0x4, 0xeb}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) sendmsg$NFT_MSG_GETTABLE(r14, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xb0, 0x1, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x77, 0x6, "9795e2adaa35b7e728dd59d6be346eff85ec1c5703261e813e4c68ed9824bb3500c030fa8e78c79d2ea67c5979c8a43850629583dc70183db3727a433a6479625b5336fae5b674c736155bee1434e488bbf5977e50ad9ed10a2a316931f4a47a5982c9417581fc9125bc8713c5dd95b24b345c"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24000041}, 0x4040801) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f00000000c0)) 2m52.472910338s ago: executing program 4 (id=3136): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000140000004600003f00000000008490600dffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c40005020000000000000b000002d58838000391000000"], 0xfd6c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) close(0xffffffffffffffff) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff8f, &(0x7f0000000080)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 2m52.396148698s ago: executing program 3 (id=3137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3, 0x3}, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="e7ffffffffff"}) write$bt_hci(r1, 0x0, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0x9, 0x70bd25, 0x25dfdc01, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc4, &(0x7f0000000840)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) write$bt_hci(r1, 0x0, 0x6) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000140)=""/123, 0x7b}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "ffffffb57ffdffff", "bb6710bc8150e4a1a117d7b27caf00", "fbef00", "3d8efa05fdffffff"}, 0x28) ioctl$XFS_IOC_EXCHANGE_RANGE(r3, 0x80108907, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x288, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x230, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x2ba810b9, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x7}, {0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x1, 0x5, 0xfffffffa, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x3, 0x4, 0x2c7, 0x80000001, 0x1, 0x2, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r6, 0x8ec6, 0x10}, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="441000002f00090025bd7000000000000400000008000c0002000000261016"], 0x1044}, 0x1, 0x100000, 0x0, 0x42014}, 0x4080040) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) 2m52.208966981s ago: executing program 0 (id=3138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0xb0, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x10) unshare(0x22020600) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r7, r6, 0x4, r6}, 0x10) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304, 0x3a}, "56db7a2700f91000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@setlink={0x38, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2m51.959419685s ago: executing program 4 (id=3139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200b0ff00000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m51.411881341s ago: executing program 2 (id=3140): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1000000200000000100100000a000000"], 0x10}, 0xfc40) 2m51.295275973s ago: executing program 4 (id=3141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x80}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x28}}, 0x54) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x28}}, 0x54) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000002c0)={r1, &(0x7f0000000040)='.-\'\x00', 0x100, &(0x7f0000000140)={@align=0x4, {0x0, 0x6, 0x6, 0xf147}}, 0x1000, &(0x7f0000000180), &(0x7f0000000200)=0xe}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x8, 0x7, 0x9, 0x7, {{0x15, 0x4, 0x2, 0x1, 0x54, 0x67, 0x0, 0xb, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@generic={0x83, 0x2}, @timestamp={0x44, 0x1c, 0x74, 0x0, 0x5, [0x4, 0x4, 0x9, 0xfec, 0x80000000, 0x1]}, @generic={0x89, 0x12, "6ddb94d596843f12ac8f97abda8711c6"}, @timestamp={0x44, 0x10, 0x9d, 0x0, 0x0, [0x7ff, 0xff, 0x5]}]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200"}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200"}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0x2, 0x5, 0x1f, 0x1103, 0xffffffffffffffff, 0x3999, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0x2, 0x5, 0x1f, 0x1103, 0xffffffffffffffff, 0x3999, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES16=r4], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008"], 0x50) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r5}, 0x18) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r5}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r5}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r5}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) socket(0x28, 0x5, 0x0) close(0x3) (async) close(0x3) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 2m51.07429776s ago: executing program 2 (id=3142): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000004c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007013000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9900000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2m50.975151646s ago: executing program 0 (id=3143): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) unshare(0x20000400) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x119}, {0x10, 0x84, 0x2}], 0x20}}], 0x1, 0xc880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r9, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 2m50.895404138s ago: executing program 2 (id=3144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4620, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000015c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', r4, 0x29, 0x9, 0x53, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x80, 0x40, 0x3ff, 0x800}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x2, 0x3, 0x42, 0x1, 0x6, '\x00', r5, r1, 0x3, 0x3, 0x0, 0x3}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb, r4}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffffffff}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2m50.478249177s ago: executing program 4 (id=3145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffff"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="bc01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m50.477328149s ago: executing program 3 (id=3146): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in6=@private2, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1fc}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r3}) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x24, 0x33, 0x40, @remote, @local, {[], "3b040000000012340000000100"/36}}}, 0x4c) 2m14.838483232s ago: executing program 32 (id=3143): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) unshare(0x20000400) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) sendmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x119}, {0x10, 0x84, 0x2}], 0x20}}], 0x1, 0xc880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r9, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 1m22.312836893s ago: executing program 33 (id=3144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4620, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000015c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', r4, 0x29, 0x9, 0x53, 0x2, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x80, 0x40, 0x3ff, 0x800}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x2, 0x3, 0x42, 0x1, 0x6, '\x00', r5, r1, 0x3, 0x3, 0x0, 0x3}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb, r4}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffffffff}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 0s ago: executing program 34 (id=3146): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x7ff}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in6=@private2, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x1fc}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r3}) nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x24, 0x33, 0x40, @remote, @local, {[], "3b040000000012340000000100"/36}}}, 0x4c) kernel console output (not intermixed with test programs): 476.382184][T16580] tc action pedit unable to extract header offset for header type (0x5) [ 476.382222][T16580] tc action pedit unable to extract header offset for header type (0x5) [ 476.382237][T16580] tc action pedit unable to extract header offset for header type (0x5) [ 476.382252][T16580] tc action pedit unable to extract header offset for header type (0x5) [ 476.382266][T16580] tc action pedit unable to extract header offset for header type (0x5) [ 476.382291][T16580] tc action pedit unable to extract header offset for header type (0x5) [ 476.382305][T16580] tc action pedit unable to extract header offset for header type (0x5) [ 476.382319][T16580] tc action pedit unable to extract header offset for header type (0x5) [ 476.382333][T16580] tc action pedit unable to extract header offset for header type (0x5) [ 476.382346][T16580] tc action pedit unable to extract header offset for header type (0x5) [ 476.382372][T16580] 0: reclassify loop, rule prio 0, protocol 800 [ 476.810313][T16596] syzkaller0: left promiscuous mode [ 476.810338][T16596] syzkaller0: left allmulticast mode [ 477.131397][T16614] geneve8: entered promiscuous mode [ 477.352532][ T8405] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 477.623194][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2547'. [ 477.697136][T16630] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 477.774660][T16625] team0: Port device team_slave_0 removed [ 477.815671][T16638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2549'. [ 477.833430][T16630] xt_CT: No such helper "netbios-ns" [ 477.861805][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2550'. [ 477.909820][ T8407] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 478.137681][T16644] netlink: 'syz.0.2552': attribute type 2 has an invalid length. [ 478.250261][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2555'. [ 478.415732][T16655] vlan3: entered promiscuous mode [ 478.415757][T16655] team0: entered promiscuous mode [ 478.415773][T16655] team_slave_0: entered promiscuous mode [ 478.416031][T16655] team_slave_1: entered promiscuous mode [ 478.855962][T16677] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 478.991971][T16668] syzkaller1: entered allmulticast mode [ 479.146214][T16695] netlink: 'syz.4.2564': attribute type 12 has an invalid length. [ 479.315649][T16702] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.528680][T16707] __nla_validate_parse: 3 callbacks suppressed [ 479.528704][T16707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2566'. [ 479.721586][T16719] hsr0: entered allmulticast mode [ 479.721612][T16719] hsr_slave_0: entered allmulticast mode [ 479.721630][T16719] hsr_slave_1: entered allmulticast mode [ 480.687380][T16757] geneve0: entered promiscuous mode [ 480.710661][T16757] geneve0: left promiscuous mode [ 480.765311][T16760] netlink: 'syz.3.2575': attribute type 11 has an invalid length. [ 481.219347][T16768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2578'. [ 481.700882][T16782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2582'. [ 481.968961][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2584'. [ 482.007624][T16797] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2585'. [ 482.008297][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'. [ 482.184488][T16799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.184517][T16799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.573134][T16787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.744442][T16818] s: renamed from veth0 (while UP) [ 482.755882][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2589'. [ 482.770711][T16817] netlink: 'syz.4.2589': attribute type 12 has an invalid length. [ 482.848960][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2589'. [ 482.886506][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'. [ 482.999321][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2590'. [ 483.540518][T16846] netlink: 'syz.1.2598': attribute type 15 has an invalid length. [ 484.085180][T16862] netlink: 'syz.3.2603': attribute type 2 has an invalid length. [ 484.085942][T16863] netlink: 'syz.3.2603': attribute type 2 has an invalid length. [ 484.870563][T16886] __nla_validate_parse: 1 callbacks suppressed [ 484.870636][T16886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2608'. [ 485.364428][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2612'. [ 485.364470][T16908] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 485.741283][T16922] Cannot find set identified by id 0 to match [ 485.749421][T16922] nbd7: detected capacity change from 0 to 127 [ 485.837993][T16922] lo speed is unknown, defaulting to 1000 [ 485.850523][T16922] wg2 speed is unknown, defaulting to 1000 [ 485.893808][T16922] lo speed is unknown, defaulting to 1000 [ 486.352606][T16936] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2618'. [ 487.040538][ T4932] block nbd7: Receive control failed (result -104) [ 487.150009][T16982] netlink: 'syz.4.2630': attribute type 11 has an invalid length. [ 487.156108][T16983] sctp: [Deprecated]: syz.1.2629 (pid 16983) Use of int in maxseg socket option. [ 487.156108][T16983] Use struct sctp_assoc_value instead [ 487.447635][T16991] netlink: 'syz.1.2634': attribute type 8 has an invalid length. [ 487.489033][T16990] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.2633'. [ 487.737855][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 487.741226][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 488.245032][T17021] netlink: 'syz.1.2642': attribute type 11 has an invalid length. [ 488.606413][T17044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2649'. [ 489.080820][ T2572] block nbd7: Connection timed out, retrying (0/1 alive) [ 489.080885][ T2572] block nbd7: Connection timed out, retrying (0/1 alive) [ 489.080933][ T2572] block nbd7: Connection timed out, retrying (0/1 alive) [ 489.080979][ T2572] block nbd7: Connection timed out, retrying (0/1 alive) [ 489.081058][ T2572] block nbd7: Dead connection, failed to find a fallback [ 489.081076][ T2572] block nbd7: shutting down sockets [ 489.081090][ T2572] blk_print_req_error: 84 callbacks suppressed [ 489.081112][ T2572] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.081143][ T2572] buffer_io_error: 138 callbacks suppressed [ 489.081155][ T2572] Buffer I/O error on dev nbd7, logical block 3, async page read [ 489.081185][ T2572] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.081212][ T2572] Buffer I/O error on dev nbd7, logical block 2, async page read [ 489.081235][ T2572] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.081261][ T2572] Buffer I/O error on dev nbd7, logical block 1, async page read [ 489.081285][ T2572] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.081310][ T2572] Buffer I/O error on dev nbd7, logical block 0, async page read [ 489.081535][ T2572] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 489.081563][ T2572] Buffer I/O error on dev nbd7, logical block 0, async page read [ 489.081587][ T2572] Buffer I/O error on dev nbd7, logical block 1, async page read [ 489.081604][ T2572] Buffer I/O error on dev nbd7, logical block 2, async page read [ 489.081620][ T2572] Buffer I/O error on dev nbd7, logical block 3, async page read [ 489.081863][ T2572] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 489.081891][ T2572] Buffer I/O error on dev nbd7, logical block 0, async page read [ 489.081909][ T2572] Buffer I/O error on dev nbd7, logical block 1, async page read [ 489.082066][ T2572] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 489.082247][ T2572] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 489.082441][ T2572] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 489.084296][ T2572] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 489.084545][ T5625] ldm_validate_partition_table(): Disk read failed. [ 489.086742][ T5625] Dev nbd7: unable to read RDB block 0 [ 489.087781][ T5625] nbd7: unable to read partition table [ 489.331750][ T5625] ldm_validate_partition_table(): Disk read failed. [ 489.356444][ T5625] Dev nbd7: unable to read RDB block 0 [ 489.358038][ T5625] nbd7: unable to read partition table [ 489.725053][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 489.907379][T17094] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 489.924660][T17092] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 489.971125][T17082] netlink: zone id is out of range [ 489.971143][T17082] netlink: zone id is out of range [ 489.971152][T17082] netlink: zone id is out of range [ 489.971161][T17082] netlink: zone id is out of range [ 489.971170][T17082] netlink: zone id is out of range [ 489.971179][T17082] netlink: zone id is out of range [ 489.971187][T17082] netlink: zone id is out of range [ 490.256424][T17103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2663'. [ 490.256459][T17103] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2663'. [ 491.436183][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2665'. [ 