last executing test programs: 1m7.338211324s ago: executing program 1 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011d0000000000000000010000000000000001410000001c001700000000000000ed6474683a7379"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m6.991038496s ago: executing program 1 (id=501): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = epoll_create(0x50c9) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x80000010}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0xf, @broadcast}]}}}]}, 0x3c}, 0x1, 0xff7f}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000100)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2d, 'net_prio'}]}, 0xa) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f000000a080)) 1m6.456907197s ago: executing program 3 (id=504): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/181, 0xb5}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xb, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, @in6=@private2, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x31638d34}, 0x0, 0x4, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000073116f00000000008510ffff02000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x29e, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x1000, 0x7, 0x0, 0xb68}, {0xfff, 0x9, 0x5, 0x47}]}) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000180)=ANY=[], 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2802, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x4, &(0x7f0000000b40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000000b80)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000bc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt(r7, 0x84, 0x81, &(0x7f0000000600)="1300000004000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000640)={0xe}, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000009c0), 0x4) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000310009002abd7000000000000400000004001d"], 0x18}}, 0x84) 1m6.374846083s ago: executing program 1 (id=505): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) write(r1, &(0x7f0000000200)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300"/76, 0x4d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000400007012cbd7000fadbdf25037c00000400c2801c0001801800108014000d"], 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x1e, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000040000000000f370121f000000000095000000000000001920149c57c82a042a5f784b4ed70eea950f93924540f690db7b1b152cf352c8455a222078ffa6b0d8b9935d5a5b2828b8b5e85a3bf01b470ab4c9ee4e0b8cb8f5bc5388e9704cbd80bcedd9658030c9fb1a4fffe8fe77b86cc7115eb23fcf3e6edbae645516d46cc3773940333094713d298c921e5b6ca4d9531c6713092e54c56f20c7ac0fc2a7a235be2604cefb03492439be7a6c37971e9c98ddf4485ca636c771de57af74b917af14fd719a1bf00e32ae73c6e1e5ba7855bfd2bd1f"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000800)) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f80f60161f26b9433c000100", @ANYRESDEC=r3], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b00)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b40)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r8 = socket(0x8, 0x1, 0x4c) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x43}}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000dc0)=@newtfilter={0x248, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x210, 0x2, [@TCA_FLOWER_ACT={0x20c, 0x3, [@m_xt={0x208, 0x1c, 0x0, 0x0, {{0x7}, {0x1b0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x0, 'nat\x00', 0xa, 0x6}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5cfd52c0}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x78, 0x6, {0x2, 'raw\x00', 0x8, 0x4, "1f60ae0071f11e56a72ce00a275e7e3a802ffed91219ea92d8983f4c5402ae712da0ca1d3032358bd0dba45576ce8c46b271fcbed1dbff92dabcfcef87ec7336a5003cd1baeab296391f514d892e"}}, @TCA_IPT_TARG={0x7c, 0x6, {0x81, 'nat\x00', 0x2, 0x9, "85262d9cf0c632bffb48f4a6fa2fb58d1b00a762d3bc8fa8c13e3086f36405b5c3749c581af8733a190978f1009b2cdc61eb9a6e9eb00ba47f4ee0951ee11467e8fc2fcea1462ce10c3023c5dd1e358c718a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x31, 0x6, "5b5e8eb438fdae6e8dfc7232267e9fa0c98769143d15fd3da35b2708e7cfb276a0ac7c9f56becd43616082c608"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}]}, 0x248}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYBLOB="1e7f5bd2487e626081e2a6c7284e9eb2da6bf56e03f3c5860e9a5efc759ff2ce1e214ebec30ba09a8c66310b71c1d3e724ee1b09f3aeb02b65192f8ededa5a993f58be05fa7c6d2d8e14db2c73071ae1648a4ddfe83b98b8bbf7268d", @ANYRESOCT=r3], 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 1m5.878851626s ago: executing program 3 (id=509): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x4, 0x0, 0x1, [@generic="8e"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x9, @vifc_lcl_addr=@rand_addr=0x64010100, @private}, 0x10) 1m5.74080247s ago: executing program 2 (id=510): r0 = socket$kcm(0xa, 0xf, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000000) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000a00)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000a40)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4e23, 0x10001, 0x1, 0x1}}, 0x44) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0xd01, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000ac0)={{0x84, @multicast2, 0x4e22, 0x3, 'lc\x00', 0x0, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcb, 0x4}}, 0x44) sendmsg$sock(r0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m5.644885494s ago: executing program 2 (id=511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x7, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd3, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x5, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x8009, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0xb42d, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffffc}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x400401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x8000}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xb, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x9, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x65, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1bfd, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0xa, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x8, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x80, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x0, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0x3, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7d, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe37, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000240), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m5.218787631s ago: executing program 0 (id=512): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x453, 0x200, 0x70bd28, 0x25dfdbfd, "778cee28a6fdf342c4f30a315e01d134e58a17e8a4278ed6feba6e91952513468625bbf10e0151f9c006a70832f6cf8a1eaab14571d53fd274cf87af061edb9325e94374777e10cfc6454b88affaa4e47d06dd39f5ec7375daf7d1390560b024d20122b8625d08cc989d8da7fe8cc7388fe4ce6b05a4761e16d533efea636b59e169c6fa8164b630571eaf5e9312c454e1e0d3cafca6357454e0f92193c86af28f05f9", ["", "", "", ""]}, 0xb4}, 0x1, 0x0, 0x0, 0x81}, 0x24004800) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000003c0)={r1, &(0x7f00000002c0)='&\'-^\']+\x00', 0x1, &(0x7f0000000300)={@align=0x2, {0x40, 0x0, 0x80000001, 0xc}}, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0xd85a}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x880, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040014) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x428, 0x98, 0x2f0, 0x240, 0x180, 0x240, 0x390, 0x390, 0x390, 0x390, 0x390, 0x6, &(0x7f0000000500), {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xff, 0x3}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x6, 0x5, 0x40}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x2, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @multicast2, 0xff000000, 0xffffff00, 'sit0\x00', 'syzkaller1\x00', {0x80}, {0xff}, 0x89, 0x2, 0x40}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xff, 'macvtap0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x33, 0x1, 0x2}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x2fd, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) r4 = openat$cgroup_ro(r3, &(0x7f0000000a40)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c041}, 0x20000041) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000b80)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000bc0)={0x1, @in6={{0xa, 0x4e24, 0x8, @loopback, 0x400}}, [0x4, 0x3, 0x2380000000, 0x7, 0x4, 0x100, 0xdc, 0x58, 0x7, 0x0, 0x80000000, 0xc29, 0x7, 0x2a, 0x8bdf]}, &(0x7f0000000cc0)=0x100) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000d00)={r5, @in={{0x2, 0x4e23, @local}}}, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), r4) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r7 = openat$cgroup_subtree(r3, &(0x7f0000000f80), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000fc0)={[{0x2d, 'devices'}, {0x3625eb70c81d1aaa, 'cpu'}, {0x2b, 'net_cls'}]}, 0x17) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001000)={r5, 0xf}, 0x8) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000001040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001100)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001180)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f00000012c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x98, r9, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x844}, 0x8080) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000001300)='dvmrp1\x00') sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c4}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x30, r0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x4, 0x2e}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0xc74cefb89d300cf6) 1m4.062389764s ago: executing program 0 (id=513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1m3.911554402s ago: executing program 3 (id=515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e4, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100), 0x6) (async, rerun: 64) ioctl$sock_bt_hci(r4, 0x400448e6, 0x0) (async, rerun: 64) bind$bt_hci(r3, &(0x7f00000000c0), 0x6) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0x0, {0x2, @empty, 'batadv_slave_1\x00'}}, 0x1e) (async) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r9, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000140), 0x4) (async) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000180)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f00000001c0)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0xfffffff7, 0x1, 0x3ff}, 0x3c) (async) syz_emit_ethernet(0x74, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4004810}, 0x80) writev(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 1m3.905376428s ago: executing program 2 (id=516): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xf9}]}}}], 0x18}}], 0x2, 0x4004000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x0, 0x1}, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f0000000840)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl(r8, 0x9, &(0x7f0000000140)="942a88ad3ba97b012cf9352d40d4b736c9ef53f11b502a4219fbdd2c66acb8e6b0fbed4e930c9a13ef140ff35a8f749b357697fd686f62dece8a079e348242e3864ef9a34e68c882afcde760ce13f75180bf35b717c3751b23748f61e99beaf89403cce559d25cea9d08bdce01ec69fa796b6c83ae56647ad4f14d82973444057f131be4e190235b9ab055f36ca0971802dc4faf643925b9be9b78294060b28ab12281d66c3c137799fa8d07b646a47dd82f0cc3ee864b4b04c92fafd4253df2952a3d259be6f6a4799c0f24635ceb36273b2fb472bd2f28") bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000800)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.827774211s ago: executing program 1 (id=517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf252700000008000300", @ANYRES32=r6, @ANYBLOB="04003080"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r7, 0x0, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmsg$inet(r11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x1) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x2c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x340b48e534b896c}, 0xc, &(0x7f0000000800)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c4019a4e93593ecfa50d25c0541c0000", @ANYRES16=r5, @ANYBLOB="20002abd7000fedbdf25180000000c0006000200000002000000bc003080140001800800040008000000080004000800000024000300ab33505831fbebe0a1e1ecf77c06b050c7ee95530b0e6da1e343fc95a7fb9b50050002000a0000007800018045fd0380060001000100000030000380060001000200000006000300a3aa00000c0004000202aaaaaaaaaaaa060001000200000006000300a3aa000008000100030000000500010001000000000004000000000008000100030000000800010000000000080001000200000008000400ff0100000c00060002000000000000000c000600030000000000000008000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="c0003080180001800c00050000000000000000000800040002000000140004000caaf89f1f11090463bcb737cf611f807c0001800c00038006000300a3aa000008000100010000003800038006000100ffff0000000004000201aaaaaaaaaaaa0800020002000000060003000000000006000300ffff00000c00040000000000000000001400038006000300a3aa00006bfd04000200aaaaaaaaaaaa100003800c0004000200aaaaaaaaaaaa080001000200000014000400ac557ff368a4896c2377313f0cc5eed6"], 0x1c4}, 0x1, 0x0, 0x0, 0x4040015}, 0x20000004) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000080), 0x10000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x4, 0x4) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10) poll(&(0x7f00000001c0)=[{r1, 0x58}], 0x1, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) 1m3.650652207s ago: executing program 0 (id=518): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x20004000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0x6, 0x1, '$\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60081}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x10, 0x40, 0x2, 0x0, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @remote, {[@noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc, 0xd}, {0xd, 0xffe0}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000600), 0x40000000000009f, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="6f080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket(0x1d, 0xa, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x6a, 0x1, 0x0, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000e40)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000e80)={0x1d, r6}, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x80) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) syz_genetlink_get_family_id$ethtool(0x0, r4) 1m3.419064965s ago: executing program 4 (id=519): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000140)=@udp6, 0xff00}, 0x20) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2fd, '\x00', r4, r0, 0x2, 0x5, 0x2}, 0x50) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x5cdc3f08, 0x10003}) 1m3.085458835s ago: executing program 0 (id=520): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000050074000100000008001400", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x48814}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x300) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000014", @ANYRES32=r7, @ANYRES8=r7], 0x0, 0x32, 0x0, 0x1, 0x3}, 0x28) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000100)={&(0x7f0000000180)={0xa, 0x4e24, 0xfffffff3, @local}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1e, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000100"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60001, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x400454d0, 0x2) 1m2.842311583s ago: executing program 4 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xcc}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c014}, 0x8800) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000000}, 0x2044) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x100000}, &(0x7f0000000280)=0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000002c0)={0x5, 0xe5, 0x6be1}, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000840)={{r0, &(0x7f0000000340)='syz2\x00', 0x8840, &(0x7f0000000380)={@align=0x6655, {0xfc75, 0x84f5, 0xfff, 0x1fffffffc000000}}, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0xf6b}, 0x4, &(0x7f00000007c0)=[{0x3, 0x9, &(0x7f0000000440)='syz0\x00', &(0x7f0000000480)="92101b59f4e4b8b792ed1990cee00f3cf665f266c8bdb21c52699aaee4cd840d5af951a313605f9436445727e0c266a72d784a450569e97f183a916d951ac42a95c732137eda59b9521f68880ee8bfedea3fc612b750656a58f21203bfd4cb72add696d8d608bad0b1b94ffde438b73029dfcc8feb4200175fdb31d69c9c104c21897f404f037106cc64866ca60f0a", 0x8f, 0x28}, {0x3, 0x4ca, &(0x7f0000000540)='syz2\x00', &(0x7f0000000580)="405a4e632309db9d05cb92c18ba649166c5b", 0x12, 0x12}, {0x2, 0x100, &(0x7f00000005c0)='TIPCv2\x00', &(0x7f0000000600)="212d32572543378d592e9fbe1e2aff77ee5bcacaee7f6f5c2a552a8328cf66b2480154c3a6b7191b21e3c031095947280b683a24359db437bbdda2c9d87d4894185fd0b4ee8cc8eedcfb19b1e5a7689495ca9ad2243bef6524f0c53f630d758188ac4b187b699dd747cc1efdf7cc54e71e8c70fe96b81633c16d517f942bb772e20f7efd7d9d10ff74caa17275efadacb6fae79323f499fb379c222ef06a5453d9f613ae3e6febcd2291b82d09e4a9c43761bc638e522f48557cb1b7a5787b7746526d37bf7ac5040b84cb2e1976", 0xce}, {0x1, 0x5, &(0x7f0000000700)='syz2\x00', &(0x7f0000000740)="289fbb9988f7d6f782743b4f0fea3012a6ddc682df806979bea9fe120e8150a2bde81f3a4bf8730038e9f26e7aa70c3a7d0c7c71dd2532ca962a837a84429a9514e8d974445fbe4855dfd50f100372b7693378654d4eb13f1c4847d20e23c9e12453b008dca8d8b4", 0x68, 0x2}]}) getsockopt$packet_int(r4, 0x107, 0x7, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000940)={r2, @in6={{0xa, 0x4e20, 0x9, @local, 0x10}}, 0x1, 0xffff, 0x2, 0x8, 0x80000000}, &(0x7f0000000a00)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000a40)={r5, 0x9, 0x8, 0xa, 0x8, 0x1, 0x8, 0xffffffff, {r2, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x10, 0x1ff, 0xfffffffb, 0x7f}}, &(0x7f0000000b00)=0xb0) r7 = openat$cgroup_ro(r4, &(0x7f0000000b40)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000c00)=@assoc_value={r6, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000c40)={r5, 0x7}, &(0x7f0000000c80)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000cc0)={r8, 0x3, 0x6, [0x0, 0x1, 0x37c6, 0x9b, 0x3, 0x6]}, 0x14) r9 = socket(0xf, 0x80000, 0xf6) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r3, 0x84, 0x80, &(0x7f0000000d00)={r5, 0x6}, &(0x7f0000000d40)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000d80)={r10, 0x6}, 0x8) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r7, 0xc0205866, &(0x7f0000000fc0)={&(0x7f0000000dc0), 0xfffffffc, &(0x7f0000000e00)=[{}, {}], &(0x7f0000000f80)}) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001000)={0x0, @loopback, @initdev}, &(0x7f0000001040)=0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@bloom_filter={0x1e, 0x400, 0x5, 0x5, 0x200, r4, 0x1000, '\x00', r11, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x7}, 