last executing test programs: 1m8.187509854s ago: executing program 3 (id=2781): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) (async, rerun: 64) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) (rerun: 64) syz_emit_ethernet(0x10e2, &(0x7f0000000080)={@remote, @empty, @void, {@mpls_mc={0x8848, {[{0x3, 0x0, 0x1}], @ipv4=@tcp={{0x24, 0x4, 0x1, 0x20, 0x10d0, 0x67, 0x0, 0x1, 0x6, 0x0, @local, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1e, 0x2, [{0x7, 0x5, 't:|'}, {0x5, 0x2}, {0x0, 0x11, "3549ccbeaf539db4854cc1de02fd0a"}]}, @end, @end, @rr={0x7, 0x17, 0xf6, [@multicast1, @private=0xa010101, @multicast2, @remote, @private=0xa010102]}, @timestamp_addr={0x44, 0x1c, 0x87, 0x1, 0x4, [{@multicast1, 0x2f06}, {@private=0xa010100, 0x7}, {@multicast2, 0x5b029984}]}, @end, @generic={0x86, 0xb, "7cde032125dd4e5d65"}, @generic={0x82, 0xa, "0623315707b9c79b"}, @ssrr={0x89, 0xf, 0xeb, [@broadcast, @local, @rand_addr=0x64010100]}]}}, {{0x4e23, 0x4e23, r0, r1, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x1000, {[@eol, @timestamp={0x8, 0xa, 0x0, 0x800}, @eol, @md5sig={0x13, 0x12, "836cda85f3afd870da251f8f70ec058c"}, @exp_fastopen={0xfe, 0x5, 0xf989, "8c"}, @fastopen={0x22, 0x9, "7615efd016ebb1"}]}}, {"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"}}}}}}}, &(0x7f0000001180)={0x1, 0x3, [0x99a, 0xf33, 0x729, 0x11a]}) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000011c0), 0x8) write$tun(r2, &(0x7f0000001200)={@void, @val={0x3, 0x0, 0xdf8, 0x8001, 0x5, 0x1}, @ipv4=@udp={{0x2f, 0x4, 0x1, 0x21, 0x116, 0x66, 0x0, 0x8, 0x11, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x63, 0x1, 0xf, [{@local, 0x7}, {@local, 0x6}, {@rand_addr=0x64010100, 0x973c}]}, @ssrr={0x89, 0x17, 0x2d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ssrr={0x89, 0x23, 0xc3, [@remote, @loopback, @loopback, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x75, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x10001}, {@loopback, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010100, 0x6}, {@private=0xa010101, 0x6f1}]}, @ssrr={0x89, 0xb, 0xb2, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xd8, 0x3, 0x1, [{@multicast2}, {@private=0xa010101, 0xff}]}, @generic={0x86, 0x2}]}}, {0x4e21, 0x4e20, 0x5a, 0x0, @wg=@data={0x4, 0x993a, 0x9, "7786a8c9a04a6c27574b3cad25040fa7d8555f39662faa963ade3c979747216d26a1d6c2350bb10fd84016d7e88363203591fc0afecd4629ed4a2b46d109e7fe9255"}}}}, 0x120) syz_extract_tcp_res$synack(&(0x7f0000001340), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000001380), 0x4, 0x326a) (async) syz_extract_tcp_res$synack(&(0x7f00000013c0), 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) syz_extract_tcp_res(&(0x7f0000001440), 0x3, 0x6) syz_extract_tcp_res$synack(&(0x7f0000001480), 0x1, 0x0) (async, rerun: 32) syz_emit_ethernet(0x9a, &(0x7f00000014c0)={@broadcast, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8100, 0x6, 0x1}}, {@generic={0x88b5, "b91192ebc1fd3b2bc6de5d198e35ac7ea7a31c698cf1e13c847c0cbe586a304e7322c26d516826e8ee4008ab769ded993fe34f199a8b27a490044696edb42a92e9ab18eac4f24def3399ff867c7a07a52565ca90a402530037d5849b12f415b4f223bc7e8052f02875f1325784cce33904cfe198eb952896a6de3c3e4f7785c8e2d157cc"}}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001580)={0x2, 0x8b, "de3ba8a47c9556ecf33170812edbaa90ebf9615999149356590f1e02c9765b07e95d17e44e1045cd256af0dcf11c5b7b35d56793e0bf0495aa063a9fc47346c6fce069b273a19310935d2e7f1757e86b722e8f4c5455848a004de4f39baed0f20b3821c725ca16e4d3cb1afd02729bfb7813853155cf33e02dbb62a3ec98218ce0e1f7d4e7dadf59ecdec6"}, &(0x7f0000001640)=0x93) (async, rerun: 64) syz_extract_tcp_res$synack(&(0x7f0000001680), 0x1, 0x0) (async, rerun: 64) close(r2) (async) syz_extract_tcp_res(&(0x7f00000016c0), 0x0, 0x6) (async) syz_emit_ethernet(0x95, &(0x7f0000001700)={@random="86a50a4c570c", @remote, @void, {@generic={0x18, "87a510262813ca7557c1375ad228c2c8220c6777a9de010aa951c018ff718b1c0b39f90388390b172817732a9de763970422822af0f12ee9ff96da578cfa7e40149343cdb1ba0b92a8f7d13da107e1027d42133fa986239fbfb85d229a7c0968d16c0197a3d01fbd5cf7a37b465a15b3082cee6cbfbca46f7e3355148716cf59f3127cf7d4ba81"}}}, &(0x7f00000017c0)={0x1, 0x2, [0xe50, 0xb2b, 0x255, 0x5b7]}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001800)={0x3, 0x1, 0x8002, 0x81, 0x9, 0x6, 0x2, 0x8, r4}, 0x20) (async) syz_emit_ethernet(0x1022, &(0x7f0000001840)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @local, @void, {@mpls_mc={0x8848, {[{0x17, 0x0, 0x1}, {0x4}, {0x101}, {0xf4, 0x0, 0x1}], @llc={@llc={0xf8, 0xfe, "c256", "b681efbea9b3877086dfe314917f867076be718d04c7dccc3837869a4d1d370832ace3567e79e8c3459918b573ab80de18fd5c59f9e1f3c9fa55eca096fb725dde46aadc9fd3cca9fd0b1cf54716266c53b6cb90bb140d296dce9a575fa97186cac48f67595824bf203ef191ce7ee2d23216f26e289dd5afa37200896b615f7c7e04e6ef1dcf017c03e02bcdecef4d6a8e0ee5e8361055a19940a6f49a63cdfb47f20a93874c9e9dd6bd69c12ce6d4937a4687f242e3cad6beb168628f79e5fe70faaa9f127ba46ceaaf84a4d65d107200fc203023e47b7acd054f791fc5dbe2fb7488e3a4aa40d55e21fcec009cb2a10c784403f429220c1a979f9e25d8f0ca75db309b5a3ea708f67f0e495e0d3fdd1fc1ce46cbcc4846b99dbe63f862e7bf77fd45179d2bf0f097ae8f47d2a8ef5fcafbcef0bef622c7c44f426a768baaf26935099552fd6a2cd5127e0314c0995ac0764bcc5ec9c3bdd7e70bb2d09fa221eb94cb5fd388c6c835007692299c4b7968cd42d17a9801abe3c0fda9eff0195fdb9be85e6fc041a6ce60cff82de7a8b991320d13dd8a8ebe20735f5f220177643ae802f8642de40f23300872aa53ad4400d010b913cbd786a2745b7722d03d41f5fd76c46e5872a980ee0eabbe42818ede76ba62bc406e3fca913183164fcfc4ddb35cc8f2e4beb68a179978a7569a8826921c6bcecede6b2e8cf1b4417cc010be8b8b9980759250ea7cd93490889a1a8209b58b78a15e3fa9c789515cce9ba002d6d12d90efca1bb50501219ceec63abb7ac0f8828caf329296d065b0ad202c147ea52e81a27a89fe308a3b2f596616b55d78fdbd8b099edc7e18405a6b3950dcaf34f580e63a4a9cbbfb9d31561018df5d22d026af55ffffbc9ac4af60a47d264b24c14b635c4644fc7570556fcf325d37f4e24063893cfbba0165f3a04487ff3c0eace6a9338cca3c68a775496dca1b0578bd0d725752debd87671b1cd977098f386911388af7c4930529f604a27058e86b9f614407151b81787a0d1dbe0092c565d732bebc7120f65e1d7364b95ed3c39b92d8478657f7310c34dc7452e17a3126a4b76c6cb429974d1e9a160f3a57467dcd7c4a4c510253de69ae75870a142da8c8071d0e48ef2e6c60af6d419b9c2207f5120b699821057f20e777d0c1af435e65a2c2620e538e83d102624f2ca459819957a3af95219ecfaf131f24dbf2e6f9d23c6494ff1deac8764d99495811aaf500c1c92cf3e85b1ef3ff191687162574c0fb169fecad8e036d6d9fc06f78f53be2b76e2a21968766ecfcff62386766cd46e0aa905e4e79be16258dfa05fd4b086d76a9670b73d5ee3947186a595fe6644c45d43a8c535550b104669641444c61b20113e36eb7c23df41a10647e0b4047db5fa2ebd675ea79a562b5d750329fd84362c07cdce48056811eeac9f446d5bb00c0bd57a987ffa3b68789b953b28bea3a6f8ff30e29840f70efd8570538cd0aec26eef3cc4010fe9cab2f036680cf8f6508755dd9da20b183af7f311e4ef9ebf9dad1c1f4afbb7e26778100f754ccae2d34812d919a4543c44dc2720db72ff2010feaf49911fbd25f38ae3aa6e5a87171749aa43ec7a63c2445e8394c2fe3d886ef8ce4e2f8e97dbae1c654d102d71df74dab4832837df4b41b8dcbd4ed1d23bd8532f8295220c2954662161896df638bd2e9486cdd66ba18825fddd6b532408953b0f404c66e72208f57304ab681b68afc9bd33a48ee1aff12a9e4bc8d680dad165e5a286a2d339264e942c1b60023873fe8dee691774f6d45a63cd68c404bbeec954c47194d28cccb8cb5e4f9bf92c872171036670f66bfd26100c3e2eaf4fc72fa86b7a22ead06759248afeda46c6b312e030e4eb88b0cba6a2f952be6a7c123c4e77ecf393e25e768de04e1ea8bc3406028b825bbef5a9bca637b287b70669aa0355629e863ddda5dfdca5335fd6f4c5c3bf6edef6480d4c0b84ed38d70788f82e3936c3306ec928684d66e36d8eb91592406e778096432b2880315613cc0b9afb99cc1064ff6166ab96f2e6eb77a6134c81ac721d0d6b56a3e08fe8fb2a0ef67e96557a5dd07b2ccb8ee81ab32015280a4dc5fe561723aa5df466f2a41b2a19c8881c94c5b879fd2185cb1c94bc51b417ff0afd1192f92c722a92783470332cf472d604f8e75fa40ac3a2295adc26854a1c01c08866fe435e514cb5e0bd79cada4638bb7c16b2668a3440f449df60f56683e7ae023c816d91054f0347fcb0e1c0479f9c75eedc191ba613503290982a0a1ccfe26bb5d10b15c24d99cea4c81980ab0b7c97276e3551d160613b5dff58daf5edb395852b5326235975e22245d40287b07eb8c0fb0d826391e63f379eeec5bbeb41db6b66cc3a4d3cf592fb2bc524ed4c1669e81e632a9dccfc38e7041e74154e104cb9cb98978719f2070c76455ced9159a800984ef1123b06f01263a94a5b10c94ca23f0ec18e8d15931228e37629dc5dc9f43388e77e11e8d218e5de9ce0bfebd0076146aa7057ad486d1f8136ad11172675f92a8dfb8898b0e19ed7b3b25941a6810d5d817616c621e00725c58672e8e2916c615809c9582e8077370e7ed51a5b7d3140a2530ad1df1b3546a7ed36cae7288b1599ac75413bcbfb4ed0296f14835a494fe6846a281c2169ecfe7ba1a27f386e9c59656e46b655d6392ce71c01e8944d8e3180001fb0f27d97c45528d883fcee4fee14fd904ca5352614f773492f84779e06e521fc525173ed56a2bf7f2439e1f4ac886bd5b1d7013e50b7390b0c03a4b4aadd1573f2a2811773e6a3c44e2a5f9b653cca79d90bc23a04bbcc97a1b55c93d3ee4b121e890a81d2811e413805da974c2861faa45c27bb23d4a15cf41d1f5c0928c425a4ddb3e168590124eb417e1cedad673314fe706c02d32f3e1491cc9d1b1dd473c2bfe80d7e192cb72221add8ec7980c9e6371801738b74c900163bca65cf0c7d7348aa4fbf1b039ad2d56a62c67d6faf8e20cf4d45a2ea485dd0550d303c24a9b17ee8efb1b63e57fbe2fe440398adc4f432a6a3f8f03c3a196d7bccfda61b4f043020a08f55a298189afad7b2827449ef11f7d41bbbf32b15056a7f552d18359d0d96f57db483e9380bad83442a35549cea7b7dfa26951b25053507c6ea122a8a79e091d96c33d0227a48f6960b4e40c1f20b6c1d519a3959697d75ceceb2ac9c2eefd4c1c53a85689cc2df0765c48a59ad67d03dcdc2f9bc9ec204e4892e04e5d0215c987feb0b45028049e9d614fd1cb8fc37f6b6695deea6ea1593f7af7e4f9b43cd59943cd74eace0cdbf4624d496266932688ed2696951306f57699f23dc0f2a8e3b5fe93ecd339f133877a7de86691737207f06e3a2442c14e32e1ab81c9da205fa66ba10be570ad2f8c8c4e59b50469ca20af7e4e909408fba1a5ecfa50b686c3a7bd92ecb75ded3c6b70e39df7b672f2f547ffe1549dbad2acd64436524689fc15276da53a02b042bca7e53f1884c672edcc91743714b9407be42418606c769f9abc9044383919e6d2530d88050b31d78f56e1c6470087a76961aff434f89cfb1363a2e3637b96b9abc5f0f51d144f4cc351e6a09d03ac9b4396226dbcd9ace72ed3cf723ae836e8d405edfdbf70e8203d17af71ee9c72b270f5a17afadc0602eaa7ab7784e425f525e71887a11c54889163bde8c9b40c4bbfa68335d90b84bb376d01a7f33e88c97b954337ff3ca4e52dcaced5bec8fa83bfcad5cbc4a4a8f903193e235105109c24a613fa68d09a4d92994deb28af415f0dd4c8795836db4a5cec21a0686d22cf94ae44506cd1cdbf7af44d944f7303492c324718279bb264a32ff42d38faca21a9a7ce2742471be42abaac4baa8ad6b3040643fc2ea680e1d6d34c4fa31c54f2cb57346742cbac05a25d5e271cf509f3488743518a10132731b9d76b75f57bb0cfae00a014b23a57ba4615f3390b70e98b2f1fc0ce8d6b2b9402e4665a7638ee3f98dff01473b94e5180861fc68a65a58af7ad949cc88e7ee47a19d6157d05d3665502c09ab09edc1b8e3d420f5b4011e050b1da759e6870dc39b947b4f7a583a7084b1e0c560f60986709cb94138cd05b5be4a13a15062be3de7f1efdc36798e50f9ca05a8824136098f82991f35f50161b8a0caea5a534905f0d37ba348a36c15b1d2be0eb5c64388382b7b36f62996886eb054214b582be0ee021cd41a78bc4aa1bada99b0eb9541269186ff948fc035528980162a6c150ccc691bc58ba63405360f9009770a1915421dce3ab18f697b852841dc98e54c3354a15850a3175632c243b08fd03096e319a2b092fc8288614e452e79eae4f7e28eb4ff6e94d2c90706f3744940059f825761c7a13b6b3d264b1405d8b12540be2c5bf59df7137f8987fb3a0cda01ed4c64060d69d256f35164a36b937abb13fbe71a1bda515ecd7d145ceeec4ea2bc1c2d9574a6093e819ca7508f8b83e3e3367da43b4cafc61d54859a41222354343924f6dbb6f75d88d8789967d618a0ebb0b107c0eb6e885382fa22b28032e36984d47d7ecc67f4add4590f63664a794d1392b75f53b38de2eacbeeb42e7f9e34d8ce49feac8c566569975e052519512d39335bb1e80966da2165090689cb0385a9db7ee41fdb7c83708ccb82fdce2cd8db2f48a4a067baca5dc09be56eb89094811c9998989545ea8ab444cd7ba62a638635fd226d45171cf553b27990282d9092b7496dacc9d5233d46d9ddec576d62c44751a38cf05820b07cbf30b0a91b5b1690ae2b462d3b9be3cea0ac4b3f4d2d7ac31b656524df51d35b75ee9f38e66f754b1abac2e8ea01bf691135c5af07f2da62833cd824fd381f9ba8a7bb10790beb987a0ce1970875883ddf56da0a11abe5c6965ebc142dc2d8f4824461b3da59cf84e1fd74ec7c9d5e90917c991730a6f5194fccf9149275228649d4d45c43ffcdb04bf89820b933a134df8004813ddc1ccabe1625160ab76f239d0687665f5aacbbcc6ae7dd0ad882d23ff360dd1419768d57123cb3379235434ada48c401a510f6aa8f9ad9fe33391e14bd20b6e4717293297db31141808c358ede8e673b6b8a27ccecc6fd054c7f7ee3d8a40c3d2a6cfbd30ee9430dda594cd6e354f66072b4e2159c651c69d3a5d8be9bc995e54ebfc7f8fece5d837e6e377f208c7bc630372d83be51e7ad40902889efc97420d8ee3a4a794fa5b1f118b2ed6a85cb4e8a4a4c2a24784362237323918168e0512738378e1804050691fd7377dc20dbe75e0febd4002103078f277c6015bf1cc7d640e9a0bc5ed3b9f9a1bb8f8dcb4bc35cc48a8df5d627962f2c8305c558c83f8a7d61eb98985e3e1db93b85f1b368c5670113a6650d72aed33ff88b732f2852001ba47ca7c970208dc2b584c026444698edf40c138a31511beb44b6a114b2112547c845fe4318bce8ff27c2333cceebbd3fbc81d60a0976ab27ea4ab3f7df8464aee5d9a4e63dc736b178856da3a791e705dbefe2ea65c67e6724cfc4a171df3ba1fd86c5f41fe6b79431ce2d546a2a666b5950918404480e22a304ead6a6ef5c66245fe0f37904a29452922a07f704b3903797e74314d8ef37e280d9b1f33e02d1abefb714c06412903254422a744b77c7d652d4454fa0fa50ae2fb31b7e0962212b413934f054eada9d6aff4ea57c4d215b9463a548d57952c2f1453cd33eadbf47c7662ac35fb5cac52ac0d5d1c42b22f77edd2fa0d3c65b88925ffbc514ab3da76252893b3577d7b23ced26f9822194fda1f194460d8f2e5"}}}}}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000002880)="cb6739225199b0d58b1ded593b0de2f0c4c6e2dceb7d6c47a9b0887edd2a6fc04c0d5deb4f0c21a573a21106b40c181f1065a18e17be64ac7c108745cfe1c9622080bb1a1ff1898b326e0224c8d119ff2431fc5b8fefee438dbacf994d713a2d584d443b181834212027974231126ee08c57411783b3636451171bf7346812a40f", 0x81, 0x801, 0x0, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000002940), 0x1, 0x0) listen(r2, 0xfffffff4) bind$inet6(r2, &(0x7f0000002980)={0xa, 0x4e23, 0x2, @local, 0xe}, 0x1c) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000002a00)={r2}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), r5) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000002a80)={0x10000, 0x8, [0x1, 0x8, 0x3ff, 0xffffffff], &(0x7f0000002a40)=[0x0]}) (async) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x30, r6, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x40}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) sendto$inet6(r2, &(0x7f0000002bc0)="11d1980acbe8e758962d676b15f5dd80754a54f76fca6e5deedc83c275d9f5620f6f0cf5656fbd377679f5e07e07bbd3c54ba36384bb97c228812662e549042592579c6e0a246baa5431e3e1474df85dd2c1584d547a59e851b88231ea20f4327f8e23671d0bd19ef7a4e8e3f24c99091000daf87053dbe7107fcaec0d2b58544c27330937f698670313545444fd84adc93ca7b94fa4f471691763bf12e9fa95f49aac792623be30ec0a848730", 0xad, 0x4, &(0x7f0000002c80)={0xa, 0x4e22, 0x10000, @empty, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002cc0)={'wlan1\x00'}) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000002d00)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x0, 0x0, 0x44, 0x0, "c78ce02695679dc66bb0910ff6eb0a658d88df93c2256d5ddff5f61bf508fd0acf7971c902f59f85b0f5868688d3096aed0a0744bbbfc52fefc80f856146c2a8e8f70547d9d4d3ea7d9fbf14aa8505b6"}, 0xd8) 1m7.662664283s ago: executing program 3 (id=2783): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000540)={0x1f, 0xfffc}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x1000}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000140)=0xf3f, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00'}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9402fa10439a8f008fff4dc75748a267e8e75c25d8a6f5c5d2412a839047dbb1d62a", @ANYRES16=0x0, @ANYBLOB="10002abd70000c0000000300000008000100", @ANYBLOB="0ea01f9f2989c27686269403e57324b0e9e19dd44925cc75b0351ab9015c578fb72604b3f1b1d77c097478358fa2eb3ff754824880dbacefbd7ef42b962e8574e149bed826bcf34eb9326e028f0dbfda7ac7", @ANYRES32=r5, @ANYRES8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYRESOCT=r1, @ANYRES32, @ANYRES32=r6, @ANYRES8=0x0, @ANYRES8=r3, @ANYRES8=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRESOCT=r7, @ANYRES32=r4, @ANYRES32=r10, @ANYRESOCT=r6], 0x294}, 0x1, 0x0, 0x0, 0x4000000}, 0x4002080) (async) r11 = accept4(r5, &(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000440)=0x80, 0x80800) accept4$tipc(r11, 0x0, &(0x7f0000000300), 0x80000) sendto$packet(r5, &(0x7f0000000240)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655f71548a3f6c5609063382a0c1511fdf9435e3bfe46", 0x3d, 0x0, &(0x7f0000000380)={0xc9, 0x11, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r12 = socket(0x2, 0x80805, 0x0) (async) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000480)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, &(0x7f0000000500)=ANY=[@ANYRES32=r14], 0x12) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="e600"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES32=r12], 0x48}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) 1m6.411932699s ago: executing program 3 (id=2788): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x17, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write(r4, &(0x7f0000000300)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000440)="2e9b5b00ace03dd65193dfb6c5619a3d86dd60670600001406120000", 0x1c}, {&(0x7f0000000740)="37bcb39800000000f66b8157b45046eb15ff314c846dbc0f31fa4cc9f8296c3c2e80cdd4e4c4d38badf3518aeea2d6f03fbd", 0x32}], 0x2) 1m5.878979415s ago: executing program 4 (id=2794): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01040000000000000000050000020900010073797a30000000000900020073797a300000000034000480300001800e0001"], 0x104}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x100}, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) bind$l2tp6(r4, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty}, 0x20) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) (async) connect$l2tp6(r4, &(0x7f0000000680)={0xa, 0x0, 0x0, @remote, 0x3}, 0x20) (async) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x128}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000540)={&(0x7f0000001840)=@hci, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001900)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async, rerun: 64) sendmsg$tipc(r10, &(0x7f0000001a00)={0x0, 0x18, &(0x7f0000001a40), 0x31}, 0x0) (async, rerun: 64) sendmmsg$sock(r10, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001b80)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000001c80)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000001d80)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000001e40)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001f00)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000001f80)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000001fc0)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000002000)="048dc9fb57afe301fd6f418490309860762750", 0x13}], 0x4}}], 0x3, 0x0) (async) recvmsg(r7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/4096, 0x1000}, 0x0) (async) close(r7) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002040)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYRES32=0x0], 0x6c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) r12 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1m5.786078786s ago: executing program 3 (id=2795): setsockopt(0xffffffffffffffff, 0x3, 0x80000001, &(0x7f0000000300), 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f00000002c0)=[{r0, 0x1000}], 0x1, 0x4) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="94010000", @ANYRES16=r5, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x90}, 0x8004) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="94010000", @ANYRES16=r5, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x90}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 1m5.701493496s ago: executing program 0 (id=2796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800000013"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m5.568248933s ago: executing program 1 (id=2797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004"], 0xbc}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x4008004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6000000055000500010000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ef"], 0x60}}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r7, 0x10, 0x70bd27, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040084}, 0x20040040) ioctl$sock_SIOCGIFINDEX(r2, 0x8942, &(0x7f0000000540)={'ip6_vti0\x00'}) shutdown(r1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000100)={@remote}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x8400008) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x83, &(0x7f0000000000)={0x0, 0xa7a}, 0x8) accept(r1, 0x0, 0x0) 1m5.303065406s ago: executing program 0 (id=2798): r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x1b, 0x5, 0x408, 0x110, 0x200, 0xffffffff, 0x2a8, 0x110, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, &(0x7f0000000300), {[{{@ip={@private=0x9, @empty, 0xff, 0xffffff00, 'wlan0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x4e}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x0, 0x3, 0x5, 0xd, 0x2], 0x2, 0x2}}}, @common=@inet=@ecn={{0x28}, {0x0, 0x20, 0x7, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x12, @empty, @loopback, @port=0x4e23, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ttl={{0x28}, {0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @empty, @gre_key=0x6000, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23, @gre_key=0x7}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}}, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f0000000180), 0x4000000000001f2, 0x0) (async, rerun: 64) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'pim6reg\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_1\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async) syz_emit_ethernet(0x4e, &(0x7f0000000cc0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @empty}}}}}}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000600)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) (async) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000011c0)={r7, r7, 0x3e4c, 0x1, &(0x7f0000001280)="c3", 0x21, 0x80, 0xb57, 0x8001, 0xf001, 0x2, 0x2, 'syz1\x00'}) listen(r6, 0x5) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x5, &(0x7f0000000500)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map=r9, r10, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r9, &(0x7f0000000600), &(0x7f0000000640)=@tcp=r6}, 0x20) sendto(r6, &(0x7f0000000680)="01", 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890) (rerun: 64) 1m4.716732779s ago: executing program 1 (id=2799): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000022c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000010000850200000000000000020000000000000000000000da0024107b35d0e9a17c2a3472acbd497d22d9eecb9c71c75b5c74441d6cfd33332c6ba1cb230ea061765707d2768c12e0dad9de2957832f41a65d71fc8969922f6f174be7148ae200ff554c800dd134195ce692a5db2763e4686c035a1a96daee68647212bb50b12c90ff18a9edfd233095ddeac1627d7a50d5bceab9101d004db88566275b233540"], &(0x7f0000000b80)=""/142, 0x52, 0x2df8cb643540299b, 