491.436538][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2665'. [ 491.498081][T14706] tipc: Subscription rejected, illegal request [ 491.593793][T17137] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2668'. [ 491.959685][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 492.021930][T17156] syzkaller0: entered promiscuous mode [ 492.021955][T17156] syzkaller0: entered allmulticast mode [ 492.290147][T17161] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 492.290921][T17161] batman_adv: batadv0: Adding interface: gretap2 [ 492.290937][T17161] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.290972][T17161] batman_adv: batadv0: Interface activated: gretap2 [ 492.442605][T17173] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2678'. [ 492.803572][T17183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2681'. [ 492.803598][T17183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2681'. [ 492.848914][T17191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2680'. [ 492.909121][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2683'. [ 493.219901][T17199] net_ratelimit: 5 callbacks suppressed [ 493.220003][T17199] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 493.297466][T17187] wg2 speed is unknown, defaulting to 1000 [ 493.323515][T17196] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 493.351602][T17187] lo speed is unknown, defaulting to 1000 [ 494.994257][T17263] netlink: 'syz.3.2695': attribute type 22 has an invalid length. [ 495.030420][T17263] netlink: 'syz.3.2695': attribute type 22 has an invalid length. [ 495.085814][T17262] syzkaller0: Caught tx_queue_len zero misconfig [ 495.104067][T17265] FAULT_INJECTION: forcing a failure. [ 495.104067][T17265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.104105][T17265] CPU: 0 UID: 0 PID: 17265 Comm: syz.4.2696 Not tainted syzkaller #0 PREEMPT(full) [ 495.104131][T17265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.104145][T17265] Call Trace: [ 495.104249][T17265] [ 495.104319][T17265] dump_stack_lvl+0xe8/0x150 [ 495.104474][T17265] should_fail_ex+0x410/0x560 [ 495.104576][T17265] _copy_to_user+0x31/0xb0 [ 495.104657][T17265] simple_read_from_buffer+0xe1/0x170 [ 495.104720][T17265] proc_fail_nth_read+0x1bb/0x230 [ 495.104766][T17265] ? common_file_perm+0x20e/0x2b0 [ 495.104878][T17265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.104919][T17265] ? rw_verify_area+0x24a/0x4c0 [ 495.104966][T17265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.105002][T17265] vfs_read+0x213/0xa80 [ 495.105055][T17265] ? rds_setsockopt+0x9e8/0xdf0 [ 495.105156][T17265] ? __pfx_vfs_read+0x10/0x10 [ 495.105189][T17265] ? __pfx_rds_setsockopt+0x10/0x10 [ 495.105215][T17265] ? kmem_cache_free+0x182/0x650 [ 495.105249][T17265] ? __pfx_aa_sk_perm+0x10/0x10 [ 495.105313][T17265] ksys_read+0x150/0x270 [ 495.105350][T17265] ? __pfx_ksys_read+0x10/0x10 [ 495.105396][T17265] do_syscall_64+0x166/0x520 [ 495.105483][T17265] ? trace_irq_disable+0x3b/0x140 [ 495.105531][T17265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.105571][T17265] ? clear_bhb_loop+0x70/0xc0 [ 495.105599][T17265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.105623][T17265] RIP: 0033:0x7f88fa35e98e [ 495.105676][T17265] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 495.105697][T17265] RSP: 002b:00007f88fb2c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 495.105754][T17265] RAX: ffffffffffffffda RBX: 00007f88fb2c16c0 RCX: 00007f88fa35e98e [ 495.105771][T17265] RDX: 000000000000000f RSI: 00007f88fb2c10a0 RDI: 0000000000000004 [ 495.105787][T17265] RBP: 00007f88fb2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 495.105801][T17265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.105815][T17265] R13: 00007f88fa626038 R14: 00007f88fa625fa0 R15: 00007ffedaeae5b8 [ 495.105852][T17265] [ 495.198848][T17262] bond12: option lacp_active: invalid value (5) [ 495.327498][T17262] bond12 (unregistering): Released all slaves [ 495.496423][T17272] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 495.497544][T17272] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 495.497808][T17263] bond12: option lacp_active: invalid value (5) [ 495.505238][T17263] bond12 (unregistering): Released all slaves [ 495.515545][T17272] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 495.552277][T17272] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 495.554472][T17272] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 495.555228][T17272] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 495.557276][T17272] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 495.558583][T17272] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 495.576553][T17272] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 495.624009][T17257] __nla_validate_parse: 38 callbacks suppressed [ 495.624033][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 495.624333][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 495.624588][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 495.627200][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 495.627740][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 495.629334][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 495.725267][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 496.003619][T17277] netlink: 3560 bytes leftover after parsing attributes in process `syz.3.2698'. [ 496.281952][T17290] veth0: entered promiscuous mode [ 496.458213][T17289] veth0: left promiscuous mode [ 496.556211][T17296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2705'. [ 496.754436][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2704'. [ 496.825372][T17308] netlink: 'syz.1.2709': attribute type 11 has an invalid length. [ 497.036748][T17312] tipc: New replicast peer: 255.255.255.255 [ 497.039219][T17312] tipc: Enabled bearer , priority 10 [ 497.858326][T17345] netlink: 'syz.4.2720': attribute type 11 has an invalid length. [ 498.621242][T17368] IPVS: set_ctl: invalid protocol: 576 0.32.0.0:8192 [ 498.939212][T17379] syzkaller0: entered promiscuous mode [ 498.957374][T17379] tipc: Enabling of bearer rejected, already enabled [ 498.996483][T17379] tipc: Resetting bearer [ 499.342641][T17385] sctp: [Deprecated]: syz.4.2730 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.342641][T17385] Use struct sctp_sack_info instead [ 499.342700][T17385] sctp: [Deprecated]: syz.4.2730 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.342700][T17385] Use struct sctp_sack_info instead [ 499.342742][T17385] sctp: [Deprecated]: syz.4.2730 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.342742][T17385] Use struct sctp_sack_info instead [ 499.342785][T17385] sctp: [Deprecated]: syz.4.2730 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.342785][T17385] Use struct sctp_sack_info instead [ 499.342829][T17385] sctp: [Deprecated]: syz.4.2730 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.342829][T17385] Use struct sctp_sack_info instead [ 499.342873][T17385] sctp: [Deprecated]: syz.4.2730 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.342873][T17385] Use struct sctp_sack_info instead [ 499.342917][T17385] sctp: [Deprecated]: syz.4.2730 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.342917][T17385] Use struct sctp_sack_info instead [ 499.342960][T17385] sctp: [Deprecated]: syz.4.2730 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.342960][T17385] Use struct sctp_sack_info instead [ 499.343003][T17385] sctp: [Deprecated]: syz.4.2730 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.343003][T17385] Use struct sctp_sack_info instead [ 499.343046][T17385] sctp: [Deprecated]: syz.4.2730 (pid 17385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.343046][T17385] Use struct sctp_sack_info instead [ 499.345633][T17392] sctp_getsockopt_delayed_ack: 23 callbacks suppressed [ 499.345654][T17392] sctp: [Deprecated]: syz.4.2730 (pid 17392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.345654][T17392] Use struct sctp_sack_info instead [ 499.345685][T17392] sctp: [Deprecated]: syz.4.2730 (pid 17392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.345685][T17392] Use struct sctp_sack_info instead [ 499.345713][T17392] sctp: [Deprecated]: syz.4.2730 (pid 17392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.345713][T17392] Use struct sctp_sack_info instead [ 499.345740][T17392] sctp: [Deprecated]: syz.4.2730 (pid 17392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.345740][T17392] Use struct sctp_sack_info instead [ 499.345767][T17392] sctp: [Deprecated]: syz.4.2730 (pid 17392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.345767][T17392] Use struct sctp_sack_info instead [ 499.345794][T17392] sctp: [Deprecated]: syz.4.2730 (pid 17392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.345794][T17392] Use struct sctp_sack_info instead [ 499.345821][T17392] sctp: [Deprecated]: syz.4.2730 (pid 17392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.345821][T17392] Use struct sctp_sack_info instead [ 499.345847][T17392] sctp: [Deprecated]: syz.4.2730 (pid 17392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.345847][T17392] Use struct sctp_sack_info instead [ 499.345875][T17392] sctp: [Deprecated]: syz.4.2730 (pid 17392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.345875][T17392] Use struct sctp_sack_info instead [ 499.345903][T17392] sctp: [Deprecated]: syz.4.2730 (pid 17392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.345903][T17392] Use struct sctp_sack_info instead [ 500.509112][T17411] net_ratelimit: 1016 callbacks suppressed [ 500.509136][T17411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.562555][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.707912][T17430] tipc: Enabled bearer , priority 0 [ 502.718320][T17430] syzkaller0: mtu less than device minimum [ 503.078828][ T31] audit: type=1804 audit(1789471517.823:6): pid=17438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2744" name="/newroot/537/cgroup.controllers" dev="tmpfs" ino=2782 res=1 errno=0 [ 503.110848][ T31] audit: type=1800 audit(1789471517.863:7): pid=17438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2744" name="cgroup.controllers" dev="tmpfs" ino=2782 res=0 errno=0 [ 503.175950][T17446] __nla_validate_parse: 7 callbacks suppressed [ 503.175973][T17446] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2746'. [ 503.651868][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2750'. [ 503.653938][T17461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2750'. [ 503.685567][T17454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.944426][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 503.968868][T17476] xt_hashlimit: size too large, truncated to 1048576 [ 504.358391][T17490] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2756'. [ 504.546498][T17495] netlink: 'syz.4.2757': attribute type 10 has an invalid length. [ 504.546526][T17495] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2757'. [ 504.594987][T17492] ovs-s!: entered promiscuous mode [ 505.936968][T17542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2766'. [ 505.952091][T17542] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 505.952122][T17542] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 506.823496][T17557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'. [ 506.956436][T17568] netlink: 'syz.0.2769': attribute type 2 has an invalid length. [ 507.083109][T17568] : entered promiscuous mode [ 507.267903][T17570] bond12: entered promiscuous mode [ 507.503623][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2773'. [ 507.543031][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2773'. [ 507.705027][T17605] syzkaller0: left promiscuous mode [ 507.705054][T17605] syzkaller0: left allmulticast mode [ 508.104063][T17615] bond10: (slave bond0): making interface the new active one [ 508.109879][T17615] bond10: (slave bond0): Enslaving as an active interface with an up link [ 508.558484][T17637] __nla_validate_parse: 3 callbacks suppressed [ 508.558507][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 508.763764][T17641] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2789'. [ 509.076713][T17663] netlink: 'syz.0.2796': attribute type 2 has an invalid length. [ 509.076736][T17663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2796'. [ 509.128055][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 509.208189][T17663] bond14: option lacp_active: invalid value (5) [ 509.225073][T17663] bond14 (unregistering): Released all slaves [ 509.274600][T17673] netlink: 'syz.3.2799': attribute type 9 has an invalid length. [ 509.274624][T17673] netlink: 'syz.3.2799': attribute type 5 has an invalid length. [ 509.351725][T17676] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2799'. [ 509.447004][T17660] syzkaller1: entered promiscuous mode [ 509.447030][T17660] syzkaller1: entered allmulticast mode [ 509.630112][T17689] ip_tables: iptables: counters copy to user failed while replacing table [ 509.664241][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2803'. [ 509.917912][T17702] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2802'. [ 509.931618][T17705] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2802'. [ 509.998583][T17690] smbdirect: ib_dev[syz2] removed [ 510.189972][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'. [ 510.219725][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'. [ 510.221424][T17719] openvswitch: netlink: Message has 8 unknown bytes. [ 510.487538][T17729] openvswitch: ovs-s!: Dropping previously announced user features [ 510.671456][T17742] netlink: 'syz.2.2812': attribute type 15 has an invalid length. [ 510.709178][T17742] netlink: 'syz.2.2812': attribute type 15 has an invalid length. [ 510.720188][T14713] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 510.720367][T14713] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 510.720406][T14713] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 510.720442][T14713] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 510.729129][T17744] netlink: 'syz.3.2813': attribute type 2 has an invalid length. [ 511.052837][T17748] syzkaller0: left promiscuous mode [ 511.052864][T17748] syzkaller0: left allmulticast mode [ 511.114560][T17758] netlink: 'syz.4.2818': attribute type 10 has an invalid length. [ 511.268684][T17767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 511.680124][ T8405] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 511.830150][ T8409] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 511.936126][T17790] netlink: 'syz.4.2822': attribute type 2 has an invalid length. [ 512.328446][T17806] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 512.342527][T17806] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 512.345687][T17806] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 512.355027][T17806] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 512.374467][T17806] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 512.386266][T17806] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 512.402571][T17806] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 512.421019][T17806] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 512.421730][T17806] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 512.422403][T17806] Dead loop on virtual device bond13 (net 38), fix it urgently! [ 513.422859][T17839] netlink: 'syz.1.2834': attribute type 4 has an invalid length. [ 513.647614][T17845] __nla_validate_parse: 14 callbacks suppressed [ 513.647638][T17845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2836'. [ 514.603139][T17875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2839'. [ 514.917966][T17888] syzkaller0: entered promiscuous mode [ 514.917992][T17888] syzkaller0: entered allmulticast mode [ 515.073079][T17896] Bluetooth: MGMT ver 1.23 [ 515.303368][T17902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2850'. [ 515.584475][T17912] nft_compat: unsupported protocol 0 [ 516.117984][T17929] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 516.373340][T17942] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 516.792716][T17949] netlink: 'syz.3.2860': attribute type 1 has an invalid length. [ 516.919760][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 517.123169][T17968] Cannot find map_set index 2 as target [ 517.157255][T17975] xt_bpf: check failed: parse error [ 517.195050][T17975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.253190][T17956] syzkaller1: entered promiscuous mode [ 517.253216][T17956] syzkaller1: entered allmulticast mode [ 517.273882][T17970] netlink: 'syz.2.2866': attribute type 1 has an invalid length. [ 517.657780][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 517.657807][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2871'. [ 517.657836][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2871'. [ 517.722485][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 517.722512][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2871'. [ 517.722539][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2871'. [ 517.815220][T18008] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 