0x50) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x12, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000011c0)='GPL\x00', 0x7, 0xa, &(0x7f0000001200)=""/10, 0x41100, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001280)={0x3, 0xa, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000012c0)=[r7, r12], &(0x7f0000001300)=[{0x4, 0x1, 0x10, 0xa}, {0x1, 0x4, 0x1}, {0x3, 0x3, 0xd, 0xb}, {0x2, 0x3, 0xa, 0x6}], 0x10, 0x636}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001400)={r13, r4, 0xe, 0x0, @val=@netfilter={0x5, 0x1, 0xef9, 0x1}}, 0x20) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x804) socket$packet(0x11, 0x3, 0x300) r14 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r14, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001540)="24140cc2890b9990f51ad1245824fdbc2a8a5817a641537deb9f97afd2c01e0b67f9bd970d84873593e8ba1c5e37523da9f8496ee47878518dbca2ee0b992beb6f3d80a0351b647d47c2bad5cd6d7a764c0c5e5e956284497178a7629972f16df9e81cc20ce1dbec1ca0ae4340e040956331b178c8f8e1fe571cbabe0eeeffc5a0c4930552f038f904c64b350edbce0a347831b4774d1c678455236b57c5b71033cc9de917654153ce015cbf6dde3355", 0xb0}, {&(0x7f0000001600)="053061ce07bb499519e24140c7be959cbb892a6584e3ac12ed94927baca795731eaf33f4390163", 0x27}], 0x2, &(0x7f0000001680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x1f}, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @end, @timestamp={0x44, 0x8, 0x1c, 0x0, 0x3, [0x3]}, @lsrr={0x83, 0xf, 0x4b, [@loopback, @remote, @local]}, @noop, @timestamp_addr={0x44, 0x24, 0xbf, 0x1, 0x4, [{@empty}, {@private=0xa010102, 0x7}, {@empty, 0x1ff}, {@empty, 0x1000}]}]}}}], 0xb8}, 0xc004) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f00000019c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001980)={&(0x7f0000001800)={0x168, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x50, 0x77}}}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x194}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd64}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3ff, 0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x5, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff9}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x401, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x8, 0x3, 0x3, 0x1, 0xc3]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ab}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdc}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc0}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x20}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x98}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7, 0x8, 0x3, 0x4, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x971}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xfffff000, 0x400, 0xfff, 0x6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x4048010) 1m2.741333506s ago: executing program 2 (id=522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x4800) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x700, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x800}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xe696000}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000280)=0x100, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10020100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'pimreg\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffe0, 0x2}, {0x2}, {0xc, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44025}, 0x20000094) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000005c0)={@initdev, @initdev, 0x0}, &(0x7f0000000600)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000640)={'tunl0\x00', r4, 0x40, 0x719, 0x7, 0x0, {{0x15, 0x4, 0x0, 0x3d, 0x54, 0x66, 0x0, 0xb5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x2e, 0x3, 0x1, [{@loopback, 0xfff}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x8}, {@remote, 0x81}, {@private=0xa010102, 0x7}]}, @end]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'syz_tun\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001440)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f0000000740)={0xc94, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfffb, 0x5, 0x0, 0x5}, {0x7, 0xd3, 0x9, 0x66}, {0xf55, 0x81, 0x62, 0x3}, {0x2, 0xff, 0x5, 0x3}, {0xa, 0x4, 0x0, 0x4}, {0x2, 0x0, 0x5, 0x1}, {0x8, 0x0, 0x90, 0x9}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}]}}, {{0x8, 0x1, r4}, {0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x6, 0x0, 0x10000}, {0xfe00, 0x3, 0x8, 0x5}, {0x8000, 0xd, 0x3, 0xdf}, {0x2, 0x4, 0x51}]}}}]}}, {{0x8, 0x1, r7}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcb}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r4}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3581}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd902}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x70fa}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x49e, 0x9, 0x1, 0xb}, {0x8, 0x1, 0x9, 0x7}, {0x0, 0x6, 0x5, 0x6}, {0x0, 0x3, 0x4, 0xf}, {0x0, 0x41, 0xe, 0x3}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbf}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1c3e, 0x6, 0x0, 0x10}, {0x80, 0x1, 0x5, 0xda3}, {0x7, 0x7, 0x80, 0x1}, {0x7b1d, 0x8, 0x0, 0x929}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040090) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt(r3, 0x0, 0x8, &(0x7f0000001480)="8c5d075fc4dda6f91327ae0d2cabcd7d2216b10e420e26a690767724adc564729ed9fcce251cd31562419d96ea9c80fadabde8512295d3d506cf3721c585282f75969256e11ad598b3bb1c3904c7c316385eab54677b1ae2127b", 0x5a) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001500)={0x0, 0x1}, &(0x7f0000001540)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000001580)={r10, 0x5c8}, 0x8) (async) clock_gettime(0x0, &(0x7f0000002f00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002ec0)=[{{&(0x7f00000015c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001640)=""/202, 0xca}, {&(0x7f0000001740)=""/50, 0x32}, {&(0x7f0000001780)=""/53, 0x35}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/158, 0x9e}, {&(0x7f0000002880)=""/194, 0xc2}, {&(0x7f0000002980)=""/199, 0xc7}, {&(0x7f0000002a80)=""/202, 0xca}, {&(0x7f0000002b80)=""/214, 0xd6}, {&(0x7f0000002c80)=""/83, 0x53}], 0xa, &(0x7f0000002dc0)=""/208, 0xd0}, 0x7}], 0x1, 0x2002, &(0x7f0000002f40)={r11, r12+60000000}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002f80), r5) (async) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_FLUSHABLE(r13, 0x112, 0x8, &(0x7f0000002fc0)=0x6, 0x4) (async) ioctl$sock_SIOCINQ(r13, 0x541b, &(0x7f0000003000)) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r14, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x2c, r15, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x1) 1m2.73202579s ago: executing program 1 (id=523): socketpair(0x18, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b00)={@cgroup, 0xffffffffffffffff, 0x14}, 0x20) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="6110a100000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x40010) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0100000000eb"}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e22, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x100}}}}}}}}, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000000000000007001000", @ANYRES32=0x0, @ANYBLOB="000000000a00020000000000000000000800090009000010"], 0x30}}, 0x0) 1m2.310919069s ago: executing program 4 (id=524): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)=0x38) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x42, 0x0, &(0x7f0000000080)) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) (async) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) 1m2.173809512s ago: executing program 3 (id=525): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000400)="4c00000011000f14001100020000050002000000200000", 0x17) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="a72d4952962f65f76998112b", 0xc}, {&(0x7f0000000380)="b8869dd9fb606c38b5f1e38268a108562d150070", 0x14}], 0x2, 0x0, 0x0, 0x4004001}}], 0x1, 0x4000801) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02030003120000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000001070c00007f0000000000000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000100140008000000"], 0x90}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYRES16=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m2.101691075s ago: executing program 0 (id=526): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000540)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000580)='$', 0x1, 0x20008005, &(0x7f00000005c0)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x1) recvfrom(r2, 0x0, 0x0, 0x635, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r1) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x13}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x3c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x34, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x0) 1m1.87085793s ago: executing program 4 (id=527): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000ff00", @ANYRES16=0x0, @ANYBLOB="0b062dbd70000000000030000000050035000600000005003300030000000a0001007770616e30000000"], 0x30}}, 0x20000004) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2d}, 0x90) 1m1.774007074s ago: executing program 2 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xfffc, 0x1}, 0x6) write(r1, &(0x7f0000000040)="4000000005000140000000", 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0xfc, 0xf, 0x3, 0x12, @mcast1, @remote, 0x80, 0x80, 0xf, 0x5}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@polexpire={0x104, 0x1b, 0x200, 0x70bd26, 0x25dfdbfb, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x2, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x2f, r3, r5}, {0x7, 0x0, 0x80000001, 0x6b7, 0x8, 0xfffffffffffff800, 0xffffffffffffffff, 0xc323}, {0x6dd, 0x100, 0x3, 0x1}, 0x6d, 0x6e6bb5, 0x2, 0x1, 0x0, 0x2}, 0x80}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3505, 0x1, 0x2, 0x8, 0x401, 0x8, 0xab}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000004}, 0x1000c000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001780)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000017c0)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), r7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001880)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001940)={'ip6tnl0\x00', &(0x7f00000018c0)={'syztnl1\x00', r3, 0x29, 0xa4, 0x1, 0x4, 0xc, @local, @private1, 0x10, 0x10, 0x0, 0x6}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000001b40)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001980)={0x16c, r9, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004040) r12 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000001800)={0x0, 0x2}, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(r6, &(0x7f0000000600)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000016c0)=0x9f8, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001900000427bd7000fcdbdf2580142006fc02fd040010000005001b0001000000100016801c0001000000000000000004"], 0x34}}, 0x20000000) 1m1.484684163s ago: executing program 4 (id=529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000b80)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000005bf645498fb446a99026d76791e4de", @ANYRES32, @ANYBLOB="0305000000000200080025000100000008002c00"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000900)={r4, &(0x7f00000006c0)='h\x00', 0x400100, &(0x7f0000000700)={@_ha_fsid={[0x8d, 0xffffffff]}, {0x5, 0xfffa, 0x2, 0x1528}}, 0x25, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x6}) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r6, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000008000d600440025000000851000000100000095000000000000001840000002000000000000000000000095000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000580)={0x1, 0xf, 0x20}, &(0x7f0000000640)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000680)={0x2, 0x3ecd}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000800)={r7, 0x800, 0xc, 0x23bf, 0x8, 0xf7, 0x0, 0x8, {r8, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0xc, 0x0, 0x3, 0x5}}, &(0x7f00000008c0)=0xb0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0xac}}, 0x1) sendto$inet6(r4, &(0x7f0000000a80)='s', 0x1, 0x8800, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001a06dfd59db19bf1d0ff213a2f909f6aff93afde9dd96c54aa865e86dd7395ed4ba51656cf327c0289bf8b313e6d185bcb3f532a9bdfe7d1c719ba6143898bd6cda393b8c7183feb291cdfa01bd6edadc1c7b6e09fddc62ad9ab58e92e24e859cd499ca4c6b4ee51e98a45"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$netlink(0x10, 0x3, 0x0) 1m1.399030753s ago: executing program 3 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000260001031d78d402fadbdf25012b00008aab17a4fdef510367b417930cbbf76106595f7113a2fcf903a97efad439b6ece0b9b6095a7c603d2d397b12ef458a"], 0x18}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000001a00)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) accept$inet6(r1, &(0x7f0000001840)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001880)=0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x3c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_int(r1, 0x11a, 0x5, &(0x7f00000001c0)=0x3f9, 0x2) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/138, 0x8a}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/56, 0x38}, {&(0x7f0000000780)=""/174, 0xae}, {&(0x7f0000000840)=""/4088, 0xff8}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4003}], 0x7, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=@gettaction={0x20, 0x32, 0x301, 0x70bd2b, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001a80)={0x0, 0x2c, &(0x7f0000001ac0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x4}]}, &(0x7f0000001b00)=0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000018c0)={'syz_tun\x00', &(0x7f0000001a40)=@ethtool_link_settings={0x4d, 0x2, 0xf, 0x80, 0x0, 0x4, 0x0, 0x0, 0xfe, 0x4, [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89fa, &(0x7f00000019c0)={'tunl0\x00', @ifru_flags=0x301}) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000001a00)) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r7, 0x0, 0x0) 1m1.353436836s ago: executing program 2 (id=531): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000400)={&(0x7f0000000b40)=@newtaction={0x144, 0x30, 0x25, 0x0, 0x0, {}, [{0x130, 0x1, [@m_vlan={0x12c, 0x19, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xf6, 0x6, "e17af450478bdfe9fc7524d2523fe35aa181e29ea9b00a7c9b0db2e0ae47ccd87d09218c4e3fdcf8f5c2adf784ee943717a94a47790df7f5c2e6ebe4046b6d2a53e5adb79803050ba0f2b53a2317a2f2a46e52e88f26ab5ca4a2ff0b1dc93017dc0612831657b96c1ebe93c419a79120f440fae53c2e468f16d062f515db4b84a37a907247894e6f0e3879cb3b5fafb8b5c0a016d32b41c18ca8263e2b8e8ab6405c3274e769e13b0956e51c1c5df5900d50ea4459ed9e2e9d2ba5168d01a8c7db0f3ed5f2320761c704451d076a4eeccf95e4aa616f5c4f0ff6f023b9d3958c2461f33300195f86e862e26fee1a3b8a4cec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a5cfe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f"], 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="090000001b000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB="9900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008017720f233efb3e16b900b7000000000000000000000000a36f53fa95ff54a25dfc13dbd5ce55e934e9932fc8c2b6b7d89d10177cecc606386d2af9edc7ed175c921467076e11fa87b89213b9ec11f770a57a1f30c5be172132f8d48570edd0b6b20cc93ba935864aeaa1945d9cd95d0aa480d66973980aff0bab0f8b7eb96c845768046c85ba4961df444852e11ae5f1"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80), &(0x7f0000000ac0), 0x1000, r7}, 0x38) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r7, &(0x7f0000000b40)}, 0x20) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=@delchain={0x44, 0x65, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffec, 0xfff3}, {0xfff2, 0xb}, {0x6, 0xe}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x401}, @TCA_RATE={0x6, 0x5, {0xf9, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xb, 0x0, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000640)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async, rerun: 64) r11 = accept4$alg(r10, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r11, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) sendmsg$alg(r11, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40001) 1m1.226344892s ago: executing program 1 (id=532): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000200), 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYRESHEX=r0], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000980), 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r4}, &(0x7f0000000a40), &(0x7f0000000a80)=r5}, 0x20) close(r2) r6 = socket(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34ec9}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000000)=0x3, 0x4) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) r8 = epoll_create(0x11ffffe) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000140)={0x40000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4ac37760538af5e59d33fb31757ab00c3000000000000009500000cd2850000"], &(0x7f0000000380)='GPL\x00', 0x2, 0xfd90, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x1f2, 0x10, &(0x7f0000000500), 0xfffffe51}, 0x48) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000180)={0x2000a212}) close(r1) socket(0x10, 0x803, 0x0) unshare(0x20040600) r9 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @random="0100003600"}) socket(0x400000000010, 0x3, 0x0) 1m1.042731974s ago: executing program 0 (id=533): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f00000003c0)="bad386dd", 0x5dc, 0x40, &(0x7f0000000400)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x181b02, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 1m0.905194931s ago: executing program 3 (id=534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) 1m0.220558736s ago: executing program 4 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xff, 0x0, 0x0, 0x0, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x154}}, 0x49080) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) r4 = socket$netlink(0x10, 0x3, 0xa) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000380)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x154}}, 0x0) 0s ago: executing program 32 (id=533): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f00000003c0)="bad386dd", 0x5dc, 0x40, &(0x7f0000000400)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x181b02, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 77.553783][ T5621] cgroup: Unknown subsys name 'net' [ 77.682744][ T5621] cgroup: Unknown subsys name 'cpuset' [ 