last executing test programs: 13m58.137160322s ago: executing program 32 (id=3855): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000880)=0x800001, 0x4) bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x15, 0x400, 0xffffffffffffffff, 0xb4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0xe, 0x5, 0x200, 0x26, @mcast2, @mcast2, 0x7800, 0x8000, 0x3, 0x1}}) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000380)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x6, 0x16, 0xfffffffe, 0x1}, 0x3c) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000003c0)={@broadcast, @private=0xa010100, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000400)=0xe, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000030700030ba872fbd74786056b85165a58d32bcb19000803000000005f5f302e5f00695d3bdf99ebc5666aba17713a744f39599a245ddbd60f36d5c804d9f83edf818110e059fef555d1c0df35e70b6003f872d358b44a79e1206fb5b9205c2f0b0053e05b1d51c798fed3cfea2a4f8f40ff351f1c6ca671825a7d8836dca0c4000000000000000000"], &(0x7f0000000200)=""/76, 0x2b, 0x4c, 0x1, 0xfffffff7, 0x10000}, 0x28) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x1, 0x7, 0x4, 0x10200, r1, 0x401, '\x00', r2, r10, 0x3, 0x4, 0x2, 0x0, @void, @value, @value=r11}, 0x50) bind$pptp(r11, &(0x7f0000000500)={0x18, 0x2, {0x2, @private=0xa010100}}, 0x1e) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaff20000000000900450000280000000000069078000000000000000000044e228b69057ac9b762f765759823cdf28bbb9ea31f8758c4dc363dd4c05cb661b4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r13, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x4800) 6m53.335328022s ago: executing program 4 (id=6131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000002000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 6m52.728145655s ago: executing program 4 (id=6132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf250220000000000000000000000800017fffffff0008001b"], 0x2c}}, 0x0) 6m52.682650561s ago: executing program 3 (id=6135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x8004) 6m52.274462824s ago: executing program 3 (id=6137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a80), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006b00)={0x0, 0x0, &(0x7f0000006b40)={&(0x7f0000006bc0)=ANY=[@ANYBLOB="540000ff", @ANYRES16=r1, @ANYBLOB="010001007000fd9fe09c7743c59f15000300", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 6m52.260448071s ago: executing program 4 (id=6138): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0xa}, 0x8) (async) close(0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000040), 0x11000) (async) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="85", 0x1}], 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000001ec0)=ANY=[@ANYRES32], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="2e000000010002", 0x7) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, r6, 0x11, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfff7}, @NL80211_ATTR_PMKID={0x14, 0x55, "1eeeb18566d6d9650000e3ff00"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "03335656f03c30b89a719e8088264220"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x4004008) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x200c0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005"], 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 6m51.849219174s ago: executing program 3 (id=6140): syz_emit_ethernet(0x22, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @empty=0x2000000, @local}}}}}, 0x0) 6m51.651250398s ago: executing program 3 (id=6141): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff0a03076804268c989e14f088", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x23, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x4d, &(0x7f00000000c0)=""/145, &(0x7f0000000180)=0x91) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41814}, 0x0) 6m51.050633797s ago: executing program 4 (id=6146): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x4, 0x8, @vifc_lcl_addr=@loopback, @empty}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 6m50.987188772s ago: executing program 3 (id=6147): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x8004) 6m50.819306484s ago: executing program 3 (id=6148): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x58, 0x0, &(0x7f00000005c0)="c1bcb080cd21d308098ee68888a8", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000380)={'macsec0\x00', 0x1000}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="32000300070000002000000000", 0xd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x113100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000005640)={'syzkaller0\x00', 0x1}) r4 = socket(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000005680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000005700)={&(0x7f0000005740)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000005780)={'syzkaller0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000057c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000005800)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000005840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000005880)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000005940)={&(0x7f0000005980)=@xdp={0x2c, 0x0, r5, 0x109}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000005a40)='k', 0x1}], 0x1}, 0x20000885) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="beff15bdbea5aa30cd838133023cf37f7a87ab4c2f6e06191671684a47c1f05bf4ec11eac2b72ddd28b2df402136d5fde7e1c3ec25ab8464ed9fd05a63ae0d33d859665b150623aa84cc16b921eb490f5b0f7b2f513eefeae30d4f9729ebe58d2094ffc7429d7064e394ec85ddda14689062585704a2e69f8b4c951acfd2c29dd5714054b2b5e5720f54c813bfcbc02305b8cba6ae04e29fcec634375709a672c70da1b59cdf6989c97a1c4232b818ee94caa53c9e9189f59b539942df7307b97cff297e70a342775867ed", 0xcb}, {&(0x7f00000001c0)="b504d968aa0a1782e2138d4fbf4f4e68232ab116532647170d3e3058352cf210d2ccdc763b180ade6ee6242e88f5b24bfbf7a5f5e4979fb614f483bad12c6477a5d336f186c172a24f437d504709279174f095ed4beeb2f38f9d3e3633d6e9b07379e821a09ede973c6915042bbab4fd4085f012", 0x74}], 0x2, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x58}, 0xc00) 6m46.939608358s ago: executing program 5 (id=6150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x40000715, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010600000000000000002a00000008000200", @ANYRES32=r3, @ANYBLOB='\b\x00/\x00\x00\b\x00\x00'], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x415, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) 6m39.824060362s ago: executing program 4 (id=6153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000006c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000800)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000840)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) r5 = accept4$inet(r3, 0x0, 0x0, 0x80000) sendmsg$inet(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="a88c958a97019a", 0x7}], 0x1}, 0x80) recvmmsg$unix(r2, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) 6m38.588775403s ago: executing program 5 (id=6154): syz_emit_ethernet(0x4c, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x12, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x12, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "fe80"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x70bd26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040010) 6m33.696590877s ago: executing program 33 (id=6148): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x58, 0x0, &(0x7f00000005c0)="c1bcb080cd21d308098ee68888a8", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000380)={'macsec0\x00', 0x1000}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="32000300070000002000000000", 0xd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x113100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000005640)={'syzkaller0\x00', 0x1}) r4 = socket(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000005680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000005700)={&(0x7f0000005740)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000005780)={'syzkaller0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000057c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000005800)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000005840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000005880)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000005940)={&(0x7f0000005980)=@xdp={0x2c, 0x0, r5, 0x109}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000005a40)='k', 0x1}], 0x1}, 0x20000885) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="beff15bdbea5aa30cd838133023cf37f7a87ab4c2f6e06191671684a47c1f05bf4ec11eac2b72ddd28b2df402136d5fde7e1c3ec25ab8464ed9fd05a63ae0d33d859665b150623aa84cc16b921eb490f5b0f7b2f513eefeae30d4f9729ebe58d2094ffc7429d7064e394ec85ddda14689062585704a2e69f8b4c951acfd2c29dd5714054b2b5e5720f54c813bfcbc02305b8cba6ae04e29fcec634375709a672c70da1b59cdf6989c97a1c4232b818ee94caa53c9e9189f59b539942df7307b97cff297e70a342775867ed", 0xcb}, {&(0x7f00000001c0)="b504d968aa0a1782e2138d4fbf4f4e68232ab116532647170d3e3058352cf210d2ccdc763b180ade6ee6242e88f5b24bfbf7a5f5e4979fb614f483bad12c6477a5d336f186c172a24f437d504709279174f095ed4beeb2f38f9d3e3633d6e9b07379e821a09ede973c6915042bbab4fd4085f012", 0x74}], 0x2, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x58}, 0xc00) 6m31.518940712s ago: executing program 5 (id=6158): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe880000000009000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff050000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a00000008000000000000001c0017000000000000000000ffffffff0000000000000000040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) 6m31.463338987s ago: executing program 4 (id=6160): ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x24004814) 6m30.39339386s ago: executing program 5 (id=6162): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000001100006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868e6cd1678f74e30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b506971431bb6b1fb46b2aa425833f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa209000000000000003ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000002c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002c40)={@cgroup=r1, r1, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002c80)={0x3, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002cc0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000002d00)=r3, 0x4) r4 = socket(0x2b, 0x3, 0xa71) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1c00000}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc4) syz_emit_ethernet(0x34e, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600027628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m21.693417287s ago: executing program 5 (id=6169): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfff], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x89f8c55f46292553}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xfeee, 0x3, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x804) 6m16.424135268s ago: executing program 5 (id=6172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780080013000000000008001240000000000500050000000000050004000000000011000300686173683a69702c6d61727b00000000"], 0x60}}, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000300)={0x10, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}}}, 0x108) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000500)={r4, 0x5}, 0x8) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000540)=0x7, 0x4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="f01b77a7203f38ca00000000000000360e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000a00)={0x0, 0x2, 0x6, 0xd24}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1, 0x4, 0x4, 0x2000100, 0x0, r7, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000061180000000000007a0af8ff0000000018110000", @ANYRES32=r7, @ANYBLOB="40000000000000000018110000010000000000006163faeac58f9373b4099717d0c34eb54bba30d14335bd44e3867f432353ce6cc8", @ANYRES32=r9, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r10, 0x0, 0xe, 0x0, &(0x7f0000000880)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_mreqsrc(r11, 0x0, 0x26, &(0x7f0000000600)={@remote, @empty, @rand_addr=0x64010102}, 0xc) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) read(r12, &(0x7f00000008c0)=""/239, 0xef) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) (async) read(r1, 0x0, 0x0) (async) r13 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r13, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="04000000680b7ff161b30700"], 0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r13, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000bc0)={'gre0\x00', r14, 0x40, 0x700, 0x8f7b, 0x1, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @local}}}}) 6m15.388251511s ago: executing program 34 (id=6160): ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x24004814) 6m0.780799282s ago: executing program 35 (id=6172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780080013000000000008001240000000000500050000000000050004000000000011000300686173683a69702c6d61727b00000000"], 0x60}}, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000300)={0x10, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}}}, 0x108) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000500)={r4, 0x5}, 0x8) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000540)=0x7, 0x4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="f01b77a7203f38ca00000000000000360e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000a00)={0x0, 0x2, 0x6, 0xd24}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1, 0x4, 0x4, 0x2000100, 0x0, r7, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000061180000000000007a0af8ff0000000018110000", @ANYRES32=r7, @ANYBLOB="40000000000000000018110000010000000000006163faeac58f9373b4099717d0c34eb54bba30d14335bd44e3867f432353ce6cc8", @ANYRES32=r9, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r10, 0x0, 0xe, 0x0, &(0x7f0000000880)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_mreqsrc(r11, 0x0, 0x26, &(0x7f0000000600)={@remote, @empty, @rand_addr=0x64010102}, 0xc) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) read(r12, &(0x7f00000008c0)=""/239, 0xef) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) (async) read(r1, 0x0, 0x0) (async) r13 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r13, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="04000000680b7ff161b30700"], 0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r13, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000bc0)={'gre0\x00', r14, 0x40, 0x700, 0x8f7b, 0x1, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x68, 0x0, 0x7, 0x4, 0x0, @empty, @local}}}}) 5m44.88623492s ago: executing program 2 (id=6201): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000001480), 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x4000802) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xb80b, 0x0, &(0x7f0000001780)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) 5m44.284594085s ago: executing program 2 (id=6203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="12000000430001"], 0x1c}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x33, 0x5, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x1}, {0x4, 0x4}, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='devices.list\x00', 0x26e1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@phonet={0x23, 0x8, 0x4, 0x2}, 0x80, 0x0}}], 0x4, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000680)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) getsockopt$inet6_buf(r6, 0x29, 