517.941683][T18012] netlink: 'syz.3.2875': attribute type 10 has an invalid length. [ 517.970452][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 518.462275][T18006] syzkaller0: entered promiscuous mode [ 518.462303][T18006] syzkaller0: entered allmulticast mode [ 518.463523][ T7520] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.463628][ T7520] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.463695][ T7520] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.463736][ T7520] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.651585][T18020] __nla_validate_parse: 1 callbacks suppressed [ 518.651607][T18020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2877'. [ 519.162631][T18010] batman_adv: batadv0: Interface deactivated: veth0 [ 519.404945][T18010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.455481][T18010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.796465][T18010] tipc: Resetting bearer [ 519.858791][T18010] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 519.875340][T18010] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 520.106261][T18010] veth1_vlan: left promiscuous mode [ 520.267058][T18010] batman_adv: batadv0: Interface deactivated: gretap2 [ 520.348735][T18012] team0: Port device dummy0 added [ 520.381603][T14717] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.381644][T14717] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.381672][T14717] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 520.381838][T14717] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.381868][T14717] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.381896][T14717] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 520.381933][T14717] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.381962][T14717] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.381989][T14717] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 520.382026][T14717] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.382054][T14717] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.382081][T14717] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 520.598289][T18019] lo speed is unknown, defaulting to 1000 [ 520.678885][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 520.698728][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2883'. [ 520.858210][T18058] netlink: 'syz.4.2882': attribute type 1 has an invalid length. [ 520.858237][T18058] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2882'. [ 521.001912][T18067] xt_l2tp: missing protocol rule (udp|l2tpip) [ 521.293852][T18082] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 521.365363][T18078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.379333][T18082] macsec1: entered promiscuous mode [ 521.409180][T18078] netlink: 'syz.0.2887': attribute type 5 has an invalid length. [ 521.788075][T18095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2888'. [ 522.012353][T18095] hsr_slave_1 (unregistering): left promiscuous mode [ 522.365545][T18107] FAULT_INJECTION: forcing a failure. [ 522.365545][T18107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.365599][T18107] CPU: 0 UID: 0 PID: 18107 Comm: syz.2.2891 Not tainted syzkaller #0 PREEMPT(full) [ 522.365624][T18107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.365638][T18107] Call Trace: [ 522.365647][T18107] [ 522.365658][T18107] dump_stack_lvl+0xe8/0x150 [ 522.365697][T18107] should_fail_ex+0x410/0x560 [ 522.365733][T18107] _copy_from_user+0x2d/0xb0 [ 522.365764][T18107] ___sys_sendmsg+0x1c6/0x360 [ 522.365942][T18107] ? __lock_acquire+0x747/0x2de0 [ 522.365988][T18107] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.366068][T18107] ? __fget_files+0x2a/0x420 [ 522.366099][T18107] ? __fget_files+0x3a2/0x420 [ 522.366143][T18107] __x64_sys_sendmsg+0x1b1/0x290 [ 522.366176][T18107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.366231][T18107] do_syscall_64+0x166/0x520 [ 522.366257][T18107] ? trace_irq_disable+0x3b/0x140 [ 522.366280][T18107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.366304][T18107] ? clear_bhb_loop+0x70/0xc0 [ 522.366331][T18107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.366355][T18107] RIP: 0033:0x7fd3e159e159 [ 522.366375][T18107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.366395][T18107] RSP: 002b:00007fd3e23d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.366421][T18107] RAX: ffffffffffffffda RBX: 00007fd3e1825fa0 RCX: 00007fd3e159e159 [ 522.366438][T18107] RDX: 00000000040000c4 RSI: 00002000000001c0 RDI: 0000000000000003 [ 522.366453][T18107] RBP: 00007fd3e23d9090 R08: 0000000000000000 R09: 0000000000000000 [ 522.366468][T18107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.366482][T18107] R13: 00007fd3e1826038 R14: 00007fd3e1825fa0 R15: 00007fff91101768 [ 522.366519][T18107] [ 522.845381][T18123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2894'. [ 523.092477][T18123] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.227693][T18123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.249411][T18123] net_ratelimit: 1018 callbacks suppressed [ 523.255841][T18123] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 523.258109][T18045] lo speed is unknown, defaulting to 1000 [ 523.258135][T18045] syz0: Port: 1 Link ACTIVE [ 523.258216][T18045] lo speed is unknown, defaulting to 1000 [ 523.316877][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.317000][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.696077][T18136] veth1_to_bond: entered allmulticast mode [ 523.696558][T18134] veth1_to_bond: left allmulticast mode [ 524.150497][T18155] syzkaller0: left promiscuous mode [ 524.150533][T18155] syzkaller0: left allmulticast mode [ 524.440663][T18164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2902'. [ 524.440694][T18164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2902'. [ 524.442020][T18164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2902'. [ 524.442045][T18164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2902'. [ 524.442196][T18164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2902'. [ 524.442215][T18164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2902'. [ 524.903838][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.911545][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.927281][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.941229][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.957287][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 525.032188][ T5615] bond10: (slave syz_tun): Removing an active aggregator [ 525.033543][ T5615] bond10: (slave syz_tun): Releasing backup interface [ 525.445315][T18203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2907'. [ 525.794197][T18217] ip6gretap0: entered promiscuous mode [ 525.795950][T18217] macsec1: entered allmulticast mode [ 525.795970][T18217] ip6gretap0: entered allmulticast mode [ 525.822481][T18217] ip6gretap0: left allmulticast mode [ 525.822513][T18217] ip6gretap0: left promiscuous mode [ 525.833751][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 525.852604][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 525.895135][T18222] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2911'. [ 526.053106][T18226] netlink: 'syz.0.2914': attribute type 7 has an invalid length. [ 526.053131][T18226] netlink: 'syz.0.2914': attribute type 8 has an invalid length. [ 526.113896][T18226] veth0: entered promiscuous mode [ 526.114120][T18226] veth0: left promiscuous mode [ 526.428947][T18171] lo speed is unknown, defaulting to 1000 [ 526.622695][T18253] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 526.622722][T18253] syzkaller1: Linktype set failed because interface is up [ 526.651492][T18039] syzkaller1: tun_net_xmit 90 [ 526.740717][T18258] syzkaller0: Caught tx_queue_len zero misconfig [ 526.768815][T18265] FAULT_INJECTION: forcing a failure. [ 526.768815][T18265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.768851][T18265] CPU: 1 UID: 0 PID: 18265 Comm: syz.2.2924 Not tainted syzkaller #0 PREEMPT(full) [ 526.768876][T18265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.768890][T18265] Call Trace: [ 526.768899][T18265] [ 526.768909][T18265] dump_stack_lvl+0xe8/0x150 [ 526.768948][T18265] should_fail_ex+0x410/0x560 [ 526.768979][T18265] _copy_from_iter+0x1d3/0x1660 [ 526.769006][T18265] ? __alloc_skb+0x27a/0x7a0 [ 526.769119][T18265] ? __alloc_skb+0x27a/0x7a0 [ 526.769146][T18265] ? __alloc_skb+0x27a/0x7a0 [ 526.769180][T18265] ? __pfx__copy_from_iter+0x10/0x10 [ 526.769202][T18265] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 526.769237][T18265] ? __alloc_skb+0x27a/0x7a0 [ 526.769259][T18265] ? __alloc_skb+0x27a/0x7a0 [ 526.769290][T18265] ? netlink_sendmsg+0x650/0xb40 [ 526.769384][T18265] ? skb_put+0x112/0x210 [ 526.769412][T18265] netlink_sendmsg+0x6c0/0xb40 [ 526.769454][T18265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.769495][T18265] ? apparmor_socket_sendmsg+0x98/0x360 [ 526.769523][T18265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.769554][T18265] sock_sendmsg_nosec+0x13a/0x180 [ 526.769592][T18265] ____sys_sendmsg+0x54e/0x850 [ 526.769628][T18265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.769667][T18265] ? import_iovec+0x73/0xa0 [ 526.769699][T18265] ___sys_sendmsg+0x2a5/0x360 [ 526.769726][T18265] ? __lock_acquire+0x747/0x2de0 [ 526.769755][T18265] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.769822][T18265] ? __fget_files+0x2a/0x420 [ 526.769853][T18265] ? __fget_files+0x3a2/0x420 [ 526.769893][T18265] __x64_sys_sendmsg+0x1b1/0x290 [ 526.769926][T18265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.769980][T18265] do_syscall_64+0x166/0x520 [ 526.770005][T18265] ? trace_irq_disable+0x3b/0x140 [ 526.770028][T18265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.770052][T18265] ? clear_bhb_loop+0x70/0xc0 [ 526.770081][T18265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.770103][T18265] RIP: 0033:0x7fd3e159e159 [ 526.770124][T18265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.770143][T18265] RSP: 002b:00007fd3e23d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.770176][T18265] RAX: ffffffffffffffda RBX: 00007fd3e1825fa0 RCX: 00007fd3e159e159 [ 526.770194][T18265] RDX: 00000000040000c4 RSI: 00002000000001c0 RDI: 0000000000000003 [ 526.770208][T18265] RBP: 00007fd3e23d9090 R08: 0000000000000000 R09: 0000000000000000 [ 526.770222][T18265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.770236][T18265] R13: 00007fd3e1826038 R14: 00007fd3e1825fa0 R15: 00007fff91101768 [ 526.770273][T18265] [ 527.006633][ T4932] Bluetooth: hci5: command tx timeout [ 527.346617][T18278] netlink: 'syz.2.2927': attribute type 4 has an invalid length. [ 528.677513][T18336] netlink: 'syz.0.2938': attribute type 10 has an invalid length. [ 528.933534][T18171] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.935301][T18171] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.935479][T18171] bridge_slave_0: entered allmulticast mode [ 528.951960][T18171] bridge_slave_0: entered promiscuous mode [ 528.970082][T18171] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.970191][T18171] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.970359][T18171] bridge_slave_1: entered allmulticast mode [ 528.972549][T18171] bridge_slave_1: entered promiscuous mode [ 529.079756][ T4932] Bluetooth: hci5: command tx timeout [ 529.102362][T18171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.121930][T18171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.264506][T18360] netlink: 'syz.4.2944': attribute type 15 has an invalid length. [ 529.268500][T18171] team0: Port device team_slave_0 added [ 529.303140][T18360] netlink: 'syz.4.2944': attribute type 15 has an invalid length. [ 529.306200][T18171] team0: Port device team_slave_1 added [ 529.371424][T18171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.371445][T18171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.371474][T18171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.373763][T18171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.373780][T18171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.373809][T18171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.483833][ T7520] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 60387 - 0 [ 529.601895][T18171] hsr_slave_0: entered promiscuous mode [ 529.604664][T18171] hsr_slave_1: entered promiscuous mode [ 529.607056][T18171] debugfs: 'hsr0' already exists in 'hsr' [ 529.607080][T18171] Cannot create hsr debugfs directory [ 529.720624][T14710] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 60387 - 0 [ 529.724498][ T13] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 60387 - 0 [ 529.724535][ T13] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 60387 - 0 [ 529.750944][T18381] __nla_validate_parse: 13 callbacks suppressed [ 529.751009][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 529.778127][T18381] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2947'. [ 529.820179][T18379] lo speed is unknown, defaulting to 1000 [ 530.056483][T18171] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.056527][T18171] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 530.056558][T18171] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.173537][T18171] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.173578][T18171] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 530.173608][T18171] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.267184][T18171] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.267213][T18171] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 530.267234][T18171] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.332594][T18171] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.332623][T18171] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 530.332643][T18171] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.159791][ T4932] Bluetooth: hci5: command tx timeout [ 531.568139][T18330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.681824][T18171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.736384][T18171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.737256][T18171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.773632][T18171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.774577][T18171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.786621][T18400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 531.786731][T18400] nbd: couldn't find a device at index 65546 [ 531.853830][T18171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.863083][T18171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.906067][T18171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.950354][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2952'. [ 531.973849][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'. [ 532.129845][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2956'. [ 532.150355][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2956'. [ 532.157027][T18421] bond10: option mode: unable to set because the bond device has slaves [ 532.157301][T18421] bond10: option mode: unable to set because the bond device has slaves [ 532.188957][T18421] bond10: option mode: unable to set because the bond device has slaves [ 532.189241][T18421] bond10: option mode: unable to set because the bond device has slaves [ 532.204997][T18421] bond10: option mode: unable to set because the bond device has slaves [ 532.220371][T18421] bond10: option mode: unable to set because the bond device has slaves [ 532.225806][T18424] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 532.225930][T18424] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2956'. [ 532.262320][T18424] .`: renamed from bond0 (while UP) [ 532.287387][T18424] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 532.287412][T18424] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2956'. [ 532.326166][T18171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.327452][T18424] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 532.327473][T18424] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2956'. [ 532.327661][T18424] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 532.327829][T18424] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 532.327979][T18424] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 532.328130][T18424] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 532.332914][T18424] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 532.368695][T18424] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 532.369223][T18424] netlink: 'syz.4.2956': attribute type 4 has an invalid length. [ 532.414570][T14705] bond10: (slave .