77.692894][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.378188][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.380102][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.387467][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.387798][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.388206][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.390048][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.390211][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.390454][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.414979][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.415538][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.416609][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.417019][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.420347][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.422504][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.422941][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.423049][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.423591][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.424588][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.431951][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.432288][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.433757][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.441446][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.442022][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.460852][ T5648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.548233][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.548933][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.573414][ T5633] rdma_rxe: Failed to create IPv4 UDP tunnel [ 84.594106][ T5632] rdma_rxe: Failed to create IPv6 UDP tunnel [ 84.601664][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 84.604484][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.605642][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.623996][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.639614][ T5645] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.006929][ T5635] infiniband rxe0: set active [ 85.009190][ T5635] infiniband rxe0: added rxe_eth0 [ 85.051780][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.069396][ T5635] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 85.069435][ T5635] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 85.069473][ T5635] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 85.176010][ T5635] RDS/IB: rxe0: added [ 85.177173][ T5635] smc: adding ib device rxe0 with port count 1 [ 85.177265][ T5635] smc: ib device rxe0 port 1 has no pnetid [ 85.183486][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.223522][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.539985][ T5638] Bluetooth: hci1: command tx timeout [ 85.540172][ T5638] Bluetooth: hci3: command tx timeout [ 85.540266][ T5638] Bluetooth: hci0: command tx timeout [ 85.540356][ T5638] Bluetooth: hci4: command tx timeout [ 85.619140][ T54] Bluetooth: hci2: command tx timeout [ 85.682410][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.715936][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.856351][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.079976][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.240492][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.429133][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.429320][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.429464][ T5645] bridge_slave_0: entered allmulticast mode [ 86.434263][ T5645] bridge_slave_0: entered promiscuous mode [ 86.500516][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.500635][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.500758][ T5632] bridge_slave_0: entered allmulticast mode [ 86.502529][ T5632] bridge_slave_0: entered promiscuous mode [ 86.505184][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.505286][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.505678][ T5632] bridge_slave_1: entered allmulticast mode [ 86.507272][ T5632] bridge_slave_1: entered promiscuous mode [ 86.554887][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.554996][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.555242][ T5645] bridge_slave_1: entered allmulticast mode [ 86.556945][ T5645] bridge_slave_1: entered promiscuous mode [ 86.572228][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.621459][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.621581][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.622054][ T5633] bridge_slave_0: entered allmulticast mode [ 86.624760][ T5633] bridge_slave_0: entered promiscuous mode [ 86.659466][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.663896][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.700455][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.700678][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.700815][ T5633] bridge_slave_1: entered allmulticast mode [ 86.702684][ T5633] bridge_slave_1: entered promiscuous mode [ 86.737585][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.751010][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.852422][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.852541][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.852663][ T5634] bridge_slave_0: entered allmulticast mode [ 86.854179][ T5634] bridge_slave_0: entered promiscuous mode [ 86.857089][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.857209][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.857371][ T5634] bridge_slave_1: entered allmulticast mode [ 86.873734][ T5634] bridge_slave_1: entered promiscuous mode [ 86.880440][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.884493][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.903302][ T5645] team0: Port device team_slave_0 added [ 86.950964][ T5632] team0: Port device team_slave_0 added [ 86.952995][ T5645] team0: Port device team_slave_1 added [ 86.953143][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.025340][ T5632] team0: Port device team_slave_1 added [ 87.046957][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.051053][ T5633] team0: Port device team_slave_0 added [ 87.064737][ T10] cfg80211: failed to load regulatory.db [ 87.092551][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.092570][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.092596][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.098122][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.098139][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.098164][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.104319][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.106799][ T5633] team0: Port device team_slave_1 added [ 87.107733][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.107745][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.107767][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.110285][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.110298][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.110319][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.272161][ T5634] team0: Port device team_slave_0 added [ 87.272920][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.272932][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.272954][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.284351][ T5634] team0: Port device team_slave_1 added [ 87.343384][ T5632] hsr_slave_0: entered promiscuous mode [ 87.351256][ T5632] hsr_slave_1: entered promiscuous mode [ 87.378042][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.378062][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.378089][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.470142][ T5645] hsr_slave_0: entered promiscuous mode [ 87.470813][ T5645] hsr_slave_1: entered promiscuous mode [ 87.471347][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 87.471412][ T5645] Cannot create hsr debugfs directory [ 87.473890][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.473900][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.473915][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.480029][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.480043][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.480064][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.619633][ T5638] Bluetooth: hci0: command tx timeout [ 87.619671][ T5638] Bluetooth: hci3: command tx timeout [ 87.619696][ T5638] Bluetooth: hci1: command tx timeout [ 87.620000][ T54] Bluetooth: hci4: command tx timeout [ 87.679767][ T5633] hsr_slave_0: entered promiscuous mode [ 87.681608][ T5633] hsr_slave_1: entered promiscuous mode [ 87.682122][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 87.682142][ T5633] Cannot create hsr debugfs directory [ 87.699087][ T54] Bluetooth: hci2: command tx timeout [ 87.726277][ T5634] hsr_slave_0: entered promiscuous mode [ 87.727207][ T5634] hsr_slave_1: entered promiscuous mode [ 87.727698][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 87.727718][ T5634] Cannot create hsr debugfs directory [ 88.241372][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.245958][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.246865][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.252874][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.263509][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.275070][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.276108][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.282256][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.345539][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.345611][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.345693][ T5635] bridge_slave_0: entered allmulticast mode [ 88.347052][ T5635] bridge_slave_0: entered promiscuous mode [ 88.355094][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.355271][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.355792][ T5635] bridge_slave_1: entered allmulticast mode [ 88.361743][ T5635] bridge_slave_1: entered promiscuous mode [ 88.417238][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.439971][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.477699][ T5635] team0: Port device team_slave_0 added [ 88.489457][ T5645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.493439][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.496352][ T5635] team0: Port device team_slave_1 added [ 88.536715][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.536733][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.536754][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.537201][ T5645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.547981][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.551990][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.552005][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.552027][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.565636][ T5645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.576840][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.577837][ T5645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.587770][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.676595][ T5635] hsr_slave_0: entered promiscuous mode [ 88.677316][ T5635] hsr_slave_1: entered promiscuous mode [ 88.677771][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 88.677792][ T5635] Cannot create hsr debugfs directory [ 88.821451][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.828441][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.857633][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.869848][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.897055][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.908778][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.921931][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.927445][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.023872][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.027784][ T5633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.037746][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.038709][ T5633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.047275][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.076870][ T5633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.080974][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.103975][ T5633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.106848][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.116018][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.173840][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.173941][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.216933][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.217028][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.245158][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.248811][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.264560][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.272772][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.276574][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.286900][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.302587][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.305707][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.359593][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.383234][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.431127][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.457553][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.457651][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.487635][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.513947][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.514012][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.515371][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.515429][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.557183][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.557355][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.701114][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.701701][ T54] Bluetooth: hci4: command tx timeout [ 89.701732][ T54] Bluetooth: hci1: command tx timeout [ 89.701745][ T5650] Bluetooth: hci3: command tx timeout [ 89.701756][ T54] Bluetooth: hci0: command tx timeout [ 89.779485][ T5638] Bluetooth: hci2: command tx timeout [ 89.809865][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.847814][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.847944][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.925940][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.926076][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.954163][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.068579][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.148776][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.148896][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.187690][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.187810][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.635923][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.860030][ T5632] veth0_vlan: entered promiscuous mode [ 90.928118][ T5632] veth1_vlan: entered promiscuous mode [ 91.059459][ T5632] veth0_macvtap: entered promiscuous mode [ 91.081960][ T5632] veth1_macvtap: entered promiscuous mode [ 91.134358][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.157013][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.180333][ T165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.181437][ T165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.210606][ T165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.214635][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.442436][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.495254][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.495270][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.536426][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.604315][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.604341][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.627989][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.755507][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.780831][ T5638] Bluetooth: hci3: command tx timeout [ 91.780868][ T5638] Bluetooth: hci0: command tx timeout [ 91.780892][ T5638] Bluetooth: hci1: command tx timeout [ 91.780915][ T5638] Bluetooth: hci4: command tx timeout [ 91.833075][ T5645] veth0_vlan: entered promiscuous mode [ 91.860365][ T54] Bluetooth: hci2: command tx timeout [ 91.891475][ T5645] veth1_vlan: entered promiscuous mode [ 91.906507][ T5634] veth0_vlan: entered promiscuous mode [ 91.959369][ T5634] veth1_vlan: entered promiscuous mode [ 92.047975][ T5632] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.081651][ T5645] veth0_macvtap: entered promiscuous mode [ 92.103998][ T5635] veth0_vlan: entered promiscuous mode [ 92.107538][ T5634] veth0_macvtap: entered promiscuous mode [ 92.137361][ T5645] veth1_macvtap: entered promiscuous mode [ 92.160181][ T5634] veth1_macvtap: entered promiscuous mode [ 92.199118][ T5635] veth1_vlan: entered promiscuous mode [ 92.223809][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.278537][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.297859][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.313815][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.380199][ T156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.380247][ T156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.380279][ T156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.456225][ T5633] veth0_vlan: entered promiscuous mode [ 92.457107][ T5635] veth0_macvtap: entered promiscuous mode [ 92.497442][ T5635] veth1_macvtap: entered promiscuous mode [ 92.525425][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.525447][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.566720][ T5633] veth1_vlan: entered promiscuous mode [ 92.583960][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.583983][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.600136][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.627026][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.675562][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.675584][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.719854][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.721195][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.721213][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.857058][ T5633] veth0_macvtap: entered promiscuous mode [ 92.898294][ T5633] veth1_macvtap: entered promiscuous mode [ 92.985450][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.985473][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.994696][ T165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.994741][ T165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.994774][ T165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.994806][ T165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.994839][ T165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.994871][ T165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.057298][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.126683][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.189739][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.189762][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.223134][ T165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.227363][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.227459][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.227499][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.227547][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.227582][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.335196][ T5859] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 93.548555][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.548584][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.614999][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.615022][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.770454][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.770487][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.795903][ T5878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.809191][ T5878] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 94.086709][ T5878] can: request_module (can-proto-5) failed. [ 94.094978][ T5879] can: request_module (can-proto-5) failed. [ 94.152661][ T5889] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11'. [ 94.248367][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 94.283233][ T5892] bridge1: entered allmulticast mode [ 94.430571][ T5901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.494832][ T5909] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15'. [ 94.683997][ T1209] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.738825][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 94.789267][ T1209] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.789321][ T1209] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.789356][ T1209] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.873521][ T5920] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18'. [ 94.876443][ T5922] FAULT_INJECTION: forcing a failure. [ 94.876443][ T5922] name failslab, interval 1, probability 0, space 0, times 1 [ 94.876474][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.1.20 Not tainted syzkaller #0 PREEMPT(full) [ 94.876496][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.876507][ T5922] Call Trace: [ 94.876516][ T5922] [ 94.876525][ T5922] dump_stack_lvl+0xe8/0x150 [ 94.876563][ T5922] should_fail_ex+0x3eb/0x540 [ 94.876607][ T5922] should_failslab+0xa8/0x100 [ 94.876641][ T5922] __kmalloc_noprof+0xf9/0x710 [ 94.876665][ T5922] ? l2tp_v3_session_get+0x93/0x7b0 [ 94.876692][ T5922] ? l2tp_session_create+0x42/0xd10 [ 94.876719][ T5922] ? l2tp_session_create+0x42/0xd10 [ 94.876754][ T5922] l2tp_session_create+0x42/0xd10 [ 94.876781][ T5922] ? l2tp_session_put+0xe9/0x2b0 [ 94.876808][ T5922] ? l2tp_session_get+0xbe/0xf0 [ 94.876838][ T5922] pppol2tp_connect+0xc68/0x18b0 [ 94.876883][ T5922] ? __pfx_pppol2tp_connect+0x10/0x10 [ 94.876912][ T5922] ? lock_acquire+0x115/0x350 [ 94.876946][ T5922] ? __pfx_aa_sk_perm+0x10/0x10 [ 94.876981][ T5922] ? apparmor_socket_connect+0x13e/0x210 [ 94.877013][ T5922] ? bpf_lsm_socket_connect+0x9/0x20 [ 94.877043][ T5922] __sys_connect+0x316/0x450 [ 94.877077][ T5922] ? __pfx___sys_connect+0x10/0x10 [ 94.877122][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 94.877158][ T5922] __x64_sys_connect+0x7a/0x90 [ 94.877188][ T5922] do_syscall_64+0x166/0x520 [ 94.877211][ T5922] ? trace_irq_disable+0x3b/0x140 [ 94.877236][ T5922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.877257][ T5922] ? clear_bhb_loop+0x70/0xc0 [ 94.877282][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.877302][ T5922] RIP: 0033:0x7f05e0b9fb19 [ 94.877322][ T5922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.877338][ T5922] RSP: 002b:00007f05e19e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 94.877361][ T5922] RAX: ffffffffffffffda RBX: 00007f05e0e25fa0 RCX: 00007f05e0b9fb19 [ 94.877374][ T5922] RDX: 000000000000003a RSI: 0000200000000000 RDI: 0000000000000004 [ 94.877386][ T5922] RBP: 00007f05e19e0090 R08: 0000000000000000 R09: 0000000000000000 [ 94.877399][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.877410][ T5922] R13: 00007f05e0e26038 R14: 00007f05e0e25fa0 R15: 00007ffe343f2998 [ 94.877443][ T5922] [ 95.095786][ T5924] netlink: 'syz.4.19': attribute type 1 has an invalid length. [ 95.138139][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 95.152535][ T5924] 8021q: VLANs not supported on sit0 [ 95.237729][ T5926] Zero length message leads to an empty skb [ 95.297737][ T5928] bridge_slave_1: default FDB implementation only supports local addresses [ 95.417933][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 95.536390][ T5939] netlink: 244 bytes leftover after parsing attributes in process `syz.4.25'. [ 95.647926][ T5941] tunl0: entered promiscuous mode [ 95.661720][ T5941] netlink: 'syz.3.26': attribute type 4 has an invalid length. [ 95.727193][ T5951] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 95.730669][ T5950] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 96.144230][ T5974] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 96.277879][ T5976] bond0: (slave bond_slave_0): Releasing backup interface [ 96.358001][ T5976] bond_slave_0: entered promiscuous mode [ 96.358027][ T5976] bond_slave_0: entered allmulticast mode [ 96.554687][ T5982] dvmrp1: entered allmulticast mode [ 96.566364][ T5984] Cannot find del_set index 0 as target [ 96.594944][ T5984] netlink: 'syz.2.37': attribute type 2 has an invalid length. [ 96.597973][ T5984] raw_sendmsg: syz.2.37 forgot to set AF_INET. Fix it! [ 96.831847][ T54] Bluetooth: hci4: ACL packet too small [ 96.856481][ T54] Bluetooth: hci4: ACL packet too small [ 97.198329][ T6005] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 97.373087][ T63] IPVS: starting estimator thread 0... [ 97.410160][ T6001] xt_CT: No such helper "pptp" [ 97.469192][ T6013] IPVS: using max 24 ests per chain, 57600 per kthread [ 97.938316][ T6021] bridge_slave_0: default FDB implementation only supports local addresses [ 98.170210][ T5851] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.248034][ T6064] sctp: [Deprecated]: syz.3.52 (pid 6064) Use of int in max_burst socket option. [ 98.248034][ T6064] Use struct sctp_assoc_value instead [ 98.373907][ T6070] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 98.425485][ T6074] netlink: 'syz.4.54': attribute type 2 has an invalid length. [ 98.565409][ T6081] Bluetooth: MGMT ver 1.23 [ 99.987198][ T6075] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 99.999429][ T6074] !: entered promiscuous mode [ 100.015597][ T6080] : renamed from bond0 (while UP) [ 100.031871][ T6082] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 100.167032][ T6123] warning: `syz.2.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.287932][ T6127] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 100.425339][ T6136] netlink: 'syz.1.62': attribute type 8 has an invalid length. [ 100.425504][ T6136] sch_fq: defrate 0 ignored. [ 100.461069][ T6138] team0: Device gtp0 is up. Set it down before adding it as a team port [ 100.589485][ T6144] x_tables: duplicate underflow at hook 1 [ 100.614641][ T6146] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 100.686947][ T6149] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 100.686972][ T6149] __nla_validate_parse: 8 callbacks suppressed [ 100.686983][ T6149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.65'. [ 100.798617][ T6149] dummy0: entered promiscuous mode [ 100.834955][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 100.848099][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 101.031301][ T6175] netlink: 64 bytes leftover after parsing attributes in process `syz.0.70'. [ 101.216062][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 101.362909][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 101.422605][ T6198] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.550369][ T6207] tipc: Started in network mode [ 101.550413][ T6207] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 101.551430][ T6207] tipc: Enabled bearer , priority 0 [ 102.030865][ T6231] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 102.030890][ T6231] netlink: 'syz.3.92': attribute type 4 has an invalid length. [ 102.030902][ T6231] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.92'. [ 102.195542][ T6241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.95'. [ 102.400888][ T6246] netlink: 'syz.4.100': attribute type 1 has an invalid length. [ 102.402451][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 102.541897][ T6249] bond1: option min_links: invalid value (18446744073709551614) [ 102.541928][ T6249] bond1: option min_links: allowed values 0 - 2147483647 [ 102.547030][ T6249] bond1 (unregistering): Released all slaves [ 102.615849][ T6258] netlink: 'syz.1.101': attribute type 14 has an invalid length. [ 102.615883][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 102.687024][ T6258] netlink: 'syz.1.101': attribute type 14 has an invalid length. [ 102.688196][ T24] tipc: Node number set to 43690 [ 102.689170][ T63] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.709751][ T63] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.713036][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.713075][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.842744][ T6269] xt_hashlimit: size too large, truncated to 1048576 [ 102.866882][ T6271] netlink: 'syz.4.108': attribute type 1 has an invalid length. [ 103.194726][ T6272] vlan2: entered promiscuous mode [ 103.194742][ T6272] bridge0: entered promiscuous mode [ 103.194889][ T6272] vlan2: entered allmulticast mode [ 103.194897][ T6272] bridge0: entered allmulticast mode [ 103.261718][ T6287] nbd: must specify at least one socket [ 103.419730][ T6295] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 103.756821][ T6284] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 104.247351][ T6344] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.262940][ T6344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.262959][ T6344] IPv6: NLM_F_CREATE should be set when creating new route [ 104.263018][ T6344] IPv6: NLM_F_CREATE should be set when creating new route [ 104.305593][ T6344] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 104.639582][ T6364] smc: net device lo applied user defined pnetid SYZ0 [ 104.684798][ T6367] ip_tables: iptables: counters copy to user failed while replacing table [ 104.687317][ T6367] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 105.143011][ T6376] xt_ipvs: protocol family 7 not supported [ 105.221329][ T54] Bluetooth: hci0: command 0x080f tx timeout [ 105.279058][ T6385] bond1: Removing last ns target with arp_interval on [ 105.907548][ T6405] __nla_validate_parse: 43 callbacks suppressed [ 105.907569][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.140'. [ 106.031176][ T6407] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 106.059502][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.065026][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.081059][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.098698][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.114393][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.128002][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.130227][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.154241][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.160960][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 106.200744][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880781b0c00: rx timeout, send abort [ 106.629552][ T6436] unsupported nlmsg_type 40 [ 106.676715][ T6442] netlink: 'syz.1.151': attribute type 1 has an invalid length. [ 106.683181][ T6438] netlink: 'syz.0.149': attribute type 39 has an invalid length. [ 106.701500][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880781b0c00: abort rx timeout. Force session deactivation [ 106.702683][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880781b0400: rx timeout, send abort [ 106.855827][ T6451] ipt_REJECT: TCP_RESET invalid for non-tcp [ 107.202736][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880781b0400: abort rx timeout. Force session deactivation [ 107.502475][ T6488] vlan0: entered promiscuous mode [ 107.645173][ T6501] : entered promiscuous mode [ 107.945194][ T6510] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.116836][ T6519] bond1: entered promiscuous mode [ 108.116863][ T6519] bond1: entered allmulticast mode [ 108.782561][ T6551] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 108.903443][ T6562] lo speed is unknown, defaulting to 1000 [ 108.903518][ T6562] lo speed is unknown, defaulting to 1000 [ 108.908282][ T6562] lo speed is unknown, defaulting to 1000 [ 108.926907][ T6562] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 108.926942][ T6562] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 108.926977][ T6562] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 109.155246][ T6562] lo speed is unknown, defaulting to 1000 [ 109.166845][ T6562] lo speed is unknown, defaulting to 1000 [ 109.185501][ T6562] lo speed is unknown, defaulting to 1000 [ 109.188772][ T6562] lo speed is unknown, defaulting to 1000 [ 109.204955][ T6562] lo speed is unknown, defaulting to 1000 [ 109.684432][ T6598] syzkaller1: entered promiscuous mode [ 109.684457][ T6598] syzkaller1: entered allmulticast mode [ 109.693137][ T6599] netlink: 'syz.4.187': attribute type 2 has an invalid length. [ 109.746388][ T6608] x_tables: duplicate underflow at hook 1 [ 109.829475][ T6611] sctp: [Deprecated]: syz.3.192 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.829475][ T6611] Use struct sctp_sack_info instead [ 109.829516][ T6611] sctp: [Deprecated]: syz.3.192 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.829516][ T6611] Use struct sctp_sack_info instead [ 109.829537][ T6611] sctp: [Deprecated]: syz.3.192 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.829537][ T6611] Use struct sctp_sack_info instead [ 109.829558][ T6611] sctp: [Deprecated]: syz.3.192 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.829558][ T6611] Use struct sctp_sack_info instead [ 109.829579][ T6611] sctp: [Deprecated]: syz.3.192 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.829579][ T6611] Use struct sctp_sack_info instead [ 109.829601][ T6611] sctp: [Deprecated]: syz.3.192 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.829601][ T6611] Use struct sctp_sack_info instead [ 109.829622][ T6611] sctp: [Deprecated]: syz.3.192 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.829622][ T6611] Use struct sctp_sack_info instead [ 109.829643][ T6611] sctp: [Deprecated]: syz.3.192 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.829643][ T6611] Use struct sctp_sack_info instead [ 109.829665][ T6611] sctp: [Deprecated]: syz.3.192 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.829665][ T6611] Use struct sctp_sack_info instead [ 109.829686][ T6611] sctp: [Deprecated]: syz.3.192 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.829686][ T6611] Use struct sctp_sack_info instead [ 110.245014][ T6634] syzkaller0: entered promiscuous mode [ 110.245040][ T6634] syzkaller0: entered allmulticast mode [ 110.286591][ T6642] netlink: 'syz.4.201': attribute type 10 has an invalid length. [ 110.335399][ T6644] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 110.436387][ T6645] netlink: 'syz.2.200': attribute type 11 has an invalid length. [ 110.461645][ T6654] xt_hashlimit: size too large, truncated to 1048576 [ 110.606682][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.746655][ T6656] bridge_slave_0 (unregistering): left allmulticast mode [ 110.746685][ T6656] bridge_slave_0 (unregistering): left promiscuous mode [ 110.746774][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.781092][ T6663] netlink: 'syz.3.205': attribute type 5 has an invalid length. [ 110.955730][ T6678] __nla_validate_parse: 69 callbacks suppressed [ 110.955753][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 110.955768][ T6678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 110.985974][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 111.017393][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 111.017418][ T6681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 111.027816][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 111.243148][ T6694] netlink: 56 bytes leftover after parsing attributes in process `syz.2.212'. [ 111.248392][ T6694] netlink: 56 bytes leftover after parsing attributes in process `syz.2.212'. [ 111.248732][ T6694] netlink: 56 bytes leftover after parsing attributes in process `syz.2.212'. [ 111.249197][ T6694] netlink: 56 bytes leftover after parsing attributes in process `syz.2.212'. [ 111.465751][ T6705] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 111.695597][ T6715] bond1 (unregistering): Released all slaves [ 112.043864][ T6748] xt_hashlimit: overflow, try lower: 3/0 [ 112.057961][ T6748] xt_hashlimit: overflow, try lower: 3/0 [ 112.058545][ T6748] xt_hashlimit: overflow, try lower: 3/0 [ 112.078933][ T6748] xt_hashlimit: overflow, try lower: 3/0 [ 112.089717][ T6748] xt_hashlimit: overflow, try lower: 3/0 [ 112.097931][ T6748] xt_hashlimit: overflow, try lower: 3/0 [ 112.116489][ T6748] xt_hashlimit: overflow, try lower: 3/0 [ 112.128864][ T6748] xt_hashlimit: overflow, try lower: 3/0 [ 112.130158][ T6748] xt_hashlimit: overflow, try lower: 3/0 [ 112.130687][ T6748] xt_hashlimit: overflow, try lower: 3/0 [ 112.442000][ T6787] hsr_slave_0: left promiscuous mode [ 112.452902][ T6787] hsr_slave_1: left promiscuous mode [ 113.326153][ T6869] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 113.345174][ T6846] bond1: Invalid ad_actor_system MAC address. [ 113.345196][ T6846] bond1: option ad_actor_system: invalid value (1) [ 113.371931][ T6846] bond1 (unregistering): Released all slaves [ 113.606480][ T6895] netlink: 'syz.1.237': attribute type 2 has an invalid length. [ 113.911725][ T6925] xt_hashlimit: size too large, truncated to 1048576 [ 113.947713][ T6927] tipc: Enabling of bearer rejected, failed to enable media [ 114.545472][ T6744] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 115.587460][ T7000] bond2: invalid ARP target 0.0.0.0 specified for addition [ 115.587488][ T7000] bond2: option arp_ip_target: invalid value (0) [ 115.744155][ T7000] bond2 (unregistering): Released all slaves [ 116.360405][ T7022] __nla_validate_parse: 100 callbacks suppressed [ 116.360427][ T7022] netlink: 9 bytes leftover after parsing attributes in process `syz.3.252'. [ 116.399773][ T7022] gretap0: entered promiscuous mode [ 116.484414][ T10] hid-generic 0005:0008:0006.