0x10000000000030, &(0x7f0000000740)=""/144, &(0x7f0000000800)=0x90) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x5, @vifc_lcl_addr=@rand_addr=0x64010101, @loopback}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000000c0)=0x9, 0x4) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000140)={@broadcast, @rand_addr=0x64010101}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e000100000000000026b82bd90000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 5m43.311500975s ago: executing program 2 (id=6204): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xffffffff}, 0x10) write(r0, &(0x7f0000000140)="240000001a005f0214f9f407000904001f00000000000000000200000800040011000000", 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5m43.083922334s ago: executing program 1 (id=6205): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x4000081) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x2000000000000000}, 0x24004814) 5m42.926476664s ago: executing program 2 (id=6206): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x1200, 0x0, @loopback}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r0, 0x0, 0x0) 5m42.621777537s ago: executing program 1 (id=6207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="000000000000800000000000000000000000000047059649083e00dfe9c3ef3d5eeff8fdfacdbbd9ecb4b2dd53f49047e33af622606df3759ebc42e461dadcb2903c5c923c138df0062005e8e2ed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000640)="cc4e9862b8fd0f8a9fd9a5d7d8b4c75e889e0f9e4594185388183a8fc967db6bc49625f518195f30468f2b267ce582a7439b44f04c88d72f92451bd594649328e69de3b80b4faf1bad8783d3f16350554d02b645e68a2f7e29f5d8832745fc1973f81068eb6caa8ab6c88186bf3acfe0b512aeba6dfd6d84bdc4311c6d1d41c547bc3e1ed7353371f35ab17daebd846d1217729504b6065e2bb4a3f7a159365a136cd117f4ff78de272cb6495aa22f", 0xaf}, {&(0x7f0000000700)="6eec3c025e064802cdf9dab2f2bbdfd3871460c37eac82b9226b575d9709f5f954f321c3b83681ad0894c697977bb3c64e56bacf54f3ae81716fb3265508f36176", 0x41}, {&(0x7f0000000880)="0187d3ec5a38294cedfe4d63e840a4cd62fbdd1428ac64e4ba17b54a6b50e7d3ae067813d6491bb20304ac9f0df29755ac4b1f3b952b5ec36dc6f46f015fcf34b1ba552535d94c573aba7da1d7e085d38bd0e731ede7c3946895a33e65677d4b9c271d67823a68401f151f3179c64cadfb5d50010fcf4987e9fcdd0b57c239657ed841fd4a416e50b87b7aa8d6a440fd0fbde620925e333b8c86fc3858b9cd44631a42492a29c7ca7ed8e485f7d764ac5f56a8122366d2f18b81d12e1def2ef7ced62544ca78458ef23bc7e13a41d0e8d2b4798ae40044f00c8c09d059d47ccd033c", 0xe2}, {&(0x7f0000000980)="6967272344376409b0d6dadc45102db5258a3e5c1e0f16b0186418cc3db7291b7735efa366ad93b9b6aacd81f91a26170b1727d13e5953a7664f47c35e869395fcba15864812654cb2b173614bad041e138ec46f448624fd097a72a6d5b96a5bfe51705959040f8092a58826ea70baeab30d4040391cdff61aa98d1aa494b7e2df3d234434e3", 0x86}, {&(0x7f0000000a40)="658dd63c00c33e5aef309ea7b42ecfbe5a640184758a90d83724f2ad9202", 0x1e}, {&(0x7f0000000a80)="9895c4676c23c626f1f8fc16bf99232d182da10301f527c3c7647224dff163097c6010a1c51d1c8d1820cbdb9acade62942a894c80964baccf0bfe79e197095bd982849fa6cb89b3156fa74d769ca83e3d6d8f79aaa6521e85b6534847ef3009b03ff69792143526eb94365baaf90e67dd3808f9b425567ec0986f8be02ea417dcf7f46a6d737619647be5a71c7ff6b808d4cafce720f1be0ae3b012e168072acdf34517a9ffed5a521e7b4167586e7569aae2f9b599e4ab2540230ad57ab7d8cf6655572bda0f25a6784cba7b1f1075a70ff9d6caf214fffa3f8e9d", 0xdc}, {&(0x7f0000000b80)="e80b88f8b9bd6347c3f83bfa7e4e8d87f114934f50d70c5a0cf2344a47c121661407b020bf0ab6ef9ca4ebe61d9462d0a58d53ebea9c45701d61ab759dee9f1ef6b8e915d3f0e8b9bb2b5c07b08a476eafa6a37d772400855cac2e3ffc5461178b5ef17b8a5c50dfd395cbe80ad1a4d06edab1c382e9e83ada6b91e950241adda54efb53af0c09da8eaa0cb28ca001bd756cca813fc1bcdb00a5", 0x9a}, {&(0x7f0000000c40)="52825ebac734e01a1d1bf7480a426a9ea8d05c9ce6b31c3834e5b8040ca043c7e15d4fdf8abd4d54e0e864e2cb96ec806bb5e5d52d0ad5dc9e1266147e9656e04b182f4952aebb10aedb232307444f39bbeddfd0a50d1d7e72a210fec80c26df7431c9def7a02a20eed60a3cd13998e2456b6fe1ab6a0f8c4eba1d5c4a404e60cb013efb525f41546eea9a1e7c36bb6f44cb9cd9bbdd6a8b1a09075ff5fdeff69e260758cb78c3a5d54f52b15e9bc855930848ac115d7dccb6d026", 0xbb}, {&(0x7f0000000d00)="3f4450a8acfb86e3a440b67eefb6fb54e26ecc12bb7c8de267051a348704c5435deb0b418169049f192fa6b00f2bd268a8a9ea4747f6d3f0fe55a533cda1f21c31927d040b3ad57d6c475ddd49f421719f148630e4f2e5508061b068c7c753", 0x5f}, {&(0x7f0000000d80)="35b12b361e6b52c304bd98ce73b3eeba64899c8d4c1937f8fb3207ea981ede34709cbe951423a168f0d43951a9b4f201da5a7f0c815ba86f35045ae4bb76cf30675f05bbc799778af1e8bc74", 0x4c}], 0xa, &(0x7f0000000ec0)=[@dstopts={{0x88, 0x29, 0x37, {0x1d, 0xe, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x8, 0x3, [0x4, 0xffffffff, 0x2, 0xbad9, 0x0, 0x9, 0x7fffffff, 0x7, 0xfffffffffffffffc, 0x4]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x81, 0xb, [0x100]}}, @ra={0x5, 0x2, 0x7ff}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3c, 0x2, '\x00', [@pad1, @ra={0x5, 0x2, 0x3ff}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xb8}}], 0x1, 0x4000080) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x6, &(0x7f0000001080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f00000010c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8}, 0x94) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0x3, 0xf, {{0x2c, 0x4, 0x3, 0x18, 0xb0, 0x65, 0x0, 0x6, 0x29, 0x0, @empty, @loopback, {[@rr={0x7, 0x17, 0x3c, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @private=0xa010102]}, @cipso={0x86, 0x3d, 0x3, [{0x6, 0xe, "a678d6fb943ca5f01d7f8eea"}, {0x5, 0xa, "6ca35b3df576a0c5"}, {0x5, 0xc, "526072684ae96337484f"}, {0x7, 0x2}, {0x2, 0x6, "a9cbab24"}, {0x0, 0xb, "81b06f22b99fb24615"}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x2f, 0x3, 0x0, [{@local}, {@local, 0x3}, {@local, 0x14}, {@private=0xa010100}, {@multicast1, 0x52}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010101, 0x2}]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@private1, @private1, @local, 0xa, 0x0, 0x6, 0x480, 0x80000001, 0x210042, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000080000000000000000018230000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000400000000d202000014000000b70300000000000a255996980cedb636df6e008500000083000000bf09000000000000550901000000000095", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m42.558749672s ago: executing program 2 (id=6208): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x1) listen(r1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f00000003c0)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bind$pptp(r8, &(0x7f0000000400)={0x18, 0x2, {0x1, @local}}, 0x1e) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f00000015c0)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000001600)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000001640), 0x4) listen(r9, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0x0) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 5m42.003053685s ago: executing program 1 (id=6209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x3404c816) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008101}, 0x200000c0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000089000000080003"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) ioctl(r1, 0x8b32, &(0x7f0000000e00)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000200007a00000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240)="ca", &(0x7f0000000280)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000300), &(0x7f0000000340)=""/6, 0x2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}]}}}]}, 0x48}}, 0x88890) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000480)={@null, 0x4, 'lo\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x700, 0x21, 0x3, 0x6, {{0x1f, 0x4, 0x3, 0x26, 0x7c, 0x66, 0x0, 0xc4, 0x2f, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x44, 0x83, 0x3, 0x1, [{@multicast2, 0xffff73fb}, {@remote, 0x2d75}, {@rand_addr=0x64010100, 0x81}, {@local, 0x7}, {@rand_addr=0x64010102, 0x7e18}, {@rand_addr=0x64010102, 0x4}, {@loopback, 0xb8e3}, {@private=0xa010102, 0x3093}]}, @timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x7fffffff}, {@multicast1, 0x8}, {@local, 0x9}]}, @ra={0x94, 0x4}, @noop]}}}}}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f40), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x94, r8, 0x2, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb64}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x2}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x5, &(0x7f0000000640)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xa}, @alu={0x7, 0x1, 0x0, 0xe, 0x3, 0x4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x9, 0x2, 0xb, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x95, &(0x7f00000006c0)=""/149, 0x41000, 0x58, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880)=[r2, r2], &(0x7f00000008c0)=[{0x5, 0x2, 0xb, 0x5}, {0x0, 0x2, 0xf, 0x7}, {0x0, 0x1, 0x10, 0x2}, {0x5, 0x2, 0x7, 0x4}, {0x0, 0x3, 0x5, 0x3}]}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @local}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)=@ipv4_getaddr={0x20, 0x16, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2, 0x1f, 0xc0, 0xff, r7}, [@IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000003c0)='t'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000100000000006110860000000000950000000000009e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r9, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000cc0)=0x20, 0x4) accept(r4, &(0x7f0000000bc0)=@x25={0x9, @remote}, &(0x7f0000000c40)=0x80) 5m41.570711717s ago: executing program 2 (id=6210): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'abc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001040)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001080)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000010c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x100, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "a76cb6c4bca217635b0def528c2f2fea1515769118b08997a744db4f087132a0", "4f590702c93ecd0ee92227a33b7b1d4e9d5c6df7ff09a6df6ad5687372fb453d0b3979e2f8cdbf86df252e7837791ab4", "6d2add6e37305822733738c5a9f72df1e3e438791b5794222a4f6887", {"3c608b2c7f9c7fb25eeaf9a5df74587e", "d9a154f5836a612d02f4299bfc03e6ae"}}}}}, 0xbe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x9a, 0x7, 0x1, 0x0, "51b84d7a357b27bcc04351e97fc4378bb777d92f5c938048ccf6c415212ecf0f0cbdece8ade6db259dc432f07ffab802888c208912f9284cbd5bde45b10249b31a718203c30fd45a9e6f8a485999b09a7424b3c007e6647557aed06e5a92bdacf5795e21affcc046874776350697cc58793e98714cf99f9659e6aac3306d80704ba69b54a812f036c38607427ae7803e8872b408d0f8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0xffff, @loopback}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000000000000900010073797a3000000000090002006f30303000000000080003400000000720000480060001000002000005000200110000000c000300080001000000001e54000000120a01010000000000000000020000000900010073797a3000000000090002006f303130000000000800034000000007200004800600fc000002000005000200110000000c0003"], 0x3204}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x15, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0xc2, 0x8, "ca6246399be06f88b5d905598c8d67864025a3f77a01b15ef00697eec42800b96f7148826ce05095c6133485a282457b0cee7429a34e06ea743778549caa31d457dfbef207c84196c3aacb2bbaa7fddff4e1dabe86f57aebff4e8f596db4a146258a791bc1cc631563edb67ce86ce8f99639a19baddb7752aed02915fa4668437f646bd2556494d52310f036f41c981e0cb83c0353aa747e76ca10699729cc2b17a0d8203c60d54eb6851c30e0365b624a81105c83f5386d7a2f9e98b8b0"}, @NFTA_OBJ_USERDATA={0xc, 0x8, "e5b78b68e1083d8c"}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m41.143198905s ago: executing program 1 (id=6211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r2, 0xc) (async) listen(r2, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000004c0)=0xfffffb6c, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000001c0)={r10, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000001c0)={r10, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000500)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x80) 5m39.804662499s ago: executing program 1 (id=6212): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x6, 0x8, &(0x7f00000015c0)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000001600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r3, 0x0, 0xe, 0x0, &(0x7f00000016c0)="b5e379a5389bcfd05ad9ca72d507", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x44}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x88}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8013}, 0x20008041) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1835eb265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21900c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b710000004d0012803b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71a338c0c6a42d17"], 0xb4}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r4) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xc}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) write$tun(r8, &(0x7f00000003c0)={@val={0x0, 0x8884}, @void, @mpls={[{0xa5d1}, {0x3}, {0x1}], @generic="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"}}, 0x1010) 5m28.313111673s ago: executing program 1 (id=6213): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xe1c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2, &(0x7f00000015c0)=0x7, 0x4) connect$inet6(r7, &(0x7f0000001600)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000001640), 0x4) listen(r6, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 5m25.061345205s ago: executing program 36 (id=6210): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'abc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001040)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001080)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000010c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x100, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "a76cb6c4bca217635b0def528c2f2fea1515769118b08997a744db4f087132a0", "4f590702c93ecd0ee92227a33b7b1d4e9d5c6df7ff09a6df6ad5687372fb453d0b3979e2f8cdbf86df252e7837791ab4", "6d2add6e37305822733738c5a9f72df1e3e438791b5794222a4f6887", {"3c608b2c7f9c7fb25eeaf9a5df74587e", "d9a154f5836a612d02f4299bfc03e6ae"}}}}}, 0xbe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x9a, 0x7, 0x1, 0x0, "51b84d7a357b27bcc04351e97fc4378bb777d92f5c938048ccf6c415212ecf0f0cbdece8ade6db259dc432f07ffab802888c208912f9284cbd5bde45b10249b31a718203c30fd45a9e6f8a485999b09a7424b3c007e6647557aed06e5a92bdacf5795e21affcc046874776350697cc58793e98714cf99f9659e6aac3306d80704ba69b54a812f036c38607427ae7803e8872b408d0f8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0xffff, @loopback}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000000000000900010073797a3000000000090002006f30303000000000080003400000000720000480060001000002000005000200110000000c000300080001000000001e54000000120a01010000000000000000020000000900010073797a3000000000090002006f303130000000000800034000000007200004800600fc000002000005000200110000000c0003"], 0x3204}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x15, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0xc2, 0x8, "ca6246399be06f88b5d905598c8d67864025a3f77a01b15ef00697eec42800b96f7148826ce05095c6133485a282457b0cee7429a34e06ea743778549caa31d457dfbef207c84196c3aacb2bbaa7fddff4e1dabe86f57aebff4e8f596db4a146258a791bc1cc631563edb67ce86ce8f99639a19baddb7752aed02915fa4668437f646bd2556494d52310f036f41c981e0cb83c0353aa747e76ca10699729cc2b17a0d8203c60d54eb6851c30e0365b624a81105c83f5386d7a2f9e98b8b0"}, @NFTA_OBJ_USERDATA={0xc, 0x8, "e5b78b68e1083d8c"}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m11.879342126s ago: executing program 37 (id=6213): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xe1c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2, &(0x7f00000015c0)=0x7, 0x4) connect$inet6(r7, &(0x7f0000001600)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000001640), 