`): link status definitely down, disabling slave [ 532.416106][T14705] bond10: now running without any active interface! [ 532.465698][T18171] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.485768][T14710] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.485883][T14710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.527285][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.527400][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.935787][T18444] bond0: option miimon: invalid value (18446744073357230079) [ 532.935815][T18444] bond0: option miimon: allowed values 0 - 2147483647 [ 532.991482][T18444] bond0 (unregistering): Released all slaves [ 532.996156][T18450] netlink: Failed to add %pK helper -22 [ 532.996212][T18450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.240669][ T4932] Bluetooth: hci5: command tx timeout [ 533.308603][ T5621] udevd[5621]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 533.390667][ T5625] udevd[5625]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 533.535324][T18461] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 534.435172][T18171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.549245][T18171] veth0_vlan: entered promiscuous mode [ 534.571689][T18171] veth1_vlan: entered promiscuous mode [ 534.611020][T18171] veth0_macvtap: entered promiscuous mode [ 534.616036][T18171] veth1_macvtap: entered promiscuous mode [ 534.670416][T18171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.713077][T18171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.713459][T18520] tipc: Enabled bearer , priority 0 [ 534.738688][T18515] veth1_to_batadv: entered promiscuous mode [ 534.738715][T18515] veth1_to_batadv: entered allmulticast mode [ 534.757221][T18483] __nla_validate_parse: 35 callbacks suppressed [ 534.757262][T18483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2969'. [ 534.946993][T18514] tipc: Disabling bearer [ 534.997875][T14717] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.999016][T14717] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.012999][T14717] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.013133][T14717] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.454323][T14714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.454347][T14714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.560550][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 535.561923][ T4932] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 535.697476][ T7520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.697503][ T7520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.891581][T18534] ip_tables: iptables: counters copy to user failed while replacing table [ 536.056050][T18541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2903'. [ 536.380232][T18552] FAULT_INJECTION: forcing a failure. [ 536.380232][T18552] name failslab, interval 1, probability 0, space 0, times 0 [ 536.380275][T18552] CPU: 0 UID: 0 PID: 18552 Comm: syz.3.2985 Not tainted syzkaller #0 PREEMPT(full) [ 536.380303][T18552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.380317][T18552] Call Trace: [ 536.380326][T18552] [ 536.380336][T18552] dump_stack_lvl+0xe8/0x150 [ 536.380376][T18552] should_fail_ex+0x410/0x560 [ 536.380409][T18552] should_failslab+0xa8/0x100 [ 536.380472][T18552] __kmalloc_noprof+0xfe/0x720 [ 536.380495][T18552] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 536.380583][T18552] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 536.380620][T18552] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 536.380657][T18552] genl_family_rcv_msg_doit+0xda/0x340 [ 536.380692][T18552] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 536.380729][T18552] ? apparmor_capable+0x126/0x170 [ 536.380813][T18552] ? bpf_lsm_capable+0x9/0x20 [ 536.380849][T18552] ? security_capable+0x7e/0x2c0 [ 536.380916][T18552] genl_rcv_msg+0x614/0x7a0 [ 536.380948][T18552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 536.380972][T18552] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 536.381070][T18552] netlink_rcv_skb+0x226/0x4a0 [ 536.381107][T18552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 536.381135][T18552] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.381186][T18552] ? down_read+0x2be/0x330 [ 536.381249][T18552] genl_rcv+0x28/0x40 [ 536.381273][T18552] netlink_unicast+0x7bd/0x940 [ 536.381316][T18552] netlink_sendmsg+0x813/0xb40 [ 536.381360][T18552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.381401][T18552] ? apparmor_socket_sendmsg+0x98/0x360 [ 536.381429][T18552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.381462][T18552] sock_sendmsg_nosec+0x13a/0x180 [ 536.381502][T18552] ____sys_sendmsg+0x54e/0x850 [ 536.381544][T18552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.381584][T18552] ? import_iovec+0x73/0xa0 [ 536.381617][T18552] ___sys_sendmsg+0x2a5/0x360 [ 536.381646][T18552] ? __lock_acquire+0x747/0x2de0 [ 536.381674][T18552] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.381745][T18552] ? __fget_files+0x2a/0x420 [ 536.381775][T18552] ? __fget_files+0x3a2/0x420 [ 536.381826][T18552] __x64_sys_sendmsg+0x1b1/0x290 [ 536.381859][T18552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.381914][T18552] do_syscall_64+0x166/0x520 [ 536.381938][T18552] ? trace_irq_disable+0x3b/0x140 [ 536.381961][T18552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.381985][T18552] ? clear_bhb_loop+0x70/0xc0 [ 536.382013][T18552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.382036][T18552] RIP: 0033:0x7fae1ef9e159 [ 536.382058][T18552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.382078][T18552] RSP: 002b:00007fae1fdc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.382103][T18552] RAX: ffffffffffffffda RBX: 00007fae1f225fa0 RCX: 00007fae1ef9e159 [ 536.382120][T18552] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 536.382135][T18552] RBP: 00007fae1fdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 536.382149][T18552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.382163][T18552] R13: 00007fae1f226038 R14: 00007fae1f225fa0 R15: 00007fffcac75368 [ 536.382201][T18552] [ 536.800783][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 536.803554][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 536.804422][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 536.824848][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 536.840277][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 536.970325][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'. [ 537.102308][T18566] syzkaller0: entered promiscuous mode [ 537.102335][T18566] syzkaller0: entered allmulticast mode [ 537.158550][T18573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2987'. [ 537.718763][T18596] validate_nla: 24 callbacks suppressed [ 537.718785][T18596] netlink: 'syz.0.2994': attribute type 1 has an invalid length. [ 537.748252][T18593] netlink: 'syz.0.2994': attribute type 1 has an invalid length. [ 537.986218][T18555] lo speed is unknown, defaulting to 1000 [ 538.064974][T18606] FAULT_INJECTION: forcing a failure. [ 538.064974][T18606] name failslab, interval 1, probability 0, space 0, times 0 [ 538.065011][T18606] CPU: 0 UID: 0 PID: 18606 Comm: syz.3.2998 Not tainted syzkaller #0 PREEMPT(full) [ 538.065041][T18606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 538.065056][T18606] Call Trace: [ 538.065065][T18606] [ 538.065075][T18606] dump_stack_lvl+0xe8/0x150 [ 538.065115][T18606] should_fail_ex+0x410/0x560 [ 538.065147][T18606] should_failslab+0xa8/0x100 [ 538.065179][T18606] __kmalloc_noprof+0xfe/0x720 [ 538.065204][T18606] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 538.065232][T18606] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 538.065268][T18606] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 538.065302][T18606] genl_family_rcv_msg_doit+0xda/0x340 [ 538.065336][T18606] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 538.065372][T18606] ? apparmor_capable+0x126/0x170 [ 538.065408][T18606] ? bpf_lsm_capable+0x9/0x20 [ 538.065428][T18606] ? security_capable+0x7e/0x2c0 [ 538.065461][T18606] genl_rcv_msg+0x614/0x7a0 [ 538.065494][T18606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.065519][T18606] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 538.065564][T18606] netlink_rcv_skb+0x226/0x4a0 [ 538.065609][T18606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.065638][T18606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.065689][T18606] ? down_read+0x2be/0x330 [ 538.065723][T18606] genl_rcv+0x28/0x40 [ 538.065745][T18606] netlink_unicast+0x7bd/0x940 [ 538.065789][T18606] netlink_sendmsg+0x813/0xb40 [ 538.065835][T18606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.065880][T18606] ? apparmor_socket_sendmsg+0x98/0x360 [ 538.065907][T18606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.065940][T18606] sock_sendmsg_nosec+0x13a/0x180 [ 538.065980][T18606] ____sys_sendmsg+0x54e/0x850 [ 538.066017][T18606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.066057][T18606] ? import_iovec+0x73/0xa0 [ 538.066090][T18606] ___sys_sendmsg+0x2a5/0x360 [ 538.066118][T18606] ? __lock_acquire+0x747/0x2de0 [ 538.066147][T18606] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.066220][T18606] ? __fget_files+0x2a/0x420 [ 538.066251][T18606] ? __fget_files+0x3a2/0x420 [ 538.066295][T18606] __x64_sys_sendmsg+0x1b1/0x290 [ 538.066329][T18606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.066384][T18606] do_syscall_64+0x166/0x520 [ 538.066408][T18606] ? trace_irq_disable+0x3b/0x140 [ 538.066430][T18606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.066454][T18606] ? clear_bhb_loop+0x70/0xc0 [ 538.066483][T18606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.066506][T18606] RIP: 0033:0x7fae1ef9e159 [ 538.066528][T18606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.066547][T18606] RSP: 002b:00007fae1fdc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.066580][T18606] RAX: ffffffffffffffda RBX: 00007fae1f225fa0 RCX: 00007fae1ef9e159 [ 538.066598][T18606] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 538.066612][T18606] RBP: 00007fae1fdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 538.066627][T18606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.066641][T18606] R13: 00007fae1f226038 R14: 00007fae1f225fa0 R15: 00007fffcac75368 [ 538.066679][T18606] [ 538.362874][T18607] openvswitch: ovs-s!: Dropping previously announced user features [ 538.480847][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3000'. [ 538.480905][T18610] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3000'. [ 538.481144][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3000'. [ 538.481184][T18610] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3000'. [ 538.481389][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3000'. [ 538.481430][T18610] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3000'. [ 538.627594][T18617] x_tables: duplicate underflow at hook 3 [ 538.920774][ T4932] Bluetooth: hci0: command tx timeout [ 539.037688][T18635] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 539.560891][T18659] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 539.809931][T18671] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 540.006921][T18555] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.007976][T18555] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.008179][T18555] bridge_slave_0: entered allmulticast mode [ 540.034893][T18555] bridge_slave_0: entered promiscuous mode [ 540.053645][T18555] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.053763][T18555] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.054355][T18555] bridge_slave_1: entered allmulticast mode [ 540.087903][T18555] bridge_slave_1: entered promiscuous mode [ 540.282219][T18555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.303941][T18555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.487530][T18555] team0: Port device team_slave_0 added [ 540.512320][T18555] team0: Port device team_slave_1 added [ 540.666612][T18555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.666632][T18555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.666660][T18555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.668912][T18555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.668929][T18555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.668957][T18555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.908782][T18555] hsr_slave_0: entered promiscuous mode [ 540.916220][T18555] hsr_slave_1: entered promiscuous mode [ 540.919095][T18555] debugfs: 'hsr0' already exists in 'hsr' [ 540.919121][T18555] Cannot create hsr debugfs directory [ 541.011711][ T4932] Bluetooth: hci0: command tx timeout [ 541.145823][T18713] netlink: 'syz.3.3024': attribute type 2 has an invalid length. [ 541.324123][T18713] Cannot find set identified by id 0 to match [ 541.381799][T18718] __nla_validate_parse: 61 callbacks suppressed [ 541.381824][T18718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3027'. [ 541.477843][T18718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3027'. [ 541.922521][T18555] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.922564][T18555] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 541.922594][T18555] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.094156][T18555] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.094197][T18555] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 542.094227][T18555] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.261660][T18555] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.261708][T18555] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 542.261739][T18555] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.394276][ T3386] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.394696][T14717] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.395119][T14717] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.395240][T14717] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.580279][T18555] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.580317][T18555] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 542.580347][T18555] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.655206][T18738] ip6t_ah: unknown flags 4 [ 542.681783][T18742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3034'. [ 543.043889][T18555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 543.051906][T18555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.057350][T18555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 543.081130][ T4932] Bluetooth: hci0: command tx timeout [ 543.093924][T18555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.099629][T18555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 543.121003][T18555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.123493][T18555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 543.132338][T18555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.342553][T18555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.400006][T18766] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3039'. [ 543.455994][T18555] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.479496][T14714] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.479606][T14714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.536282][T14714] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.536396][T14714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.734261][T18773] netlink: 'syz.1.3042': attribute type 10 has an invalid length. [ 543.734288][T18773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3042'. [ 543.987225][T18788] openvswitch: ovs-s!: Dropping previously announced user features [ 544.205495][T18794] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3046'. [ 544.334857][T18810] 8021q: VLANs not supported on ip_vti0 [ 544.336319][T18810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3050'. [ 544.337414][T18810] netlink: 'syz.1.3050': attribute type 2 has an invalid length. [ 544.337639][T18810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.582965][T18819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3051'. [ 544.807025][T18555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.170828][ T4932] Bluetooth: hci0: command tx timeout [ 545.500706][T18555] veth0_vlan: entered promiscuous mode [ 545.525237][T18555] veth1_vlan: entered promiscuous mode [ 545.643209][T18555] veth0_macvtap: entered promiscuous mode [ 545.662540][T18555] veth1_macvtap: entered promiscuous mode [ 545.742060][T18555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.775708][T18555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.841049][ T7520] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.864433][ T7520] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.899977][T14714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.900319][T14714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.153726][T14714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.153751][T14714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.324400][T14714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.324429][T14714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.393256][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3064'. [ 546.605560][T18877] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.606303][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.638232][T18880] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 546.638257][T18880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2982'. [ 