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 116.535731][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 116.548898][ T7031] Bluetooth: MGMT ver 1.23 [ 116.552687][ T7022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.600683][ T7022] netlink: 5 bytes leftover after parsing attributes in process `syz.3.252'. [ 116.601130][ T7022] 0ªî{X¹¦: renamed from gretap0 [ 116.623156][ T7022] 0ªî{X¹¦: left promiscuous mode [ 116.623178][ T7022] 0ªî{X¹¦: entered allmulticast mode [ 116.635037][ T7022] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 116.836172][ T7032] fido_id[7032]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 117.174690][ T7057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.252140][ T7063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.368105][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.262'. [ 117.570817][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.266'. [ 117.690706][ T5638] Bluetooth: hci0: Malformed Event: 0x02 [ 117.708850][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.269'. [ 118.014452][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.274'. [ 118.014491][ T7097] netlink: 'syz.3.274': attribute type 7 has an invalid length. [ 118.014505][ T7097] netlink: 'syz.3.274': attribute type 8 has an invalid length. [ 118.014525][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 118.230847][ T7111] netlink: 140 bytes leftover after parsing attributes in process `syz.1.277'. [ 118.245194][ T7110] Driver unsupported XDP return value 0 on prog (id 150) dev N/A, expect packet loss! [ 118.287011][ T7111] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 118.287035][ T7111] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 118.287048][ T7111] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.277'. [ 118.287917][ T7111] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 118.287934][ T7111] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 118.307222][ T63] IPVS: starting estimator thread 0... [ 118.338737][ T7113] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.401240][ T7118] IPVS: using max 24 ests per chain, 57600 per kthread [ 118.580107][ T54] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 118.580707][ T5638] Bluetooth: hci0: command 0x080f tx timeout [ 118.913172][ T7151] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 119.313912][ T10] lo speed is unknown, defaulting to 1000 [ 119.327236][ T7168] macsec1: entered allmulticast mode [ 119.328299][ T7168] batman_adv: batadv0: Adding interface: macsec1 [ 119.328312][ T7168] batman_adv: batadv0: The MTU of interface macsec1 is too small (1436) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.328339][ T7168] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 119.373600][ T7171] netlink: 'syz.3.297': attribute type 16 has an invalid length. [ 119.373622][ T7171] netlink: 'syz.3.297': attribute type 17 has an invalid length. [ 119.374429][ T7171] tunl0: left promiscuous mode [ 119.386987][ T7171] 0ªî{X¹¦: left allmulticast mode [ 119.464476][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.466810][ T7171] dummy0: left promiscuous mode [ 119.563498][ T7171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.693526][ T7184] netlink: 'syz.4.302': attribute type 7 has an invalid length. [ 119.693549][ T7184] netlink: 'syz.4.302': attribute type 8 has an invalid length. [ 119.851503][ T7191] Cannot find set identified by id 0 to match [ 119.903788][ T7195] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 120.796304][ T7239] macvlan0: entered promiscuous mode [ 120.986377][ T7250] macsec1: entered promiscuous mode [ 121.052591][ T7247] macsec1: entered promiscuous mode [ 121.102679][ T7267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.327826][ T7280] netlink: 'syz.1.330': attribute type 6 has an invalid length. [ 121.345137][ T7280] netlink: zone id is out of range [ 121.345178][ T7280] netlink: zone id is out of range [ 121.345187][ T7280] netlink: zone id is out of range [ 121.345195][ T7280] netlink: zone id is out of range [ 121.416679][ T7285] netlink: 'syz.4.332': attribute type 1 has an invalid length. [ 121.484408][ T7291] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 121.497561][ T7285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.522937][ T7285] __nla_validate_parse: 15 callbacks suppressed [ 121.522960][ T7285] netlink: 184 bytes leftover after parsing attributes in process `syz.4.332'. [ 121.525040][ T7294] syz.0.334: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 121.525206][ T7294] CPU: 1 UID: 0 PID: 7294 Comm: syz.0.334 Not tainted syzkaller #0 PREEMPT(full) [ 121.525231][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.525243][ T7294] Call Trace: [ 121.525251][ T7294] [ 121.525260][ T7294] dump_stack_lvl+0xe8/0x150 [ 121.525313][ T7294] warn_alloc+0x24d/0x270 [ 121.525337][ T7294] ? stack_depot_save_flags+0x33/0x810 [ 121.525370][ T7294] ? __pfx_warn_alloc+0x10/0x10 [ 121.525392][ T7294] ? kasan_save_track+0x4f/0x80 [ 121.525420][ T7294] ? __kasan_kmalloc+0x93/0xb0 [ 121.525448][ T7294] ? xsk_init_queue+0x8a/0xe0 [ 121.525469][ T7294] ? xsk_setsockopt+0x52a/0x960 [ 121.525491][ T7294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.525530][ T7294] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 121.525586][ T7294] ? rcu_is_watching+0x16/0xb0 [ 121.525624][ T7294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.525645][ T7294] ? __kmalloc_cache_noprof+0x31c/0x600 [ 121.525670][ T7294] ? __kmalloc_cache_noprof+0x148/0x600 [ 121.525693][ T7294] ? xskq_create+0x56/0x220 [ 121.525718][ T7294] xskq_create+0x148/0x220 [ 121.525740][ T7294] ? xsk_init_queue+0x8a/0xe0 [ 121.525764][ T7294] xsk_init_queue+0x8a/0xe0 [ 121.525787][ T7294] xsk_setsockopt+0x52a/0x960 [ 121.525811][ T7294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 121.525832][ T7294] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.525873][ T7294] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 121.525899][ T7294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 121.525922][ T7294] do_sock_setsockopt+0x17c/0x1b0 [ 121.525949][ T7294] __x64_sys_setsockopt+0x13d/0x1b0 [ 121.525978][ T7294] do_syscall_64+0x166/0x520 [ 121.526002][ T7294] ? trace_irq_disable+0x3b/0x140 [ 121.526032][ T7294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.526052][ T7294] ? clear_bhb_loop+0x70/0xc0 [ 121.526078][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.526099][ T7294] RIP: 0033:0x7f8d8539fb19 [ 121.526120][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.526136][ T7294] RSP: 002b:00007f8d861ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.526158][ T7294] RAX: ffffffffffffffda RBX: 00007f8d85625fa0 RCX: 00007f8d8539fb19 [ 121.526174][ T7294] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 121.526187][ T7294] RBP: 00007f8d85437b70 R08: 0000000000000004 R09: 0000000000000000 [ 121.526201][ T7294] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 121.526214][ T7294] R13: 00007f8d85626038 R14: 00007f8d85625fa0 R15: 00007ffc99a7a178 [ 121.526250][ T7294] [ 121.526274][ T7294] Mem-Info: [ 121.526293][ T7294] active_anon:6068 inactive_anon:0 isolated_anon:0 [ 121.526293][ T7294] active_file:0 inactive_file:42893 isolated_file:0 [ 121.526293][ T7294] unevictable:0 dirty:97 writeback:0 [ 121.526293][ T7294] slab_reclaimable:11255 slab_unreclaimable:97900 [ 121.526293][ T7294] mapped:29254 shmem:523 pagetables:1239 [ 121.526293][ T7294] sec_pagetables:0 bounce:0 [ 121.526293][ T7294] kernel_misc_reclaimable:0 [ 121.526293][ T7294] free:1324387 free_pcp:10640 free_cma:0 [ 121.526381][ T7294] Node 0 active_anon:24272kB inactive_anon:0kB active_file:0kB inactive_file:171364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117016kB dirty:384kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12104kB pagetables:4824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 121.526537][ T7294] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 121.526592][ T7294] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.526654][ T7294] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 121.526697][ T7294] Node 0 DMA32 free:1355464kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24272kB inactive_anon:0kB active_file:0kB inactive_file:171364kB unevictable:0kB writepending:384kB zspages:0kB present:3129332kB managed:2523084kB mlocked:0kB bounce:0kB free_pcp:42092kB local_pcp:21532kB free_cma:0kB [ 121.526758][ T7294] lowmem_reserve[]: 0 0 1 1 1 [ 121.526795][ T7294] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 121.526852][ T7294] lowmem_reserve[]: 0 0 0 0 0 [ 121.526890][ T7294] Node 1 Normal free:3926724kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:464kB local_pcp:236kB free_cma:0kB [ 121.526951][ T7294] lowmem_reserve[]: 0 0 0 0 0 [ 121.526990][ T7294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 121.527119][ T7294] Node 0 DMA32: 184*4kB (ME) 359*8kB (UME) 171*16kB (UME) 196*32kB (UM) 76*64kB (UME) 31*128kB (UME) 13*256kB (UME) 9*512kB (M) 7*1024kB (UM) 8*2048kB (UME) 318*4096kB (UM) = 1355464kB [ 121.527309][ T7294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 121.527417][ T7294] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 3*16kB (UM) 7*32kB (UM) 7*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3926776kB [ 121.527591][ T7294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.527608][ T7294] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.527625][ T7294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.527642][ T7294] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.527658][ T7294] 43412 total pagecache pages [ 121.527666][ T7294] 0 pages in swap cache [ 121.527673][ T7294] Free swap = 124996kB [ 121.527682][ T7294] Total swap = 124996kB [ 121.527690][ T7294] 2097051 pages RAM [ 121.527698][ T7294] 0 pages HighMem/MovableOnly [ 121.527706][ T7294] 434249 pages reserved [ 121.527713][ T7294] 0 pages cma reserved [ 121.561224][ T7293] bond2: entered promiscuous mode [ 121.561934][ T7293] bond2: entered allmulticast mode [ 121.562356][ T7293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.808771][ T7301] netlink: 52 bytes leftover after parsing attributes in process `syz.2.337'. [ 121.847988][ T7305] netlink: 52 bytes leftover after parsing attributes in process `syz.2.337'. [ 125.392238][ T7310] netlink: 'syz.0.339': attribute type 2 has an invalid length. [ 125.524357][ T7323] netlink: 48 bytes leftover after parsing attributes in process `syz.1.340'. [ 125.535130][ T7320] net_ratelimit: 1 callbacks suppressed [ 125.535149][ T7320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 125.574075][ T7316] bridge0: port 1(veth1_to_bridge) entered blocking state [ 125.574189][ T7316] bridge0: port 1(veth1_to_bridge) entered disabled state [ 125.574345][ T7316] veth1_to_bridge: entered allmulticast mode [ 125.590484][ T7316] veth1_to_bridge: entered promiscuous mode [ 125.591946][ T7316] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 125.594958][ T7316] bridge0: port 1(veth1_to_bridge) entered blocking state [ 125.595072][ T7316] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 125.724411][ T7330] ip_tables: iptables: counters copy to user failed while replacing table [ 125.822868][ T7338] netlink: 'syz.4.345': attribute type 5 has an invalid length. [ 125.826785][ T7338] openvswitch: netlink: IPv4 tunnel dst address is zero [ 125.927455][ T7355] netlink: 44 bytes leftover after parsing attributes in process `syz.3.348'. [ 125.927483][ T7355] netlink: 43 bytes leftover after parsing attributes in process `syz.3.348'. [ 125.927586][ T7355] netlink: 'syz.3.348': attribute type 5 has an invalid length. [ 125.927602][ T7355] netlink: 43 bytes leftover after parsing attributes in process `syz.3.348'. [ 128.790061][ T7342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.007711][ T7377] dvmrp1: entered allmulticast mode [ 129.267406][ T7403] hashlimit_mt_check_common: 55 callbacks suppressed [ 129.267430][ T7403] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 129.287134][ T7403] ip_tables: iptables: counters copy to user failed while replacing table [ 129.304873][ T30] audit: type=1800 audit(1793901517.615:2): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.361" name="memory.events" dev="tmpfs" ino=357 res=0 errno=-22 [ 129.400556][ T7407] netlink: 'syz.4.363': attribute type 1 has an invalid length. [ 129.454434][ T7412] openvswitch: netlink: nsh attr 359 is out of range max 3 [ 129.455859][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 129.482230][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 129.606224][ T7418] can: request_module (can-proto-0) failed. [ 129.620080][ T7418] IPv6: sit1: Disabled Multicast RS [ 130.027835][ T7434] IPVS: set_ctl: invalid protocol: 29 172.20.20.21:20003 [ 130.113823][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 130.175768][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.372'. [ 130.550443][ T7454] geneve2: entered promiscuous mode [ 130.624639][ T7457] ip_tables: iptables: counters copy to user failed while replacing table [ 130.718595][ T7461] netlink: 'syz.4.379': attribute type 2 has an invalid length. [ 130.805432][ T7461] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 130.811532][ T7461] bond2 (unregistering): Released all slaves [ 130.845096][ T7468] IPv6: NLM_F_REPLACE set, but no existing node found! [ 130.894809][ T7473] netlink: 4844 bytes leftover after parsing attributes in process `syz.3.382'. [ 131.025821][ T7475] veth1_macvtap: left promiscuous mode [ 131.286943][ T7489] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.601090][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.389'. [ 131.670725][ T7509] ip_tables: iptables: counters copy to user failed while replacing table [ 131.693221][ T7509] ip_tables: iptables: counters copy to user failed while replacing table [ 131.693588][ T7509] ip_tables: iptables: counters copy to user failed while replacing table [ 131.693955][ T7509] ip_tables: iptables: counters copy to user failed while replacing table [ 131.694312][ T7509] ip_tables: iptables: counters copy to user failed while replacing table [ 131.695058][ T7509] ip_tables: iptables: counters copy to user failed while replacing table [ 131.695423][ T7509] ip_tables: iptables: counters copy to user failed while replacing table [ 131.695765][ T7509] ip_tables: iptables: counters copy to user failed while replacing table [ 131.863476][ T7525] FAULT_INJECTION: forcing a failure. [ 131.863476][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 131.863509][ T7525] CPU: 1 UID: 0 PID: 7525 Comm: syz.1.394 Not tainted syzkaller #0 PREEMPT(full) [ 131.863532][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.863544][ T7525] Call Trace: [ 131.863552][ T7525] [ 131.863561][ T7525] dump_stack_lvl+0xe8/0x150 [ 131.863600][ T7525] should_fail_ex+0x3eb/0x540 [ 131.863631][ T7525] _copy_from_iter+0x1d3/0x1680 [ 131.863655][ T7525] ? __alloc_skb+0x27a/0x7a0 [ 131.863688][ T7525] ? __alloc_skb+0x27a/0x7a0 [ 131.863720][ T7525] ? __alloc_skb+0x27a/0x7a0 [ 131.863750][ T7525] ? __pfx__copy_from_iter+0x10/0x10 [ 131.863787][ T7525] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 131.863811][ T7525] ? __alloc_skb+0x27a/0x7a0 [ 131.863838][ T7525] ? __alloc_skb+0x27a/0x7a0 [ 131.863874][ T7525] ? netlink_sendmsg+0x64f/0xb20 [ 131.863903][ T7525] ? skb_put+0x112/0x210 [ 131.863926][ T7525] netlink_sendmsg+0x6bb/0xb20 [ 131.863961][ T7525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.863995][ T7525] ? aa_sock_msg_perm+0x144/0x210 [ 131.864022][ T7525] ? apparmor_socket_sendmsg+0x98/0x360 [ 131.864054][ T7525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.864091][ T7525] sock_sendmsg_nosec+0x14e/0x190 [ 131.864122][ T7525] ____sys_sendmsg+0x54e/0x850 [ 131.864150][ T7525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.864183][ T7525] ? import_iovec+0x73/0xa0 [ 131.864212][ T7525] ___sys_sendmsg+0x2a5/0x360 [ 131.864231][ T7525] ? __lock_acquire+0x747/0x2de0 [ 131.864262][ T7525] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.864323][ T7525] ? __fget_files+0x3a2/0x420 [ 131.864346][ T7525] ? __fget_files+0x2a/0x420 [ 131.864379][ T7525] __x64_sys_sendmsg+0x1b1/0x290 [ 131.864404][ T7525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.864440][ T7525] do_syscall_64+0x166/0x520 [ 131.864459][ T7525] ? trace_irq_disable+0x3b/0x140 [ 131.864492][ T7525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.864507][ T7525] ? clear_bhb_loop+0x70/0xc0 [ 131.864527][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.864542][ T7525] RIP: 0033:0x7f05e0b9fb19 [ 131.864558][ T7525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.864571][ T7525] RSP: 002b:00007f05e19e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.864591][ T7525] RAX: ffffffffffffffda RBX: 00007f05e0e25fa0 RCX: 00007f05e0b9fb19 [ 131.864603][ T7525] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000005 [ 131.864613][ T7525] RBP: 00007f05e19e0090 R08: 0000000000000000 R09: 0000000000000000 [ 131.864622][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.864632][ T7525] R13: 00007f05e0e26038 R14: 00007f05e0e25fa0 R15: 00007ffe343f2998 [ 131.864658][ T7525] [ 131.938444][ T7528] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.264503][ T7534] syzkaller1: entered promiscuous mode [ 132.264527][ T7534] syzkaller1: entered allmulticast mode [ 132.601786][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 132.835396][ T7570] netlink: 48 bytes leftover after parsing attributes in process `syz.4.410'. [ 132.870178][ T7570] netlink: 'syz.4.410': attribute type 29 has an invalid length. [ 132.892074][ T7570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.410'. [ 132.892252][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 132.927571][ T7574] netlink: 'syz.1.412': attribute type 64 has an invalid length. [ 133.013599][ T7575] netlink: 'syz.4.410': attribute type 10 has an invalid length. [ 133.037751][ T5638] Bluetooth: hci2: Malformed Event: 0x13 [ 133.047668][ T7575] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 133.095846][ T7575] bridge0: port 3(netdevsim1) entered blocking state [ 133.095988][ T7575] bridge0: port 3(netdevsim1) entered disabled state [ 133.112349][ T7575] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 133.157456][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.165622][ T7583] IPVS: Error connecting to the multicast addr [ 133.797670][ T7598] pimreg: entered allmulticast mode [ 134.263049][ T7616] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 134.263049][ T7616] Please contact the netfilter-devel mailing list or update your nftables rules. [ 134.364820][ T7618] netlink: 'syz.2.427': attribute type 21 has an invalid length. [ 135.037320][ T7642] tipc: Started in network mode [ 135.037354][ T7642] tipc: Node identity 090000000000000009, cluster identity 4711 [ 135.460017][ T7653] __nla_validate_parse: 3 callbacks suppressed [ 135.460041][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.436'. [ 135.629080][ C1] net_ratelimit: 17969 callbacks suppressed [ 