0x1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000020c0)={'erspan0\x00', &(0x7f0000001fc0)={'erspan0\x00', 0x0, 0x10, 0x40, 0x8, 0x0, {{0x2c, 0x4, 0x0, 0x9, 0xb0, 0x65, 0x0, 0x6, 0x29, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1d, 0x3, [{0x2, 0x6, "6e5edf8a"}, {0x5, 0x5, "bf7185"}, {0x0, 0xc, "5a5e8958975c0bc32141"}]}, @timestamp_prespec={0x44, 0x1c, 0x9a, 0x3, 0x8, [{@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast2, 0x225a364b}]}, @lsrr={0x83, 0x13, 0xf4, [@dev={0xac, 0x14, 0x14, 0x44}, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x94, 0x3, "d7"}, @lsrr={0x83, 0x13, 0xef, [@multicast1, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp_prespec={0x44, 0x34, 0x49, 0x3, 0x9, [{@multicast2, 0x81}, {@broadcast}, {@broadcast, 0x3ff}, {@local, 0x2}, {@multicast1, 0xf3c8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x9}]}]}}}}}) sendmsg$inet(r5, &(0x7f00000021c0)={&(0x7f0000000c40)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="3ccfea287796460f78c0c38d7bd365a5", 0x10}, {&(0x7f0000001cc0)="585be26cc36ff9563e0e6a5f4373f644133a39c24d970390a2b83a12c20f5bf89bef9669654508546d74a5e52115456380b8ac7cb7828b3e31444a116991f80a6281e203bbcf4a66c2a9979673fe1cccd2071b8e3e1e9f72af57cdb2cf4aacc5f3c20c", 0x63}, {&(0x7f0000001d40)="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", 0xfc}, {&(0x7f0000001e40)="d39d6bd24c65a6bfcc458bfa04863d612a0afd5ec32115f5148d3d295b0ebd29bf9fc45e21f884c68e7245154dc8d986d37199293f6e5d5f3f98574658d63f1edfb3afb659095145de696346f234c58ec5c9a447e76a12ef15e4a10818aa30663219a2b1244997abd8c69af93a9b61e470e67a156baf6c69b50066648bffac8402b807c63a16e96dfeec091fa60c0bce700c5a00adba76be0fc949865e020b371590a1e84af38e9e0a89c91f24ef9bea5f1cd20ead4468877a250b7d5240e75a4ffd4ce27b1e58adc204f92daa48f5e0ae084b55fb98b5355b32b488b7c53d95d9b88d68982a32", 0xe7}], 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="70000000000000000000000007000000940d0c02541488128afad4e2824444f5036401010100000007ffffffff000000076401010100000009ac1414bb000000007f000001000000020a010101000000046401010000000008ac1414230000000c880c14f411bd8a629c6a10a80000001100000000000000000000000100000002000000000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="001000fdffffffffffffff00"], 0xa8}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c00058018000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aa"], 0x74}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'c'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(r0, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002240)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000002340)={'syzkaller1\x00', 0xc201}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002380)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xffe0}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x2, &(0x7f0000000640)=0x9, 0x4) bind$can_raw(r12, &(0x7f0000000680), 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r13) bind$can_raw(r12, &(0x7f00000006c0), 0x10) 1m4.656495107s ago: executing program 2 (id=2800): r0 = socket(0x2, 0x3, 0x66) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000900)=@ethtool_channels={0x50}}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='bridge0\x00', 0x52c) (async) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)=@abs={0x0, 0x7, 0x6a0000e4}, 0x6e) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000100)="45e046"}, 0x20) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b400000000000000791090000400000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r5, r4}, 0xc) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b96730000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000a00)=""/245, 0xf5}], 0x5}, 0x12101) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14ffffffffffffff7f01060000000000de5d7800100a00"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0xfffffffffffffeaa, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x200, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x803}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 1m4.580586765s ago: executing program 4 (id=2801): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000200)={0x7, 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="40c00efbfa2d3f76870315a5cc07f0e30000080000e2b6f5b28cb0000000e75723702731ea56422bb8a371ff12e64344ceeead1b84ae7b0c9bba2a0adadf516661d9f71e0896c105ee9be53b2ba68ec85999133f332c17f494e2b34f40b6de7a59c6d0f098116ed50853013e05394f349e2827fb39499e949c646e9e248f385fd5d4eaf6ece63ca1b24de0326b7abfd57b1d17dc6d27787d745e452002dd4e2b59af76c292c88af2e71b98cde3ed23091e750c31b73da49eea8b69db358b7720bf7d5c9102eeac0f0af4bd6426fc5bad5591df8577e9cf1fd059f9a244"], &(0x7f0000000480)='GPL\x00'}, 0x90) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}]}, 0x2c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) splice(r1, 0x0, r7, 0x0, 0x10500, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0xfffffff7, 0x8000, {{0x29, 0x4, 0x2, 0x20, 0xa4, 0x65, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @empty, {[@cipso={0x86, 0x29, 0x3, [{0x6, 0xf, "0cd6860901df46c3f19f413609"}, {0x7, 0x7, "15e149a04f"}, {0x1, 0xd, "a129f93a28bc1b4e4bdaa0"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x11, 0x1, 0x6, [{@remote, 0x8}, {@broadcast, 0x4}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0xff, 0x0}, 0xd}]}, @ssrr={0x89, 0x17, 0xca, [@loopback, @dev={0xac, 0x14, 0x14, 0xf}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @generic={0x88, 0x9, "e8d9814053a9ec"}, @lsrr={0x83, 0x1f, 0x3a, [@empty, @rand_addr=0x64010101, @private=0xa010101, @rand_addr=0x64010101, @remote, @broadcast, @private=0xa010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x1, 0x700, 0xf8b, 0x5, {{0x7, 0x4, 0x2, 0x19, 0x1c, 0x64, 0x0, 0x10, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @end, @noop, @end]}}}}}) r11 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000800)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f0000000840), 0x4) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000880)={0x0, 0x0, 0x1, r12}, 0xc) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000900)={0x1d, r14}, 0x18) connect$can_j1939(r13, &(0x7f0000000940)={0x1d, r14, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1cc, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r15, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x48050) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r11) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r16, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x9c, r17, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4f}, @NL80211_ATTR_PMKID={0x14, 0x55, "da4384644e541f76dcb4531e8a8309cc"}, @NL80211_ATTR_PMKID={0x14, 0x55, "b227809d3febb88380019edf3a5992ce"}, @NL80211_ATTR_SSID={0x11, 0x34, @random="1f8a7f4ff3145b5f925b35e327"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d6005c84e50bfb157492f3afa32dbf45"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "dc9345b2878913b021039fc01bea1178"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x27}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x58) 1m4.507415211s ago: executing program 3 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x4}}, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r4, 0x1}, 0x1c}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, 0x40, 0x109, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x18, 0x0, 0x1, [@nested={0x4, 0x19}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x100, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) 1m4.14256029s ago: executing program 2 (id=2803): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000540)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r2, 0x5) (async, rerun: 32) sendmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async, rerun: 32) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000001001000001000000120000000000000010"], 0x28}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048004}, 0x80) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000900)='ns/pid_for_children\x00') sendmsg$netlink(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)={0x28, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x3ffe, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r4}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r5, &(0x7f00000004c0)=""/10, 0xa, 0x40000001, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r6, 0x9, 0x70bd2d, 0x1, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}}, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0xac, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x800, 0x52}}}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "818b0b4432"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "97fc2c61206f23bf78e1fdd5c4"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4ae1ce6dfa"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '\"Ois.'}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xc, 0x4, "e5cf8dce2bceced9"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x1000c084}, 0x2000c804) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f00000007c0)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) sendmsg$rds(r9, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000009000000000000000002000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000000000c5000000a8000000bf0900000000000055090100ffffffff9500000000000000bf91000000003eefaa70697ca592dcbd190000b7020000020000008500000085000000b7000000000000009500"/107], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.069952359s ago: executing program 1 (id=2804): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) close(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0x104}, 0x1, 0x0, 0x0, 0x24008090}, 0x40) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 1m3.975633249s ago: executing program 0 (id=2805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601040000000000000000000000000500040000000000090002001201000000000500050002000000050001000600000012000300686173683a6e65742d706f727400"/88], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1m3.588258708s ago: executing program 0 (id=2806): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x20004000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0x1, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc, 0xe}, {0xe, 0xd}, {0xa, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x24008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmmsg(r5, &(0x7f00000007c0), 0x40000000000009f, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'ip6tnl0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x1, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast2}, 0x4, 0x2, 0x2}}, 0x26) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b0000000000060001"], 0x40}}, 0x20) r12 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000600)={'ip_vti0\x00', r13, 0x40, 0x7, 0x9d, 0x73f, {{0x6, 0x4, 0x2, 0x14, 0x18, 0x64, 0x0, 0x40, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}}}}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x8}]}}}]}, 0x6c}}, 0x4000080) 1m3.583523673s ago: executing program 1 (id=2807): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x90) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x71, 0x18}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000140)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="88", 0x1}], 0x1}, 0x48043) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000300)=0x7, 0x4) (async) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0xfe, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) recvmmsg(r2, &(0x7f00000003c0)=[{{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/199, 0xc7}, {&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f0000000880)=""/94, 0x5e}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f00000009c0)=""/155, 0x9b}, {&(0x7f0000000a80)=""/80, 0x50}], 0x6, &(0x7f0000000b00)=""/80, 0x50}}], 0x4000000000001ac, 0x2, 0x0) (async) listen(r1, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000040)="52af334742a25b920e91467b3cc2345206cb56d4df55bbfc8713ad0981587515721ddd45655f018c9b7eb5bba8f1e37f552fcda088efbdeff7f28c91e65c859fe26178efd81118b66991dce6dce696896f8ef14022fad98a692ab9a28aa6f0e5970996448aa33e80cb0bb3dfd9fec52ddd2ea4ad68089ff09880f8ca379234249ac0546deeda59914137b5cd293a570b1cdeb8aa54cd65336c5fd7fb5766e1f614081e722dfe2e521d93b7d0cb186a54dc5c752820371a3c7e4b2cd8fce8590240ad0b1efbef361260bc6d1ef8f0c32e55708632f96c201b1a963733403ecfa9acae5b9204a47997ed3b", &(0x7f00000001c0)=@tcp6=r1, 0x2}, 0x20) 1m3.44548927s ago: executing program 4 (id=2808): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000010000001900000018000180140002006970766c616e310000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 1m3.372409794s ago: executing program 3 (id=2809): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8cd}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', @broadcast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000a40), 0x56) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xf, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000b80)={&(0x7f0000000bc0)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="27030200592b14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000b400000005000000000000000100000d000000000a000000000000000300000000000001110000007a0008000308000085090000000d00000002000000010000001000000004000000040000000600000004000000020000000b00000005000000000000400800000005000000950000000100000004000000f9ffffff0c000000040000007c00000003000000010000000100000000000000000000030000000004000000010000007affffff000000000000000b02000000005f612e0064e50757093836528e216e1c63040d6b62f58d6148270118cf807f0e70c5b701a0a3924f44000000"], &(0x7f0000000380)=""/91, 0xd1, 0x5b, 0x1, 0x7, 0x10000, @value=r1}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x14, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x210000000013, &(0x7f0000000140)=0x100000001, 0x4) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0xb4dac462410a8f85, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r13, &(0x7f00000005c0)=[{&(0x7f0000000680)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000006c0)="1100f8ae", 0x4}, {&(0x7f0000000700)="00020021", 0x4}], 0x3) 1m3.24502526s ago: executing program 1 (id=2810): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaebb08004500003000000020fc02907800000000e00003000306907800fa00094570fff600650005010400030a010102ac1414aa"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="4a3790166c9afc18e829d342223a58557aa6a21dad9008f1e720a065018d9b6069815a94dc4698567bfdc182f7c8542e807f082e97bca141744a40d497c476fd6ccc60d00aaf56305297fd56e5f727b88a6dca77ad82c282ba4d789467165f6cf71ee2b728aa5d30a7f9661da1d3798324d682bc132553ba36931b3ab1226b7e2dc7690291f0d351c7d05b29336c730919596943a5b24eb58047640475a671882e51fc9a1e0d4289af11d18131ed13aa78b40be48bed1c27f359bdf0a98332a9e78ac00cf3935c78c573015dd47f8159982e046efb1f4a78507d01cd261b31bb965bf7cca5aafd96a6de8dcb5446f665a3e68a79552da6", 0xf7}, {&(0x7f00000004c0)="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", 0xe99}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x4088885) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/4096, 0x10f0}], 0x1}, 0x48}], 0x1, 0x40000142, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, &(0x7f0000000040)="b93bb14f1c2be6d197c56260ede5b86061e3b0d00b800598959fdc997cc7caed808b0a43143001be27997fe417a0067e972193f6", 0x34, 0x1, &(0x7f0000000240)={0xa, 0x4e22, 0x8, @loopback, 0x3}, 0x1c) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002400)=ANY=[], 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002900)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x1e, 0x8, &(0x7f0000002a40)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000002400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$bt_sco(r3, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000002440)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0xc, 0xe, &(0x7f0000002600)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000028c0)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) connect$inet(r5, &(0x7f0000002480)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000024c0)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000002500), 0x4) r7 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007f000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) 1m2.9680745s ago: executing program 2 (id=2811): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800000044000701fefffffffedbdf3bbd28560004004580"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) writev(r3, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000440)=0xee4, 0x8) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000001080004"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="110000000400000004000000feffffff00002000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 1m2.64843119s ago: executing program 0 (id=2812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000003180)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000100001060100000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e000000140002800800010064"], 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000100001000200000000000000000000000000000000000000000000000800030076783000240012800a00010076786c616e0000001400028008000100640000000800030002"], 0x4c}}, 0x0) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000002f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002fc0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f0000003040)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4, &(0x7f0000003180), &(0x7f00000031c0)}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000032c0)='ns/user\x00') ioctl$OCFS2_IOC_RESVSP64(r4, 0x4030582a, &(0x7f0000003300)={0x2, 0x0, 0x626, 0x7ff, 0x180000, 0x5}) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) recvmsg$kcm(r3, &(0x7f0000001b00)={&(0x7f0000000140)=@x25, 0x80, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/126, 0x7e}, {&(0x7f0000001640)=""/180, 0xb4}, {&(0x7f0000001700)=""/124, 0x7c}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/227, 0xe3}, {&(0x7f0000001940)=""/183, 0xb7}, {&(0x7f0000001a00)=""/63, 0x3f}], 0xa}, 0x3) 1m2.234748376s ago: executing program 4 (id=2813): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000001200000000000000000000000902000000000051"], &(0x7f0000000a40)=""/228, 0x40, 0xe4, 0x1}, 0x20) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) pipe(&(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000000004000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf0dd467b592f868ee30ad5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e4fd8f36e15fdd97870f2bdf4000000000000b0c2940dd8e263aa743f0400000000000000b100400600e1ffff8816326d7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b1cbf698fce63a4fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ff6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33600000bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed3fb58c81b76100aeaa4619668a2c4ef4e159d4594396864965422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693cf61c2ae0a9c27bd1a6f1e72550fbb1f1543a9bcd48de44e837db44e2be1c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7105e2378d42eb22e035a88305f8342834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0600968fce3c425729a77e3d089356654680e715f4ce5c1a39e4a63d8a67d6dbe1d3c26affdb25cbe15923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be411b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a753bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967a60efb51c206ea0cbab9bef181cc917fca894189514e85d6e1d9249f8caa701b4357ae5b9117225d1f5ca89a4bb7d49086ea61948926db5132f2e29bf45a1429c19ba1adc457e2963d1474d85aeb3cca158e3fd4b7a05250ceafd44f46af924916ce9ce9a8881aad996ddaaf3fbd52e636367e9f90ab1c773fa96e538e7f87a21206a804524e1dc9fea9772b009bc49a8d787a90e78badf58e37b3cf6f64861d416e859994e4deca6f39551e73c7e332de66be92ecb94e63ecbc07f8f799536be0da90fa824b3f4965caa19b5556907746aec5db9fea5e5e69de3bd13a70c1374683a0e63ff6f6f51136d16e04bbd8ba0c96e0b562f5425614d80de6ba5e901587bb5c1f83382aab6efcccef90fdbebcc4ffed3af40365583fb800cf5ec6496a2a47f2217c7160f88b192ddec89558140447ec86726db3bfe9d22390085b1638f9ebf3219b426dcb69ff80f5b5be82803555c8421c17c9d39f9c1de9e8e7dedf826b00fd8860046e36f790e8e6796db3b778ff4f0fc2b79a5ca96ff3907452ed76bc5e63218ea96866ae2b265ab11206301bfb909a7fd77653c73b6d46a242864f839e5646cc5ada07fba0d9cf6f840179c34de5e9aa58d5b1ca5327dc945267524b8c363b7f847491b5939cf608927c797af1300"/1426], &(0x7f00000007c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0xffff0002, 0xe, 0x0, &(0x7f0000000880)="2b206d074843b397737ea49da2aa", 0x0, 0xeffc, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="65adcf63a3ee356e47c2a9ad9bc5457ef206b509a3f1d53d0f986934fc8e2338cdc92257efbcce43f20bce6a0a199414fe127fdd2a2f909692b66e59", @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0xc111}, 0x64008080) shutdown(r1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1m2.105031569s ago: executing program 1 (id=2814): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x27, 0xa, 0xb776) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r4, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r4, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r5, 0x0, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000003c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000540)=""/137, &(0x7f0000000600)=0xbf) (async) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000540)=""/137, &(0x7f0000000600)=0xbf) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m1.948321046s ago: executing program 0 (id=2815): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000480)={'bridge0\x00', &(0x7f00000004c0)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x400e}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x3, @private2, 0x6}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e23, 0x9, @remote, 0xb11}], 0x68) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e27, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c, &(0x7f0000000500)}}], 0x1, 0x4000040) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"b65bf0757c92167bbbaeb5c3517cfc6d", 0x0, r3, {0x89, 0xfffffff9}, {0x100000000, 0x8}, 0x2c1, [0x5, 0x8, 0xfffffffffffffff2, 0x2, 0x1, 0x0, 0x6, 0x4, 0x5, 0x0, 0x6, 0x3, 0x8001, 0x33b1, 0xd, 0xca]}) 1m1.721689595s ago: executing program 4 (id=2816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=""/75, 0x100000, 0x800, 0x5, 0x3}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) 1m1.588498793s ago: executing program 4 (id=2817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x10, 0x3, &(0x7f0000000840)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2d}}, &(0x7f0000000880)='GPL\x00'}, 0x90) r1 = socket(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x448, 0x0, 0x0, 0xffffffff, 0xb8, 0x160, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xa8ea81596a48e291, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x68, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @multicast1, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0xffffffff, 'bond_slave_1\x00', 'pimreg\x00', {}, {0xff}, 0xff, 0x3, 0x50}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0xc3]}}, @common=@unspec=@limit={{0x48}, {0xffffffff, 0x5, 0x5, 0x8001, 0x8000, 0x4, 0x9}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @private=0xa010100, @private=0xa010101, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'wlan0\x00', 'wg2\x00', {}, {0xff}, 0x8, 0x2, 0x25}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0x1, 0x2}}, @common=@unspec=@cgroup0={{0x28}, {0xf2b}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1d, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}, @icmp_id=0x64, @port=0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x54, r3, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x205003a0}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r3, 0x283, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}]}, 0x4c}}, 0x4000) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000000000000000000a00000069d188b1146a7ff5b7d3dfd50fec189ff87b4f6e190390674c0bcf66bb4f888d55c52cd20c8c20c6cd1ad6843cea9c1628da21d18283c8ccc0b4517e5e3fb04a2d6d6d4cdad512891961734a1b0e1bd867149fb543e0eec40ee814693186b626b28aeaa81428fad3712cafa2211fc5add7f5dd88c0f9caf3d342d77d451c78ead5c6aa656f0f272b1503f46abb8ee6c0002e9cee0bb3a12e0ed2179577ef4c2ada4a913b505c01000000000000"], 0x26}, 0x1, 0x0, 0x0, 0x800c081}, 0x8801) 59.640277172s ago: executing program 2 (id=2818): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000680)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000006c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000006c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000700)={0x2, 0x0, @remote}, 0x10) socket(0x1d, 0x4, 0x1) sendto$inet(r2, &(0x7f0000000740)="e19dabcf", 0x4, 0x20000040, 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000780)=0x83) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000780)=0x83) splice(r2, 0x0, r1, 0x0, 0xfea5, 0xa) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000005c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x7d, &(0x7f0000000600), &(0x7f0000000640)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x7d, &(0x7f0000000600), &(0x7f0000000640)=0x18) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f00000007c0)=0xadfb, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 59.502645785s ago: executing program 2 (id=2819): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10) close(0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x6, [@enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x1fe0000}, {0x10, 0x40}]}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @fwd={0xc}, @typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @enum={0xb, 0x3, 0x0, 0x6, 0x4, [{0x7, 0x51493b8}, {0xa, 0x7}, {0xa, 0x8}]}]}, {0x0, [0x5f, 0x0, 0x41, 0x2e]}}, &(0x7f00000002c0)=""/125, 0x86, 0x7d, 0x0, 0x3, 0x10000}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x2161, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x4, 0xe9, 0x9, 0x2, 0x1d, @empty, @loopback, 0x8000, 0x10, 0x80000000, 0x9}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x3, 0x7f, 0x9, 0x4c000, r3, 0x5, '\x00', r4, r2, 0x0, 0x4, 0x5, 0x0, @value=r5}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x3, 0x7f, 0x9, 0x4c000, r3, 0x5, '\x00', r4, r2, 0x0, 0x4, 0x5, 0x0, @value=r5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xd, 0x4, 0x4, 0x80040009, 0x0, r6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x6, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0xb}, @call={0x85, 0x0, 0x0, 0x5c}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x10001, 0xed, &(0x7f0000000100)=""/237, 0x41100, 0x7a, '\x00', 0x0, @sk_skb=0x26, r2, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x9, 0x5, 0x7581}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000008c0)=[r3, 0xffffffffffffffff, r6, r7, r8, 0x1], &(0x7f0000000900)=[{0x1, 0x5, 0x1, 0x4}], 0x10, 0x7}, 0x94) 59.362688927s ago: executing program 2 (id=2820): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x50, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x92}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x48000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300030000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) select(0x40, &(0x7f0000000380)={0x200, 0x3, 0xd, 0x400, 0x7, 0x2, 0x850, 0xffffffffffffffff}, &(0x7f00000003c0)={0xfffffffffffffff9, 0xb2, 0x2, 0x4, 0x7, 0x7f0000000000, 0x10001, 0x311}, &(0x7f0000000400)={0x41, 0x100000001, 0x5, 0xa, 0xb60, 0x8, 0x100000000, 0x6c6f}, &(0x7f0000000440)={0x77359400}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) 41.361274926s ago: executing program 32 (id=2809): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8cd}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', @broadcast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000a40), 0x56) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x24dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xf, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000b80)={&(0x7f0000000bc0)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="27030200592b14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000b400000005000000000000000100000d000000000a000000000000000300000000000001110000007a0008000308000085090000000d00000002000000010000001000000004000000040000000600000004000000020000000b00000005000000000000400800000005000000950000000100000004000000f9ffffff0c000000040000007c00000003000000010000000100000000000000000000030000000004000000010000007affffff000000000000000b02000000005f612e0064e50757093836528e216e1c63040d6b62f58d6148270118cf807f0e70c5b701a0a3924f44000000"], &(0x7f0000000380)=""/91, 0xd1, 0x5b, 0x1, 0x7, 0x10000, @value=r1}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x14, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x210000000013, &(0x7f0000000140)=0x100000001, 0x4) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0xb4dac462410a8f85, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r13, &(0x7f00000005c0)=[{&(0x7f0000000680)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000006c0)="1100f8ae", 0x4}, {&(0x7f0000000700)="00020021", 0x4}], 0x3) 31.946264973s ago: executing program 33 (id=2815): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000480)={'bridge0\x00', &(0x7f00000004c0)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x400e}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x3, @private2, 0x6}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e23, 0x9, @remote, 0xb11}], 0x68) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e27, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c, &(0x7f0000000500)}}], 0x1, 0x4000040) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"b65bf0757c92167bbbaeb5c3517cfc6d", 0x0, r3, {0x89, 0xfffffff9}, {0x100000000, 0x8}, 0x2c1, [0x5, 0x8, 0xfffffffffffffff2, 0x2, 0x1, 0x0, 0x6, 0x4, 0x5, 0x0, 0x6, 0x3, 0x8001, 0x33b1, 0xd, 0xca]}) 23.864651918s ago: executing program 34 (id=2814): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x27, 0xa, 0xb776) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r4, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r4, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r5, 0x0, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000003c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000540)=""/137, &(0x7f0000000600)=0xbf) (async) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000540)=""/137, &(0x7f0000000600)=0xbf) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12.161156246s ago: executing program 35 (id=2820): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x50, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x92}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x48000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) select(0x40, &(0x7f0000000380)={0x200, 0x3, 0xd, 0x400, 0x7, 0x2, 0x850, 0xffffffffffffffff}, &(0x7f00000003c0)={0xfffffffffffffff9, 0xb2, 0x2, 0x4, 0x7, 0x7f0000000000, 0x10001, 0x311}, &(0x7f0000000400)={0x41, 0x100000001, 0x5, 0xa, 0xb60, 0x8, 0x100000000, 0x6c6f}, &(0x7f0000000440)={0x77359400}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) 0s ago: executing program 36 (id=2817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x10, 0x3, &(0x7f0000000840)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2d}}, &(0x7f0000000880)='GPL\x00'}, 0x90) r1 = socket(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x448, 0x0, 0x0, 0xffffffff, 0xb8, 0x160, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xa8ea81596a48e291, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x68, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @multicast1, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0xffffffff, 'bond_slave_1\x00', 'pimreg\x00', {}, {0xff}, 0xff, 0x3, 0x50}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0xc3]}}, @common=@unspec=@limit={{0x48}, {0xffffffff, 0x5, 0x5, 0x8001, 0x8000, 0x4, 0x9}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @private=0xa010100, @private=0xa010101, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'wlan0\x00', 'wg2\x00', {}, {0xff}, 0x8, 0x2, 0x25}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0x1, 0x2}}, @common=@unspec=@cgroup0={{0x28}, {0xf2b}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1d, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}, @icmp_id=0x64, @port=0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x54, r3, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x205003a0}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r3, 0x283, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}]}, 0x4c}}, 0x4000) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000000000000000000a00000069d188b1146a7ff5b7d3dfd50fec189ff87b4f6e190390674c0bcf66bb4f888d55c52cd20c8c20c6cd1ad6843cea9c1628da21d18283c8ccc0b4517e5e3fb04a2d6d6d4cdad512891961734a1b0e1bd867149fb543e0eec40ee814693186b626b28aeaa81428fad3712cafa2211fc5add7f5dd88c0f9caf3d342d77d451c78ead5c6aa656f0f272b1503f46abb8ee6c0002e9cee0bb3a12e0ed2179577ef4c2ada4a913b505c01000000000000"], 0x26}, 0x1, 0x0, 0x0, 0x800c081}, 0x8801) kernel console output (not intermixed with test programs): ode [ 233.486807][T12007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 233.639260][T12012] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1478'. [ 233.812041][T12017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1479'. [ 233.893605][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1479'. [ 233.924681][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1479'. [ 234.380930][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1483'. [ 234.802476][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 234.841891][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 234.841914][T12061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1488'. [ 235.067721][T12075] netlink: 'syz.4.1492': attribute type 64 has an invalid length. [ 235.070461][T12075] netlink: 'syz.4.1492': attribute type 15 has an invalid length. [ 235.096006][T12075] netlink: 'syz.4.1492': attribute type 15 has an invalid length. [ 235.114166][ T7059] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 235.116255][ T62] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 235.116293][ T62] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 235.563649][T12098] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 237.667531][T12185] veth1_macvtap: left promiscuous mode [ 237.667559][T12185] macsec0: entered promiscuous mode [ 237.748854][T12201] Cannot find add_set index 4 as target [ 238.741351][T12236] __nla_validate_parse: 13 callbacks suppressed [ 238.741371][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 238.836319][T12238] smc: net device lo applied user defined pnetid SYZ0 [ 238.925854][T12242] netlink: 'syz.2.1532': attribute type 11 has an invalid length. [ 238.925874][T12242] netlink: 'syz.2.1532': attribute type 5 has an invalid length. [ 238.925886][T12242] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1532'. [ 238.981670][T12248] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1534'. [ 238.981889][T12248] 0ªî{X¹¦: renamed from gretap0 [ 239.004205][T12248] 0ªî{X¹¦: entered allmulticast mode [ 239.005187][T12248] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 239.071731][T12250] netlink: 4008 bytes leftover after parsing attributes in process `syz.0.1535'. [ 239.187960][T12248] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1534'. [ 239.411996][T12263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1539'. [ 239.631244][T12270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1541'. [ 239.733128][T12274] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 239.735278][T12280] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 239.904313][T12274] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1543'. [ 240.509680][T12280] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 240.639515][T12313] ip_tables: iptables: counters copy to user failed while replacing table [ 240.741329][T12320] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 240.743891][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1550'. [ 240.826049][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 240.842980][T12320] bond4: entered promiscuous mode [ 240.843388][T12320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.249302][T12350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.481581][T12362] netlink: 'syz.3.1560': attribute type 29 has an invalid length. [ 241.483045][T12362] netlink: 'syz.3.1560': attribute type 29 has an invalid length. [ 241.669272][T12365] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 241.969612][T12378] vlan1: entered allmulticast mode [ 241.969634][T12378] veth0_vlan: entered allmulticast mode [ 242.167561][T12390] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 242.516473][T12372] infiniband syz6: set active [ 242.517555][T12372] infiniband syz6: added bridge_slave_1 [ 242.540425][T12372] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 242.559732][T12372] infiniband syz6: Couldn't open port 1 [ 242.560622][T12372] smbdirect: ib_dev[syz6]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 242.560653][T12372] smbdirect: ib_dev[syz6]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 242.560698][T12372] smbdirect: ib_dev[syz6]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 242.680041][T12372] RDS/IB: syz6: added [ 242.680112][T12372] smc: adding ib device syz6 with port count 1 [ 242.680129][T12372] smc: ib device syz6 port 1 has no pnetid [ 242.972614][T12391] bridge6: entered allmulticast mode [ 242.976042][T12394] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 243.458173][T12418] bond0: entered allmulticast mode [ 243.458198][T12418] bond_slave_0: entered allmulticast mode [ 243.458545][T12418] bond_slave_1: entered allmulticast mode [ 243.815596][T12430] __nla_validate_parse: 38 callbacks suppressed [ 243.815617][T12430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1574'. [ 243.899782][T12431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1574'. [ 243.905696][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1574'. [ 244.126283][T12405] udevd[12405]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 245.265826][T12367] infiniband syz0: set active [ 245.265848][T12367] infiniband syz0: added bond_slave_1 [ 245.284906][T12367] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 245.288330][T12367] infiniband syz0: Couldn't open port 1 [ 245.288563][T12367] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 245.288589][T12367] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 245.288636][T12367] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 245.374194][T12367] RDS/IB: syz0: added [ 245.374247][T12367] smc: adding ib device syz0 with port count 1 [ 245.374266][T12367] smc: ib device syz0 port 1 has no pnetid [ 245.504763][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 246.014308][T12459] tc action pedit offset must be on 32 bit boundaries [ 246.859266][T12406] wlan1 speed is unknown, defaulting to 1000 [ 246.859331][T12406] wlan1 speed is unknown, defaulting to 1000 [ 246.861590][T12406] wlan1 speed is unknown, defaulting to 1000 [ 246.862298][T12407] siw: device registration error -23 [ 246.978049][T12406] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 246.978085][T12406] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 246.978119][T12406] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 247.098302][T12406] wlan1 speed is unknown, defaulting to 1000 [ 247.124435][T12406] wlan1 speed is unknown, defaulting to 1000 [ 247.136359][T12406] wlan1 speed is unknown, defaulting to 1000 [ 247.151742][T12406] wlan1 speed is unknown, defaulting to 1000 [ 247.172410][T12406] wlan1 speed is unknown, defaulting to 1000 [ 247.829702][T12505] bond0: left promiscuous mode [ 247.944478][T12510] netlink: 'syz.2.1594': attribute type 58 has an invalid length. [ 247.944502][T12510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1594'. [ 248.035236][T12512] netlink: 'syz.2.1594': attribute type 58 has an invalid length. [ 248.035257][T12512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1594'. [ 248.424609][T12529] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1601'. [ 248.558440][T12534] siw: device registration error -23 [ 248.560192][T12533] netlink: 'syz.2.1602': attribute type 11 has an invalid length. [ 248.704928][T12539] veth1_to_bond: entered allmulticast mode [ 248.762490][T12543] netlink: 'syz.0.1607': attribute type 3 has an invalid length. [ 248.762511][T12543] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1607'. [ 249.243494][T12565] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1611'. [ 249.394412][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1612'. [ 249.409898][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 249.427551][T12567] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1612'. [ 249.788030][T12580] bridge3: entered promiscuous mode [ 249.788071][T12580] bridge3: entered allmulticast mode [ 250.283605][T12603] batadv_slave_1: entered promiscuous mode [ 250.313773][T12602] batadv_slave_1: left promiscuous mode [ 250.405661][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 250.549945][T12604] syzkaller0: entered promiscuous mode [ 250.549969][T12604] syzkaller0: entered allmulticast mode [ 250.747183][T12628] xt_MASQUERADE: bad rangesize 2147483646 [ 251.012419][T12635] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1636'. [ 251.080675][T12637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1636'. [ 251.080715][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1636'. [ 251.422606][T12628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1632'. [ 251.492630][T12636] veth0: entered promiscuous mode [ 251.503688][T12640] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 251.561644][T12650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.635995][T12640] batman_adv: batadv0: Removing interface: syzkaller0 [ 251.922584][T12643] veth0: left promiscuous mode [ 252.148783][T12672] netlink: 'syz.3.1646': attribute type 1 has an invalid length. [ 252.313281][T12686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1649'. [ 252.456715][T12677] 8021q: adding VLAN 0 to HW filter on device bond10 [ 252.457262][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.485506][T12677] bond9: (slave bond10): making interface the new active one [ 252.485991][T12677] bond9: (slave bond10): Enslaving as an active interface with an up link [ 252.520480][T12685] gretap0: entered promiscuous mode [ 252.539389][T12672] 8021q: adding VLAN 0 to HW filter on device bond9 [ 252.752699][T12405] udevd[12405]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 253.292117][T12730] netlink: 'syz.2.1655': attribute type 2 has an invalid length. [ 253.292140][T12730] netlink: 'syz.2.1655': attribute type 2 has an invalid length. [ 253.295294][T12727] ip_tables: iptables: counters copy to user failed while replacing table [ 253.312112][T12727] ip_tables: iptables: counters copy to user failed while replacing table [ 253.312894][T12727] ip_tables: iptables: counters copy to user failed while replacing table [ 253.313648][T12727] ip_tables: iptables: counters copy to user failed while replacing table [ 253.318156][T12727] ip_tables: iptables: counters copy to user failed while replacing table [ 253.320981][T12727] ip_tables: iptables: counters copy to user failed while replacing table [ 253.326352][T12727] ip_tables: iptables: counters copy to user failed while replacing table [ 253.328896][T12727] ip_tables: iptables: counters copy to user failed while replacing table [ 253.334151][T12727] ip_tables: iptables: counters copy to user failed while replacing table [ 253.711879][T12747] netlink: 'syz.3.1657': attribute type 1 has an invalid length. [ 253.931339][T12754] bond11 (unregistering): Released all slaves [ 254.158134][T12770] netlink: 'syz.1.1661': attribute type 9 has an invalid length. [ 254.290461][T12773] __nla_validate_parse: 64 callbacks suppressed [ 254.290482][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1664'. [ 254.696518][T12789] netlink: 'syz.3.1667': attribute type 21 has an invalid length. [ 254.696541][T12789] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1667'. [ 254.696600][T12789] netlink: 'syz.3.1667': attribute type 4 has an invalid length. [ 254.696613][T12789] netlink: 'syz.3.1667': attribute type 5 has an invalid length. [ 254.696624][T12789] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1667'. [ 254.966216][T12799] netlink: 'syz.4.1669': attribute type 6 has an invalid length. [ 255.050886][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1669'. [ 255.631742][T12806] batman_adv: batadv0: Adding interface: syzkaller0 [ 255.631760][T12806] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.631787][T12806] batman_adv: batadv0: Interface activated: syzkaller0 [ 