546.783934][T18877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.801605][T18877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.965100][T18871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3066'. [ 546.968670][T18875] syzkaller0: entered promiscuous mode [ 546.968689][T18875] syzkaller0: entered allmulticast mode [ 547.041267][ T7520] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.042528][T14705] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.042573][T14705] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.042610][T14705] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.310614][T18895] netlink: 'syz.2.3071': attribute type 11 has an invalid length. [ 547.310640][T18895] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.3071'. [ 547.494335][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 547.508446][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 547.510289][T18892] tc_dump_action: action bad kind [ 547.522806][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 547.526820][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 547.527463][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 547.684642][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3073'. [ 547.817133][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3073'. [ 547.871965][T18912] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3073'. [ 547.878253][T18917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3076'. [ 547.878309][T18917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3076'. [ 547.923411][T18907] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3073'. [ 548.127465][T18927] netlink: 'syz.2.3078': attribute type 7 has an invalid length. [ 548.138810][T18920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.154208][T18937] kthread_run failed with err -4 [ 549.355403][T18947] syzkaller0: left promiscuous mode [ 549.355430][T18947] syzkaller0: left allmulticast mode [ 549.440323][T18898] lo speed is unknown, defaulting to 1000 [ 549.642028][ T4932] Bluetooth: hci1: command tx timeout [ 549.894241][T18962] lo speed is unknown, defaulting to 1000 [ 549.943639][T18978] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 550.036858][T18981] netlink: 'syz.1.3090': attribute type 23 has an invalid length. [ 550.036886][T18981] netlink: 'syz.1.3090': attribute type 11 has an invalid length. [ 550.417677][ T7520] IPVS: starting estimator thread 0... [ 550.500024][T18989] IPVS: using max 24 ests per chain, 57600 per kthread [ 550.892702][T18898] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.892932][T18898] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.893104][T18898] bridge_slave_0: entered allmulticast mode [ 550.896570][T18898] bridge_slave_0: entered promiscuous mode [ 550.943531][T18898] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.943725][T18898] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.944023][T18898] bridge_slave_1: entered allmulticast mode [ 550.949074][T18898] bridge_slave_1: entered promiscuous mode [ 551.101679][T18898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.115955][T18898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.338268][T19007] macvtap1: entered allmulticast mode [ 551.338294][T19007] veth0_to_bridge: entered allmulticast mode [ 551.354587][T19007] veth0_to_bridge: left allmulticast mode [ 551.417490][T18898] team0: Port device team_slave_0 added [ 551.423783][T18898] team0: Port device team_slave_1 added [ 551.466080][T18898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.466099][T18898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.466127][T18898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.474825][T18898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.474876][T18898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.474954][T18898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.632798][T18898] hsr_slave_0: entered promiscuous mode [ 551.633906][T18898] hsr_slave_1: entered promiscuous mode [ 551.634710][T18898] debugfs: 'hsr0' already exists in 'hsr' [ 551.634731][T18898] Cannot create hsr debugfs directory [ 551.729794][ T4932] Bluetooth: hci1: command tx timeout [ 551.938802][T19028] __nla_validate_parse: 14 callbacks suppressed [ 551.938825][T19028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3099'. [ 552.074206][T19034] netlink: 'syz.3.3103': attribute type 3 has an invalid length. [ 552.158208][T19038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3104'. [ 552.417547][T19044] syzkaller0: entered promiscuous mode [ 552.417577][T19044] syzkaller0: entered allmulticast mode [ 552.523652][T19044] tipc: Enabling of bearer rejected, already enabled [ 552.543896][T19044] syzkaller0: mtu less than device minimum [ 552.546204][T18898] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 552.570295][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.571325][T18898] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 552.588736][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.615613][T18898] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 552.640847][T19054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3110'. [ 552.645406][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.659958][T18898] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 552.673507][T19054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3110'. [ 552.696210][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.697325][T19054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3110'. [ 552.697477][T19054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3110'. [ 552.697620][T19054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3110'. [ 552.697790][T19054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3110'. [ 552.697943][T19054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3110'. [ 552.768710][T19054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3110'. [ 552.966922][T18898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.010187][T18898] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.032317][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.032470][ T7520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.053382][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.053698][ T7520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.087749][T19071] tipc: Enabling of bearer rejected, already enabled [ 553.111825][T19071] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 553.113697][T19072] syzkaller0: mtu less than device minimum [ 553.803232][ T4932] Bluetooth: hci1: command tx timeout [ 554.118811][T19102] ip6t_srh: unknown srh match flags 4000 [ 554.559252][T18898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.705591][T18898] veth0_vlan: entered promiscuous mode [ 554.743487][T18898] veth1_vlan: entered promiscuous mode [ 555.051094][T18898] veth0_macvtap: entered promiscuous mode [ 555.082266][T18898] veth1_macvtap: entered promiscuous mode [ 555.156525][T18898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.204239][T18898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.266669][T14717] IPVS: starting estimator thread 0... [ 555.332410][ T7520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.359775][T19139] IPVS: using max 27 ests per chain, 64800 per kthread [ 555.436794][T18527] udevd[18527]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 555.472816][ T5625] udevd[5625]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 555.549684][T14717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.549742][T14717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.549782][T14717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.877426][T14710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.877451][T14710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.880458][ T4932] Bluetooth: hci1: command tx timeout [ 556.220471][T14717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.220496][T14717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.498005][T19178] syzkaller0: entered promiscuous mode [ 556.498042][T19178] syzkaller0: entered allmulticast mode [ 556.932069][T19189] syzkaller1: entered promiscuous mode [ 556.932096][T19189] syzkaller1: entered allmulticast mode [ 557.168705][T19193] bridge0: port 3(veth0) entered blocking state [ 557.168944][T19193] bridge0: port 3(veth0) entered disabled state [ 557.183098][T19193] veth0: entered allmulticast mode [ 557.187838][T19193] veth0: entered promiscuous mode [ 557.190119][T19193] bridge0: port 3(veth0) entered blocking state [ 557.190238][T19193] bridge0: port 3(veth0) entered forwarding state [ 557.220949][T19194] bridge0: port 4(veth1) entered blocking state [ 557.221061][T19194] bridge0: port 4(veth1) entered disabled state [ 557.221256][T19194] veth1: entered allmulticast mode [ 557.226452][T19194] veth1: entered promiscuous mode [ 557.227778][T19194] bridge0: port 4(veth1) entered blocking state [ 557.227908][T19194] bridge0: port 4(veth1) entered forwarding state [ 557.233689][T19191] netlink: 'syz.3.3137': attribute type 11 has an invalid length. [ 557.241733][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.242724][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.243396][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.244071][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.244699][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.245415][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.246070][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.246688][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.247308][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.247960][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 557.437521][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 557.483243][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 557.487245][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.509034][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.511524][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 558.207393][T19212] __nla_validate_parse: 13 callbacks suppressed [ 558.207418][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 558.207435][T19212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3141'. [ 558.210129][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 558.210188][T19213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3141'. [ 559.791542][ T4932] Bluetooth: hci3: command tx timeout [ 560.275517][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3145'. [ 562.249680][ C1] net_ratelimit: 10507 callbacks suppressed [ 562.249706][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 562.249988][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.250280][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.251107][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.251714][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.252048][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 562.252344][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.252923][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.253516][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 562.253901][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 563.258250][ T4932] Bluetooth: hci3: command tx timeout [ 563.979884][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.407791][ T4932] Bluetooth: hci3: command tx timeout [ 567.259735][ C0] net_ratelimit: 12159 callbacks suppressed [ 567.259764][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 567.260156][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.260415][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 567.260856][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.261529][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 567.261659][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 567.262297][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.262349][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 567.262992][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 567.263618][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 567.508780][ T4932] Bluetooth: hci3: command tx timeout [ 570.549482][ C1] sched: DL replenish lagged too much [ 572.269633][ C1] net_ratelimit: 11704 callbacks suppressed [ 572.269660][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 572.269949][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 572.270562][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 572.271165][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 572.271542][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.271789][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 572.272122][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.272391][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 572.272691][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.273003][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 577.279974][ C0] net_ratelimit: 11695 callbacks suppressed [ 577.280000][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 577.280658][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 577.280758][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.281246][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 577.281376][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.281997][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.282454][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 577.282603][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 577.283045][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 577.283280][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.289761][ C0] net_ratelimit: 11612 callbacks suppressed [ 582.289787][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 582.290369][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 582.290466][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.290986][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 582.291128][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 582.291649][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 582.292251][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 582.292851][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 582.293459][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 582.294106][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 587.299727][ C0] net_ratelimit: 11833 callbacks suppressed [ 587.299753][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 587.300403][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 587.301049][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 587.301595][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 587.301708][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 587.302213][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 587.302325][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 587.302954][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 587.303586][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 587.304214][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 592.309551][ C1] net_ratelimit: 11748 callbacks suppressed [ 592.309579][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.309963][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 592.310510][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 592.311055][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 592.311613][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 592.311720][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.312170][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 592.312332][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.312738][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 592.312952][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 597.319524][ C0] net_ratelimit: 11515 callbacks suppressed [ 597.319550][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 597.320100][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 597.320646][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 597.321197][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 597.321747][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 597.321805][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 597.322310][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 597.322389][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 597.322904][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 597.323447][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 602.329907][ C0] net_ratelimit: 11580 callbacks suppressed [ 602.329933][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 602.330538][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 602.330889][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 602.331145][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 602.331527][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 602.331760][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 602.332404][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 602.333043][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 602.333657][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 602.334223][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 