0x4) listen(r6, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1m27.294448083s ago: executing program 7 (id=6387): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="3300000008000601010000000000", 0xe) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=@newtfilter={0x198, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x16c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x9}}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2a}]}, @TCA_FW_ACT={0x13c, 0x4, [@m_gact={0x138, 0x2, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x6, 0xfffffffffffffff3, 0xffff0e01, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa, 0x0, 0x1, 0x8, 0x7}}]}, {0xd9, 0x6, "38b5bca7c1fbd5fafc32bb5acf804e4ce0fa0f9c5fbedb9e0071fa5293bf18d9ea1e5eb4c030dc14c739a217a6e0b3e5448370f5369a4699f152efa4da64a0639f291ba86339a3241a1483c8600de6509355184433666cfc63e696366138fd37afab287f61b8a44cf4bbc397646aa3f3bfccc13aae6570a6b33ff078e6e3ed33f0d5e695a6b5385fe0c070aab6adce68c71656c434ab9d0b99614d7589ddde1fa3305ca04096ce7abb9c4d6f2dd99ea50426a82d76fa1772add454e75aadf2617c393b28114a2fb4e7ca8952daa364e4eefaf39b8e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 1m26.804440098s ago: executing program 7 (id=6389): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="30000000240005050000000000000000000000000300000000000100ffffffff000000000c00010063616b655f6d71"], 0x30}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000a00)={0x3, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="020200031000000003070000fcdbdf25060009001001000053bb467d04f14562c5d163273ef4a720564f485a5a703fd40c3075e50a5d8c36195600000000000003000600000000000200100000000000000000570000000002000100000000000000020d00000000030005003300000002"], 0x80}, 0x1, 0x7}, 0x800) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) (async, rerun: 32) close(0x3) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x0) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x700f, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x13, &(0x7f0000000900)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000ffe500020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f00000009c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r7}, &(0x7f0000000780), &(0x7f00000007c0)=r6}, 0x20) 1m26.138863376s ago: executing program 0 (id=6393): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000030100000000000000006301a2000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m25.763568156s ago: executing program 8 (id=6395): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, 0x0, 0x0) write(r0, &(0x7f0000000140)="95ad6577ca4e791c145399cd4f963688c40f3f96b0649a2e2cc5b61fc8845d94830d7ecabc237dfc1b8b7ead7cddd7303d0f5622f1b04d3829b66f5d8a290f2a671ead84d4ac930f739c769a5544c9d8af5143aca86376a5f90768b30e8f6c54bdc689666b5c7c28d164899079f5a8124ca9f3401315e55f234aa2a0160ce1a81f", 0x81) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000200)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xffffffb9, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0xffffffff, {0xa, 0x0, 0x10}}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x130, 0x130, 0x130, 0x1f0, 0x130, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x8, 0xff}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x1d}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback, 0x200}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 1m25.702127849s ago: executing program 0 (id=6396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xffffffffffffff58, 0x20008005, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x40000715, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008", @ANYRES16=0x0, @ANYRES16], 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x88, 0x10, 0x503, 0x70bd26, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3886}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}, @IFLA_GRE_TTL={0x5, 0x8, 0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7cf9}, @IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}]}, 0x88}}, 0x0) 1m25.393984689s ago: executing program 7 (id=6398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000480), 0x12) (async) r3 = openat$cgroup_devices(r1, &(0x7f0000000580)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)={'b', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x101402, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24000041) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0x0, 0x0, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x80}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x4d4, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x4e}, {0x1, 0x4, 0x0, 0x100000000, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f7424}, 0x0, 0x1b0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000380)=""/161, 0xa1}], 0x1) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1m25.228160574s ago: executing program 8 (id=6399): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0xffffffffffffffd2}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000400)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000440), 0x3c) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000980)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r8, &(0x7f00000012c0)=[{&(0x7f0000001300)="4b0c4ff1dc583eeea35f9c2c87379fae692a22f8030446198404171ae03caa3f20c23d9e3a047248dc30dbf8fe666b4f9ab4067743d74a7ff8d86f361f808656f9a04160d0eeaa812be0f56c3cef6aaf88338a093899fe242456a177b7c95a3b3bafaf2c9d5287dfb2fbaaf3d479ae4bb57668a938027f10f4266c5de5c6e107d144788e8be26f7943a2938ba95e00a8afd23f9364d2c3e02eedcfbf70667fa3ff722fed27c5b0e2a24ccdb1b9b4b248d78f5920", 0x4000}], 0x1) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1c0, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x322}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xef}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10001}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ae}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x18d}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x991b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4777}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6ec}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20000000}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xa]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x8, 0x6, 0x4, 0x0, 0xc]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ee}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x452}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0xe, 0x8, 0x83, 0x5, 0x3, 0xffffffff]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xded}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x90}, 0x4008050) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16, 0x1010, r0, 0x49dcc000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r9, &(0x7f0000000480)=[{{0x0, 0x46, &(0x7f0000009f00)=[{&(0x7f00000009c0)=""/171, 0xab}, {&(0x7f0000000a80)=""/70, 0x46}, {&(0x7f0000000080)=""/61, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0x9}, 0x20003}], 0x1, 0x40010020, 0x0) 1m25.13557114s ago: executing program 9 (id=6400): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x40000000, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000340), 0x400008a, 0x0) sendmsg$key(r1, &(0x7f0000000380)={0x9, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) r2 = socket(0xa, 0x3, 0xff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000480)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="24005a802000018014000300000000000000000001020004"], 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x9}, &(0x7f0000000500)=0x8) setsockopt$inet6_int(r2, 0x29, 0x38, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x10448) socket$key(0xf, 0x3, 0x2) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f00000000c0)=0xfffffffa, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000480)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x28) 1m24.529773059s ago: executing program 7 (id=6402): socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000387000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r0, 0x2000000, 0xb, 0x0, &(0x7f0000000e80)="63eced8e46dc3f0adf33c9", 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000ec0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r3], 0x44}}, 0x2040800) connect$inet(r2, &(0x7f0000000f00)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xd, &(0x7f0000001100)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x30, r5, 0x1, 0xffffffff, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x3b24d1d00c4f8c2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000700000024000180060005004e230000"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1m24.383112388s ago: executing program 0 (id=6403): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) setsockopt$inet6_buf(r1, 0x29, 0xcd, &(0x7f0000000080)="974cfc8de5fe0622ed9dde02a4a60bc4a0be5d42901bffa24eecda43798290f8c17eac090da500700eb9a14242d0d426434a7e", 0x33) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r3 = accept4(r1, &(0x7f0000000100)=@ethernet={0x0, @link_local}, &(0x7f0000000180)=0x80, 0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x69}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd37b}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}]}, 0x50}, 0x1, 0x0, 0x0, 0x8811}, 0x20004001) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r4, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x40}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008005}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={r0, @in6={{0xa, 0x4e23, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x4, 0x8, 0x8000, 0x5, 0x0, 0x92, 0x4}, &(0x7f0000000540)=0x9c) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000580), &(0x7f0000000600)=0x80) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000640)=0x2, 0x4) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000680), &(0x7f0000000700)=0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8c1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000880), &(0x7f00000008c0)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r8) close(r7) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x2d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x4044014) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x60000002}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5a3}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_PAGE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004894}, 0x80) getsockname$l2tp(r3, &(0x7f0000000d40)={0x2, 0x0, @private}, &(0x7f0000000d80)=0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, 0x140c, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40002) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000f00), &(0x7f0000000f80)=0x80) bind$inet(r3, &(0x7f0000000fc0)={0x2, 0x4e24, @remote}, 0x10) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e4ea58c035493f1cf0c7e7377a584a58"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ea83d164839dbb2a9cf93351c1ecd925"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x60}}, 0x20040000) 1m24.049702054s ago: executing program 9 (id=6405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff500f001e0000000000800000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001180)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x1e8, 0x1e8, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000680), {[{{@ip={@loopback, @remote, 0x0, 0xff000000, 'gre0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x1, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x2, 0x4}, {0x0, 0x5, 0x5}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x7, 0x401, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xff, 0x0, 0x8d9f3701cbdad0c1, 0xffffffff], 0x4e23, 0x4e24, 0x4e24, 0x4e20, 0x80000001, 0x0, 0x70fb, 0x0, 0xe2}}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x4, 0xb, [0x1b, 0x25, 0x7, 0x2d, 0x3d, 0x1, 0x0, 0x1a, 0x26, 0x27, 0x4, 0x28, 0x1f, 0x4, 0xb, 0x17], 0x1, 0x9, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000001a40)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="b062baf528a33cecfc58834d0df1b8ee1a1f3571b7ed7e49f062e9c76a788f66d8cdf41d025a62b8ef90dd61b6dddcda15923d69b87489f1860add11cb90858c00863f1b500f39239845ee7305d6ef31f7fdc510b8a6866da0ab49813ff6fc7ed897b50e1c90e51429d6263f43a7877abaaaffa808a7fc86c39e1cebb67341acb8d12dbe11305278f3255f48d108def66e2fe20f392ae40267bd67df24522c5f7a0a6bf345863a8bdc6336"], 0x0, 0x34, 0x0, 0x3, 0x40}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000005c0)={0x0, 0x4}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1a, 0xf, &(0x7f0000001740)=ANY=[@ANYBLOB="0100000000000000000000001811d06a86f80000c3076db3f853a1d370b61255895106601eee16d87e10f9eef66affced8e115041e01d4", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e00)={&(0x7f0000000b00)="5eab3f8010771c3237491a885bd952f9e77b3f76faab304483c553b89d3cbc6ee852496374c93610423f6a49117a2d0b382c49b6d65533a896ae7f123fc4e0b57b4bec8f7090d524d8cd3c614d9a9cb755e5caddadbf0e5bba409b2522da0801bdec5ec1066832a35b2d5f0bfe8c4de6d681170ee62caa589a145813af1c2f68864fedd9c15fd46d658f1633f960ecf83a122f128c7c736af0ec2ba5a00b414f17fc3fc2d75612d617f4043c0656d322405e0451f2602b78523658fd74a7fead09b55486716d37da4c4722", &(0x7f0000000c00)=""/165, &(0x7f00000015c0)="868d3e82f1345a0891291526677789bd0fb570778cbe3973e74c726268bb828a67f927b9fb355e4f6ccc011f5f0c8b29f52050fa54481addcb9c581b8b04c6f7cf30b8227ce7f054c8c9f87730fbf908d418f8c8f322bb", &(0x7f0000000d40)="48e2d15b5d17802f2255d0f3033727da723733c0c31e228d3ee9028e2064ad24396df4d71017e2a9517afd25ec7d72c2a6f8d8d4eb8e7d99d21bada55ba9b586768672b7f69126adf15eda5f53c26cd5d3d12e0552d7c585078ac4d20cc85aa284063ed5bda6a80c6fbc399800b1326ce27a4c3a7733c0590f552f29ef8228d26f19d742e2e3", 0x9, r2}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001140)={&(0x7f0000000e40)="f595570a28df76d8b806a20e17677c37f176fc568d878f3c2b5f41a9d0534a1e35f0d536ed77a263a7fd1757df966302222624d12f32dec2ab7310cad543cc74618eacaf9ef57349470370bb28c539b5eea7c0323cd11b7df912d5cb752df2004f9d11e9cbdd9eb571b626ab8cbb11d55a10d0448ab572a13d382958d85140f608dd29d64c421eb62cbbedc543f31a3dbd72f0b96df4c036bc5662bac8972f5c3697fa1e804ad2bc67cef3947e4cf22820fd6d24b342e19f48db8921ba94eba2922cb5e74eff3a3e7e207c5c5dbe6d69bb486ce249e7f3510892387c00915e71ceee93ba7c1704905cfd9d06cf648be32f1d4ef54921d9", &(0x7f0000000f40)=""/65, &(0x7f0000000fc0)="15ea9b72c5e712b0af294f4b50b4d78185faa10b4ea806275848fd28a5df646eebd4e2c608aaf5b67a7fc94f5b72ce2544bd3a0a609576422ec6ba60e7bfefaef16d7bf727632a2802551f20afc5022b00bb1faab98b20569da27cff9c8ae1295f9f85fd1043e2d76cd97203875057bda988fa9179b2385043665cc526269e384bf484bda78332ac4637fd083660e3530db08f62d4de493559ce47ab4c0ce8198b0df70859ca0c4571bbb705ec0f8437b0878325ff90724e7b43db9080c6bc88a008af34a74650f50e9ff92078fddef1ad9822c96c9eec1a0e", &(0x7f00000010c0)="0c5f665febdfd217df81dad621f70b33b2e4b27a267edbe391948c935103920df6d0b9b474c03498b694d46700186b267b32d3c93868ac074898b940b5010014d0573f9b5492c3fbaed3af44fd15efa634159b9d06ec861433ea2442f1f1b38a", 0x0, r2, 0x4}, 0x38) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0)=0x5, 0x4) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f00000006c0)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000001640)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0xffff, 0x6}, {0x8, 0x2}}}, 0x24}}, 0x0) sendmsg(r6, &(0x7f0000001680)={0x0, 0x953a, &(0x7f00000016c0)=[{&(0x7f0000001700)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000940)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000009c0)="01", 0x1}], 0x1}}, {{&(0x7f0000000a00)={0xa, 0x0, 0x0, @private1, 0xfffffffc}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000000)="b8", 0x1}, {&(0x7f0000000040)="1343e7700ec86cb9892ad2b14b466ec5b84d3935a8f91ea7e56dc998d54e9abdeb910040100087dc694edd061dcf01", 