255.635349][T12807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1671'. [ 255.682461][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.699520][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'. [ 255.699543][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'. [ 255.761209][T12805] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 255.839258][T12814] sctp: [Deprecated]: syz.4.1673 (pid 12814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.839258][T12814] Use struct sctp_sack_info instead [ 255.993023][T12805] batman_adv: batadv0: Removing interface: syzkaller0 [ 256.329246][T12816] syzkaller0: entered promiscuous mode [ 256.329271][T12816] syzkaller0: entered allmulticast mode [ 256.392302][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 256.414328][T12833] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 256.430417][T12835] sctp: [Deprecated]: syz.1.1678 (pid 12835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.430417][T12835] Use struct sctp_sack_info instead [ 258.670592][T12827] netlink: 'syz.0.1675': attribute type 2 has an invalid length. [ 258.671844][T12843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1679'. [ 258.841578][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 259.399502][T12877] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 259.519993][T12886] __nla_validate_parse: 1 callbacks suppressed [ 259.520013][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1690'. [ 259.564791][T12881] bond9: (slave veth0_to_bond): making interface the new active one [ 259.580515][T12881] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 259.634858][T12886] 8021q: adding VLAN 0 to HW filter on device bond9 [ 259.760447][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 259.760576][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 259.776327][T12893] hsr_slave_0: left promiscuous mode [ 259.809629][T12893] hsr_slave_1: left promiscuous mode [ 259.825540][T12894] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1695'. [ 259.869484][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 259.888582][T12905] bond0: (slave team0): Releasing backup interface [ 259.940966][T12907] netlink: 'syz.1.1696': attribute type 2 has an invalid length. [ 259.950364][T12906] netlink: 'syz.1.1696': attribute type 2 has an invalid length. [ 259.991854][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'. [ 260.325634][T12923] xt_SECMARK: invalid mode: 9 [ 260.345806][T12915] net_ratelimit: 24 callbacks suppressed [ 260.345828][T12915] netlink: ct family unspecified [ 260.552825][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1706'. [ 260.825798][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1710'. [ 260.830706][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1710'. [ 260.997507][T12945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1710'. [ 261.061673][T12959] ip_tables: iptables: counters copy to user failed while replacing table [ 261.372593][T12977] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 261.878103][T12990] netlink: 'syz.4.1724': attribute type 15 has an invalid length. [ 261.942224][T12990] netlink: 'syz.4.1724': attribute type 15 has an invalid length. [ 261.979639][ T7794] netdevsim netdevsim4 netdevsim0: set [0, 2] type 1 family 0 port 2816 - 0 [ 261.979684][ T7794] netdevsim netdevsim4 netdevsim1: set [0, 2] type 1 family 0 port 2816 - 0 [ 261.979716][ T7794] netdevsim netdevsim4 netdevsim2: set [0, 2] type 1 family 0 port 2816 - 0 [ 262.144693][T13005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 262.145146][T13005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 262.145587][T13005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 262.146019][T13005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 262.167340][T13005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 262.167787][T13005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 262.173715][T13005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 262.174156][T13005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 262.181774][T13005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 262.182210][T13005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 262.287321][T13012] ip6t_rt: unknown flags 36 [ 263.856682][T13095] netlink: 'syz.0.1753': attribute type 13 has an invalid length. [ 264.213031][T13111] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 264.309997][T13107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.342687][T13109] geneve2: entered promiscuous mode [ 264.500926][T13111] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.556158][T13106] bond8: (slave veth0_to_bond): making interface the new active one [ 264.571461][T13106] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 264.676127][T13119] bond8: entered promiscuous mode [ 264.676150][T13119] veth0_to_bond: entered promiscuous mode [ 264.676435][T13119] bond8: entered allmulticast mode [ 264.676449][T13119] veth0_to_bond: entered allmulticast mode [ 264.710305][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.711032][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.711068][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.711100][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.755465][T13135] __nla_validate_parse: 19 callbacks suppressed [ 264.755484][T13135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1763'. [ 264.776785][T13121] macvlan2: entered promiscuous mode [ 264.776808][T13121] macvlan2: entered allmulticast mode [ 264.791431][T13121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 264.794503][T13121] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 264.836400][T13140] netlink: 'syz.1.1765': attribute type 2 has an invalid length. [ 264.872796][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1762'. [ 264.873886][T13126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1762'. [ 265.062026][T13145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1768'. [ 265.222002][T13149] veth5: entered allmulticast mode [ 265.241944][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'. [ 265.356229][T13162] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1769'. [ 265.494380][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 265.698924][T13176] 8021q: adding VLAN 0 to HW filter on device bond10 [ 265.784231][T13185] syzkaller0: entered promiscuous mode [ 265.784254][T13185] syzkaller0: entered allmulticast mode [ 265.833201][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1774'. [ 265.833384][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1774'. [ 265.855333][T13189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1778'. [ 266.902755][T13224] Cannot find del_set index 65532 as target [ 267.230070][T13237] TC_ACT_REPEAT abuse ? [ 267.970952][T13268] xt_bpf: check failed: parse error [ 267.974818][T13268] netlink: 'syz.3.1795': attribute type 1 has an invalid length. [ 268.150865][T13268] bridge4: entered promiscuous mode [ 268.172874][T13268] bond12: (slave bridge4): making interface the new active one [ 268.174853][T13268] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 268.535339][T13287] netlink: 'syz.2.1802': attribute type 12 has an invalid length. [ 268.535362][T13287] netlink: 'syz.2.1802': attribute type 29 has an invalid length. [ 268.841918][T13300] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 268.940020][T13300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.956095][T13300] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 270.022091][T13337] __nla_validate_parse: 13 callbacks suppressed [ 270.022114][T13337] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1816'. [ 271.200505][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 271.500319][T13361] ip_tables: iptables: counters copy to user failed while replacing table [ 271.536676][T13361] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1824'. [ 271.564620][T13361] ip_tables: iptables: counters copy to user failed while replacing table [ 271.917479][T13373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1827'. [ 271.936791][T13373] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.937933][T13373] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.552571][T13387] gtp0: entered promiscuous mode [ 272.552595][T13387] gtp0: entered allmulticast mode [ 272.916221][T13399] netlink: 'syz.0.1835': attribute type 1 has an invalid length. [ 273.629826][T13405] netlink: 'syz.4.1837': attribute type 3 has an invalid length. [ 273.992943][T13419] batman_adv: batadv0: Adding interface: syz_tun [ 273.992962][T13419] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.992996][T13419] batman_adv: batadv0: Interface activated: syz_tun [ 275.161488][T13461] netlink: 'syz.2.1849': attribute type 11 has an invalid length. [ 275.161513][T13461] netlink: 'syz.2.1849': attribute type 4 has an invalid length. [ 275.161530][T13461] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1849'. [ 275.555492][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1855'. [ 275.821172][T13487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1854'. [ 276.038081][T13491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1858'. [ 277.442983][T13532] netlink: 'syz.0.1871': attribute type 1 has an invalid length. [ 277.622979][T13542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1871'. [ 277.692372][T13534] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.711219][T13534] bond5: (slave bond6): making interface the new active one [ 277.725524][T13534] bond5: (slave bond6): Enslaving as an active interface with an up link [ 277.824929][T13553] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1873'. [ 277.886828][T13532] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 278.055156][T13556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.079944][T13557] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 278.362442][T13559] ip_tables: iptables: counters copy to user failed while replacing table [ 278.364418][T13560] ip_tables: iptables: counters copy to user failed while replacing table [ 278.500305][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1875'. [ 278.501653][T13560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1875'. [ 278.966104][T13578] netlink: ct family unspecified [ 279.211485][T13584] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 279.389875][T13589] netlink: 'syz.1.1885': attribute type 1 has an invalid length. [ 279.420517][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 279.650528][T13600] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1887'. [ 279.725486][T13597] syzkaller1: entered promiscuous mode [ 279.725511][T13597] syzkaller1: entered allmulticast mode [ 280.176694][T13615] tipc: MTU too low for tipc bearer [ 280.350218][T13624] smc: removing ib device rxe0 [ 280.632010][T13624] smbdirect: ib_dev[rxe0] removed [ 280.898323][T13635] __nla_validate_parse: 1 callbacks suppressed [ 280.898343][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1899'. [ 281.164854][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1901'. [ 282.490698][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 282.490736][T13669] netlink: 'syz.3.1908': attribute type 5 has an invalid length. [ 282.490751][T13669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1908'. [ 282.583977][T13669] geneve3: entered promiscuous mode [ 282.584000][T13669] geneve3: entered allmulticast mode [ 282.620943][ T7795] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 282.620990][ T7795] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 282.621025][ T7795] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 282.621060][ T7795] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 282.842637][T13672] ip6t_ah: unknown flags 5 [ 283.873119][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1915'. [ 283.933697][T13696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1917'. [ 283.970064][ T7059] tipc: Subscription rejected, illegal request [ 284.833705][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 284.952311][T13736] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1929'. [ 284.986923][T13731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1926'. [ 285.090253][T13736] dvmrp0: entered allmulticast mode [ 285.116148][T13744] ipt_REJECT: TCP_RESET invalid for non-tcp [ 285.290827][T13751] syzkaller0: entered promiscuous mode [ 285.290851][T13751] syzkaller0: entered allmulticast mode [ 285.479282][T13755] netlink: 'syz.3.1934': attribute type 15 has an invalid length. [ 285.479306][T13755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1934'. [ 285.511587][T13760] netlink: 'syz.3.1934': attribute type 15 has an invalid length. [ 286.080167][T13782] netlink: 'syz.3.1940': attribute type 1 has an invalid length. [ 286.196339][T13789] __nla_validate_parse: 1 callbacks suppressed [ 286.196359][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1941'. [ 286.231251][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'. [ 286.644747][T13803] rdma_rxe: rxe_newlink: failed to add lo [ 286.648928][T13803] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1943'. [ 286.889640][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'. [ 286.890235][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'. [ 286.916807][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'. [ 287.016347][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'. [ 287.054834][T13813] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1947'. [ 287.093117][T13814] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1947'. [ 287.236177][T13819] SET target dimension over the limit! [ 287.324208][T13823] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1950'. [ 287.415009][T13829] syzkaller1: entered promiscuous mode [ 287.415199][T13829] syzkaller1: entered allmulticast mode [ 287.951076][T13852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.401294][T13880] xt_NETMAP: bad rangesize 37. [ 288.413836][T13881] netlink: 'syz.2.1965': attribute type 27 has an invalid length. [ 288.523804][T13884] 8021q: adding VLAN 0 to HW filter on device bond12 [ 288.542774][T13884] macvlan2: entered promiscuous mode [ 288.542796][T13884] macvlan2: entered allmulticast mode [ 288.543259][T13884] bond12: entered allmulticast mode [ 288.543310][T13884] bond12: entered promiscuous mode [ 288.545326][T13884] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 288.580730][T13884] team0: Port device macvlan2 added [ 288.661393][T13884] macvlan3: entered promiscuous mode [ 288.661415][T13884] macvlan3: entered allmulticast mode [ 288.662452][T13884] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 288.664818][T13884] team0: Port device macvlan3 added [ 289.114583][T13908] xt_hashlimit: max too large, truncated to 1048576 [ 289.115242][T13908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.145347][T13955] : renamed from veth1_to_bond (while UP) [ 290.352901][T13964] ip_tables: iptables: counters copy to user failed while replacing table [ 290.454432][T13968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.214789][T13998] netlink: 'syz.4.1992': attribute type 29 has an invalid length. [ 291.217648][T13998] netlink: 'syz.4.1992': attribute type 29 has an invalid length. [ 291.310312][T14002] __nla_validate_parse: 5 callbacks suppressed [ 291.310332][T14002] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1993'. [ 291.505182][T14007] bond8: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 291.521778][T14007] bond8 (unregistering): Released all slaves [ 292.269869][T14044] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 292.269906][T14044] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 292.269942][T14044] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 292.546754][T14056] netlink: 'syz.3.2008': attribute type 11 has an invalid length. [ 292.546778][T14056] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2008'. [ 293.110060][T14113] lo: Caught tx_queue_len zero misconfig [ 293.185141][T14114] netlink: 'syz.4.2014': attribute type 1 has an invalid length. [ 293.215751][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2014'. [ 293.261331][T14114] xt_MASQUERADE: bad rangesize 2147483646 [ 293.439998][T14120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2015'. [ 293.440027][T14120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2015'. [ 293.585313][T14060] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 295.068031][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'. [ 295.176078][T14216] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2030'. [ 295.230193][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2031'. [ 295.560380][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 295.613325][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 295.748051][T14221] vlan1 (unregistering): left allmulticast mode [ 295.748074][T14221] veth0_vlan (unregistering): left allmulticast mode [ 295.879199][T14233] xfrm1: entered promiscuous mode [ 295.879222][T14233] xfrm1: entered allmulticast mode [ 296.572663][T14272] __nla_validate_parse: 34 callbacks suppressed [ 296.572686][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'. [ 296.572774][T14272] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2042'. [ 296.572793][T14272] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2042'. [ 297.195083][T14288] tipc: Started in network mode [ 297.195130][T14288] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 297.201239][T14288] tipc: Enabled bearer , priority 10 [ 297.236674][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 297.341252][T14293] pim6reg: entered allmulticast mode [ 297.386376][T14293] veth1_to_hsr: entered allmulticast mode [ 297.390056][T14293] pim6reg: left allmulticast mode [ 297.390641][T14293] veth1_to_hsr: left allmulticast mode [ 297.484537][T14300] openvswitch: netlink: Actions may not be safe on all matching packets [ 298.380755][ T5753] tipc: Node number set to 4269801491 [ 298.399467][T14336] syzkaller0: entered promiscuous mode [ 298.399488][T14336] syzkaller0: entered allmulticast mode [ 298.476444][T14335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.502968][T14341] ip6tnl0: Caught tx_queue_len zero misconfig [ 299.477146][T14384] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 299.664776][T14392] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2075'. [ 299.855352][T14396] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 299.949259][T14409] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2078'. [ 300.395876][T14436] netlink: 'syz.3.2084': attribute type 2 has an invalid length. [ 300.497366][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 300.497388][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 301.658811][T14481] openvswitch: netlink: Multiple metadata blocks provided [ 302.051138][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 302.052228][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 302.053346][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 302.055307][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 302.057684][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 302.061058][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 302.062085][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 302.063032][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 302.064042][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 302.065083][T14490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 302.434914][T14508] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 302.656729][T14520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.092953][T14536] Bluetooth: hci0: unsupported parameter 5135 [ 303.092977][T14536] Bluetooth: hci0: unsupported parameter 8192 [ 303.092990][T14536] Bluetooth: hci0: unsupported parameter 5135 [ 303.093003][T14536] Bluetooth: hci0: unsupported parameter 8192 [ 303.912801][T14560] openvswitch: netlink: Invalid VLAN frame [ 304.259012][T14567] ipvlan2: entered allmulticast mode [ 304.259036][T14567] virt_wifi0: entered allmulticast mode [ 304.451420][T14574] geneve2: entered promiscuous mode [ 304.524877][ T5632] block nbd0: Receive control failed (result -32) [ 304.537025][ T5632] block nbd0: Receive control failed (result -32) [ 305.103120][T14605] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.103258][T14605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.103649][T14605] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.103764][T14605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.155340][T14605] 8021q: adding VLAN 0 to HW filter on device .