607.340070][ C0] net_ratelimit: 11833 callbacks suppressed [ 607.340098][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 607.340236][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 607.340833][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 607.341573][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 607.342308][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 607.342617][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.343038][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 607.343175][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.343729][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.343760][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 612.349692][ C0] net_ratelimit: 11527 callbacks suppressed [ 612.349718][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 612.350422][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 612.351124][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 612.351431][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.351816][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 612.352521][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 612.353214][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 612.353333][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.353922][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.353926][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 617.359668][ C0] net_ratelimit: 11638 callbacks suppressed [ 617.359694][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 617.360451][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 617.360451][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 617.361090][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 617.361750][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 617.362357][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 617.362960][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 617.363173][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.363555][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 617.363839][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.369719][ C0] net_ratelimit: 11689 callbacks suppressed [ 622.369746][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 622.370335][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 622.370551][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.370964][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 622.371183][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.371585][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 622.371822][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 622.372192][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 622.372802][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 622.373086][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.995158][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.379734][ C0] net_ratelimit: 11500 callbacks suppressed [ 627.379760][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 627.380411][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 627.380472][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 627.381005][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 627.381603][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 627.382196][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 627.382795][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 627.383436][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 627.384026][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 627.384389][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.389911][ C0] net_ratelimit: 11380 callbacks suppressed [ 632.389912][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 632.389935][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 632.390472][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 632.390504][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 632.391067][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 632.391639][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 632.392198][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 632.392820][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 632.392825][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 632.393566][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 637.399861][ C0] net_ratelimit: 11465 callbacks suppressed [ 637.399886][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 637.400582][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 637.400624][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.401239][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 637.401514][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.401912][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 637.402051][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.402571][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 637.402592][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 637.403259][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 639.805622][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 642.409899][ C0] net_ratelimit: 11517 callbacks suppressed [ 642.409926][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 642.410517][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 642.410554][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.411109][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.411121][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 642.411670][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.411718][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 642.412225][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 642.412311][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 642.412912][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 647.419574][ C0] net_ratelimit: 11658 callbacks suppressed [ 647.419601][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 647.419832][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.420187][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 647.420400][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 647.420765][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 647.421392][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 647.421664][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.421969][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 647.422305][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.422578][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 652.429720][ C1] net_ratelimit: 11636 callbacks suppressed [ 652.429721][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 652.429746][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 652.430267][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 652.430393][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 652.430817][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 652.431331][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 652.431861][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 652.432371][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 652.432895][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 652.433136][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 652.438589][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 657.439522][ C0] net_ratelimit: 11549 callbacks suppressed [ 657.439549][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 657.440158][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 657.440342][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.440770][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 657.440913][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.441377][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 657.441504][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 657.442001][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 657.442615][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 657.442739][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.449698][ C0] net_ratelimit: 11606 callbacks suppressed [ 662.449724][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 662.450315][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 662.450931][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 662.451012][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 662.451531][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 662.451630][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 662.452143][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 662.452270][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 662.452753][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 662.453396][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 667.460012][ C0] net_ratelimit: 11295 callbacks suppressed [ 667.460041][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 667.460672][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 667.461295][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 667.461908][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 667.462079][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 667.462522][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 667.462715][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 667.463138][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 667.463324][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 667.463755][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 672.469870][ C0] net_ratelimit: 11651 callbacks suppressed [ 672.469897][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 672.470502][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 672.471101][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 672.471712][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 672.471745][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.472313][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 672.472358][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.472965][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 672.472988][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.473605][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 677.479421][ C0] net_ratelimit: 11736 callbacks suppressed [ 677.479446][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 677.480537][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 677.481092][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 677.481626][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 677.481752][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.482165][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 677.482312][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.482692][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 677.482879][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.483224][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 682.489434][ C0] net_ratelimit: 11548 callbacks suppressed [ 682.489460][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 682.490064][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 682.490587][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 682.490659][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 682.491260][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 682.491927][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 682.492525][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 682.493126][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 682.493764][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 682.494370][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 686.057978][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.499905][ C0] net_ratelimit: 11435 callbacks suppressed [ 687.499930][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 687.500540][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 687.501151][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 687.501765][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 687.502323][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.502374][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 687.502982][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 687.502984][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.503587][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 687.503612][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.855197][T19245] Bluetooth: hci0: command tx timeout [ 690.818088][T19247] Bluetooth: hci3: command 0x0406 tx timeout [ 690.818141][T19247] Bluetooth: hci1: command tx timeout [ 692.509624][ C0] net_ratelimit: 11419 callbacks suppressed [ 692.509652][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 692.510232][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 692.510802][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 692.510862][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.511379][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 692.511498][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.511962][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 692.512163][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 692.512538][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 692.513132][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 697.519471][ C0] net_ratelimit: 11903 callbacks suppressed [ 697.519498][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 697.520720][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 697.521341][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 697.521375][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.521971][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 697.522585][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 697.523202][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 697.523373][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.523814][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 697.523977][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.529932][ C0] net_ratelimit: 11408 callbacks suppressed [ 702.529958][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 702.530580][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 702.531207][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.531802][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.531867][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 702.532440][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 702.532506][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 702.533101][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 702.533823][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 702.533897][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 707.540103][ C0] net_ratelimit: 11560 callbacks suppressed [ 707.540131][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 707.540236][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.540737][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 707.540817][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.541327][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 707.541407][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.541958][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 707.542026][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 707.542575][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 707.543226][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 712.549948][ C0] net_ratelimit: 11466 callbacks suppressed [ 712.549974][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 712.550582][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 712.550634][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.551193][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 712.551222][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.551794][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.551800][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 712.552523][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 712.552534][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 712.553155][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 717.559495][ C0] net_ratelimit: 11503 callbacks suppressed [ 717.559521][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 717.560086][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 717.560618][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 717.561181][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 717.561736][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 717.561758][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.562307][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 717.562372][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.562860][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 717.562992][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.569765][ C0] net_ratelimit: 11484 callbacks suppressed [ 722.569792][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 722.570027][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.570425][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 722.570616][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.571015][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 