0x2f}, {&(0x7f0000000080)="262efeee6e2d866b123797dc3d62389920242b51e2c55cf221b55e0f30c88246397ba7cc4ea437deaa600148af8c2ea832de6f03702e30200170c140b5da7e546d91b611396191fdbe920f5b979c2043c39e2763ce2c6103aba6ccf994010de7fe11a6989f4ba67069", 0x69}], 0x3, 0x0, 0x2a}}], 0x2, 0x0) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000ac0)={0x8, 0x7, 0x6, 0x7, 0x9, 0x8, 0x3, 0x6, 0x2, 0x40, 0x80, 0x40, 0x0, 0x1}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tcp_congestion(r8, 0x0, 0x0) 1m23.77228917s ago: executing program 7 (id=6406): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') mmap(&(0x7f0000b05000/0x5000)=nil, 0x5000, 0xb635773f07ebbeef, 0x50, 0xffffffffffffffff, 0x215e9000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB="15000a28a079556736eb792a4400", @ANYRES8=0xffffffffffffffff], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x40000000000009f, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="2b9c0b3fae518bbc0ff8b38f82a1beadf92ed00cde23a22b9092205fc937e9bce399cf4c901a64851eea053336008c0513b5150b385e250302f5c70a", @ANYRES16=r4, @ANYBLOB="0106000000000000000030e90000080002008ba29988f7c42d0abc2f61588d6986bda6013c4e87a14b3d8f00c4675d9000b4e808d875769c341c021c09bae14f013b291ebc00000000000000a5908ffa89e69f7e1e7deebda2ecb7950000000000005b95c5749085209070a95b45", @ANYRES32=r0, @ANYBLOB="050033000100000005003600000000000500350040000000"], 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680), 0x200002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r9, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYRES8=r9, @ANYRES16=r10, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000000) r11 = openat$cgroup_procs(r8, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000700)=0x7, 0x12) 1m23.687566818s ago: executing program 0 (id=6407): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000240)=0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000044000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000001800038008000140000000000800024000000000040003805c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001006765"], 0xe8}}, 0x0) 1m23.644293326s ago: executing program 8 (id=6409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x940e, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/4100, 0x1004}, {&(0x7f00000017c0)=""/4093, 0xffd}], 0x2}, 0x900000}, {{0x0, 0x0, 0x0}, 0xb87f}], 0x8, 0x100, 0x0) 1m20.148320679s ago: executing program 9 (id=6410): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x68, 0x2c, 0x2, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_ACT={0x34, 0x3, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 1m17.279892102s ago: executing program 7 (id=6411): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x1, {0x0, 0xf0}}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x41, 0x66, 0x8, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x20, 0x0, 0x2, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) bind$packet(r9, &(0x7f0000000400)={0x11, 0xc, r8, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r11, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1cc, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x1, {0x0, 0xf0}}, 0x18) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x41, 0x66, 0x8, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x20, 0x0, 0x2, 0x7}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) bind$packet(r9, &(0x7f0000000400)={0x11, 0xc, r8, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'bridge0\x00'}) (async) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r11, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1cc, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) 1m13.299233155s ago: executing program 9 (id=6413): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f0000000280)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (fail_nth: 4) 1m13.19482591s ago: executing program 0 (id=6414): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYBLOB="050000000000000000000501000030000180060001000a000000060002001100000014000300fe8000000000000000000000000000aa060004001f9000004800028014000100fe8000000000000000000000000000aa060002001f900000080003000300000008000400010000000800050022bb1eeb080006000000000006000b000a000000"], 0x8c}}, 0x0) 1m11.721680834s ago: executing program 8 (id=6415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000d73dece50000000000000000000036bad87f90acf7e0cdc2536d01c90c1e9865a38aedb108eed2597107375b205324f43f7698988676ffb68f5556420e4a70ce8734d97fd06ff64edebdd321290496c3aa73843e315dbc089905891f36707fdb0ded154d3e3e2f758c35a404697b4a088871320b62c0df47e1c56f13bddcd7658d9d01447a83862eb8034ebcc1120775f8ae95b41c07d09975e8d013c95edb549f8aca8aa5431a242a4fb9aa8068b6aeb47d5e6adcf33dc970ad4d00"/210, @ANYRES32=0x0, @ANYBLOB="000000000000020014001280090001007665746800000000040002800800040060000000"], 0x3c}}, 0x0) 1m7.604228171s ago: executing program 6 (id=6416): socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000387000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r0, 0x2000000, 0xb, 0x0, &(0x7f0000000e80)="63eced8e46dc3f0adf33c9", 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000ec0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r3], 0x44}}, 0x2040800) connect$inet(r2, &(0x7f0000000f00)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xd, &(0x7f0000001100)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x30, r5, 0x1, 0xffffffff, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x3b24d1d00c4f8c2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000000700000024000180060005004e230000"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1m3.827450324s ago: executing program 0 (id=6417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000080)={0x20000004}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m1.872013809s ago: executing program 8 (id=6418): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000800)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000680), 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'veth1_virt_wifi\x00', 0x20}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1a, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x4e23, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa02, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x5, 0x3, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000006c0)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xe) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x821}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r7}]}}}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a000000021000100000000000000e0ff00000000000000000000000000000000ffffffff000000000000000000000000fffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ac141440000000000000000000000011fe8000000000000000000000000000aae0000001000000000000000000000000fe8000000000000000000000000000bb3c05"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 59.539304486s ago: executing program 38 (id=6411): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x1, {0x0, 0xf0}}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x41, 0x66, 0x8, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x20, 0x0, 0x2, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) bind$packet(r9, &(0x7f0000000400)={0x11, 0xc, r8, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r11, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1cc, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x1, {0x0, 0xf0}}, 0x18) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x41, 0x66, 0x8, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x20, 0x0, 0x2, 0x7}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) bind$packet(r9, &(0x7f0000000400)={0x11, 0xc, r8, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'bridge0\x00'}) (async) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r11, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1cc, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) 59.427196011s ago: executing program 9 (id=6420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000600)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000700), 0x366, 0x10, &(0x7f0000000740), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r2, r3, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000940)={r4, r5, 0x4, r2}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) 54.875688656s ago: executing program 6 (id=6421): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESDEC=r2], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1) sendmmsg(r3, &(0x7f0000000380), 0x3fffffffffffeed, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/time_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x40000000000009f, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r5, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000700)=0x7, 0x12) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r8, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0xfd}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24881}, 0x800) 48.377872581s ago: executing program 8 (id=6422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async, rerun: 32) r4 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) connect$rxrpc(r4, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a3100000000048008000240400000003a6d000700726f754964010000009005400000000014000000feffffffc9649a10c668adfbd8ac3fcdc17d86705233dfa28367cd7c0228bbda9c56b2819b79aa6cdac39845d79acfc677f09cad9ce362628e28774579f00b55f24f6c90828b0dea47867d95fa7b19afcd0b6af1fde4eed71ea0a0c381780600ef87a65ea6ffc95ce8d0ea0eddaf1405f1e8efac09f7d1b28583930c55b8ab0ef669ec3ed1614b2c188f84813316c6"], 0x7c}}, 0x24000840) (async, rerun: 32) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f00000005c0)={&(0x7f0000000600)={0xa, 0x6, 0x3, @remote}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000680)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) (async) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1, 0x0, 0x3, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "44478438da5cbd75"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 45.56843302s ago: executing program 39 (id=6417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000080)={0x20000004}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 45.474233283s ago: executing program 9 (id=6424): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000020", @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f6e64000000000c0002800800090003"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000) 44.93196852s ago: executing program 6 (id=6425): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xff6f, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="88a6000014"], 0x188}, 0x1, 0x0, 0x0, 0x24000000}, 0xc0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0xffbffffe, @mcast1, 0x9}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2c, &(0x7f0000000300)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300000000"], 0x50) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000340), &(0x7f0000000480)=0x4) socket$key(0xf, 0x3, 0x2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd2e, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008000) 32.695962163s ago: executing program 40 (id=6422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async, rerun: 32) r4 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) connect$rxrpc(r4, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a3100000000048008000240400000003a6d000700726f754964010000009005400000000014000000feffffffc9649a10c668adfbd8ac3fcdc17d86705233dfa28367cd7c0228bbda9c56b2819b79aa6cdac39845d79acfc677f09cad9ce362628e28774579f00b55f24f6c90828b0dea47867d95fa7b19afcd0b6af1fde4eed71ea0a0c381780600ef87a65ea6ffc95ce8d0ea0eddaf1405f1e8efac09f7d1b28583930c55b8ab0ef669ec3ed1614b2c188f84813316c6"], 0x7c}}, 0x24000840) (async, rerun: 32) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f00000005c0)={&(0x7f0000000600)={0xa, 0x6, 0x3, @remote}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000680)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) (async) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1, 0x0, 0x3, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "44478438da5cbd75"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 32.474151617s ago: executing program 6 (id=6427): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000006301a2000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 29.412334093s ago: executing program 41 (id=6424): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000020", @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f6e64000000000c0002800800090003"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000) 28.422556995s ago: executing program 6 (id=6429): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000f0000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 18.152605938s ago: executing program 6 (id=6430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000b40)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f005c0000000000000600003c"], 0x6a) 0s ago: executing program 42 (id=6430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000b40)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f005c0000000000000600003c"], 0x6a) kernel console output (not intermixed with test programs): failed to get link speed/duplex [ 1194.040099][T26039] Bluetooth: hci6: command tx timeout [ 1194.362941][T26400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.377874][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1195.128393][T26364] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1195.166094][T26364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1195.168787][T26364] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1195.205202][T26364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1195.245050][T26400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.299694][T26364] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1195.316960][T26364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1195.411772][T26364] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1195.445858][T26364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1195.607620][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.607736][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.905754][T22292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.905872][T22292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.079663][T26582] rxe_eth0 speed is unknown, defaulting to 1000 [ 1196.120372][T26039] Bluetooth: hci6: command tx timeout [ 1196.936686][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1197.195562][T26508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.195766][T26508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.195962][T26508] bridge_slave_0: entered allmulticast mode [ 1197.227994][T26508] bridge_slave_0: entered promiscuous mode [ 1197.249918][T26508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.250013][T26508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.250188][T26508] bridge_slave_1: entered allmulticast mode [ 1197.251871][T26508] bridge_slave_1: entered promiscuous mode [ 1197.393047][ T59] net_ratelimit: 52 callbacks suppressed [ 1197.393075][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1197.393123][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.751217][T22292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.751272][T22292] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1197.751309][T22292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.751345][T22292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.751382][T22292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.844036][T26483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.844182][T26483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.844383][T26483] bridge_slave_0: entered allmulticast mode [ 1197.851936][T26483] bridge_slave_0: entered promiscuous mode [ 1197.904595][T26508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.924810][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.924866][ T84] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1197.924904][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.968531][T26508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.995847][T26483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.995965][T26483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.996195][T26483] bridge_slave_1: entered allmulticast mode [ 1198.041235][T26483] bridge_slave_1: entered promiscuous mode [ 1198.118380][T26582] wg0 speed is unknown, defaulting to 1000 [ 1198.201578][T26039] Bluetooth: hci6: command tx timeout [ 1198.576887][T26508] team0: Port device team_slave_0 added [ 1198.604668][T26508] team0: Port device team_slave_1 added [ 1198.666056][T26483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.943308][T26483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.193467][T26508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.193491][T26508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.193524][T26508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.340626][T26508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.340649][T26508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.340680][T26508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.348822][T26483] team0: Port device team_slave_0 added [ 1199.427410][T26483] team0: Port device team_slave_1 added [ 1199.493774][T26483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.493796][T26483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.493826][T26483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.658498][T26483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.658520][T26483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.658552][T26483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.736936][T26508] hsr_slave_0: entered promiscuous mode [ 1199.755195][T26508] hsr_slave_1: entered promiscuous mode [ 1199.759438][T26508] debugfs: 'hsr0' already exists in 'hsr' [ 1199.759466][T26508] Cannot create hsr debugfs directory [ 1200.618125][T26364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.702925][T26483] hsr_slave_0: entered promiscuous mode [ 1200.724868][T26483] hsr_slave_1: entered promiscuous mode [ 1200.753589][T26483] debugfs: 'hsr0' already exists in 'hsr' [ 1200.753616][T26483] Cannot create hsr debugfs directory [ 1201.630289][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1201.729383][T26364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.384380][T10205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.384500][T10205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.630998][ T84] net_ratelimit: 47 callbacks suppressed [ 1202.631027][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.631077][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.631120][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.631192][ T84] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1202.631235][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.918129][T22290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.918274][T22290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.304836][T26508] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1203.304880][T26508] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.707282][T22290] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1203.707338][T22290] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1203.707396][T22290] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1203.707436][T22290] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1203.707475][T22290] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1204.097134][T26508] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1204.097206][T26508] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.481219][T26400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.725021][T26508] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1204.725066][T26508] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.183660][T26508] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1205.183709][T26508] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.072771][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1206.642960][T26582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.643079][T26582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.643296][T26582] bridge_slave_0: entered allmulticast mode [ 1206.702650][T26582] bridge_slave_0: entered promiscuous mode [ 1206.745307][T26582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.749097][T26582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.768242][T26582] bridge_slave_1: entered allmulticast mode [ 1206.803279][T26582] bridge_slave_1: entered promiscuous mode [ 1207.383614][T26582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.489091][T26582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.703751][T26582] team0: Port device team_slave_0 added [ 1207.753067][ T3371] hsr_slave_0: left promiscuous mode [ 1207.758212][ T3371] hsr_slave_1: left promiscuous mode [ 1207.764114][ T3371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.773300][ T3371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.909508][ T3371] hsr_slave_0: left promiscuous mode [ 1207.918570][ T3371] hsr_slave_1: left promiscuous mode [ 1207.922695][ T3371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.923196][ T3371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.938932][ T3371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.939473][ T3371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.038902][ T3371] hsr_slave_0: left promiscuous mode [ 1208.048956][ T3371] hsr_slave_1: left promiscuous mode [ 1208.054581][ T3371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.055106][ T3371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.066691][ T3371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.067223][ T3371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.361114][ T3371] veth1_macvtap: left promiscuous mode [ 1208.361187][ T3371] veth0_macvtap: left promiscuous mode [ 1208.361323][ T3371] veth1_vlan: left promiscuous mode [ 1208.361414][ T3371] veth0_vlan: left promiscuous mode [ 1208.493096][ T3371] veth1_macvtap: left promiscuous mode [ 1208.493714][ T3371] veth0_macvtap: left promiscuous mode [ 1208.496110][ T3371] veth1_vlan: left promiscuous mode [ 1208.497699][ T3371] v: left promiscuous mode [ 1208.886302][ T3371] team0 (unregistering): Port device team_slave_1 removed [ 1208.914843][ T3371] team0 (unregistering): Port device team_slave_0 removed [ 1209.436194][ T3371] team0 (unregistering): Port device team_slave_1 removed [ 1209.476024][ T3371] team0 (unregistering): Port device team_slave_0 removed [ 1209.824070][ T3371] team0 (unregistering): Port device team_slave_1 removed [ 1209.853743][ T3371] team0 (unregistering): Port device team_slave_0 removed [ 1210.356556][ T3371] team0 (unregistering): Port device team_slave_1 removed [ 1210.397725][ T3371] team0 (unregistering): Port device team_slave_0 removed [ 1211.143074][ T3371] team0 (unregistering): Port device team_slave_1 removed [ 1211.184199][ T3371] team0 (unregistering): Port device team_slave_0 removed [ 1211.469194][T26508] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1211.483616][T26508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1211.496251][T26582] team0: Port device team_slave_1 added [ 1211.542915][T22269] net_ratelimit: 40 callbacks suppressed [ 1211.542943][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.542999][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.543184][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.543223][T22269] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1211.547294][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1211.547765][T26508] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1211.566832][T26508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1211.760342][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.760402][T22270] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1211.760442][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.760480][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.760547][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.764914][T26508] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1211.924982][T26508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1211.926774][T26508] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1211.967686][T26508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1212.037706][T26582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.037727][T26582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.037758][T26582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.044942][T10205] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1212.221121][T26582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.221141][T26582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.221171][T26582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.469388][T26364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.588288][T26400] veth0_vlan: entered promiscuous mode [ 1212.618999][T26582] hsr_slave_0: entered promiscuous mode [ 1212.630031][T26582] hsr_slave_1: entered promiscuous mode [ 1212.630876][T26582] debugfs: 'hsr0' already exists in 'hsr' [ 1212.630897][T26582] Cannot create hsr debugfs directory [ 1213.217007][T26400] veth1_vlan: entered promiscuous mode [ 1213.238043][T26483] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1213.275416][T26483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1213.328822][T26483] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1213.375491][T26483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1213.446553][T26483] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1213.464552][T26483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1213.465777][T26483] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1213.509473][T26483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1214.096495][T26400] veth0_macvtap: entered promiscuous mode [ 1214.154623][T26400] veth1_macvtap: entered promiscuous mode [ 1214.195833][T26508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.949074][T26400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1214.977447][T26508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.980649][T26364] veth0_vlan: entered promiscuous mode [ 1215.243595][T26400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.262772][T22276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.262925][T22276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.320836][T22270] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.321183][T22270] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.321357][T22270] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.321516][T22270] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.397583][T22276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.397702][T22276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.507583][T26364] veth1_vlan: entered promiscuous mode [ 1216.364254][T26364] veth0_macvtap: entered promiscuous mode [ 1216.428628][T22290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.428652][T22290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.488220][T22269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.488249][T22269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.523640][ T3371] IPVS: stop unused estimator thread 0... [ 1216.529586][ T3371] IPVS: stop unused estimator thread 0... [ 1216.606592][T26483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.607594][T26364] veth1_macvtap: entered promiscuous mode [ 1216.810383][ T84] net_ratelimit: 84 callbacks suppressed [ 1216.810410][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1216.810452][ T84] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1216.810489][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1216.810525][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1216.810563][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1217.028260][T22276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1217.028329][T22276] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1217.028368][T22276] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1217.030825][T22273] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1217.039999][ T84] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1217.110359][ T3371] bridge_slave_1: left allmulticast mode [ 1217.110765][ T3371] bridge_slave_1: left promiscuous mode [ 1217.111765][ T3371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.167788][ T3371] bridge_slave_0: left allmulticast mode [ 1217.168209][ T3371] bridge_slave_0: left promiscuous mode [ 1217.169218][ T3371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.262377][ T3371] bridge_slave_0: left allmulticast mode [ 1217.262410][ T3371] bridge_slave_0: left promiscuous mode [ 1217.262629][ T3371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.579190][ T3371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.596685][ T3371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.598947][ T3371] bond0 (unregistering): Released all slaves [ 1217.714566][ T3371] bond0 (unregistering): Released all slaves [ 1217.812661][T26483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.063534][T26364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.097854][T22270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.097981][T22270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.152797][T26364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.177252][T22273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.177391][T22273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.377435][T26781] Cannot find set identified by id 0 to match [ 1218.574752][T26582] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1218.625819][T26582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1218.627998][T26582] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1218.668445][T26582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1218.794671][ T84] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.797134][T26582] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1218.894265][T26582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1218.895942][T26582] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1218.954000][T26582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1218.985539][T26784] netlink: 'syz.9.6216': attribute type 1 has an invalid length. [ 1218.985566][T26784] netlink: 16179 bytes leftover after parsing attributes in process `syz.9.6216'. [ 1219.042298][T22273] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.250607][ T84] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.252305][T22273] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.035297][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1220.056504][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1220.058713][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1220.098136][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1220.192930][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1220.575827][T26582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.833760][T26582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.019324][T10205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.019446][T10205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.143175][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.143296][T10205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.851304][T22290] net_ratelimit: 