` [ 305.179842][T14605] team0: Device macvlan2 failed to change mtu [ 305.336794][T14609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 305.992991][T14641] netlink: 'syz.2.2138': attribute type 7 has an invalid length. [ 306.003140][T14641] netlink: 'syz.2.2138': attribute type 7 has an invalid length. [ 306.712381][T14676] tipc: Enabled bearer , priority 10 [ 306.916690][T14682] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 307.638066][T14709] __nla_validate_parse: 73 callbacks suppressed [ 307.638086][T14709] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2156'. [ 308.118519][T14727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.350325][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2165'. [ 308.682750][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'. [ 308.700311][T14757] netlink: Conntrack attr has 8 unknown bytes [ 308.976528][T14771] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2173'. [ 309.022516][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'. [ 309.031987][T14774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2174'. [ 309.063992][T14778] IPv6: NLM_F_CREATE should be specified when creating new route [ 309.336761][T14784] xt_hashlimit: size too large, truncated to 1048576 [ 309.391116][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2176'. [ 309.621146][T14791] syzkaller0: left promiscuous mode [ 309.621168][T14791] syzkaller0: left allmulticast mode [ 310.000727][T14804] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2181'. [ 310.010026][T14804] IPVS: stopping backup sync thread 7650 ... [ 310.142972][T14806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2182'. [ 310.191936][T14806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2182'. [ 310.459640][T14820] syzkaller0: entered promiscuous mode [ 310.459876][T14820] syzkaller0: entered allmulticast mode [ 310.775167][T14833] syzkaller1: entered promiscuous mode [ 310.775189][T14833] syzkaller1: entered allmulticast mode [ 312.006368][T14889] syzkaller0: entered promiscuous mode [ 312.006391][T14889] syzkaller0: entered allmulticast mode [ 312.415048][T14867] syzkaller0: entered promiscuous mode [ 312.415072][T14867] syzkaller0: entered allmulticast mode [ 312.764931][T14925] syzkaller1: entered promiscuous mode [ 312.764955][T14925] syzkaller1: entered allmulticast mode [ 312.775241][T14934] netlink: 'syz.3.2211': attribute type 10 has an invalid length. [ 312.918123][T14934] sctp: [Deprecated]: syz.3.2211 (pid 14934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.918123][T14934] Use struct sctp_sack_info instead [ 313.024792][T14940] __nla_validate_parse: 11 callbacks suppressed [ 313.024815][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2214'. [ 314.126431][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'. [ 314.595285][T15004] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 314.973819][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'. [ 315.002978][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2235'. [ 315.068725][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'. [ 315.090071][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2235'. [ 316.794145][T15055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2243'. [ 316.797983][T15053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2242'. [ 317.097153][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.098445][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.455378][T15065] geneve3: entered promiscuous mode [ 317.455563][T15065] geneve3: entered allmulticast mode [ 317.477301][ T51] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 317.477344][ T51] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 317.477376][ T51] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 317.477406][ T51] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 318.686275][T15095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2243'. [ 318.744740][T15097] sctp: [Deprecated]: syz.4.2255 (pid 15097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.744740][T15097] Use struct sctp_sack_info instead [ 319.230710][T15116] bridge0: port 4(30ªî{X¹¦) entered blocking state [ 319.230812][T15116] bridge0: port 4(30ªî{X¹¦) entered disabled state [ 319.236522][T15116] 0ªî{X¹¦: entered promiscuous mode [ 319.281200][T15116] netlink: 'syz.3.2256': attribute type 2 has an invalid length. [ 319.281223][T15116] netlink: 'syz.3.2256': attribute type 11 has an invalid length. [ 319.281236][T15116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2256'. [ 319.864076][T15132] team0: No ports can be present during mode change [ 320.578659][T15151] netlink: 'syz.2.2266': attribute type 83 has an invalid length. [ 321.825115][T15161] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2269'. [ 323.186807][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 323.289378][T15230] netlink: 'syz.1.2282': attribute type 10 has an invalid length. [ 323.321187][T15230] team0: Device macvlan2 failed to change mtu [ 323.323725][T15230] .`: (slave team0): Error -22 calling dev_set_mtu [ 323.552898][T15234] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 323.915882][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2286'. [ 324.052434][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 324.054375][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2287'. [ 324.324668][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'. [ 324.324697][T15252] openvswitch: netlink: Message has 16 unknown bytes. [ 324.465711][T15254] netlink: 'syz.1.2289': attribute type 2 has an invalid length. [ 324.522015][T15257] netlink: 'syz.1.2289': attribute type 29 has an invalid length. [ 324.640896][T15254] !;: entered promiscuous mode [ 325.814426][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 325.836888][T15301] syzkaller0: entered promiscuous mode [ 325.937009][T15301] syzkaller0: entered allmulticast mode [ 325.987862][T15303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.995303][T15303] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2307'. [ 326.202379][T15311] xt_SECMARK: invalid mode: 9 [ 326.730005][T15333] netlink: 'syz.4.2315': attribute type 4 has an invalid length. [ 326.730036][T15333] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2315'. [ 326.798500][T15337] IPVS: length: 239 != 24 [ 327.196607][T15354] openvswitch: netlink: Tunnel attr 229 out of range max 16 [ 327.376393][T15353] syzkaller0: entered promiscuous mode [ 327.376415][T15353] syzkaller0: entered allmulticast mode [ 327.774433][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 328.133721][T15376] netlink: 'syz.2.2326': attribute type 2 has an invalid length. [ 328.529351][T15383] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2328'. [ 328.720090][T15391] bond13: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 328.743793][T15391] bond13 (unregistering): Released all slaves [ 328.866996][T15383] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2328'. [ 328.963294][T15405] xt_hashlimit: size too large, truncated to 1048576 [ 329.002760][T15383] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2328'. [ 329.045142][T15383] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2328'. [ 329.723998][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 329.778125][T15419] syzkaller0: entered promiscuous mode [ 329.778148][T15419] syzkaller0: entered allmulticast mode [ 330.255893][T15438] netlink: 'syz.1.2341': attribute type 49 has an invalid length. [ 330.256669][T15431] ip6t_srh: unknown srh match flags 5F28 [ 330.414982][T15454] ip6t_srh: unknown srh match flags 5F28 [ 330.784973][T15459] netlink: 'syz.3.2343': attribute type 10 has an invalid length. [ 331.015108][T15459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2343'. [ 331.218749][ T7796] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.218783][ T7796] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 331.218807][ T7796] netdevsim netdevsim4 netdevsim0: unset [0, 2] type 1 family 0 port 2816 - 0 [ 331.218831][ T7796] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.102263][T15491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2349'. [ 332.350915][T15497] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 332.996207][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 332.996233][T15510] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2352'. [ 332.996279][T15510] netlink: 'syz.3.2352': attribute type 5 has an invalid length. [ 333.409670][T15530] netlink: 'syz.3.2359': attribute type 2 has an invalid length. [ 333.520261][T15538] sctp: [Deprecated]: syz.0.2364 (pid 15538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.520261][T15538] Use struct sctp_sack_info instead [ 333.551286][T15538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2364'. [ 333.788053][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2366'. [ 334.019415][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 334.351742][T15565] netlink: 'syz.0.2371': attribute type 1 has an invalid length. [ 334.414644][T15563] bond8: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 334.441626][T15563] bond8 (unregistering): Released all slaves [ 334.573688][ T5632] block nbd296: Receive control failed (result -32) [ 334.658825][T15571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2374'. [ 334.928793][T15571] bridge6: entered promiscuous mode [ 334.928816][T15571] bridge6: entered allmulticast mode [ 335.013906][T15571] team0: Port device bridge6 added [ 335.413479][T15587] netlink: 'syz.0.2377': attribute type 1 has an invalid length. [ 335.621373][T15587] 8021q: adding VLAN 0 to HW filter on device bond7 [ 335.652677][T15605] ip6t_rt: address list match requested but addrnr is 0 [ 335.685198][T15603] xt_HMARK: proto mask must be zero with L3 mode [ 336.103894][T15615] syzkaller0: entered promiscuous mode [ 336.103917][T15615] syzkaller0: entered allmulticast mode [ 336.403686][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 336.720837][T15620] bond13: entered promiscuous mode [ 336.722958][T15620] 8021q: adding VLAN 0 to HW filter on device bond13 [ 336.767540][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 336.820235][T15626] 8021q: adding VLAN 0 to HW filter on device bond13 [ 336.820660][T15626] bond13: (slave sit2): The slave device specified does not support setting the MAC address [ 336.826159][T15626] bond13: (slave sit2): Error -95 calling set_mac_address [ 336.981002][T15625] bond13: (slave sit2): The slave device specified does not support setting the MAC address [ 336.985022][T15625] bond13: (slave sit2): Error -95 calling set_mac_address [ 337.783428][T15677] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2397'. [ 337.984268][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2398'. [ 337.988736][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2398'. [ 337.988766][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2398'. [ 338.091088][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 338.278469][T15687] netlink: 'syz.4.2402': attribute type 12 has an invalid length. [ 338.278493][T15687] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2402'. [ 338.323629][T15684] lo: entered promiscuous mode [ 338.503129][T15684] netlink: 'syz.0.2401': attribute type 2 has an invalid length. [ 338.503155][T15684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.585095][T15690] block nbd1: Unsupported socket: should be TCP or UNIX. [ 339.077559][T15707] tipc: Enabling of bearer rejected, already enabled [ 339.096629][T15708] __nla_validate_parse: 1 callbacks suppressed [ 339.096649][T15708] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2407'. [ 339.142359][T15710] netlink: 'syz.4.2408': attribute type 1 has an invalid length. [ 339.142383][T15710] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2408'. [ 339.700644][T15726] bond0: Error: Cannot enslave bond to itself. [ 340.659315][T15765] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 340.816032][T15765] x_tables: duplicate underflow at hook 3 [ 340.829293][T15765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2425'. [ 340.830659][T15765] 8021q: adding VLAN 0 to HW filter on device bond14 [ 341.050367][T15774] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2428'. [ 341.050645][T15774] 0·: renamed from hsr0 (while UP) [ 341.083462][T15774] 0·: entered allmulticast mode [ 341.083488][T15774] hsr_slave_0: entered allmulticast mode [ 341.083809][T15774] hsr_slave_1: entered allmulticast mode [ 341.085491][T15774] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 341.133620][T15776] siw: device registration error -23 [ 341.156158][T15776] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2429'. [ 341.164426][T15780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2431'. [ 341.495694][T15790] syzkaller0: left promiscuous mode [ 341.495876][T15790] syzkaller0: left allmulticast mode [ 341.947316][T15813] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2440'. [ 342.077482][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 342.114819][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'. [ 342.274074][T15821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2442'. [ 342.378336][T15823] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 342.700394][T15828] netlink: 'syz.0.2445': attribute type 10 has an invalid length. [ 342.720216][T15828] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 343.366689][T15847] 8021q: adding VLAN 0 to HW filter on device bond8 [ 343.496155][T15861] team0: entered promiscuous mode [ 343.496177][T15861] team_slave_0: entered promiscuous mode [ 343.496361][T15861] team_slave_1: entered promiscuous mode [ 344.451058][T15899] netlink: 'syz.3.2460': attribute type 6 has an invalid length. [ 344.464899][T15870] team0: left promiscuous mode [ 344.464918][T15870] team_slave_0: left promiscuous mode [ 344.465772][T15870] team_slave_1: left promiscuous mode [ 344.472628][T15900] __nla_validate_parse: 3 callbacks suppressed [ 344.472644][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 344.473497][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 344.474297][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 344.475100][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 344.477117][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 344.477961][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 344.482941][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 344.483765][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 344.484569][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 344.485377][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2461'. [ 345.382636][T15937] netlink: 'syz.4.2473': attribute type 4 has an invalid length. [ 345.552203][T15935] xt_CT: No such helper "snmp_trap" [ 345.680969][T15952] sit0: entered promiscuous mode [ 345.695079][T15952] netlink: 'syz.2.2478': attribute type 1 has an invalid length. [ 345.793733][T15958] netlink: 'syz.2.2481': attribute type 4 has an invalid length. [ 345.844368][T15959] netlink: 'syz.0.2479': attribute type 1 has an invalid length. [ 346.319425][T15971] lo: entered promiscuous mode [ 346.319638][T15971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.738663][T15979] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 346.740868][T15979] bond15 (unregistering): Released all slaves [ 347.222808][T16000] team0 (unregistering): Port device team_slave_0 removed [ 347.375221][T16000] team0 (unregistering): Port device team_slave_1 removed [ 347.433511][T16000] team0 (unregistering): Port device macvlan2 removed [ 347.483818][T16000] bond12: left allmulticast mode [ 347.483871][T16000] bond12: left promiscuous mode [ 347.518371][T16000] team0 (unregistering): Port device macvlan3 removed [ 347.963810][T16022] netlink: 'syz.2.2497': attribute type 1 has an invalid length. [ 348.113296][T16022] syzkaller0: entered promiscuous mode [ 348.113322][T16022] syzkaller0: entered allmulticast mode [ 350.248925][T16092] netlink: 'syz.1.2518': attribute type 1 has an invalid length. [ 350.248948][T16092] __nla_validate_parse: 50 callbacks suppressed [ 350.248960][T16092] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2518'. [ 350.379436][T16097] netlink: 'syz.3.2520': attribute type 10 has an invalid length. [ 350.402591][T16097] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.423707][T16097] team0: entered allmulticast mode [ 350.423729][T16097] team_slave_0: entered allmulticast mode [ 350.423746][T16097] team_slave_1: entered allmulticast mode [ 350.471146][T16097] bond0: (slave team0): Enslaving as an active interface with an up link [ 350.471545][T16098] x_tables: duplicate underflow at hook 2 [ 350.601701][T16100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2522'. [ 351.099449][T16113] bridge7: entered promiscuous mode [ 351.099612][T16113] bridge7: entered allmulticast mode [ 352.133367][T16150] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2538'. [ 352.158746][ T4947] block nbd1: Receive control failed (result -32) [ 352.158991][ T5632] block nbd1: Receive control failed (result -32) [ 352.206102][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2537'. [ 352.277813][T16159] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2538'. [ 352.360796][T16168] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2541'. [ 352.400246][T16168] syzkaller1: entered promiscuous mode [ 352.400269][T16168] syzkaller1: entered allmulticast mode [ 353.313118][T16184] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20001 [ 354.013041][T16211] can: request_module (can-proto-0) failed. [ 354.112319][T16218] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2552'. [ 354.310947][T16220] netlink: 'syz.2.2555': attribute type 8 has an invalid length. [ 354.310972][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2555'. [ 354.311008][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 355.507698][T16242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2559'. [ 355.515054][T16249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2562'. [ 355.541120][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.727402][T16275] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2568'. [ 356.850467][T16283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2569'. [ 356.904395][T16288] syzkaller0: entered promiscuous mode [ 356.904419][T16288] syzkaller0: entered allmulticast mode [ 357.682456][T16308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2577'. [ 358.239888][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2579'. [ 358.331071][T16321] netlink: 'syz.4.2580': attribute type 11 has an invalid length. [ 358.362618][T16318] bond15: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 358.380112][T16318] bond15 (unregistering): Released all slaves [ 358.571220][T16328] syzkaller0: left promiscuous mode [ 358.571247][T16328] syzkaller0: left allmulticast mode [ 358.654430][T16335] netlink: 'syz.3.2583': attribute type 1 has an invalid length. [ 358.725808][T16335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2583'. [ 360.344027][T16348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.344067][T16348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.344094][T16348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.660001][T16372] syzkaller0: left promiscuous mode [ 360.660027][T16372] syzkaller0: left allmulticast mode [ 360.784687][T16348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.784723][T16348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.784748][T16348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 360.903095][T16387] bond0: (slave bridge0): Releasing backup interface [ 360.920332][T16387] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.921049][T16387] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.952968][T16387] bridge_slave_0: left allmulticast mode [ 360.952996][T16387] bridge_slave_0: left promiscuous mode [ 360.953209][T16387] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.989029][T16387] bridge_slave_1: left allmulticast mode [ 360.989057][T16387] bridge_slave_1: left promiscuous mode [ 360.989249][T16387] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.015673][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2591'. [ 361.029459][T16387] bond8: (slave veth0_to_bond): Releasing active interface [ 361.029487][T16387] veth0_to_bond: left promiscuous mode [ 361.031298][T16387] veth0_to_bond: left allmulticast mode [ 361.032237][T16387] tipc: Resetting bearer [ 361.033721][T16387] tipc: Resetting bearer [ 361.035818][T16387] bond0: (slave bond_slave_1): Releasing backup interface [ 361.101303][T16387] team0: Port device team_slave_0 removed [ 361.140391][T16387] team0: Port device team_slave_1 removed [ 361.141102][T16387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.141122][T16387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.170232][T16387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.170257][T16387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.202939][T16387] bond0: (slave netdevsim1): Releasing backup interface [ 361.231848][T16387] bond1: (slave veth3): Releasing active interface [ 361.278895][T16387] bond2: (slave gretap1): Releasing active interface [ 361.330217][T16387] bond4: (slave gretap2): Releasing backup interface [ 361.352543][T16387] batman_adv: batadv0: Interface deactivated: gretap3 [ 361.352590][T16387] batman_adv: batadv0: Removing interface: gretap3 [ 361.379990][T16387] batman_adv: batadv0: Interface deactivated: gretap4 [ 361.380011][T16387] batman_adv: batadv0: Removing interface: gretap4 [ 361.420865][T16387] bond0: (slave bond6): Releasing backup interface [ 361.650822][ T7060] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.650875][ T7060] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.650911][ T7060] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.650944][ T7060] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.911553][T16348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.911613][T16348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.911639][T16348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 362.110148][T16420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2592'. [ 362.143051][T16425] Bluetooth: hci0: unsupported parameter 5135 [ 362.143074][T16425] Bluetooth: hci0: unsupported parameter 8192 [ 362.143087][T16425] Bluetooth: hci0: unsupported parameter 5135 [ 362.143098][T16425] Bluetooth: hci0: unsupported parameter 8192 [ 362.547992][T16348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.548027][T16348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.548050][T16348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 363.052270][ T4071] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.052305][ T4071] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.052329][ T4071] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.232595][ T1150] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.232627][ T1150] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.232649][ T1150] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.328968][ T7797] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.329002][ T7797] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.329024][ T7797] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.729868][ T1150] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.729902][ T1150] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 363.729927][ T1150] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.775075][T16353] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.775111][T16353] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 363.775142][T16353] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 363.960928][T16353] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.960963][T16353] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 363.960988][T16353] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.203455][T16353] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.203492][T16353] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 364.203517][T16353] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.326518][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'. [ 364.326542][T16483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2607'. [ 