722.571175][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.571602][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 722.571749][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 722.572185][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 722.572759][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 727.579710][ C0] net_ratelimit: 11307 callbacks suppressed [ 727.579737][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 727.580330][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 727.580909][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 727.581122][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.581517][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 727.581745][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.582108][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 727.582360][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.582692][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 727.582990][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 732.589491][ C0] net_ratelimit: 11496 callbacks suppressed [ 732.589517][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 732.589863][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.590174][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 732.590513][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.591115][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 732.591179][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 732.591795][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 732.592367][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 732.592413][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 732.593025][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 736.673970][ T32] INFO: task syz-executor:19197 blocked for more than 143 seconds. [ 736.674002][ T32] Not tainted syzkaller #0 [ 736.674015][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.674026][ T32] task:syz-executor state:D stack:26616 pid:19197 tgid:19197 ppid:19187 task_flags:0x400140 flags:0x00080000 [ 736.674097][ T32] Call Trace: [ 736.674107][ T32] [ 736.674124][ T32] __schedule+0x17db/0x58f0 [ 736.674181][ T32] ? __lock_acquire+0x747/0x2de0 [ 736.674217][ T32] ? __pfx___schedule+0x10/0x10 [ 736.674358][ T32] ? schedule+0x90/0x2b0 [ 736.674386][ T32] schedule+0x164/0x2b0 [ 736.674412][ T32] schedule_preempt_disabled+0x13/0x30 [ 736.674435][ T32] __mutex_lock+0x7c1/0x1550 [ 736.674467][ T32] ? __mutex_lock+0x5d4/0x1550 [ 736.674497][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 736.674582][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 736.674623][ T32] ? __nla_parse+0x40/0x60 [ 736.674660][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 736.674694][ T32] ? __kernel_text_address+0xd/0x30 [ 736.674739][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 736.674777][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 736.674835][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 736.674867][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 736.674944][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 736.674995][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 736.675021][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 736.675048][ T32] ? __lock_acquire+0x747/0x2de0 [ 736.675087][ T32] netlink_rcv_skb+0x226/0x4a0 [ 736.675121][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 736.675150][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 736.675198][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.675248][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.675289][ T32] netlink_unicast+0x7bd/0x940 [ 736.675334][ T32] netlink_sendmsg+0x813/0xb40 [ 736.675389][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.675434][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 736.675465][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.675498][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 736.675542][ T32] __sys_sendto+0x408/0x5a0 [ 736.675576][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 736.675601][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 736.675640][ T32] ? fput_close_sync+0x11f/0x240 [ 736.675671][ T32] ? kmem_cache_free+0x471/0x650 [ 736.675707][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 736.675748][ T32] __x64_sys_sendto+0xde/0x100 [ 736.675780][ T32] do_syscall_64+0x166/0x520 [ 736.675805][ T32] ? trace_irq_disable+0x3b/0x140 [ 736.675829][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.675854][ T32] ? clear_bhb_loop+0x70/0xc0 [ 736.675884][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.675908][ T32] RIP: 0033:0x7f4b83f5e98e [ 736.675931][ T32] RSP: 002b:00007fff7cb27c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 736.675956][ T32] RAX: ffffffffffffffda RBX: 0000555587d4b500 RCX: 00007f4b83f5e98e [ 736.675974][ T32] RDX: 0000000000000028 RSI: 00007f4b84d54670 RDI: 0000000000000003 [ 736.675990][ T32] RBP: 0000000000000001 R08: 00007fff7cb27ce4 R09: 000000000000000c [ 736.676005][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 736.676020][ T32] R13: 0000000000000000 R14: 00007f4b84d54670 R15: 0000000000000000 [ 736.676057][ T32] [ 736.676069][ T32] INFO: task syz.4.3145:19230 blocked for more than 143 seconds. [ 736.676086][ T32] Not tainted syzkaller #0 [ 736.676098][ T32] Blocked by coredump. [ 736.676106][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.676116][ T32] task:syz.4.3145 state:D stack:26888 pid:19230 tgid:19225 ppid:18555 task_flags:0x40054c flags:0x00080003 [ 736.676184][ T32] Call Trace: [ 736.676192][ T32] [ 736.676206][ T32] __schedule+0x17db/0x58f0 [ 736.676248][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 736.676288][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 736.676369][ T32] ? __pfx___schedule+0x10/0x10 [ 736.676417][ T32] ? schedule+0x90/0x2b0 [ 736.676444][ T32] schedule+0x164/0x2b0 [ 736.676469][ T32] schedule_preempt_disabled+0x13/0x30 [ 736.676492][ T32] __mutex_lock+0x7c1/0x1550 [ 736.676524][ T32] ? __mutex_lock+0x5d4/0x1550 [ 736.676555][ T32] ? tun_chr_close+0x3e/0x1c0 [ 736.676625][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 736.676673][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 736.676698][ T32] tun_chr_close+0x3e/0x1c0 [ 736.676721][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 736.676745][ T32] __fput+0x418/0xa50 [ 736.676785][ T32] task_work_run+0x1d9/0x270 [ 736.676814][ T32] ? __pfx_task_work_run+0x10/0x10 [ 736.676841][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 736.676883][ T32] do_exit+0x73a/0x2360 [ 736.676914][ T32] ? lock_acquire+0x115/0x350 [ 736.676939][ T32] ? __pfx_do_exit+0x10/0x10 [ 736.676967][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 736.677010][ T32] do_group_exit+0x22d/0x2f0 [ 736.677033][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 736.677073][ T32] get_signal+0x121b/0x12c0 [ 736.677129][ T32] arch_do_signal_or_restart+0xbb/0x860 [ 736.677188][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 736.677231][ T32] ? __fget_files+0x2a/0x420 [ 736.677274][ T32] exit_to_user_mode_loop+0x10e/0x770 [ 736.677306][ T32] ? rcu_is_watching+0x16/0xb0 [ 736.677346][ T32] do_syscall_64+0x328/0x520 [ 736.677371][ T32] ? trace_irq_disable+0x3b/0x140 [ 736.677394][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.677417][ T32] ? clear_bhb_loop+0x70/0xc0 [ 736.677447][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.677470][ T32] RIP: 0033:0x7faefef9e159 [ 736.677491][ T32] RSP: 002b:00007faefff12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.677515][ T32] RAX: 0000000000000000 RBX: 00007faeff226090 RCX: 00007faefef9e159 [ 736.677531][ T32] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 736.677547][ T32] RBP: 00007faeff03503b R08: 0000000000000000 R09: 0000000000000000 [ 736.677562][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.677577][ T32] R13: 00007faeff226128 R14: 00007faeff226090 R15: 00007fff16889978 [ 736.677615][ T32] [ 736.677638][ T32] [ 736.677638][ T32] Showing all locks held in the system: [ 736.677648][ T32] locks held by kworker/u8:0/12: 4, last CPU#0: [ 736.677732][ T32] #0: ffff888079037940 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.677846][ T32] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.677911][ T32] #2: ffff88807e709440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 736.678050][ T32] #3: ffff88807ff6a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 736.678120][ T32] locks held by kworker/u8:1/13: 4, last CPU#0: [ 736.678137][ T32] #0: ffff888036c67940 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.678207][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.678272][ T32] #2: ffff888034555440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 736.678347][ T32] #3: ffff88807fd1aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 736.678424][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 736.678441][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 736.678516][ T32] locks held by kworker/1:2/987: 3, last CPU#1: [ 736.678533][ T32] #0: ffff88806a454940 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.678603][ T32] #1: ffffc90004f4fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.678685][ T32] #2: ffff88807e709440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 736.678757][ T32] locks held by kworker/u8:7/1045: 4, last CPU#0: [ 736.678775][ T32] #0: ffff88804c053940 ((wq_completion)krds_cp_wq#0/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.678839][ T32] #1: ffffc90005267c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.679004][ T32] #2: ffff88804c6bd280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 736.679266][ T32] #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 736.679330][ T32] locks held by kworker/u8:9/1120: 2, last CPU#0: [ 736.691898][ T32] #0: ffff88801b0ab940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.691983][ T32] #1: ffffc900053d7c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.692066][ T32] locks held by kworker/u8:10/3386: 3, last CPU#0: [ 736.692084][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.692147][ T32] #1: ffffc9000fb6fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.692219][ T32] #2: ffff8880670007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 736.692361][ T32] locks held by kworker/u9:1/4932: 4, on CPU#0: [ 736.692378][ T32] #0: ffff88804529d140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.692442][ T32] #1: ffffc9000f7cfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.692506][ T32] #2: ffff888067df0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 736.692641][ T32] #3: ffff888067df00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 736.692732][ T32] locks held by udevd/4983: 2, last CPU#0: [ 736.692749][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 736.692806][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 736.692880][ T32] locks held by dhcpcd/5277: 2, last CPU#0: [ 736.692896][ T32] #0: ffffffff8f4f0f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 736.692986][ T32] #1: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 736.693044][ T32] locks held by getty/5372: 2, on CPU#1: [ 736.693061][ T32] #0: ffff8880343d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 736.693201][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 736.693271][ T32] locks held by syz-executor/5620: 1, last CPU#0: [ 736.693288][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 736.693349][ T32] locks held by kworker/0:4/5629: 3, on CPU#0: [ 736.693366][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.693432][ T32] #1: ffffc9000434fc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.693496][ T32] #2: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 736.693584][ T32] locks held by kworker/0:6/5732: 3, last CPU#0: [ 736.693602][ T32] #0: ffff888056c85d40 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.693673][ T32] #1: ffffc900046dfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.693755][ T32] #2: ffff88807fd1a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 736.693830][ T32] locks held by kworker/u8:11/6333: 4, last CPU#0: [ 736.693847][ T32] #0: ffff888079037940 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.693918][ T32] #1: ffffc90007717c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.693982][ T32] #2: ffff88807e709440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 736.694053][ T32] #3: ffff88807ff6aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 736.694124][ T32] locks held by kworker/u8:14/7123: 4, last CPU#0: [ 736.694141][ T32] #0: ffff88808f773940 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.694217][ T32] #1: ffffc90005857c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.694282][ T32] #2: ffff8880473e5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 736.694351][ T32] #3: ffff888022744888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 736.694421][ T32] locks held by kworker/u8:15/7520: 4, last CPU#0: [ 736.694438][ T32] #0: ffff88801b18a140 ((wq_completion)krds_cp_wq#14/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.694502][ T32] #1: ffffc90005a07c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.694566][ T32] #2: ffff88804c6bf680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 736.694631][ T32] #3: ffff888090f5a960 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: __inet_bind+0x3b0/0xaa0 [ 736.694698][ T32] locks held by kworker/u8:18/7523: 3, last CPU#0: [ 736.694716][ T32] #0: ffff888034078140 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.694785][ T32] #1: ffffc90005bd7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.694850][ T32] #2: ffff888029102cb0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 736.694918][ T32] locks held by kworker/u8:19/7524: 4, last CPU#0: [ 736.694935][ T32] #0: ffff88807a680940 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.694999][ T32] #1: ffffc90005847c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.695064][ T32] #2: ffff888057d26780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 736.695127][ T32] #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 736.695185][ T32] locks held by kworker/0:14/8400: 5, last CPU#0: [ 736.695201][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.695277][ T32] #1: ffffc900053a7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.695342][ T32] #2: ffffffff905c23e0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 736.695491][ T32] #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 736.695546][ T32] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 736.695608][ T32] locks held by kworker/1:10/8406: 2, last CPU#1: [ 736.695625][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.695689][ T32] #1: ffffc90004d5fc40 ((work_completion)(&(&gc->dwork)->work)#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.695766][ T32] locks held by kworker/u8:21/13647: 2, on CPU#1: [ 736.695782][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.695845][ T32] #1: ffffc90005ab7c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.695910][ T32] locks held by kworker/u8:25/14691: 4, last CPU#0: [ 736.695927][ T32] #0: ffff888025449940 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.695997][ T32] #1: ffffc900104bfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.696062][ T32] #2: ffff888028c31440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 736.696131][ T32] #3: ffff888022740330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 736.696201][ T32] locks held by kworker/u8:26/14692: 2, on CPU#0: [ 736.696225][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.696289][ T32] #1: ffffc900104cfc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.696355][ T32] locks held by kworker/u8:27/14696: 4, last CPU#0: [ 736.696372][ T32] #0: ffff88802a9bb940 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.696442][ T32] #1: ffffc9000eeafc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.696506][ T32] #2: ffff88802a9a5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 736.696576][ T32] #3: ffff888022741700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 736.696645][ T32] locks held by kworker/u8:28/14697: 3, last CPU#0: [ 736.696663][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.696726][ T32] #1: ffffc900103d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.696793][ T32] #2: ffff888040b1a258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 736.696938][ T32] locks held by kworker/u8:34/14703: 3, last CPU#0: [ 736.696956][ T32] #0: ffff88807e7ed140 ((wq_completion)krds_cp_wq#19/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.697021][ T32] #1: ffffc9001b1bfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.697083][ T32] #2: ffff888090f5c360 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 736.697181][ T32] locks held by kworker/u8:35/14704: 4, last CPU#0: [ 736.697198][ T32] #0: ffff88807ea78940 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.697275][ T32] #1: ffffc9001b1cfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.697341][ T32] #2: ffff888032b25440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 