64 callbacks suppressed [ 1221.851333][T22290] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.851401][T22290] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.851440][T22290] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.851478][T22290] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1221.851521][T22290] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.946396][T26832] FAULT_INJECTION: forcing a failure. [ 1221.946396][T26832] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.946435][T26832] CPU: 0 UID: 0 PID: 26832 Comm: syz.9.6220 Not tainted syzkaller #0 PREEMPT(full) [ 1221.946460][T26832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1221.946477][T26832] Call Trace: [ 1221.946487][T26832] [ 1221.946498][T26832] dump_stack_lvl+0xe8/0x150 [ 1221.946543][T26832] should_fail_ex+0x410/0x560 [ 1221.946586][T26832] should_failslab+0xa8/0x100 [ 1221.946626][T26832] __kmalloc_noprof+0xfe/0x720 [ 1221.946656][T26832] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1221.946697][T26832] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1221.946754][T26832] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1221.946803][T26832] genl_family_rcv_msg_doit+0xda/0x340 [ 1221.946848][T26832] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1221.946895][T26832] ? apparmor_capable+0x126/0x170 [ 1221.946927][T26832] ? bpf_lsm_capable+0x9/0x20 [ 1221.946952][T26832] ? security_capable+0x7e/0x2c0 [ 1221.946996][T26832] genl_rcv_msg+0x614/0x7a0 [ 1221.947040][T26832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1221.947077][T26832] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1221.947208][T26832] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 1221.947256][T26832] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1221.947303][T26832] netlink_rcv_skb+0x226/0x4a0 [ 1221.947333][T26832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1221.947372][T26832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1221.947420][T26832] ? down_read+0x2be/0x330 [ 1221.947458][T26832] genl_rcv+0x28/0x40 [ 1221.947491][T26832] netlink_unicast+0x8ef/0xa80 [ 1221.947539][T26832] netlink_sendmsg+0x813/0xb40 [ 1221.947581][T26832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.947621][T26832] ? apparmor_socket_sendmsg+0x98/0x360 [ 1221.947656][T26832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.947684][T26832] sock_sendmsg_nosec+0x13a/0x180 [ 1221.947747][T26832] ____sys_sendmsg+0x54e/0x850 [ 1221.947780][T26832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1221.947817][T26832] ? import_iovec+0x73/0xa0 [ 1221.947860][T26832] ___sys_sendmsg+0x2a5/0x360 [ 1221.947884][T26832] ? __lock_acquire+0x747/0x2de0 [ 1221.947918][T26832] ? __pfx____sys_sendmsg+0x10/0x10 [ 1221.947987][T26832] ? __fget_files+0x2a/0x420 [ 1221.948010][T26832] ? __fget_files+0x3a2/0x420 [ 1221.948045][T26832] __x64_sys_sendmsg+0x1b1/0x290 [ 1221.948074][T26832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1221.948127][T26832] do_syscall_64+0x166/0x520 [ 1221.948154][T26832] ? trace_irq_disable+0x3b/0x140 [ 1221.948181][T26832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.948207][T26832] ? clear_bhb_loop+0x70/0xc0 [ 1221.948236][T26832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.948261][T26832] RIP: 0033:0x7f44f099e559 [ 1221.948283][T26832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.948303][T26832] RSP: 002b:00007f44f17fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1221.948328][T26832] RAX: ffffffffffffffda RBX: 00007f44f0c26090 RCX: 00007f44f099e559 [ 1221.948346][T26832] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1221.948361][T26832] RBP: 00007f44f17fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.948376][T26832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.948390][T26832] R13: 00007f44f0c26128 R14: 00007f44f0c26090 R15: 00007ffd6858bde8 [ 1221.948426][T26832] [ 1221.984681][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.984848][T22270] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1221.984975][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.985075][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1222.027357][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1222.371405][ T5628] Bluetooth: hci1: command tx timeout [ 1223.052917][T26508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.668282][T26508] veth0_vlan: entered promiscuous mode [ 1223.754383][T26508] veth1_vlan: entered promiscuous mode [ 1224.109854][T26508] veth0_macvtap: entered promiscuous mode [ 1224.151168][T26508] veth1_macvtap: entered promiscuous mode [ 1224.326200][T26857] xt_socket: unknown flags 0x8 [ 1224.400687][T26508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.442600][ T5628] Bluetooth: hci1: command tx timeout [ 1224.535774][T26508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.666520][T26806] wlan1 speed is unknown, defaulting to 1000 [ 1224.705551][T26483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.980201][ T718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.980384][ T718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.980426][ T718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.980464][ T718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.430787][T26883] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6224'. [ 1226.439364][T26884] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6224'. [ 1226.520337][ T5628] Bluetooth: hci1: command tx timeout [ 1226.520628][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.520647][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.882613][T22269] net_ratelimit: 91 callbacks suppressed [ 1226.882639][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.960684][ T718] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1226.962339][T22293] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.962384][T22293] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.962421][T22293] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.100722][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.108003][T22293] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.108054][T22293] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.108090][T22293] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.155636][T10205] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1227.159671][T26833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.159696][T26833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.293564][T26888] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6225'. [ 1227.434938][T26483] veth0_vlan: entered promiscuous mode [ 1227.476013][T26483] veth1_vlan: entered promiscuous mode [ 1227.663792][T26582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.705981][T26483] veth0_macvtap: entered promiscuous mode [ 1227.731888][T26483] veth1_macvtap: entered promiscuous mode [ 1227.804434][T26483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.838536][T26483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.882668][T22269] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.882761][T22269] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.882802][T22269] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.882842][T22269] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.296449][T26911] netlink: 'syz.0.6227': attribute type 1 has an invalid length. [ 1228.601519][ T5628] Bluetooth: hci1: command tx timeout [ 1229.002294][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.002321][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.444822][T22269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.444849][T22269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.554062][ T3371] hsr_slave_0: left promiscuous mode [ 1230.555536][ T3371] hsr_slave_1: left promiscuous mode [ 1230.556748][ T3371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.557632][ T3371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.704385][T26951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6233'. [ 1233.507947][ T3371] veth1_macvtap: left promiscuous mode [ 1233.507995][ T3371] veth0_macvtap: left promiscuous mode [ 1233.508134][ T3371] veth1_vlan: left promiscuous mode [ 1233.508247][ T3371] veth0_vlan: left promiscuous mode [ 1233.968613][ T3371] team0 (unregistering): Port device team_slave_1 removed [ 1234.021840][ T3371] team0 (unregistering): Port device team_slave_0 removed [ 1234.500468][T26833] net_ratelimit: 55 callbacks suppressed [ 1234.500495][T26833] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1234.500542][T26833] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1234.500581][T26833] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1234.500646][T26833] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1234.500682][T26833] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1234.500753][T26806] rxe_eth0 speed is unknown, defaulting to 1000 [ 1234.611068][T10205] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1234.611133][T10205] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1234.611199][T10205] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1234.611239][T10205] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1234.611275][T10205] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1234.977416][T26962] Bluetooth: MGMT ver 1.23 [ 1235.057230][T26964] lo: entered promiscuous mode [ 1235.057632][T26964] lo: left promiscuous mode [ 1235.202774][T26582] veth0_vlan: entered promiscuous mode [ 1235.317466][T26582] veth1_vlan: entered promiscuous mode [ 1235.598351][T26582] veth0_macvtap: entered promiscuous mode [ 1235.656004][T26582] veth1_macvtap: entered promiscuous mode [ 1235.852506][T26582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.906675][T26582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1236.021961][T26806] wg0 speed is unknown, defaulting to 1000 [ 1236.081842][T10205] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.081895][T10205] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.081944][T10205] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.081983][T10205] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.933873][T26987] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6238'. [ 1236.978718][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.978758][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.002334][T26039] Bluetooth: hci0: command 0x0c13 tx timeout [ 1237.009814][ T5628] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1237.119322][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.119348][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.344670][T26995] Cannot find set identified by id 0 to match [ 1238.109342][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.197978][T27016] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6246'. [ 1238.396249][T27002] netlink: 81 bytes leftover after parsing attributes in process `syz.9.6244'. [ 1239.106641][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.209112][T27037] netlink: 'syz.7.6251': attribute type 1 has an invalid length. [ 1239.260388][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6250'. [ 1239.412075][T27042] Cannot find set identified by id 0 to match [ 1239.445694][T27040] macvlan2: entered promiscuous mode [ 1239.445721][T27040] macvlan2: entered allmulticast mode [ 1239.445893][T27040] team0: Device macvlan2 is already an upper device of the team interface [ 1239.658289][T27047] net_ratelimit: 90 callbacks suppressed [ 1239.658321][T27047] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1239.733571][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.797519][T10205] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.797571][T10205] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1239.797608][T10205] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.797645][T10205] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.797683][T10205] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.899892][ T718] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.899947][ T718] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.899986][ T718] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.900039][ T718] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1240.499256][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.609597][T27066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6258'. [ 1240.697316][T27066] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1240.737014][T26079] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1240.818336][T27074] netlink: 'syz.8.6257': attribute type 1 has an invalid length. [ 1240.914613][T22270] netdevsim netdevsim6 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.281187][ T3371] netdevsim netdevsim6 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.470926][T27080] netlink: 'syz.0.6261': attribute type 1 has an invalid length. [ 1241.920419][T27080] bond1 (unregistering): Released all slaves [ 1242.091190][ T84] netdevsim netdevsim6 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.100486][T27089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6261'. [ 1242.449576][T27100] tipc: Started in network mode [ 1242.449615][T27100] tipc: Node identity 3afa7a327001, cluster identity 4711 [ 1242.451349][T27100] tipc: Enabled bearer , priority 0 [ 1242.475285][T22276] netdevsim netdevsim6 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.604505][ T59] bridge_slave_1: left allmulticast mode [ 1242.604919][ T59] bridge_slave_1: left promiscuous mode [ 1242.610381][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.694664][ T59] bridge_slave_0: left allmulticast mode [ 1242.695002][ T59] bridge_slave_0: left promiscuous mode [ 1242.696018][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.861304][T27124] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6270'. [ 1243.081210][T27130] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6272'. [ 1243.714666][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.721387][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.747405][ T59] bond0 (unregistering): Released all slaves [ 1244.072223][T27109] tipc: Disabling bearer [ 1244.094235][T26079] tipc: Node number set to 1257994802 [ 1244.117447][T27147] tipc: Started in network mode [ 1244.117484][T27147] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1244.136079][T27147] tipc: Enabled bearer , priority 10 [ 1244.474315][T26806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.474437][T26806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.474638][T26806] bridge_slave_0: entered allmulticast mode [ 1244.522888][T26806] bridge_slave_0: entered promiscuous mode [ 1244.549018][T26806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.549179][T26806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.549370][T26806] bridge_slave_1: entered allmulticast mode [ 1244.587265][T26806] bridge_slave_1: entered promiscuous mode [ 1244.722396][T27162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.722899][T27165] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6276'. [ 1244.839253][T27164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.945479][T26806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.975493][T27167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.995236][T27167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.112852][T27172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.315104][T27158] bond1: option all_slaves_active: invalid value (179) [ 1245.383978][T27158] bond1 (unregistering): Released all slaves [ 1245.651372][T22270] net_ratelimit: 35 callbacks suppressed [ 