364.406423][T16479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2606'. [ 364.406576][T16479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2606'. [ 364.406680][T16479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2606'. [ 364.406789][T16479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2606'. [ 364.407387][T16479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2606'. [ 364.407500][T16479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2606'. [ 364.500906][T16486] netlink: 'syz.1.2608': attribute type 1 has an invalid length. [ 365.478828][T16488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.478863][T16488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.478888][T16488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 365.703117][T16353] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.703154][T16353] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 365.703178][T16353] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.084784][T16528] __nla_validate_parse: 61 callbacks suppressed [ 366.084805][T16528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2609'. [ 366.084823][T16528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2609'. [ 366.185215][T16488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.185251][T16488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.185276][T16488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 366.391526][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2611'. [ 366.558583][T16488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.558620][T16488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.558645][T16488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 366.819932][ T1150] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.819968][ T1150] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 366.819992][ T1150] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 366.827641][ T1150] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.827675][ T1150] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 366.827699][ T1150] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 366.953523][T16547] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2612'. [ 367.050431][T16488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.071280][T16488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.071314][T16488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 367.297526][ T1150] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.297584][ T1150] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 367.297608][ T1150] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.424346][ T6898] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.424380][ T6898] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 367.424403][ T6898] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.810596][ T7793] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.810631][ T7793] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 367.810654][ T7793] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.982404][ T51] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.982436][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 367.982459][ T51] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.204171][ T4071] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.204206][ T4071] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 368.204229][ T4071] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.384634][ T51] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.384667][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 368.384691][ T51] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.853304][T16585] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 368.853329][T16585] bond10: option packets_per_slave: allowed values 0 - 65535 [ 368.880593][T16585] bond10 (unregistering): Released all slaves [ 369.662461][T16610] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2623'. [ 369.662493][T16610] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2623'. [ 370.035530][T16626] netlink: 'syz.2.2626': attribute type 10 has an invalid length. [ 370.057508][T16626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.085294][T16626] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 370.844847][T16654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2632'. [ 371.300979][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 371.336503][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 371.420727][T16678] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2640'. [ 371.421726][T16681] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2641'. [ 371.549686][T16678] syzkaller1: entered promiscuous mode [ 371.549709][T16678] syzkaller1: entered allmulticast mode [ 371.620066][T16685] x_tables: duplicate underflow at hook 2 [ 371.650841][T16687] xt_hashlimit: size too large, truncated to 1048576 [ 371.742462][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2643'. [ 372.266734][T16702] x_tables: duplicate underflow at hook 2 [ 372.880054][T16722] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 373.546707][T16734] bridge33: entered promiscuous mode [ 373.546734][T16734] bridge33: entered allmulticast mode [ 373.641878][T16739] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 373.864352][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 373.956074][T16757] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 374.191918][T16757] bond8: entered promiscuous mode [ 374.192372][T16757] 8021q: adding VLAN 0 to HW filter on device bond8 [ 374.226987][T16771] openvswitch: netlink: Message has 1 unknown bytes. [ 374.227025][T16771] openvswitch: netlink: Actions may not be safe on all matching packets [ 374.229459][T16771] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 374.294913][T16764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 374.295418][T16764] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 374.295438][T16764] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 374.433464][T16764] bond8: (slave wireguard0): making interface the new active one [ 374.433492][T16764] wireguard0: entered promiscuous mode [ 374.469975][T16764] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 375.148469][T16779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.151985][T16794] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2664'. [ 375.224168][T16779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.551222][T16779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.680341][T16779] veth1_macvtap: left promiscuous mode [ 375.696403][T16779] veth0_macvtap: left promiscuous mode [ 375.712935][T16779] veth0_macvtap: entered promiscuous mode [ 375.922239][ T6898] bridge0: port 3(veth0) entered blocking state [ 375.922350][ T6898] bridge0: port 3(veth0) entered forwarding state [ 375.946178][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.946298][ T6898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.982176][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.982298][ T6898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.435474][T16810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2669'. [ 376.594136][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2672'. [ 376.615214][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2669'. [ 376.733188][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2673'. [ 376.748816][T16827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2673'. [ 376.881476][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2673'. [ 376.882574][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2673'. [ 376.885640][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2673'. [ 376.885889][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2673'. [ 376.948534][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2673'. [ 377.457673][T16815] syzkaller0: entered promiscuous mode [ 377.457699][T16815] syzkaller0: entered allmulticast mode [ 377.504265][T16833] vlan3: entered promiscuous mode [ 377.504289][T16833] 0·: entered promiscuous mode [ 377.504851][T16833] vlan3: entered allmulticast mode [ 378.553878][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.437073][T16914] __nla_validate_parse: 63 callbacks suppressed [ 382.437096][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2694'. [ 383.799248][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2701'. [ 383.799375][T16938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.799760][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2701'. [ 384.007406][T16938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.232821][T16886] wlan1 speed is unknown, defaulting to 1000 [ 384.477909][T16955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.572094][T16958] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 385.255601][T16975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2713'. [ 385.750300][T16982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 386.154283][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2721'. [ 387.009273][T17010] No such timeout policy "syz0" [ 387.426730][T17036] openvswitch: netlink: IP tunnel dst address not specified [ 388.042823][T17057] netlink: 'syz.2.2733': attribute type 21 has an invalid length. [ 388.042917][T17057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2733'. [ 388.119533][T17058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2732'. [ 388.495198][T17069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2737'. [ 388.513320][T17064] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2735'. [ 388.962555][T17086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2742'. [ 389.794103][T17104] netlink: 'syz.3.2746': attribute type 2 has an invalid length. [ 389.794129][T17104] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2746'. [ 389.831275][T17105] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2747'. [ 389.831304][T17105] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2747'. [ 389.831319][T17105] netlink: 'syz.1.2747': attribute type 5 has an invalid length. [ 389.831332][T17105] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2747'. [ 389.975571][T17109] netlink: 'syz.3.2750': attribute type 1 has an invalid length. [ 390.017208][T17109] 8021q: adding VLAN 0 to HW filter on device bond15 [ 390.045130][T17109] bond15: (slave geneve4): making interface the new active one [ 390.055240][T17109] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 390.618035][T17135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2755'. [ 391.014703][T17140] netlink: 'syz.4.2757': attribute type 1 has an invalid length. [ 391.144262][T17140] 8021q: adding VLAN 0 to HW filter on device bond9 [ 391.181812][T17148] netlink: 'syz.4.2757': attribute type 1 has an invalid length. [ 392.073625][T17182] xt_hashlimit: size too large, truncated to 1048576 [ 392.209011][T17174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.228446][T17174] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.262064][T17174] tipc: Resetting bearer [ 392.263454][T17174] tipc: Resetting bearer [ 392.328121][T17174] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 392.462718][T17190] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.491600][T17190] bridge_slave_0 (unregistering): left allmulticast mode [ 392.495056][T17190] bridge_slave_0 (unregistering): left promiscuous mode [ 392.495158][T17190] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.801511][ T4947] block nbd2: Receive control failed (result -32) [ 392.801521][ T5632] block nbd2: Receive control failed (result -32) [ 393.165955][T17206] bridge0: port 1(veth1_to_bridge) entered blocking state [ 393.170318][T17206] bridge0: port 1(veth1_to_bridge) entered disabled state [ 393.170494][T17206] veth1_to_bridge: entered allmulticast mode [ 393.175682][T17206] veth1_to_bridge: entered promiscuous mode [ 393.209673][T17206] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 393.209968][T17206] bridge0: port 1(veth1_to_bridge) entered blocking state [ 393.210068][T17206] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 393.304926][ T4947] block nbd3: Receive control failed (result -32) [ 393.304926][ T5632] block nbd3: Receive control failed (result -32) [ 393.652951][T17216] xt_socket: unknown flags 0xc [ 393.777053][T17225] ip6t_srh: unknown srh invflags 4000 [ 394.326641][T17203] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 394.351201][T17203] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 394.435178][T17208] netlink: 'syz.2.2772': attribute type 1 has an invalid length. [ 394.435201][T17208] __nla_validate_parse: 1 callbacks suppressed [ 394.435212][T17208] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2772'. [ 395.059283][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2779'. [ 395.266416][T17259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2782'. [ 395.266457][T17259] netlink: 'syz.1.2782': attribute type 1 has an invalid length. [ 396.547369][T17284] pimreg: entered allmulticast mode [ 396.961210][T17301] syzkaller1: entered promiscuous mode [ 396.961399][T17301] syzkaller1: entered allmulticast mode [ 397.435029][T17326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2797'. [ 397.701133][T17330] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2797'. [ 397.704203][T17331] x_tables: duplicate underflow at hook 1 [ 397.773356][T17331] xt_hashlimit: size too large, truncated to 1048576 [ 398.010902][T17327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2797'. [ 398.410644][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 398.467838][T17346] raw_sendmsg: syz.2.2800 forgot to set AF_INET. Fix it! [ 398.629409][T17350] syz_tun: entered allmulticast mode [ 399.074966][T17363] netlink: 'syz.1.2804': attribute type 4 has an invalid length. [ 399.092051][T17367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2805'. [ 399.146037][T17363] C: renamed from lo [ 399.163734][T17363] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 399.289464][T17343] syz_tun: left allmulticast mode [ 399.567171][T17374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2806'. [ 399.687286][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 400.402529][T17381] bond0: (slave vlan0): Releasing backup interface [ 400.442938][T17409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2812'. [ 401.081605][T17393] syzkaller0: entered promiscuous mode [ 401.081634][T17393] syzkaller0: entered allmulticast mode [ 401.212241][T17427] netlink: 'syz.1.2814': attribute type 1 has an invalid length. [ 401.320778][T17429] netlink: 'syz.1.2814': attribute type 1 has an invalid length. [ 404.783911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.784265][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.784611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.784941][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.785259][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.785616][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.785941][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.786259][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.786593][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.787028][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.787406][ C1] net_ratelimit: 9678 callbacks suppressed [ 409.787431][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.788208][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 409.789476][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.789937][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 409.791134][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.791594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 409.792789][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.793202][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 409.794445][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.794876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 414.476836][ C0] sched: DL replenish lagged too much [ 414.797955][ C1] net_ratelimit: 5932 callbacks suppressed [ 414.797978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 414.798424][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 414.799695][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 414.800116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 414.801321][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 414.801764][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 414.803009][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 414.803444][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 414.804707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 414.805121][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 419.807512][ C1] net_ratelimit: 6008 callbacks suppressed [ 419.807554][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 419.807982][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 419.809608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 419.810032][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 419.811266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 419.811724][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 419.812983][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 419.813395][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 419.814603][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 419.814991][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 424.817016][ C1] net_ratelimit: 6271 callbacks suppressed [ 424.817040][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 424.818240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 424.818693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 424.819814][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 424.820204][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 424.821415][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 424.821857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 424.823070][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 424.823461][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 424.824611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 429.827887][ C1] net_ratelimit: 6185 callbacks suppressed [ 429.827912][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 429.828340][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 429.829602][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 429.830028][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 429.831233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 429.831667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 429.832950][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 429.833374][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 429.834603][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 429.835044][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 434.837739][ C1] net_ratelimit: 6250 callbacks suppressed [ 434.837763][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 434.838201][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 434.839377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 434.839785][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 434.840902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 434.841297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 434.842559][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 434.842949][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 434.844072][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 434.844459][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 439.846856][ C1] net_ratelimit: 6625 callbacks suppressed [ 439.846879][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 439.848474][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.848963][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 439.849281][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.849713][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 439.850929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.851346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 439.851680][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.852104][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 439.853417][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.987245][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.858095][ C1] net_ratelimit: 7250 callbacks suppressed [ 444.858118][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 444.859538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 444.860027][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 444.860350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 444.861737][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 444.862991][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 444.863422][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 444.863779][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 444.865200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 444.866625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 449.868150][ C1] net_ratelimit: 5986 callbacks suppressed [ 449.868176][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 449.869455][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 449.869950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 449.870315][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 449.871653][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 449.872862][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 449.873278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 449.873622][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 449.875019][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 449.876216][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 454.877408][ C1] net_ratelimit: 5962 callbacks suppressed [ 454.877433][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 454.878758][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 454.879186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 454.879502][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 454.880875][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 454.882131][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 454.882576][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 454.882892][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 454.884287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 454.885504][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 