135.629105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.629343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.629514][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.629679][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.629841][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.630004][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.630227][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.630395][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.630567][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.630728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.837151][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 135.837179][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 136.925705][ T12] IPVS: starting estimator thread 0... [ 137.009586][ T7695] IPVS: using max 25 ests per chain, 60000 per kthread [ 138.832971][ T7662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.853316][ T7677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.442'. [ 138.853340][ T7677] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 139.446147][ T7730] tc_dump_action: action bad kind [ 139.678691][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 140.197045][ T7754] netlink: 128 bytes leftover after parsing attributes in process `syz.4.460'. [ 140.639096][ C1] net_ratelimit: 47769 callbacks suppressed [ 140.639122][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.639272][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.639410][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.639527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.639638][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.639752][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.639863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.640000][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.640126][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.640247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.847297][ T7770] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 140.861292][ T7772] netlink: 'syz.1.466': attribute type 10 has an invalid length. [ 140.994622][ T7770] bond3: entered promiscuous mode [ 141.006843][ T7770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.258344][ T7788] netlink: 84 bytes leftover after parsing attributes in process `syz.0.470'. [ 141.315496][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 141.823905][ T7802] Bluetooth: MGMT ver 1.23 [ 141.914241][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.938931][ T7772] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 142.172468][ T7770] bond3: (slave bridge2): making interface the new active one [ 142.172495][ T7770] bridge2: entered promiscuous mode [ 142.198398][ T7770] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 142.227725][ T7802] bond0: option miimon: invalid value (18446744071829782528) [ 142.227755][ T7802] bond0: option miimon: allowed values 0 - 2147483647 [ 144.226264][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 144.261872][ T5638] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 144.261925][ T5638] Bluetooth: unknown link type 48 [ 144.261976][ T5638] Bluetooth: hci3: connection err: -111 [ 144.497844][ T7859] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 145.272773][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.649073][ C1] net_ratelimit: 37006 callbacks suppressed [ 145.649099][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.649256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.649412][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.649561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.649706][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.649852][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.650028][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.650178][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.650325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.650483][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.022119][ T7885] netlink: 44 bytes leftover after parsing attributes in process `syz.1.490'. [ 146.054748][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.491'. [ 146.054774][ T7901] netlink: 64 bytes leftover after parsing attributes in process `syz.3.491'. [ 147.024549][ T7885] gre0: Master is either lo or non-ether device [ 147.401386][ T7914] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 147.401411][ T7914] netlink: 'syz.1.494': attribute type 2 has an invalid length. [ 147.401423][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 147.438603][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 147.470292][ T7914] netlink: 'syz.1.494': attribute type 14 has an invalid length. [ 147.470317][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 147.470570][ T7914] netlink: 'syz.1.494': attribute type 14 has an invalid length. [ 147.470594][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 147.851391][ T7921] tipc: Enabling of bearer rejected, media not registered [ 148.269585][ T7936] netlink: 'syz.1.501': attribute type 15 has an invalid length. [ 148.364491][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 148.957504][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 149.329922][ T165] IPVS: starting estimator thread 0... [ 149.419136][ T7969] IPVS: using max 22 ests per chain, 52800 per kthread [ 150.659163][ C1] net_ratelimit: 31635 callbacks suppressed [ 150.659190][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.659336][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.659471][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.659608][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.659732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.659808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.659893][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.660034][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.660157][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.660233][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.980043][ T7962] dvmrp4: entered allmulticast mode [ 151.275997][ T7980] netlink: 56 bytes leftover after parsing attributes in process `syz.0.513'. [ 153.201061][ T8039] Bluetooth: hci0: unsupported parameter 5135 [ 153.201096][ T8039] Bluetooth: hci0: unsupported parameter 8192 [ 153.201109][ T8039] Bluetooth: hci0: unsupported parameter 5135 [ 153.201121][ T8039] Bluetooth: hci0: unsupported parameter 8192 [ 153.830976][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 153.831088][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 153.860239][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 153.896375][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 154.082783][ T8065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.531'. [ 154.083212][ T8052] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 154.123901][ T8052] bond2 (unregistering): Released all slaves [ 154.199857][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 154.360733][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 155.669060][ C0] net_ratelimit: 27902 callbacks suppressed [ 155.669087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 155.669185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.669335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.669371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 155.669505][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.669664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 155.669775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 155.669945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 155.670074][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.670225][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 160.679052][ C1] net_ratelimit: 42234 callbacks suppressed [ 160.679079][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.679081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 160.679339][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 160.679356][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 160.679603][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.679628][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 160.679836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.679892][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 160.679977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.680146][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.569137][ C0] sched: DL replenish lagged too much [ 165.689149][ C0] net_ratelimit: 43650 callbacks suppressed [ 165.689155][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 165.689174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 165.689409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.689445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 165.689562][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.689704][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 165.689729][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.689963][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 165.690115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.690212][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 170.699029][ C1] net_ratelimit: 46221 callbacks suppressed [ 170.699055][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.699116][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 170.699290][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.699371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 170.699532][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.699622][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 170.699679][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.699842][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.699892][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 170.700145][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 175.708986][ C1] net_ratelimit: 47031 callbacks suppressed [ 175.709012][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.709139][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 175.709264][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.709403][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 175.709409][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.709572][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.709666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 175.709828][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 175.709939][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 175.710065][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.718989][ C0] net_ratelimit: 46289 callbacks suppressed [ 180.719016][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 180.719028][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 180.719309][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 180.719575][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 180.719713][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.719863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.719910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 180.720041][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.720233][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 180.720315][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.729040][ C0] net_ratelimit: 46560 callbacks suppressed [ 185.729068][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 185.729084][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.729350][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 185.729352][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.729505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.729632][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 185.729681][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.729919][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 185.729936][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.730088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.738971][ C0] net_ratelimit: 46075 callbacks suppressed [ 190.738998][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 190.739018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.739193][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.739281][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 190.739430][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.739564][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 190.739572][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.739733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.739853][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 190.739987][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.290664][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.749096][ C0] net_ratelimit: 46722 callbacks suppressed [ 195.749122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 195.749219][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.749383][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 195.749396][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.749571][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.749641][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 195.749857][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.749894][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 195.750111][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.750157][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 200.759088][ C1] net_ratelimit: 46109 callbacks suppressed [ 200.759123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.759130][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 200.759364][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.759469][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 200.759539][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.759701][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.759816][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 200.759960][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.760155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 200.760202][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.769088][ C1] net_ratelimit: 45563 callbacks suppressed [ 205.769116][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.769171][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 205.769266][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.769432][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 205.769445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.769685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 205.769734][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.769890][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.769954][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 205.770063][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.903750][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 208.133576][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 208.193505][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 208.286800][ T5638] Bluetooth: hci0: command 0x080f tx timeout [ 210.779028][ C0] net_ratelimit: 44053 callbacks suppressed [ 210.779028][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.779053][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 210.779269][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.779352][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 210.779425][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.779598][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.779602][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 210.779841][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.779859][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 210.779983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.789058][ C0] net_ratelimit: 43339 callbacks suppressed [ 215.789070][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.789084][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 215.789252][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.789363][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 215.789559][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.789655][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 215.789716][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.789895][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.789945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 215.790171][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.798963][ C1] net_ratelimit: 43789 callbacks suppressed [ 220.798991][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.799172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 220.799283][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.799424][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 220.799562][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.799678][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 220.799824][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.799939][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 220.800085][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.800192][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 225.809041][ C1] net_ratelimit: 42670 callbacks suppressed [ 225.809068][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.809131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 225.809293][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.809396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 225.809546][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.809659][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 225.809798][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.809912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 225.810075][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.810159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 230.819087][ C0] net_ratelimit: 43428 callbacks suppressed [ 230.819113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 230.819229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.819369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 230.819467][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.819633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.819633][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 230.819782][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.819887][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 230.819938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.820108][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.829022][ C0] net_ratelimit: 44104 callbacks suppressed [ 235.829049][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 235.829071][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.829220][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.829320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 235.829395][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.829582][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 