736.697410][ T32] #3: ffff888029107028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 736.697480][ T32] locks held by kworker/u8:36/14705: 3, on CPU#1: [ 736.697497][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.697562][ T32] #1: ffffc9001b1dfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.697625][ T32] #2: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 736.697692][ T32] locks held by kworker/u8:38/14707: 2, on CPU#0: [ 736.697709][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.697773][ T32] #1: ffffc90010457c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.697838][ T32] locks held by kworker/u8:39/14708: 4, last CPU#0: [ 736.697855][ T32] #0: ffff88807b887940 ((wq_completion)krds_cp_wq#13/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.697919][ T32] #1: ffffc9001051fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.697985][ T32] #2: ffff888057d24f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 736.698049][ T32] #3: ffff888090f59c60 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_nodelay+0x2a/0x180 [ 736.698111][ T32] locks held by kworker/u8:40/14710: 3, last CPU#0: [ 736.698128][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.698193][ T32] #1: ffffc9002341fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.698267][ T32] #2: ffff88802c5be258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 736.698340][ T32] locks held by kworker/u8:42/14713: 4, last CPU#1: [ 736.698358][ T32] #0: ffff888032c3c940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.698422][ T32] #1: ffffc9002344fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.698487][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 736.698578][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xbf0 [ 736.698696][ T32] locks held by kworker/u8:43/14714: 3, on CPU#1: [ 736.698712][ T32] #0: ffff8880325d1940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.698777][ T32] #1: ffffc9002345fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.698842][ T32] #2: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 736.698946][ T32] locks held by kworker/u8:46/14717: 3, last CPU#0: [ 736.698963][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.699027][ T32] #1: ffffc9002348fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.699092][ T32] #2: ffff888062c707a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 736.699161][ T32] locks held by kworker/u8:52/14723: 4, last CPU#0: [ 736.699178][ T32] #0: ffff88804bda9940 ((wq_completion)wg-kex-wg2#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.699255][ T32] #1: ffffc900234efc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 736.699319][ T32] #2: ffff888077fe1440 (&wg->static_identity.lock [ 737.599421][ C0] net_ratelimit: 11478 callbacks suppressed [ 737.599448][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 737.599575][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.600035][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 737.600149][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.600624][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 737.600734][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 737.601213][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 737.601858][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 737.601858][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 737.602488][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 741.364175][ T32] ){++++}-{4:4}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 741.364236][ T32] #3: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 741.364343][ T32] locks held by kworker/u8:53/14724: 4, last CPU#1: [ 741.364362][ T32] #0: ffff88808f773940 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.364431][ T32] #1: ffffc900234ffc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.364495][ T32] #2: ffff8880473e5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 741.364567][ T32] #3: ffff88807ff68330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 741.364642][ T32] locks held by kworker/0:0/17456: 2, last CPU#0: [ 741.364659][ T32] #0: ffff888056ea8d40 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.364730][ T32] #1: ffffc90004e0fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.364814][ T32] locks held by kworker/1:1/18023: 3, last CPU#1: [ 741.364831][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.364895][ T32] #1: ffffc90005c3fc40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.364959][ T32] #2: ffffffff8ee8bb20 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 741.365035][ T32] locks held by kworker/1:3/18024: 4, last CPU#1: [ 741.365053][ T32] #0: ffff8880829d9d40 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.365123][ T32] #1: ffffc90007367c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.365206][ T32] #2: ffff888028c31440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 741.365284][ T32] #3: ffff88807ff6b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 741.365355][ T32] locks held by kworker/0:2/18033: 3, last CPU#0: [ 741.365372][ T32] #0: ffff8880559b1940 ((wq_completion)wg-kex-wg0#16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.365442][ T32] #1: ffffc900073d7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.365525][ T32] #2: ffff88808db4d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 741.365598][ T32] locks held by kworker/0:8/18036: 3, on CPU#0: [ 741.365615][ T32] #0: ffff8880829d9d40 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.365685][ T32] #1: ffffc90005077c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.365769][ T32] #2: ffff88807ff6b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 741.365839][ T32] locks held by kworker/0:11/18039: 3, last CPU#0: [ 741.365856][ T32] #0: ffff88806a454940 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.365927][ T32] #1: ffffc90007417c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.366009][ T32] #2: ffff88807e709440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 741.366081][ T32] locks held by kworker/1:6/18043: 3, on CPU#1: [ 741.366098][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.366162][ T32] #1: ffffc90007457c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.366228][ T32] #2: ffffffff905c23e0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 741.366305][ T32] locks held by kworker/1:7/18044: 4, last CPU#1: [ 741.366323][ T32] #0: ffff8880559b1940 ((wq_completion)wg-kex-wg0#16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.366392][ T32] #1: ffffc90007467c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.366476][ T32] #2: ffff88808db4d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 741.366546][ T32] #3: ffff88807d161700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 741.366616][ T32] locks held by kworker/1:12/18045: 4, on CPU#1: [ 741.366634][ T32] #0: ffff888056c85d40 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.366704][ T32] #1: ffffc90007477c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.366787][ T32] #2: ffff888034555440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 741.366858][ T32] #3: ffff88807fd1a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 741.366930][ T32] locks held by kworker/u9:0/18173: 7, on CPU#0: [ 741.366959][ T32] #0: ffff888040e60940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.367021][ T32] #1: ffffc900051a7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 741.367084][ T32] #2: ffff8880567a8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 741.367152][ T32] #3: ffff8880567a80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 741.367212][ T32] #4: ffffffff903d8f00 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 741.367374][ T32] #5: ffff888029ee52f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 741.367471][ T32] #6: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 741.367544][ T32] locks held by syz-executor/19197: 1, on CPU#0: [ 741.367561][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 741.367628][ T32] locks held by syz.0.3143/19218: 1, on CPU#1: [ 741.367645][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 741.367702][ T32] locks held by syz.4.3145/19230: 1, on CPU#0: [ 741.367719][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 741.367775][ T32] locks held by syz.3.3146/19232: 1, on CPU#1: [ 741.367792][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 741.367850][ T32] locks held by syz-executor/19242: 1, last CPU#0: [ 741.367867][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 741.367925][ T32] locks held by syz-executor/19248: 2, last CPU#0: [ 741.367942][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 741.367998][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 741.368059][ T32] locks held by dhcpcd/19250: 2, last CPU#1: [ 741.368075][ T32] #0: ffff888068af1380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 741.368184][ T32] #1: ffff88804aaa0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x7b7/0xd00 [ 741.368284][ T32] locks held by syz-executor/19251: 3, last CPU#1: [ 741.368302][ T32] #0: ffff88801df36420 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 741.368372][ T32] #1: ffffffff8f4f0f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0xef/0x180 [ 741.368470][ T32] #2: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 741.368544][ T32] [ 741.368551][ T32] ============================================= [ 741.368551][ T32] [ 741.368570][ T32] NMI backtrace for cpu 0 [ 741.368587][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 741.368612][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.368627][ T32] Call Trace: [ 741.368637][ T32] [ 741.368648][ T32] dump_stack_lvl+0xe8/0x150 [ 741.368685][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 741.368755][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 741.368795][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 741.368832][ T32] sys_info+0x135/0x170 [ 741.368888][ T32] watchdog+0xfd7/0x1030 [ 741.368929][ T32] ? watchdog+0x1c7/0x1030 [ 741.368961][ T32] kthread+0x38b/0x480 [ 741.368985][ T32] ? __pfx_watchdog+0x10/0x10 [ 741.369006][ T32] ? __pfx_kthread+0x10/0x10 [ 741.369031][ T32] ret_from_fork+0x514/0xb70 [ 741.369057][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 741.369094][ T32] ? __switch_to+0xc89/0x1420 [ 741.369130][ T32] ? __pfx_kthread+0x10/0x10 [ 741.369155][ T32] ret_from_fork_asm+0x1a/0x30 [ 741.369208][ T32] [ 741.369218][ T32] Sending NMI from CPU 0 to CPUs 1: [ 741.369292][ C1] NMI backtrace for cpu 1 [ 741.369307][ C1] CPU: 1 UID: 0 PID: 7123 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 741.369330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.369347][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 741.369373][ C1] RIP: 0010:lock_is_held_type+0xe4/0x150 [ 741.369398][ C1] Code: 74 12 31 c0 f6 43 22 03 0f 95 c0 31 db 39 c5 0f 94 c3 eb 05 bb 01 00 00 00 48 c7 c7 ce e0 6f 8e e8 61 1b 00 00 b8 ff ff ff ff <65> 0f c1 05 dc fc af 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 [ 741.369417][ C1] RSP: 0018:ffffc90000a18388 EFLAGS: 00000002 [ 741.369437][ C1] RAX: 00000000ffffffff RBX: 0000000000000001 RCX: 8000000000000101 [ 741.369454][ C1] RDX: 8000000000000100 RSI: ffffffff8e6fe0ce RDI: ffffffff8c6d9c80 [ 741.369472][ C1] RBP: 00000000ffffffff R08: 0000000000000100 R09: ffffc90000a18650 [ 741.369489][ C1] R10: ffffc90000a184a0 R11: fffff52000143096 R12: 0000000000000246 [ 741.369506][ C1] R13: ffff888026115dc0 R14: ffffffff8ed5c8a0 R15: 0000000000000004 [ 741.369523][ C1] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 741.369542][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 741.369559][ C1] CR2: 00007fa0ba6d3ff8 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 741.369580][ C1] Call Trace: [ 741.369589][ C1] [ 741.369601][ C1] __find_rr_leaf+0x34d/0x740 [ 741.369673][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 741.369703][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 741.369760][ C1] ? __lock_acquire+0x747/0x2de0 [ 741.369787][ C1] fib6_table_lookup+0x3c6/0xae0 [ 741.369823][ C1] ? unwind_next_frame+0x8f/0x2550 [ 741.369862][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 741.369903][ C1] ip6_pol_route+0x229/0x14d0 [ 741.369936][ C1] ? ip6_pol_route+0x163/0x14d0 [ 741.369973][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 741.370007][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 741.370067][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 741.370097][ C1] fib6_rule_lookup+0x556/0x730 [ 741.370175][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 741.370211][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 741.370250][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 741.370278][ C1] ip6_route_input+0x78d/0xb20 [ 741.370305][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 741.370333][ C1] ? nf_nat_ipv6_in+0x200/0x2c0 [ 741.370402][ C1] ? lock_acquire+0x115/0x350 [ 741.370429][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 741.370485][ C1] ip6_rcv_finish+0x141/0x280 [ 741.370515][ C1] NF_HOOK+0x336/0x3c0 [ 741.370543][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 741.370571][ C1] ? NF_HOOK+0x9e/0x3c0 [ 741.370597][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 741.370626][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 741.370662][ C1] process_backlog+0x795/0x18b0 [ 741.370691][ C1] ? process_backlog+0x3de/0x18b0 [ 741.370724][ C1] __napi_poll+0xaa/0x330 [ 741.370756][ C1] net_rx_action+0x61d/0xf50 [ 741.370788][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 741.370831][ C1] handle_softirqs+0x226/0x860 [ 741.370864][ C1] ? do_softirq+0x77/0xd0 [ 741.370896][ C1] ? kernel_fpu_end+0x62/0x80 [ 741.370925][ C1] do_softirq+0x77/0xd0 [ 741.370953][ C1] [ 741.370962][ C1] [ 741.370971][ C1] __local_bh_enable_ip+0x100/0x140 [ 741.371002][ C1] blake2s_compress+0xfa/0x1c00 [ 741.371069][ C1] ? __asan_memset+0x22/0x50 [ 741.371105][ C1] ? encode_point+0x8346/0x84b0 [ 741.371147][ C1] ? __pfx_encode_point+0x10/0x10 [ 741.371181][ C1] ? kernel_fpu_begin_mask+0x2bb/0x380 [ 741.371216][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 741.371249][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 741.371274][ C1] ? kernel_fpu_end+0x62/0x80 [ 741.371315][ C1] blake2s_update+0x140/0x450 [ 741.371351][ C1] hmac+0x2d1/0x3b0 [ 741.371386][ C1] ? __pfx_hmac+0x10/0x10 [ 741.371438][ C1] ? kdf+0x13d/0x290 [ 741.371472][ C1] kdf+0x184/0x290 [ 741.371508][ C1] ? __pfx_kdf+0x10/0x10 [ 741.371555][ C1] wg_noise_handshake_create_initiation+0x29e/0x810 [ 741.371594][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 741.371637][ C1] ? __lock_acquire+0x747/0x2de0 [ 741.371670][ C1] ? __lock_acquire+0x747/0x2de0 [ 741.371697][ C1] ? lock_acquire+0x115/0x350 [ 741.371723][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 741.371759][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 741.371782][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 741.371807][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 741.371834][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 741.371862][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 741.371893][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 741.371934][ C1] ? rcu_is_watching+0x16/0xb0 [ 741.371962][ C1] ? process_scheduled_works+0x97a/0x1630 [ 741.371994][ C1] process_scheduled_works+0xc3d/0x1630 [ 741.372044][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 741.372078][ C1] ? assign_work+0x3cf/0x5d0 [ 741.372109][ C1] worker_thread+0xa47/0xfb0 [ 741.372157][ C1] kthread+0x38b/0x480 [ 741.372181][ C1] ? __pfx_worker_thread+0x10/0x10 [ 741.372210][ C1] ? __pfx_kthread+0x10/0x10 [ 741.372233][ C1] ret_from_fork+0x514/0xb70 [ 741.372256][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 741.372292][ C1] ? __switch_to+0xc89/0x1420 [ 741.372325][ C1] ? __pfx_kthread+0x10/0x10 [ 741.372348][ C1] ret_from_fork_asm+0x1a/0x30 [ 741.372393][ C1] [ 741.381888][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 744.896957][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 744.906103][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.916195][ T32] Call Trace: [ 744.919518][ T32] [ 744.922479][ T32] vpanic+0x56d/0xa60 [ 744.926529][ T32] ? __pfx_vpanic+0x10/0x10 [ 744.931083][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 744.936682][ T32] panic+0xc5/0xd0 [ 744.940455][ T32] ? __pfx_panic+0x10/0x10 [ 744.944930][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 744.949998][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 744.956203][ T32] watchdog+0x1030/0x1030 [ 744.960581][ T32] ? watchdog+0x1c7/0x1030 [ 744.965036][ T32] kthread+0x38b/0x480 [ 744.969168][ T32] ? __pfx_watchdog+0x10/0x10 [ 744.973879][ T32] ? __pfx_kthread+0x10/0x10 [ 744.978520][ T32] ret_from_fork+0x514/0xb70 [ 744.983162][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 744.988328][ T32] ? __switch_to+0xc89/0x1420 [ 744.993055][ T32] ? __pfx_kthread+0x10/0x10 [ 744.997681][ T32] ret_from_fork_asm+0x1a/0x30 [ 745.002517][ T32] [ 745.006170][ T32] Kernel Offset: disabled [ 745.010518][ T32] Rebooting in 86400 seconds..