455.347586][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.887080][ C1] net_ratelimit: 5998 callbacks suppressed [ 459.887104][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 459.888315][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 459.888751][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 459.889070][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 459.890421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 459.891673][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 459.892092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 459.892404][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 459.893720][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 459.895017][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 464.897873][ C1] net_ratelimit: 6030 callbacks suppressed [ 464.897903][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 464.899478][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 464.899920][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 464.900232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 464.901603][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 464.902897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 464.903376][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 464.903717][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 464.905039][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 464.906308][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 469.907957][ C1] net_ratelimit: 6047 callbacks suppressed [ 469.907980][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 469.908409][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 469.908745][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 469.910119][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 469.911452][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 469.911899][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 469.912222][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 469.913633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 469.914903][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 469.915338][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 474.918067][ C1] net_ratelimit: 6041 callbacks suppressed [ 474.918090][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 474.919324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 474.919756][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 474.920085][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 474.921394][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 474.922717][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 474.923140][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 474.923451][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 474.924767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 474.925991][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 479.927686][ C1] net_ratelimit: 6010 callbacks suppressed [ 479.927710][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 479.928945][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 479.929359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 479.929718][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 479.931009][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 479.932196][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 479.932891][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 479.933209][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 479.934621][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 479.935842][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 484.937028][ C1] net_ratelimit: 6032 callbacks suppressed [ 484.937054][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 484.937381][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 484.938743][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 484.939977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 484.940396][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 484.940725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 484.942074][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 484.943273][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 484.943757][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 484.944074][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 489.947051][ C1] net_ratelimit: 6009 callbacks suppressed [ 489.947075][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 489.949348][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 489.949705][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 489.950961][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 489.952247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 489.952668][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 489.952969][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 489.954209][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 489.955390][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 489.955809][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 494.957601][ C1] net_ratelimit: 6029 callbacks suppressed [ 494.957626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 494.958864][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 494.959276][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 494.959613][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 494.960947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 494.962126][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 494.962595][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 494.962916][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 494.964332][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 494.965566][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 499.967453][ C1] net_ratelimit: 6018 callbacks suppressed [ 499.967478][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 499.968725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 499.969185][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 499.969522][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 499.970819][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 499.972015][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 499.972467][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 499.972904][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 499.974225][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 499.975436][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 501.420412][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.976855][ C1] net_ratelimit: 5965 callbacks suppressed [ 504.976877][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 504.978212][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 504.979512][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 504.979930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 504.980255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 504.981594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 504.982812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 504.983283][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 504.983622][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 504.984914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 509.987060][ C1] net_ratelimit: 6951 callbacks suppressed [ 509.987085][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 509.987518][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 509.987888][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 509.988198][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 509.989904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 509.991196][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 509.991581][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 509.992015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 509.992382][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 509.992721][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 514.997672][ C1] net_ratelimit: 7297 callbacks suppressed [ 514.997697][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 514.998093][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 514.998569][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 514.998950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 514.999278][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 515.000686][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 515.001906][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 515.002351][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 515.002797][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 515.003173][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 520.006906][ C1] net_ratelimit: 6601 callbacks suppressed [ 520.006928][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 520.008124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 520.008869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 520.009294][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 520.009735][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 520.010051][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 520.012187][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 520.013443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 520.013886][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 520.014303][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 525.016969][ C1] net_ratelimit: 6270 callbacks suppressed [ 525.016998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 525.017316][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 525.019379][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 525.020644][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 525.021004][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 525.021419][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 525.021804][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 525.022152][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 525.024274][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 525.025577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.027949][ C1] net_ratelimit: 6257 callbacks suppressed [ 530.027972][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.028400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.028834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 530.029237][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 530.029585][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.031655][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 530.032850][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.033295][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.033761][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 530.034129][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 535.037846][ C1] net_ratelimit: 6248 callbacks suppressed [ 535.037870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.038238][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.039014][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 535.039387][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 535.039718][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.041792][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 535.043027][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.043396][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 535.043829][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 535.044229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 540.046932][ C1] net_ratelimit: 6270 callbacks suppressed [ 540.046954][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 540.049105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 540.050405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 540.050821][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 540.051256][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 540.051654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 540.051977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 540.054187][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 540.055455][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 540.055849][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.456913][ T5632] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 542.915372][T17455] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 542.929465][T17455] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 543.095058][T17455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 545.057173][ C1] net_ratelimit: 6262 callbacks suppressed [ 545.057195][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 545.057580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 545.057993][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 545.058737][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 545.059079][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 545.061168][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 545.062384][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 545.062772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 545.063236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 545.063624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 545.097164][T17455] Bluetooth: hci6: command 0x1009 tx timeout [ 545.098020][ T4947] Bluetooth: hci6: Opcode 0x1009 failed: -110 [ 545.911988][ T4947] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 546.888923][ T4947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 548.736891][ T4947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 548.836025][ T4947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 549.011812][ T4947] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 550.067464][ C1] net_ratelimit: 6265 callbacks suppressed [ 550.067514][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 550.068978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 550.069400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 550.069865][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 550.070240][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 550.070582][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 550.072649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 550.073921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 550.074344][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 550.074796][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 552.300366][ T4947] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 552.495893][ T4947] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 554.537119][T17456] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 554.541600][ T4947] Bluetooth: hci6: command tx timeout [ 555.078735][ C1] net_ratelimit: 6284 callbacks suppressed [ 555.078758][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 555.079965][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 555.080377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 555.080817][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 555.081191][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 555.081523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 555.083654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 555.084861][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 555.085233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 555.085705][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 556.642965][ T4947] Bluetooth: hci6: command tx timeout [ 557.164274][ T32] INFO: task dhcpcd:5291 blocked for more than 143 seconds. [ 557.164300][ T32] Not tainted syzkaller #0 [ 557.164310][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.164330][ T32] task:dhcpcd state:D stack:21416 pid:5291 tgid:5291 ppid:5290 task_flags:0x400140 flags:0x00080000 [ 557.164393][ T32] Call Trace: [ 557.164400][ T32] [ 557.164415][ T32] __schedule+0x17dd/0x5820 [ 557.164606][ T32] ? __pfx___schedule+0x10/0x10 [ 557.164679][ T32] ? schedule+0x90/0x2b0 [ 557.164709][ T32] schedule+0x164/0x2b0 [ 557.164737][ T32] schedule_preempt_disabled+0x13/0x30 [ 557.164763][ T32] __mutex_lock+0x7c4/0x15a0 [ 557.164787][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 557.164811][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 557.164929][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 557.164962][ T32] ? __nla_parse+0x40/0x60 [ 557.165051][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 557.165080][ T32] ? kernel_text_address+0xa5/0xe0 [ 557.165135][ T32] ? __pfx_hook_capable+0x10/0x10 [ 557.165233][ T32] ? unwind_get_return_address+0x4d/0x90 [ 557.165263][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 557.165301][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 557.165350][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 557.165373][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 557.165453][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 557.165478][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 557.165505][ T32] ? __lock_acquire+0x747/0x2de0 [ 557.165551][ T32] netlink_rcv_skb+0x226/0x4a0 [ 557.165643][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 557.165671][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.165707][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 557.165729][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 557.165758][ T32] netlink_unicast+0x8ef/0xa80 [ 557.165798][ T32] netlink_sendmsg+0x7f0/0xb20 [ 557.165828][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.165856][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 557.165939][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 557.165962][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.165985][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 557.166062][ T32] ____sys_sendmsg+0x54e/0x850 [ 557.166124][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.166162][ T32] ? import_iovec+0x73/0xa0 [ 557.166251][ T32] ___sys_sendmsg+0x2a5/0x360 [ 557.166278][ T32] ? count_memcg_event_mm+0x21/0x260 [ 557.166329][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.166398][ T32] ? __pfx_handle_mm_fault+0x10/0x10 [ 557.166416][ T32] ? lock_vma_under_rcu+0x45a/0x500 [ 557.166449][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 557.166470][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.166522][ T32] do_syscall_64+0x166/0x520 [ 557.166571][ T32] ? trace_irq_disable+0x3b/0x140 [ 557.166607][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.166650][ T32] ? clear_bhb_loop+0x70/0xc0 [ 557.166673][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.166692][ T32] RIP: 0033:0x7f3274b20407 [ 557.166710][ T32] RSP: 002b:00007fff163504c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 557.166729][ T32] RAX: ffffffffffffffda RBX: 00007f3274a96780 RCX: 00007f3274b20407 [ 558.279070][ T32] RDX: 0000000000000000 RSI: 00007fff163646a0 RDI: 0000000000000004 [ 558.279090][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.279102][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff163748d0 [ 558.279114][ T32] R13: 00007f3274a96708 R14: 0000000000000044 R15: 00007fff163646a0 [ 558.279150][ T32] [ 558.279245][ T32] INFO: task syz.2.2820:17443 blocked for more than 144 seconds. [ 558.279261][ T32] Not tainted syzkaller #0 [ 558.279270][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.279279][ T32] task:syz.2.2820 state:D stack:26560 pid:17443 tgid:17442 ppid:5625 task_flags:0x400140 flags:0x00080002 [ 558.279333][ T32] Call Trace: [ 558.279340][ T32] [ 558.279351][ T32] __schedule+0x17dd/0x5820 [ 558.279401][ T32] ? nla_validate_array+0x1ad/0x260 [ 558.279473][ T32] ? __pfx___schedule+0x10/0x10 [ 558.279508][ T32] ? schedule+0x90/0x2b0 [ 558.279538][ T32] schedule+0x164/0x2b0 [ 558.279566][ T32] schedule_preempt_disabled+0x13/0x30 [ 558.279593][ T32] __mutex_lock+0x7c4/0x15a0 [ 558.279616][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 558.279640][ T32] ? wg_set_device_doit+0x170/0x2120 [ 558.279749][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 558.279774][ T32] ? dev_get_by_name+0x21/0x200 [ 558.279829][ T32] ? dev_get_by_name+0x21/0x200 [ 558.279856][ T32] ? lookup_interface+0x2a4/0x2f0 [ 558.279882][ T32] wg_set_device_doit+0x170/0x2120 [ 558.279916][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 558.279941][ T32] ? __pfx_wg_set_device_doit+0x10/0x10 [ 558.279975][ T32] ? rcu_is_watching+0x16/0xb0 [ 558.280001][ T32] ? trace_kmalloc+0x2a/0xf0 [ 558.280037][ T32] ? __kmalloc_noprof+0x387/0x710 [ 558.280061][ T32] ? __nla_parse+0x40/0x60 [ 558.280085][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 558.280104][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 558.280132][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 558.280158][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 558.280200][ T32] ? bpf_lsm_capable+0x9/0x20 [ 558.280237][ T32] ? security_capable+0x7e/0x2c0 [ 558.280319][ T32] genl_rcv_msg+0x614/0x7a0 [ 558.280354][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.280381][ T32] ? __pfx_wg_set_device_doit+0x10/0x10 [ 558.280421][ T32] netlink_rcv_skb+0x226/0x4a0 [ 558.280446][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.280474][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.280513][ T32] ? down_read+0x2b9/0x320 [ 558.280568][ T32] genl_rcv+0x28/0x40 [ 558.280593][ T32] netlink_unicast+0x8ef/0xa80 [ 558.280633][ T32] netlink_sendmsg+0x7f0/0xb20 [ 558.280664][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.280691][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 558.280718][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 558.280741][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.280764][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 558.280790][ T32] ____sys_sendmsg+0x54e/0x850 [ 558.280824][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.280862][ T32] ? import_iovec+0x73/0xa0 [ 558.280893][ T32] ___sys_sendmsg+0x2a5/0x360 [ 558.280918][ T32] ? __lock_acquire+0x747/0x2de0 [ 558.280945][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.280977][ T32] ? futex_wait+0x2a2/0x390 [ 558.281056][ T32] ? __fget_files+0x3a2/0x420 [ 558.281087][ T32] ? __fget_files+0x2a/0x420 [ 558.281117][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 558.281139][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.281190][ T32] do_syscall_64+0x166/0x520 [ 558.281209][ T32] ? trace_irq_disable+0x3b/0x140 [ 558.281230][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.281249][ T32] ? clear_bhb_loop+0x70/0xc0 [ 558.281273][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.281293][ T32] RIP: 0033:0x7feb0879f559 [ 558.281310][ T32] RSP: 002b:00007feb096fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.281330][ T32] RAX: ffffffffffffffda RBX: 00007feb08a25fa0 RCX: 00007feb0879f559 [ 558.281344][ T32] RDX: 0000000004008804 RSI: 0000200000000180 RDI: 0000000000000005 [ 558.281357][ T32] RBP: 00007feb08836b20 R08: 0000000000000000 R09: 0000000000000000 [ 558.281368][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.281379][ T32] R13: 00007feb08a26038 R14: 00007feb08a25fa0 R15: 00007ffff5d06df8 [ 558.281412][ T32] [ 558.281432][ T32] [ 558.281432][ T32] Showing all locks held in the system: [ 558.281442][ T32] locks held by kworker/0:1/10: 4, on CPU#0: [ 558.281456][ T32] #0: ffff88807e6db148 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 558.281516][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 558.281569][ T32] #2: ffff88802fd41480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 558.281660][ T32] #3: ffff88807aabf028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 558.281712][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 558.281724][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 558.281773][ T32] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 558.281822][ T32] #2: ffff8880778de258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 558.281943][ T32] locks held by kworker/u8:1/13: 1, last CPU#0: [ 558.281956][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 558.282014][ T32] locks held by kworker/1:0/24: 3, last CPU#1: [ 558.282027][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 558.282076][ T32] #1: ffffc900001e7c40 ((work_completion)(&data->dm_alert_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 558.282125][ T32] #2: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 558.282182][ T32] locks held by kworker/1:1/29: 4, last CPU#1: [ 558.282194][ T32] #0: ffff88807e6db148 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 558.282247][ T32] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0} [ 558.752425][ T4947] Bluetooth: hci6: command tx timeout [ 560.041934][ T32] , at: process_scheduled_works+0x97a/0x1630 [ 560.041971][ T32] #2: ffff88802fd41480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 560.042028][ T32] #3: ffff88807aabf028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 560.042080][ T32] locks held by pr/ttyS0/31: 1, last CPU#0: [ 560.042094][ T32] #0: ffffffff8fc33858 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 560.042142][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 560.042155][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 560.042242][ T32] locks held by kworker/u8:2/43: 4, last CPU#0: [ 560.042255][ T32] #0: ffff88807e2e1948 ((wq_completion)krds_cp_wq#5/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 560.042305][ T32] #1: ffffc90000b37c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 560.042355][ T32] #2: ffff888034fc2780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 560.042511][ T32] #3: ffff88807f3862a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 560.042635][ T32] locks held by kworker/u8:3/51: 7, last CPU#1: [ 560.042648][ T32] #0: ffff8880365ef148 ((wq_completion)krds_cp_wq#5/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 560.042697][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 560.042747][ T32] #2: ffff888034fc1280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 560.042799][ T32] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 560.042909][ T32] #4: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 560.042958][ T32] #5: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xa2/0x3f0 [ 560.043038][ T32] #6: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 560.043087][ T32] locks held by kworker/1:2/92: 3, on CPU#1: [ 560.043100][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 560.043149][ T32] #1: ffffc9000207fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 560.043198][ T32] #2: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 560.043316][ T32] locks held by kworker/u8:6/158: 3, last CPU#0: [ 560.043330][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 560.043378][ T32] #1: ffffc90002e5fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 560.043429][ T32] #2: ffff888026c79258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 560.043485][ T32] locks held by kworker/u8:7/1150: 2, last CPU#0: [ 560.043499][ T32] #0: ffff88803436d948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 560.043547][ T32] #1: ffffc90005257c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 560.043609][ T32] locks held by klogd/4985: 1, last CPU#0: [ 560.043621][ T32] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 560.043669][ T32] locks held by udevd/4996: 4, last CPU#0: [ 560.043682][ T32] #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 560.043739][ T32] #1: ffff88807ec7ccc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 560.043784][ T32] #2: ffff88807ade3440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 560.043833][ T32] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 560.043889][ T32] locks held by dhcpcd/5291: 1, on CPU#1: [ 560.043902][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 560.044134][ T32] locks held by getty/5382: 2, on CPU#1: [ 560.044146][ T32] #0: ffff8880273e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 560.044270][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 560.044320][ T32] locks held by kworker/1:4/5727: 1, last CPU#1: [ 560.044333][ T32] #0: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 560.044384][ T32] locks held by kworker/0:6/5801: 2, last CPU#0: [ 560.044397][ T32] #0: ffff88801c069d48 ((wq_completion)events_power_efficient [ 560.086831][ C1] net_ratelimit: 6278 callbacks suppressed [ 560.086854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 560.088057][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 560.088428][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 560.088858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 560.089259][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 560.089595][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 560.091644][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 560.092893][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 560.093257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 560.093696][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:62:0b:44:24:02:aa, vlan:0) [ 560.778028][ T4947] Bluetooth: hci6: command tx timeout [ 561.289646][ T32] ){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.289692][ T32] #1: ffffc90005127c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.289757][ T32] locks held by kworker/u8:9/6898: 4, last CPU#0: [ 561.289771][ T32] #0: ffff8880365eb148 ((wq_completion)krds_cp_wq#5/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.289820][ T32] #1: ffffc9000327fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.289870][ T32] #2: ffff888034fc2180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 561.289935][ T32] #3: ffff888053389de0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 561.289989][ T32] locks held by kworker/u8:14/7789: 4, last CPU#0: [ 561.290003][ T32] #0: ffff8880365e8948 ((wq_completion)krds_cp_wq#5/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.290051][ T32] #1: ffffc9000366fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.290100][ T32] #2: ffff888034fc1880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 561.290152][ T32] #3: ffff888053388260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 561.290202][ T32] locks held by kworker/u8:16/7792: 4, last CPU#0: [ 561.290216][ T32] #0: ffff8880365ea148 ((wq_completion)krds_cp_wq#5/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.290263][ T32] #1: ffffc90008f07c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.290312][ T32] #2: ffff888034fc1b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 561.290376][ T32] #3: ffff88805338e2a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 561.290426][ T32] locks held by kworker/u8:17/7793: 4, last CPU#0: [ 561.290439][ T32] #0: ffff8880365e9148 ((wq_completion)krds_cp_wq#5/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.290487][ T32] #1: ffffc90009f4fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.290537][ T32] #2: ffff888034fc1580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 561.290586][ T32] #3: ffff88805338f060 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 561.290644][ T32] locks held by kworker/u8:22/16402: 4, last CPU#0: [ 561.290657][ T32] #0: ffff8880543fb148 ((wq_completion)krds_cp_wq#9/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.290707][ T32] #1: ffffc90009727c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.290763][ T32] #2: ffff888034fc0f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 561.290815][ T32] #3: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 561.290864][ T32] locks held by kworker/u8:24/16406: 3, last CPU#0: [ 561.290878][ T32] #0: ffff8880365ea948 ((wq_completion)krds_cp_wq#5/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.290927][ T32] #1: ffffc90008ae7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.290976][ T32] #2: ffff888034fc2480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 561.291030][ T32] locks held by kworker/u8:25/17354: 3, on CPU#0: [ 561.291043][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.291092][ T32] #1: ffffc9000de7fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.291141][ T32] #2: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 561.291263][ T32] locks held by kworker/u8:26/17355: 3, last CPU#0: [ 561.291277][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.291326][ T32] #1: ffffc90010027c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 561.291376][ T32] #2: ffff888028c0b258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 561.291436][ T32] locks held by syz.3.2809/17377: 1, on CPU#0: [ 561.291448][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x70b/0x1090 [ 561.291495][ T32] locks held by syz.1.2814/17431: 1, last CPU#0: [ 561.291508][ T32] #0: ffff888034ce5900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 561.291553][ T32] locks held by syz.0.2815/17424: 1, last CPU#0: [ 561.291567][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 561.291615][ T32] locks held by syz.4.2817/17434: 3, last CPU#0: [ 561.291628][ T32] #0: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 561.291764][ T32] #1: ffff8880672f4530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_dec+0x39/0x3a0 [ 561.291846][ T32] #2: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 561.291895][ T32] locks held by syz.2.2820/17443: 3, on CPU#1: [ 561.291908][ T32] #0: ffffffff912db0a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 561.291959][ T32] #1: ffffffff912daee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 561.292007][ T32] #2: ffffffff91276ea0 (rtnl_mutex){+.+.}-{4:4}, at: wg_set_device_doit+0x170/0x2120 [ 561.292058][ T32] locks held by syz-executor/17450: 3, last CPU#0: [ 561.292071][ T32] #0: ffffffff904f5a78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 561.292152][ T32] #1: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 561.292218][ T32] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 561.292275][ T32] locks held by syz-executor/17452: 2, last CPU#0: [ 561.292289][ T32] #0: ffffffff8fee6d08 (namespace_sem){++++}-{4:4}, at: copy_mnt_ns+0x351/0xd00 [ 561.292332][ T32] #1: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 561.292381][ T32] locks held by syz-executor/17459: 3, last CPU#0: [ 561.292394][ T32] #0: ffff888077fa9910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x33/0x6f0 [ 561.292499][ T32] #1: ffffffff91618280 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 561.292610][ T32] #2: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 561.292662][ T32] [ 561.292667][ T32] ============================================= [ 561.292667][ T32] [ 561.292686][ T32] NMI backtrace for cpu 0 [ 561.292705][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 561.292739][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 561.292750][ T32] Call Trace: [ 561.292757][ T32] [ 561.292767][ T32] dump_stack_lvl+0xe8/0x150 [ 561.292807][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 561.292833][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 561.292862][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 561.292890][ T32] sys_info+0x135/0x170 [ 561.292941][ T32] watchdog+0xfd2/0x1030 [ 561.292977][ T32] ? watchdog+0x1c7/0x1030 [ 561.293006][ T32] kthread+0x38b/0x480 [ 561.293024][ T32] ? __pfx_watchdog+0x10/0x10 [ 561.293043][ T32] ? __pfx_kthread+0x10/0x10 [ 561.293063][ T32] ret_from_fork+0x514/0xb70 [ 561.293096][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 561.293116][ T32] ? __switch_to+0xc78/0x1410 [ 561.293144][ T32] ? __pfx_kthread+0x10/0x10 [ 561.293163][ T32] ret_from_fork_asm+0x1a/0x30 [ 561.293198][ T32] [ 561.293205][ T32] Sending NMI from CPU 0 to CPUs 1: [ 561.293239][ C1] NMI backtrace for cpu 1 [ 561.293252][ C1] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 561.293273][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 561.293287][ C1] Workqueue: krds_cp_wq#5/7 rds_connect_worker [ 561.293312][ C1] RIP: 0010:lock_release+0x4b/0x3c0 [ 561.293335][ C1] Code: 89 44 24 28 0f 1f 44 00 00 65 8b 05 07 a5 f7 12 83 f8 08 0f 83 60 02 00 00 89 c0 48 0f a3 05 74 67 d8 0f 73 0d e8 45 25 09 00 <84> c0 0f 84 9e 02 00 00 83 3d 86 98 d8 0f 00 0f 84 26 02 00 00 65 [ 561.293351][ C1] RSP: 0018:ffffc90000a07ab8 EFLAGS: 00000202 [ 561.293367][ C1] RAX: 0000000000000001 RBX: ffffc90000a07bd8 RCX: 8000000000000102 [ 561.293382][ C1] RDX: ffffc90000a07c01 RSI: ffffffff8c6e1760 RDI: ffffffff8c6e1720 [ 561.293397][ C1] RBP: 1ffffffff2556201 R08: ffffc90000a080c0 R09: 0000000000000000 [ 561.293411][ C1] R10: ffffc90000a07c18 R11: fffff52000140f85 R12: ffffc90000a01000 [ 561.293426][ C1] R13: ffffffff8178699f R14: ffffffff8fd59ca0 R15: ffffc90000a080d0 [ 561.293441][ C1] FS: 0000000000000000(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000 [ 561.293458][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.293474][ C1] CR2: 00007ffe8474daa0 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 561.293491][ C1] Call Trace: [ 561.293497][ C1] [ 561.293506][ C1] ? deref_stack_reg+0x18e/0x220 [ 561.293532][ C1] ? unwind_next_frame+0x8f/0x2550 [ 561.293558][ C1] unwind_next_frame+0x1baa/0x2550 [ 561.293590][ C1] ? ip6_mc_input+0x878/0xc80 [ 561.293615][ C1] ? unwind_next_frame+0x8f/0x2550 [ 561.293642][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 561.293664][ C1] arch_stack_walk+0x11b/0x150 [ 561.293691][ C1] ? ip_sabotage_in+0x1e1/0x270 [ 561.293795][ C1] stack_trace_save+0xa9/0x100 [ 561.293818][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 561.293842][ C1] ? __lock_acquire+0x747/0x2de0 [ 561.293865][ C1] kasan_save_track+0x3e/0x80 [ 561.293896][ C1] ? kasan_save_track+0x3e/0x80 [ 561.293920][ C1] ? kasan_save_free_info+0x40/0x50 [ 561.293940][ C1] ? __kasan_slab_free+0x5c/0x80 [ 561.293965][ C1] ? kmem_cache_free+0x182/0x650 [ 561.293990][ C1] ? ip6_mc_input+0x878/0xc80 [ 561.294045][ C1] ? ip6_mc_input+0x878/0xc80 [ 561.294071][ C1] kasan_save_free_info+0x40/0x50 [ 561.294091][ C1] __kasan_slab_free+0x5c/0x80 [ 561.294118][ C1] kmem_cache_free+0x182/0x650 [ 561.294146][ C1] ip6_mc_input+0x878/0xc80 [ 561.294176][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 561.294206][ C1] ? ip6_rcv_finish+0x265/0x280 [ 561.294238][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 561.294261][ C1] ip_sabotage_in+0x1e1/0x270 [ 561.294290][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 561.294320][ C1] nf_hook_slow+0xc5/0x220 [ 561.294404][ C1] NF_HOOK+0x21f/0x3c0 [ 561.294429][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 561.294453][ C1] ? NF_HOOK+0x9e/0x3c0 [ 561.294476][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 561.294499][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 561.294524][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 561.294553][ C1] ? netif_receive_skb+0x102/0xbf0 [ 561.294605][ C1] netif_receive_skb+0x278/0xbf0 [ 561.294628][ C1] ? lock_acquire+0x115/0x350 [ 561.294650][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 561.294676][ C1] ? br_netif_receive_skb+0x126/0x190 [ 561.294707][ C1] NF_HOOK+0xa4/0x3a0 [ 561.294733][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 561.294762][ C1] ? NF_HOOK+0xfa/0x3a0 [ 561.294789][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 561.294815][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 561.294842][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 561.294871][ C1] ? br_handle_vlan+0x60/0x580 [ 561.294922][ C1] ? br_pass_frame_up+0x277/0x420 [ 561.294953][ C1] br_handle_frame_finish+0x1219/0x1ae0 [ 561.294990][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 561.295019][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 561.295089][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 561.295111][ C1] ? nf_hook_slow+0x176/0x220 [ 561.295141][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 561.295169][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 561.295198][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 561.295281][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 561.295312][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 561.295341][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 561.295367][ C1] ? lock_acquire+0x115/0x350 [ 561.295390][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 561.295410][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 561.295444][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 561.295463][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 561.295482][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 561.295503][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 561.295523][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 561.295557][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 561.295585][ C1] br_handle_frame+0x1329/0x1600 [ 561.295621][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 561.295650][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 561.295678][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 561.295703][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 561.295724][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 561.295750][ C1] __netif_receive_skb_core+0x989/0x30f0 [ 561.295787][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 561.295812][ C1] ? ip6_rcv_finish+0x265/0x280 [ 561.295838][ C1] ? NF_HOOK+0x336/0x3c0 [ 561.295875][ C1] ? process_backlog+0x3de/0x18b0 [ 561.295901][ C1] ? process_backlog+0x3de/0x18b0 [ 561.295929][ C1] process_backlog+0x727/0x18b0 [ 561.295959][ C1] ? process_backlog+0x3de/0x18b0 [ 561.295993][ C1] __napi_poll+0xaa/0x330 [ 561.296020][ C1] net_rx_action+0x61d/0xf50 [ 561.296054][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 561.296079][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 561.296173][ C1] ? net_tx_action+0x5bb/0xc30 [ 561.296202][ C1] ? net_tx_action+0xbff/0xc30 [ 561.296278][ C1] handle_softirqs+0x265/0x8d0 [ 561.296309][ C1] ? __inet6_bind+0x301/0xf30 [ 561.296337][ C1] do_softirq+0x77/0xd0 [ 561.296358][ C1] [ 561.296364][ C1] [ 561.296371][ C1] __local_bh_enable_ip+0x100/0x140 [ 561.296395][ C1] __inet6_bind+0x301/0xf30 [ 561.296429][ C1] kernel_bind+0x13e/0x1c0 [ 561.296451][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 561.296486][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 561.296520][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 561.296556][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 561.296590][ C1] ? lock_acquire+0x115/0x350 [ 561.296617][ C1] rds_connect_worker+0x1d8/0x290 [ 561.296640][ C1] ? process_scheduled_works+0x97a/0x1630 [ 561.296671][ C1] process_scheduled_works+0xc3d/0x1630 [ 561.296716][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 561.296743][ C1] ? assign_work+0x3cf/0x5d0 [ 561.296768][ C1] worker_thread+0xa47/0xfb0 [ 561.296804][ C1] ? __kthread_parkme+0x71/0x1f0 [ 561.296838][ C1] kthread+0x38b/0x480 [ 561.296857][ C1] ? __pfx_worker_thread+0x10/0x10 [ 561.296881][ C1] ? __pfx_kthread+0x10/0x10 [ 561.296901][ C1] ret_from_fork+0x514/0xb70 [ 561.296923][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 561.296942][ C1] ? __switch_to+0xc78/0x1410 [ 561.296971][ C1] ? __pfx_kthread+0x10/0x10 [ 561.296990][ C1] ret_from_fork_asm+0x1a/0x30 [ 561.297019][ C1] [ 562.865595][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.922685][ T4947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 563.427964][ T4947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 563.525037][ T4947] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 563.690090][ T4947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 563.714565][T17455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 563.727693][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 565.498286][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 565.507404][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 565.517469][ T32] Call Trace: [ 565.520758][ T32] [ 565.523699][ T32] vpanic+0x56d/0xa60 [ 565.527699][ T32] ? __pfx___schedule+0x10/0x10 [ 565.532565][ T32] ? __pfx_vpanic+0x10/0x10 [ 565.537093][ T32] panic+0xc5/0xd0 [ 565.540827][ T32] ? __pfx_panic+0x10/0x10 [ 565.545255][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 565.550727][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 565.556111][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 565.562285][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 565.568456][ T32] watchdog+0x102b/0x1030 [ 565.572804][ T32] ? watchdog+0x1c7/0x1030 [ 565.577240][ T32] kthread+0x38b/0x480 [ 565.581320][ T32] ? __pfx_watchdog+0x10/0x10 [ 565.586008][ T32] ? __pfx_kthread+0x10/0x10 [ 565.590621][ T32] ret_from_fork+0x514/0xb70 [ 565.595230][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 565.600347][ T32] ? __switch_to+0xc78/0x1410 [ 565.605046][ T32] ? __pfx_kthread+0x10/0x10 [ 565.609646][ T32] ret_from_fork_asm+0x1a/0x30 [ 565.614439][ T32] [ 565.617765][ T32] Kernel Offset: disabled [ 565.622084][ T32] Rebooting in 86400 seconds..