235.829669][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.829837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 235.829947][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.830097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 240.838951][ C0] net_ratelimit: 44302 callbacks suppressed [ 240.838977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 240.839037][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.839279][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 240.839324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.839543][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 240.839618][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.839796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 240.839880][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.840034][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.840098][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 244.337507][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 245.849135][ C0] net_ratelimit: 44303 callbacks suppressed [ 245.849160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 245.849212][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.849419][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 245.849491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.849684][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 245.849769][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.849942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 245.850032][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.850200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.850246][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 250.859013][ C0] net_ratelimit: 44887 callbacks suppressed [ 250.859040][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 250.859123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.859306][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 250.859346][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.859490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.859565][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 250.859628][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.859775][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.859819][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 250.859933][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.869028][ C0] net_ratelimit: 44961 callbacks suppressed [ 255.869045][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.869060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 255.869323][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 255.869333][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.869616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.869847][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 255.869860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.870013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.870109][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 255.870167][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.529397][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.879046][ C0] net_ratelimit: 44921 callbacks suppressed [ 260.879047][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.879076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 260.879196][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.879338][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.879408][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 260.879501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.879737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.879890][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.880060][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.880301][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.889087][ C1] net_ratelimit: 44480 callbacks suppressed [ 265.889113][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.889202][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 265.889428][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.889484][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 265.889575][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.889717][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.889743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 265.889863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.890033][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 265.890035][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.898974][ C0] net_ratelimit: 44967 callbacks suppressed [ 270.899000][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 270.899018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.899257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.899260][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 270.899526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 270.899535][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.899784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 270.899805][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.900076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.900079][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 275.908987][ C0] net_ratelimit: 45005 callbacks suppressed [ 275.908990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.909011][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 275.909248][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.909291][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 275.909533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.909613][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 275.909680][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.909822][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.909907][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 275.909966][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.919008][ C0] net_ratelimit: 45141 callbacks suppressed [ 280.919033][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 280.919135][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.919306][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 280.919400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.919620][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 280.919661][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.919898][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 280.919914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.920151][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.920173][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 285.928923][ C0] net_ratelimit: 44983 callbacks suppressed [ 285.928949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 285.929163][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.929218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 285.929448][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.929485][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 285.929723][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.929762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 285.929997][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.930023][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 285.930271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.938968][ C1] net_ratelimit: 44643 callbacks suppressed [ 290.938995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.939072][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 290.939250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.939358][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 290.939522][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.939633][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 290.939866][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.939928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 290.940116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.940204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 295.948932][ C1] net_ratelimit: 44965 callbacks suppressed [ 295.948960][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.949004][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 295.949114][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.949264][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.949323][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 295.949413][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.949580][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.949589][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 295.949837][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.949854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 300.958942][ C1] net_ratelimit: 45495 callbacks suppressed [ 300.958969][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.959117][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.959144][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 300.959281][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.959425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 300.959531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.959713][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 300.959792][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.959984][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:f4:5a:70:ee:6b, vlan:0) [ 300.960044][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 302.877810][ T32] INFO: task syz.0.533:8063 blocked for more than 143 seconds. [ 302.877839][ T32] Not tainted syzkaller #0 [ 302.877850][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.877859][ T32] task:syz.0.533 state:D stack:24376 pid:8063 tgid:8063 ppid:5635 task_flags:0x400040 flags:0x00080002 [ 302.877926][ T32] Call Trace: [ 302.877934][ T32] [ 302.877950][ T32] __schedule+0x17dd/0x5830 [ 302.878001][ T32] ? stack_depot_save_flags+0x33/0x810 [ 302.878043][ T32] ? __pfx___schedule+0x10/0x10 [ 302.878077][ T32] ? schedule+0x90/0x2b0 [ 302.878115][ T32] schedule+0x164/0x2b0 [ 302.878142][ T32] schedule_preempt_disabled+0x13/0x30 [ 302.878165][ T32] __mutex_lock+0x7c4/0x15a0 [ 302.878197][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 302.878228][ T32] ? tun_chr_close+0x3e/0x1c0 [ 302.878257][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 302.878320][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 302.878344][ T32] tun_chr_close+0x3e/0x1c0 [ 302.878368][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 302.878391][ T32] __fput+0x408/0xa40 [ 302.878425][ T32] fput_close_sync+0x11f/0x240 [ 302.878448][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 302.878483][ T32] filp_close_sync+0x6e/0xa0 [ 302.878509][ T32] __se_sys_close_range+0xa77/0xef0 [ 302.878559][ T32] ? __pfx___se_sys_close_range+0x10/0x10 [ 302.878599][ T32] do_syscall_64+0x166/0x520 [ 302.878622][ T32] ? trace_irq_disable+0x3b/0x140 [ 302.878650][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.878672][ T32] ? clear_bhb_loop+0x70/0xc0 [ 302.878699][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.878720][ T32] RIP: 0033:0x7f8d8539fb19 [ 302.878741][ T32] RSP: 002b:00007ffc99a7a2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 302.878764][ T32] RAX: ffffffffffffffda RBX: 00007f8d85627da0 RCX: 00007f8d8539fb19 [ 302.878779][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 302.878792][ T32] RBP: 00007f8d85627da0 R08: 0000000000000006 R09: 0000000000000000 [ 302.878806][ T32] R10: 00007f8d85627cb0 R11: 0000000000000246 R12: 0000000000025ccd [ 302.878819][ T32] R13: 00007f8d8562654c R14: 0000000000025c31 R15: 00007f8d85626540 [ 302.878856][ T32] [ 302.878865][ T32] INFO: task syz.0.533:8074 blocked for more than 143 seconds. [ 302.891231][ T32] Not tainted syzkaller #0 [ 302.891249][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.891259][ T32] task:syz.0.533 state:D stack:28712 pid:8074 tgid:8063 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 302.891326][ T32] Call Trace: [ 302.891334][ T32] [ 302.891349][ T32] __schedule+0x17dd/0x5830 [ 302.891400][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 302.891432][ T32] ? __pfx___schedule+0x10/0x10 [ 302.891465][ T32] ? schedule+0x90/0x2b0 [ 302.891493][ T32] schedule+0x164/0x2b0 [ 302.891519][ T32] schedule_preempt_disabled+0x13/0x30 [ 302.891542][ T32] __mutex_lock+0x7c4/0x15a0 [ 302.891573][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 302.891604][ T32] ? dev_ioctl+0x7a4/0x1150 [ 302.891629][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 302.891655][ T32] ? apparmor_capable+0x126/0x170 [ 302.891695][ T32] ? dev_load+0x21/0x1f0 [ 302.891718][ T32] dev_ioctl+0x7a4/0x1150 [ 302.891745][ T32] sock_do_ioctl+0x23e/0x320 [ 302.891776][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 302.891801][ T32] ? do_futex+0x3e7/0x4e0 [ 302.891842][ T32] sock_ioctl+0x57a/0x7e0 [ 302.891868][ T32] ? __fget_files+0x2a/0x420 [ 302.891895][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 302.891920][ T32] ? __fget_files+0x2a/0x420 [ 302.891946][ T32] ? __fget_files+0x2a/0x420 [ 302.891975][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 302.892005][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 302.892031][ T32] __se_sys_ioctl+0xfc/0x170 [ 302.892066][ T32] do_syscall_64+0x166/0x520 [ 302.892091][ T32] ? trace_irq_disable+0x3b/0x140 [ 302.892128][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.892151][ T32] ? clear_bhb_loop+0x70/0xc0 [ 302.892177][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.892199][ T32] RIP: 0033:0x7f8d8539fb19 [ 302.892218][ T32] RSP: 002b:00007f8d835f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.892240][ T32] RAX: ffffffffffffffda RBX: 00007f8d85626180 RCX: 00007f8d8539fb19 [ 302.892256][ T32] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000007 [ 302.892270][ T32] RBP: 00007f8d85437b70 R08: 0000000000000000 R09: 0000000000000000 [ 302.892284][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.892298][ T32] R13: 00007f8d85626218 R14: 00007f8d85626180 R15: 00007ffc99a7a178 [ 302.892335][ T32] [ 302.892346][ T32] [ 302.892346][ T32] Showing all locks held in the system: [ 302.892356][ T32] locks held by kthreadd/2: 1, last CPU#0: [ 302.892370][ T32] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.892431][ T32] locks held by kworker/0:1/10: 4, last CPU#0: [ 302.892445][ T32] #0: ffff88807ab26948 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.892522][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.892601][ T32] #2: ffff888034d71480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 302.892655][ T32] #3: ffff888022f78330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 302.892709][ T32] locks held by kworker/u8:0/12: 3, last CPU#1: [ 302.892724][ T32] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.892784][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.892844][ T32] #2: ffff888065e20800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 302.892901][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 302.892915][ T32] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.892973][ T32] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.893033][ T32] #2: ffff888054a80800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 302.893091][ T32] locks held by kworker/1:0/24: 3, last CPU#1: [ 302.893114][ T32] #0: ffff888036277148 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.893179][ T32] #1: ffffc900001e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.893265][ T32] #2: ffff88803468aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 302.893318][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 302.893332][ T32] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 302.893393][ T32] locks held by kworker/u8:2/39: 3, last CPU#1: [ 302.893408][ T32] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.893465][ T32] #1: ffffc90000af7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.893524][ T32] #2: ffff8880673c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 302.893580][ T32] locks held by kworker/u8:3/48: 4, last CPU#1: [ 302.893594][ T32] #0: ffff88807b850148 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.893658][ T32] #1: ffffc90000b87c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.893718][ T32] #2: ffff88807bcc9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 302.893770][ T32] #3: ffff888034688d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 302.893820][ T32] locks held by kworker/u9:0/54: 5, on CPU#1: [ 302.893834][ T32] #0: ffff88807bae4948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.893893][ T32] #1: ffffc90000bf7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.893954][ T32] #2: ffff88807e800ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 302.894010][ T32] #3: ffff88807e8000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 302.894059][ T32] #4: ffffffff916081c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 302.894127][ T32] locks held by kworker/R-ipv6_/62: 3, on CPU#1: [ 302.894142][ T32] #0: ffff88801f301948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.894202][ T32] #1: ffffc9000203fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.894262][ T32] #2: ffffffff9148c420 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 302.894318][ T32] locks held by kworker/u8:4/63: 3, last CPU#1: [ 302.894333][ T32] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.894392][ T32] #1: ffffc9000204fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.894454][ T32] #2: ffff88802cd36258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 302.894514][ T32] locks held by kworker/u8:5/64: 4, last CPU#1: [ 302.894528][ T32] #0: ffff888034133148 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.894591][ T32] #1: ffffc9000205fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.894650][ T32] #2: ffff88807e5c9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 302.894702][ T32] #3: ffff888022f7bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 302.894756][ T32] locks held by kworker/u8:6/149: 4, on CPU#0: [ 302.894770][ T32] #0: ffff8880324e3148 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.894833][ T32] #1: ffffc90002e87c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.894893][ T32] #2: ffff888034d71480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 302.894945][ T32] #3: ffff888022f78330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 302.894995][ T32] locks held by kworker/u8:7/156: 4, on CPU#0: [ 302.895009][ T32] #0: ffff88807b853148 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.895073][ T32] #1: ffffc90002ec7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.895140][ T32] #2: ffff888078071480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 302.895191][ T32] #3: ffff88803468aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 302.895243][ T32] locks held by kworker/u8:8/165: 3, last CPU#1: [ 302.895257][ T32] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.895316][ T32] #1: ffffc90002f47c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.895375][ T32] #2: ffff888054c30800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 302.895430][ T32] locks held by kworker/0:2/196: 3, on CPU#0: [ 302.895444][ T32] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.895504][ T32] #1: ffffc90002fe7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.895566][ T32] #2: ffffffff917f4220 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 302.895621][ T32] locks held by kworker/u8:9/1209: 3, last CPU#1: [ 302.895635][ T32] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.895694][ T32] #1: ffffc900051efc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.895753][ T32] #2: ffff8880673d0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 302.895810][ T32] locks held by kworker/0:3/2249: 4, last CPU#0: [ 302.895824][ T32] #0: ffff888067af5948 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.895887][ T32] #1: ffffc9000680fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.895963][ T32] #2: ffff88807cf65480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 302.896015][ T32] #3: ffff88803468c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 302.896078][ T32] locks held by kworker/R-bat_e/3230: 2, last CPU#1: [ 302.896093][ T32] #0: ffff888032d63948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.896168][ T32] #1: ffffc9000d9c7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.896230][ T32] locks held by kworker/u9:1/4952: 7, on CPU#0: [ 302.896244][ T32] #0: ffff88807f737148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.896304][ T32] #1: ffffc9000f697c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.896372][ T32] #2: ffff88807e80cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 302.896428][ T32] #3: ffff88807e80c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 302.896479][ T32] #4: ffffffff916081c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 302.896539][ T32] #5: ffff888036b84af8 (_T->lock#5){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x630 [ 302.896596][ T32] #6: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 302.896646][ T32] locks held by klogd/4990: 1, last CPU#0: [ 302.896660][ T32] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.896714][ T32] locks held by udevd/5001: 3, last CPU#0: [ 302.896729][ T32] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 302.896786][ T32] #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.896840][ T32] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 302.896896][ T32] locks held by dhcpcd/5295: 1, last CPU#0: [ 302.896910][ T32] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.896963][ T32] locks held by dhcpcd/5296: 4, last CPU#0: [ 302.896977][ T32] #0: ffffffff9003a4f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 302.897034][ T32] #1: ffff88807b122800 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 [ 302.897084][ T32] #2: ffff88813ff71bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 [ 302.897148][ T32] #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.897203][ T32] locks held by crond/5373: 1, last CPU#0: [ 302.897218][ T32] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.897274][ T32] locks held by getty/5390: 2, on CPU#0: [ 302.897288][ T32] #0: ffff88803678a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 302.897345][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 302.897408][ T32] locks held by syz-executor/5621: 2, last CPU#0: [ 302.897423][ T32] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.897478][ T32] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 302.897536][ T32] locks held by syz-executor/5632: 3, last CPU#1: [ 302.897551][ T32] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 302.897608][ T32] #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.897660][ T32] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 302.897724][ T32] locks held by syz-executor/5633: 2, last CPU#1: [ 302.897739][ T32] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 302.897798][ T32] #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.897854][ T32] locks held by syz-executor/5634: 4, last CPU#0: [ 302.897869][ T32] #0: ffff888029ff6460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 302.897932][ T32] #1: ffff88807696f650 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 302.898005][ T32] #2: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 302.898062][ T32] #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.898125][ T32] locks held by syz-executor/5645: 3, last CPU#0: [ 302.898140][ T32] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 302.898195][ T32] #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.898248][ T32] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 302.898309][ T32] locks held by kworker/1:3/5758: 2, last CPU#1: [ 302.898323][ T32] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.898384][ T32] #1: ffffc900046c7c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.898442][ T32] locks held by kworker/1:4/5759: 3, last CPU#1: [ 302.898456][ T32] #0: ffff888067af5948 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.898520][ T32] #1: ffffc900046d7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.898597][ T32] #2: ffff88807cf65480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 302.898651][ T32] locks held by kworker/1:5/5766: 5, last CPU#1: [ 302.898666][ T32] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.898724][ T32] #1: ffffc90004747c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.898783][ T32] #2: ffffffff917f4220 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x31/0x120 [ 302.898834][ T32] #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.911485][ T32] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 302.911558][ T32] locks held by kworker/1:8/5781: 3, last CPU#1: [ 302.911573][ T32] #0: ffff888055dc8d48 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.911647][ T32] #1: ffffc90004867c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.911723][ T32] #2: ffff888076a8d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 302.911777][ T32] locks held by kworker/0:4/5828: 6, last CPU#0: [ 302.911792][ T32] #0: ffff888067ad2948 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.911855][ T32] #1: ffffc90004ae7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.911930][ T32] #2: ffff88807bcc9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 302.911983][ T32] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 302.912042][ T32] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xbf0 [ 302.912097][ T32] #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 302.912166][ T32] locks held by kworker/0:5/5851: 2, last CPU#0: [ 302.912189][ T32] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.912250][ T32] #1: ffffc90004bbfc40 ((work_completion)(&(&gc->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.912310][ T32] locks held by kworker/0:6/5855: 4, last CPU#0: [ 302.912324][ T32] #0: ffff888036097948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.912388][ T32] #1: ffffc90004bffc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.912465][ T32] #2: ffff88807bc49480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 302.912518][ T32] #3: ffff88803468e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 302.912571][ T32] locks held by kworker/0:7/7720: 2, last CPU#0: [ 302.912585][ T32] #0: ffff88807ff69948 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.912648][ T32] #1: ffffc900036c7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.912726][ T32] locks held by kworker/0:8/7723: 4, on CPU#0: [ 302.912741][ T32] #0: ffff888036277148 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.912805][ T32] #1: ffffc900036a7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.912882][ T32] #2: ffff888078071480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 302.912935][ T32] #3: ffff88803468aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 302.912988][ T32] locks held by syz.1.532/8076: 2, last CPU#1: [ 302.913002][ T32] #0: ffffffff9148c420 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 302.913051][ T32] #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 302.913113][ T32] locks held by syz.0.533/8063: 1, on CPU#1: [ 302.913128][ T32] #0: ffffffff9148c420 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 302.913180][ T32] locks held by syz.0.533/8074: 1, on CPU#0: [ 302.913195][ T32] #0: ffffffff9148c420 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 302.913243][ T32] locks held by kworker/u8:10/8092: 2, last CPU#1: [ 302.913258][ T32] #0: ffff888034132148 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.913321][ T32] #1: ffffc9000f6b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.913382][ T32] locks held by kworker/u8:11/8093: 4, last CPU#1: [ 302.913396][ T32] #0: ffff88807b852948 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.913469][ T32] #1: ffffc9000d127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 302.913539][ T32] #2: ffff88807fa5d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 302.913591][ T32] #3: ffff88803468a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 302.913644][ T32] [ 302.913650][ T32] ============================================= [ 302.913650][ T32] [ 302.913660][ T32] NMI backtrace for cpu 1 [ 302.913675][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 302.913697][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 302.913710][ T32] Call Trace: [ 302.913718][ T32] [ 302.913728][ T32] dump_stack_lvl+0xe8/0x150 [ 302.913763][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 302.913786][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 302.913813][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 302.913834][ T32] sys_info+0x135/0x170 [ 302.913860][ T32] watchdog+0x1073/0x10f0 [ 302.913896][ T32] ? watchdog+0x209/0x10f0 [ 302.913931][ T32] kthread+0x38b/0x480 [ 302.913955][ T32] ? __pfx_watchdog+0x10/0x10 [ 302.913980][ T32] ? __pfx_kthread+0x10/0x10 [ 302.914006][ T32] ret_from_fork+0x514/0xb70 [ 302.914033][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 302.914057][ T32] ? __switch_to+0xc78/0x1410 [ 302.914092][ T32] ? __pfx_kthread+0x10/0x10 [ 302.914127][ T32] ret_from_fork_asm+0x1a/0x30 [ 302.914167][ T32] [ 302.914175][ T32] Sending NMI from CPU 1 to CPUs 0: [ 302.914205][ C0] NMI backtrace for cpu 0 [ 302.914221][ C0] CPU: 0 UID: 0 PID: 5828 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 302.914242][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 302.914254][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 302.914282][ C0] RIP: 0010:kasan_check_range+0x1d1/0x2c0 [ 302.914311][ C0] Code: 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c 41 5d 41 5e 41 5f 5d 1a 3c c6 09 cc 45 84 ff 0f 85 a1 00 00 00 41 f7 c7 00 ff 00 00 [ 302.914327][ C0] RSP: 0018:ffffc90000006fa8 EFLAGS: 00000256 [ 302.914342][ C0] RAX: ffffffff89c4e101 RBX: ffff88803d5fea00 RCX: ffffffff89c4e137 [ 302.914357][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88803d5feae4 [ 302.914369][ C0] RBP: ffffc900000070c0 R08: ffff88803d5feae7 R09: 1ffff11007abfd5c [ 302.914382][ C0] R10: dffffc0000000000 R11: ffffed1007abfd5d R12: ffff88803d5feae4 [ 302.914396][ C0] R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000 [ 302.914408][ C0] FS: 0000000000000000(0000) GS:ffff88812361c000(0000) knlGS:0000000000000000 [ 302.914423][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.914436][ C0] CR2: 00007fc386600000 CR3: 0000000076d62000 CR4: 00000000003526f0 [ 302.914454][ C0] Call Trace: [ 302.914460][ C0] [ 302.914467][ C0] sk_skb_reason_drop+0x37/0x110 [ 302.914488][ C0] ip6_mc_input+0x878/0xc80 [ 302.914517][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 302.914546][ C0] ? ip6_rcv_finish+0x265/0x280 [ 302.914572][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 302.914596][ C0] ip_sabotage_in+0x1e1/0x270 [ 302.914624][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 302.914643][ C0] nf_hook_slow+0xc5/0x220 [ 302.914665][ C0] NF_HOOK+0x21f/0x3c0 [ 302.914690][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 302.914715][ C0] ? NF_HOOK+0x9e/0x3c0 [ 302.914739][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 302.914763][ C0] ? ip6_rcv_core+0xa1/0x1870 [ 302.914789][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 302.914817][ C0] ? netif_receive_skb+0x102/0xbf0 [ 302.914841][ C0] netif_receive_skb+0x278/0xbf0 [ 302.914864][ C0] ? lock_acquire+0x115/0x350 [ 302.914888][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 302.914913][ C0] ? br_netif_receive_skb+0x126/0x190 [ 302.914934][ C0] NF_HOOK+0xa4/0x3a0 [ 302.914950][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 302.914969][ C0] ? NF_HOOK+0xfa/0x3a0 [ 302.914985][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 302.915002][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 302.915029][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 302.915048][ C0] ? br_handle_vlan+0x60/0x580 [ 302.915072][ C0] ? br_pass_frame_up+0x277/0x420 [ 302.915092][ C0] br_handle_frame_finish+0x1219/0x1ae0 [ 302.915117][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 302.915136][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 302.915160][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 302.915182][ C0] ? nf_hook_slow+0x176/0x220 [ 302.915201][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 302.915220][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 302.915239][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 302.915259][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 302.915279][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 302.915298][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 302.915319][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 302.915340][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 302.915363][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 302.915384][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 302.915404][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 302.915427][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 302.915448][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 302.915470][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 302.915489][ C0] br_handle_frame+0x1329/0x1600 [ 302.915513][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 302.915533][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 302.915552][ C0] ? __lock_acquire+0x747/0x2de0 [ 302.915576][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 302.915593][ C0] __netif_receive_skb_core+0x989/0x30f0 [ 302.915634][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 302.915671][ C0] ? process_backlog+0x3de/0x18b0 [ 302.915696][ C0] ? process_backlog+0x3de/0x18b0 [ 302.915723][ C0] process_backlog+0x727/0x18b0 [ 302.915750][ C0] ? call_timer_fn+0xd5/0x5f0 [ 302.915767][ C0] ? process_backlog+0x3de/0x18b0 [ 302.915798][ C0] __napi_poll+0xaa/0x330 [ 302.915824][ C0] net_rx_action+0x61d/0xf50 [ 302.915856][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 302.915881][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 302.915906][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 302.915936][ C0] handle_softirqs+0x265/0x8d0 [ 302.915964][ C0] ? kernel_fpu_end+0x62/0x80 [ 302.915989][ C0] do_softirq+0x77/0xd0 [ 302.916011][ C0] [ 302.916017][ C0] [ 302.916024][ C0] __local_bh_enable_ip+0x100/0x140 [ 302.916048][ C0] blake2s_compress+0xfa/0x1c00 [ 302.916087][ C0] ? kernel_fpu_begin_mask+0x2bb/0x380 [ 302.916112][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 302.916139][ C0] ? kernel_fpu_end+0x62/0x80 [ 302.916165][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 302.916188][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 302.916208][ C0] ? kernel_fpu_end+0x62/0x80 [ 302.916231][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 302.916254][ C0] ? blake2s_compress+0x1b4d/0x1c00 [ 302.916284][ C0] blake2s_update+0x140/0x450 [ 302.916312][ C0] hmac+0x2d1/0x3b0 [ 302.916330][ C0] ? __pfx_hmac+0x10/0x10 [ 302.916352][ C0] ? __lock_acquire+0x747/0x2de0 [ 302.916377][ C0] ? __lock_acquire+0x747/0x2de0 [ 302.916400][ C0] ? __asan_memset+0x22/0x50 [ 302.916423][ C0] message_ephemeral+0x255/0x310 [ 302.916442][ C0] ? __pfx_message_ephemeral+0x10/0x10 [ 302.916459][ C0] ? __asan_memset+0x22/0x50 [ 302.916492][ C0] ? down_read+0x2b9/0x320 [ 302.916516][ C0] wg_noise_handshake_consume_initiation+0x217/0x9b0 [ 302.916540][ C0] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 302.916564][ C0] ? __asan_memset+0x22/0x50 [ 302.916584][ C0] ? blake2s_final+0x145/0x270 [ 302.916618][ C0] ? compute_mac1+0x184/0x200 [ 302.916645][ C0] ? __pfx_compute_mac1+0x10/0x10 [ 302.916679][ C0] ? __crypto_memneq+0x42/0x470 [ 302.916707][ C0] ? wg_packet_handshake_receive_worker+0x2e6/0x10b0 [ 302.916732][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 302.916757][ C0] wg_packet_handshake_receive_worker+0x674/0x10b0 [ 302.916781][ C0] ? look_up_lock_class+0x57/0x110 [ 302.916808][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 302.916835][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 302.916858][ C0] ? lock_acquire+0x115/0x350 [ 302.916883][ C0] ? rcu_is_watching+0x16/0xb0 [ 302.916910][ C0] ? process_scheduled_works+0x97a/0x1630 [ 302.916935][ C0] process_scheduled_works+0xc3d/0x1630 [ 302.916975][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 302.917003][ C0] ? assign_work+0x3cf/0x5d0 [ 302.917030][ C0] worker_thread+0xa47/0xfb0 [ 302.917062][ C0] ? __kthread_parkme+0x71/0x1f0 [ 302.917084][ C0] kthread+0x38b/0x480 [ 302.917104][ C0] ? __pfx_worker_thread+0x10/0x10 [ 302.917129][ C0] ? __pfx_kthread+0x10/0x10 [ 302.917149][ C0] ret_from_fork+0x514/0xb70 [ 302.917170][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 302.917190][ C0] ? __switch_to+0xc78/0x1410 [ 302.917217][ C0] ? __pfx_kthread+0x10/0x10 [ 302.917238][ C0] ret_from_fork_asm+0x1a/0x30 [ 302.917264][ C0] [ 302.918204][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 306.380702][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 306.389847][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 306.400205][ T32] Call Trace: [ 306.403512][ T32] [ 306.406468][ T32] vpanic+0x26f/0x710 [ 306.410485][ T32] panic+0xc5/0xd0 [ 306.414242][ T32] ? __pfx_panic+0x10/0x10 [ 306.418684][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 306.423753][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 306.429944][ T32] watchdog+0x10e7/0x10f0 [ 306.434321][ T32] ? watchdog+0x209/0x10f0 [ 306.438777][ T32] kthread+0x38b/0x480 [ 306.442889][ T32] ? __pfx_watchdog+0x10/0x10 [ 306.447682][ T32] ? __pfx_kthread+0x10/0x10 [ 306.452310][ T32] ret_from_fork+0x514/0xb70 [ 306.456952][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 306.462184][ T32] ? __switch_to+0xc78/0x1410 [ 306.466955][ T32] ? __pfx_kthread+0x10/0x10 [ 306.471574][ T32] ret_from_fork_asm+0x1a/0x30 [ 306.476396][ T32] [ 306.479574][ T32] Kernel Offset: disabled [ 306.483901][ T32] Rebooting in 86400 seconds..