1245.651401][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1245.651446][T22270] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1245.651483][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1245.651531][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1245.654892][T10205] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1245.736342][T26806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.224677][ T5757] tipc: Node number set to 4269801488 [ 1246.298838][T27174] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1246.387219][T27174] bond1: (slave lo): Enslaving as an active interface with an up link [ 1246.407283][T27174] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1246.639170][T26806] team0: Port device team_slave_0 added [ 1246.648232][T22294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1246.649401][T22294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1246.649459][T22294] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1246.649526][T22294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1246.746032][T26806] team0: Port device team_slave_1 added [ 1247.072921][T26806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.072942][T26806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.072975][T26806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.078755][T26806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.078775][T26806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.078806][T26806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.835203][T27212] tipc: Started in network mode [ 1247.835255][T27212] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1247.835542][T27212] tipc: Enabled bearer , priority 10 [ 1248.182244][T27222] netlink: 'syz.8.6286': attribute type 10 has an invalid length. [ 1248.182269][T27222] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6286'. [ 1248.190148][T26806] hsr_slave_0: entered promiscuous mode [ 1248.249592][T26806] hsr_slave_1: entered promiscuous mode [ 1248.309546][T26806] debugfs: 'hsr0' already exists in 'hsr' [ 1248.309573][T26806] Cannot create hsr debugfs directory [ 1248.330337][T27222] dummy0: entered promiscuous mode [ 1248.404239][T27220] dummy0: left promiscuous mode [ 1248.980231][T26083] tipc: Node number set to 10136234 [ 1249.348005][ T59] hsr_slave_0: left promiscuous mode [ 1249.362834][ T59] hsr_slave_1: left promiscuous mode [ 1249.363987][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.364014][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.369505][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.369530][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.570489][ T59] veth1_macvtap: left promiscuous mode [ 1249.570554][ T59] veth0_macvtap: left promiscuous mode [ 1249.570663][ T59] veth1_vlan: left promiscuous mode [ 1249.570735][ T59] veth0_vlan: left promiscuous mode [ 1250.113847][T27262] netlink: 'syz.7.6291': attribute type 101 has an invalid length. [ 1250.397808][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1250.433580][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1250.803290][T22292] net_ratelimit: 25 callbacks suppressed [ 1250.803316][T22292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1250.803359][T22292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1250.904650][T27262] macvtap1: entered promiscuous mode [ 1250.904676][T27262] hsr0: entered promiscuous mode [ 1250.905051][T27262] macvtap1: entered allmulticast mode [ 1250.905069][T27262] hsr0: entered allmulticast mode [ 1250.905085][T27262] hsr_slave_0: entered allmulticast mode [ 1250.905103][T27262] hsr_slave_1: entered allmulticast mode [ 1250.973371][T22293] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.611696][T22294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.611760][T22294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.611800][T22294] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1251.611836][T22294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.611895][T22294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.767439][T22290] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.767492][T22290] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1252.338023][T26806] netdevsim netdevsim6 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.441259][T26806] netdevsim netdevsim6 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.854944][T27321] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6303'. [ 1254.334103][T26806] netdevsim netdevsim6 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.616629][T27329] team0: entered promiscuous mode [ 1254.616655][T27329] team_slave_0: entered promiscuous mode [ 1254.616865][T27329] team_slave_1: entered promiscuous mode [ 1254.674204][T26806] netdevsim netdevsim6 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.483763][ T59] net_ratelimit: 63 callbacks suppressed [ 1256.483791][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.483833][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.483869][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.483902][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.483944][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1256.596475][T22270] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1256.596523][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.596559][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.596604][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.596707][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1257.347434][T27360] netlink: 'syz.0.6311': attribute type 10 has an invalid length. [ 1257.819673][T27360] dummy0: entered promiscuous mode [ 1258.194015][T27360] team0: Port device dummy0 added [ 1258.842720][T26806] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1258.903218][T26806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1258.909495][T26806] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1258.968205][T26806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1258.985982][T26806] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1259.189333][T27372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6315'. [ 1260.044695][T27390] FAULT_INJECTION: forcing a failure. [ 1260.044695][T27390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.044734][T27390] CPU: 1 UID: 0 PID: 27390 Comm: syz.0.6320 Not tainted syzkaller #0 PREEMPT(full) [ 1260.044760][T27390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1260.044776][T27390] Call Trace: [ 1260.044786][T27390] [ 1260.044797][T27390] dump_stack_lvl+0xe8/0x150 [ 1260.044839][T27390] should_fail_ex+0x410/0x560 [ 1260.044885][T27390] _copy_from_user+0x2d/0xb0 [ 1260.044929][T27390] ___sys_sendmsg+0x1c6/0x360 [ 1260.044958][T27390] ? __lock_acquire+0x747/0x2de0 [ 1260.044993][T27390] ? __pfx____sys_sendmsg+0x10/0x10 [ 1260.045061][T27390] ? __fget_files+0x2a/0x420 [ 1260.045084][T27390] ? __fget_files+0x3a2/0x420 [ 1260.045119][T27390] __x64_sys_sendmsg+0x1b1/0x290 [ 1260.045157][T27390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1260.045210][T27390] do_syscall_64+0x166/0x520 [ 1260.045240][T27390] ? trace_irq_disable+0x3b/0x140 [ 1260.045267][T27390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.045293][T27390] ? clear_bhb_loop+0x70/0xc0 [ 1260.045323][T27390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.045347][T27390] RIP: 0033:0x7f6e62d9e559 [ 1260.045370][T27390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.045390][T27390] RSP: 002b:00007f6e63bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1260.045416][T27390] RAX: ffffffffffffffda RBX: 00007f6e63025fa0 RCX: 00007f6e62d9e559 [ 1260.045434][T27390] RDX: 0000000004040004 RSI: 0000200000000100 RDI: 0000000000000003 [ 1260.045450][T27390] RBP: 00007f6e63bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.045465][T27390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1260.045480][T27390] R13: 00007f6e63026038 R14: 00007f6e63025fa0 R15: 00007fff676f31f8 [ 1260.045518][T27390] [ 1260.446966][T27394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6322'. [ 1261.127617][T26806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1261.330604][T26806] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1261.390445][T26806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1261.500840][T22274] net_ratelimit: 10 callbacks suppressed [ 1261.500868][T22274] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1261.500922][T22274] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1261.500961][T22274] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1261.501007][T22274] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1261.501051][T22274] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1261.670625][T22292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1261.740515][T22292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1261.740588][T22292] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1261.740626][T22292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1261.740661][T22292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1262.218011][T26806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.322926][T26806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.378157][T22293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.378272][T22293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.499293][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.499407][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.037856][T27441] Bluetooth: MGMT ver 1.23 [ 1263.309113][T27451] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6333'. [ 1263.462301][T27459] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6333'. [ 1263.599423][T27454] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1263.599537][T27454] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1263.599967][T27454] veth1_to_bridge: entered allmulticast mode [ 1263.630906][T27454] veth1_to_bridge: entered promiscuous mode [ 1263.638488][T27454] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1263.639086][T27454] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1263.639222][T27454] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1266.148848][T27500] Cannot find set identified by id 0 to match [ 1266.570340][ T59] net_ratelimit: 97 callbacks suppressed [ 1266.570364][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.570403][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1266.570434][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.570467][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.570497][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.684992][T26833] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.685045][T26833] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.685080][T26833] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.685116][T26833] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1266.685178][T26833] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1267.029493][T27524] IPVS: set_ctl: invalid protocol: 137 172.20.20.34:20003 [ 1267.528029][T26806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.030205][T27550] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1268.079119][T27550] netlink: 'syz.0.6354': attribute type 15 has an invalid length. [ 1268.079147][T27550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6354'. [ 1268.159583][T27550] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6354'. [ 1268.159609][T27550] tc_dump_action: action bad kind [ 1268.197037][T27550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6354'. [ 1268.197064][T27550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6354'. [ 1269.543744][T27585] netlink: 'syz.0.6360': attribute type 15 has an invalid length. [ 1269.650847][T27587] netlink: 'syz.0.6360': attribute type 17 has an invalid length. [ 1269.650889][T27587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6360'. [ 1269.650920][T27587] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6360'. [ 1269.841314][T26806] veth0_vlan: entered promiscuous mode [ 1269.971245][T26806] veth1_vlan: entered promiscuous mode [ 1270.363923][T27597] xt_TCPMSS: Only works on TCP SYN packets [ 1270.431050][T22270] IPVS: starting estimator thread 0... [ 1270.520762][T27600] IPVS: using max 29 ests per chain, 69600 per kthread [ 1270.628902][T27602] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6365'. [ 1270.784905][T27614] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6365'. [ 1270.988101][ T84] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1271.006950][ T84] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1271.006980][ T84] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 1e:d2:33:41:19:da - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1271.009060][ T84] ip6gretap1 (unregistering): left allmulticast mode [ 1272.709020][ T84] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 1272.724288][ T84] macvlan3: left allmulticast mode [ 1272.726302][ T84] bond1 (unregistering): Released all slaves [ 1272.771764][ T84] bond2 (unregistering): Released all slaves [ 1272.805069][ T84] bond3 (unregistering): Released all slaves [ 1272.915084][ T84] bond0 (unregistering): Released all slaves [ 1272.938972][ T84] bond4 (unregistering): Released all slaves [ 1272.970558][ T84] bond5 (unregistering): Released all slaves [ 1272.994832][ T84] bond6 (unregistering): Released all slaves [ 1273.027407][ T84] bond7 (unregistering): Released all slaves [ 1273.053712][ T84] bond8 (unregistering): Released all slaves [ 1273.086293][ T84] bond9 (unregistering): Released all slaves [ 1273.109305][T22269] net_ratelimit: 144 callbacks suppressed [ 1273.109334][T22269] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1273.109400][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1273.109440][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1273.113267][T22274] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1273.214446][T27598] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6365'. [ 1273.253106][T22274] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1273.537775][T27607] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6365'. [ 1273.539997][T22274] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1273.540045][T22274] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1273.540081][T22274] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1273.550409][T22290] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1273.647768][T27635] tipc: Enabled bearer , priority 0 [ 1273.695917][T27632] syzkaller0: entered promiscuous mode [ 1273.695948][T27632] syzkaller0: entered allmulticast mode [ 1273.801294][T26833] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1273.823220][ T84] ovs-dp0: left promiscuous mode [ 1273.846698][T27644] netdevsim netdevsim9: Direct firmware load for . failed with error -2 [ 1273.864571][T27644] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 1274.047080][ T5757] wg0 speed is unknown, defaulting to 1000 [ 1274.047144][ T5757] syƒ0: Port: 1 Link DOWN [ 1274.047224][ T5757] wg0 speed is unknown, defaulting to 1000 [ 1274.101629][T27632] tipc: Resetting bearer [ 1274.414369][T27632] tipc: Disabling bearer [ 1274.499587][ T84] tipc: Left network mode [ 1274.675615][T26806] veth0_macvtap: entered promiscuous mode [ 1274.776771][T26806] veth1_macvtap: entered promiscuous mode [ 1274.930831][T26806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1275.042401][T26806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.242245][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.341284][T22294] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.442310][T22274] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.460708][T22290] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.926788][T22269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.926815][T22269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.038304][T27708] FAULT_INJECTION: forcing a failure. [ 1277.038304][T27708] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.038344][T27708] CPU: 1 UID: 0 PID: 27708 Comm: syz.9.6382 Not tainted syzkaller #0 PREEMPT(full) [ 1277.038373][T27708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1277.038388][T27708] Call Trace: [ 1277.038398][T27708] [ 1277.038409][T27708] dump_stack_lvl+0xe8/0x150 [ 1277.038452][T27708] should_fail_ex+0x410/0x560 [ 1277.038492][T27708] ? __alloc_skb+0x1db/0x7a0 [ 1277.038529][T27708] should_failslab+0xa8/0x100 [ 1277.038567][T27708] ? __alloc_skb+0x1db/0x7a0 [ 1277.038601][T27708] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1277.038629][T27708] ? __alloc_skb+0x18d/0x7a0 [ 1277.038666][T27708] ? __alloc_skb+0x1db/0x7a0 [ 1277.038709][T27708] __alloc_skb+0x1db/0x7a0 [ 1277.038751][T27708] alloc_skb_with_frags+0xc6/0x760 [ 1277.038782][T27708] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1277.038823][T27708] sock_alloc_send_pskb+0x878/0x990 [ 1277.038899][T27708] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1277.038932][T27708] ? aa_file_perm+0x18b/0x15f0 [ 1277.038962][T27708] ? aa_sk_perm+0x713/0x900 [ 1277.038999][T27708] hci_sock_sendmsg+0x20b/0xfb0 [ 1277.039045][T27708] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1277.039083][T27708] ? apparmor_socket_sendmsg+0x98/0x360 [ 1277.039114][T27708] ? lock_acquire+0x115/0x350 [ 1277.039147][T27708] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1277.039177][T27708] sock_sendmsg_nosec+0x13a/0x180 [ 1277.039222][T27708] sock_write_iter+0x2de/0x3e0 [ 1277.039257][T27708] ? __pfx_sock_write_iter+0x10/0x10 [ 1277.039296][T27708] ? bpf_lsm_file_permission+0x9/0x20 [ 1277.039320][T27708] ? security_file_permission+0x75/0x260 [ 1277.039364][T27708] vfs_write+0x612/0xba0 [ 1277.039401][T27708] ? __pfx_vfs_write+0x10/0x10 [ 1277.039438][T27708] ? __fget_files+0x2a/0x420 [ 1277.039472][T27708] ksys_write+0x150/0x270 [ 1277.039501][T27708] ? __pfx_ksys_write+0x10/0x10 [ 1277.039541][T27708] do_syscall_64+0x166/0x520 [ 1277.039569][T27708] ? trace_irq_disable+0x3b/0x140 [ 1277.039597][T27708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.039622][T27708] ? clear_bhb_loop+0x70/0xc0 [ 1277.039653][T27708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.039677][T27708] RIP: 0033:0x7f44f099e559 [ 1277.039700][T27708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.039719][T27708] RSP: 002b:00007f44f181f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1277.039743][T27708] RAX: ffffffffffffffda RBX: 00007f44f0c25fa0 RCX: 00007f44f099e559 [ 1277.039761][T27708] RDX: 000000000000010a RSI: 00002000000001c0 RDI: 0000000000000004 [ 1277.039777][T27708] RBP: 00007f44f181f090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.039792][T27708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.039807][T27708] R13: 00007f44f0c26038 R14: 00007f44f0c25fa0 R15: 00007ffd6858bde8 [ 1277.039846][T27708] [ 1277.355713][ T718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.355743][ T718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.828253][T22276] smbdirect: ib_dev[syz2] removed [ 1278.188664][T22269] net_ratelimit: 73 callbacks suppressed [ 1278.188690][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1278.188730][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1278.188774][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1278.226506][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1278.293400][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1278.293450][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1278.293486][T22270] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1278.349439][T22270] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1278.421889][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1278.421940][T22269] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1279.647797][T27762] netlink: 'syz.0.6396': attribute type 1 has an invalid length. [ 1279.719273][T27766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6397'. [ 1279.978529][T27774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6398'. [ 1280.156768][T27762] bond2: entered promiscuous mode [ 1280.158956][T27762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1281.602806][T27821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6408'. [ 1283.189756][ C1] net_ratelimit: 2509 callbacks suppressed [ 1283.189782][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1283.190311][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1283.190785][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1283.191289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1283.191748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1283.192289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1283.192729][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1283.193190][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1283.193629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1283.194058][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1287.334044][T26039] Bluetooth: hci4: command 0x0406 tx timeout [ 1288.200545][ C1] net_ratelimit: 8313 callbacks suppressed [ 1288.200572][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.201037][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1288.201539][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1288.202052][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.203751][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.204242][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1288.204722][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1288.205214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.206869][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.207363][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1293.210499][ C1] net_ratelimit: 6777 callbacks suppressed [ 1293.210527][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.211084][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1293.211631][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1293.212190][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.213872][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.214396][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1293.214935][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1293.215526][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.217276][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.217877][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1298.219900][ C1] net_ratelimit: 5561 callbacks suppressed [ 1298.219928][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.220485][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1298.221006][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1298.221606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.223425][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.223973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1298.224543][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1298.225072][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.225975][T22293] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1298.226876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1298.901212][T27857] FAULT_INJECTION: forcing a failure. [ 1298.901212][T27857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.901249][T27857] CPU: 0 UID: 0 PID: 27857 Comm: syz.9.6413 Not tainted syzkaller #0 PREEMPT(full) [ 1298.901276][T27857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1298.901291][T27857] Call Trace: [ 1298.901300][T27857] [ 1298.901312][T27857] dump_stack_lvl+0xe8/0x150 [ 1298.901357][T27857] should_fail_ex+0x410/0x560 [ 1298.901397][T27857] _copy_from_user+0x2d/0xb0 [ 1298.901434][T27857] kstrtouint_from_user+0xd6/0x180 [ 1298.901470][T27857] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1298.901513][T27857] ? lock_acquire+0x115/0x350 [ 1298.901546][T27857] proc_fail_nth_write+0x8e/0x210 [ 1298.901575][T27857] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1298.901622][T27857] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1298.901650][T27857] vfs_write+0x296/0xba0 [ 1298.901687][T27857] ? __pfx_vfs_write+0x10/0x10 [ 1298.901715][T27857] ? __fget_files+0x2a/0x420 [ 1298.901743][T27857] ? __fget_files+0x3a2/0x420 [ 1298.901763][T27857] ? __fget_files+0x2a/0x420 [ 1298.901796][T27857] ksys_write+0x150/0x270 [ 1298.901824][T27857] ? __pfx_ksys_write+0x10/0x10 [ 1298.901864][T27857] do_syscall_64+0x166/0x520 [ 1298.901892][T27857] ? trace_irq_disable+0x3b/0x140 [ 1298.901918][T27857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.901943][T27857] ? clear_bhb_loop+0x70/0xc0 [ 1298.901973][T27857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.901997][T27857] RIP: 0033:0x7f44f095ed8e [ 1298.902019][T27857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1298.902039][T27857] RSP: 002b:00007f44f17fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1298.902064][T27857] RAX: ffffffffffffffda RBX: 00007f44f17fe6c0 RCX: 00007f44f095ed8e [ 1298.902082][T27857] RDX: 0000000000000001 RSI: 00007f44f17fe0a0 RDI: 0000000000000004 [ 1298.902097][T27857] RBP: 00007f44f17fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.902111][T27857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.902125][T27857] R13: 00007f44f0c26128 R14: 00007f44f0c26090 R15: 00007ffd6858bde8 [ 1298.902164][T27857] [ 1299.554792][T27858] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6415'. [ 1302.700043][T26244] Bluetooth: hci5: command 0x0406 tx timeout [ 1302.700091][T26244] Bluetooth: hci0: command 0x0c13 tx timeout [ 1303.230882][ C1] net_ratelimit: 6216 callbacks suppressed [ 1303.230912][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.231444][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1303.231907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1303.232384][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.233916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.234402][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1303.234912][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1303.235393][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.236984][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.237489][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1308.239761][ C1] net_ratelimit: 7087 callbacks suppressed [ 1308.239790][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1308.240246][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1308.240681][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.242205][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.242642][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1308.243134][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1308.243568][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.245016][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1308.245489][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1308.246081][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1309.856971][T27875] netlink: 45349 bytes leftover after parsing attributes in process `syz.8.6418'. [ 1309.857359][T27875] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1310.625850][T27875] 0ªX¹¦Dö»: entered allmulticast mode [ 1312.940269][ T5628] Bluetooth: hci6: command 0x0406 tx timeout [ 1313.250211][ C1] net_ratelimit: 6946 callbacks suppressed [ 1313.250239][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.250662][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1313.251075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1313.251503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.253052][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.253480][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1313.253904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1313.254370][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.255806][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.256302][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1318.261172][ C1] net_ratelimit: 7136 callbacks suppressed [ 1318.261202][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1318.261673][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.263270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.263440][T22294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1318.263726][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1318.264198][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1318.264657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.266195][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.266690][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1318.267157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1323.269757][ C1] net_ratelimit: 6963 callbacks suppressed [ 1323.269784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1323.270205][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.271559][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.271987][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1323.272401][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1323.272788][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.274168][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.274574][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1323.275018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1323.275449][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1325.469580][T27892] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6422'. [ 1325.887204][ T84] hsr_slave_0: left promiscuous mode [ 1325.985726][T27895] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6424'. [ 1326.136252][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1326.171424][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1326.175918][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1326.210942][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1326.412970][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1326.430695][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1326.731332][ T84] hsr_slave_1: left promiscuous mode [ 1328.279760][ C1] net_ratelimit: 6652 callbacks suppressed [ 1328.279785][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.280229][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1328.280679][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1328.281096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.282552][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.282971][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1328.283462][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1328.283879][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.285299][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.285725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1328.850281][ T5628] Bluetooth: hci2: command tx timeout [ 1329.641366][ T84] veth1_macvtap: left promiscuous mode [ 1329.641973][ T84] veth0_macvtap: left promiscuous mode [ 1329.644409][ T84] veth1_vlan: left promiscuous mode [ 1330.928059][ T5628] Bluetooth: hci2: command tx timeout [ 1332.537419][T26039] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1332.554934][T26039] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1332.590525][T26039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1332.727053][T26039] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1332.743434][T26039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1333.001033][T26039] Bluetooth: hci2: command tx timeout [ 1333.289820][ C1] net_ratelimit: 7011 callbacks suppressed [ 1333.289848][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1333.290280][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1333.290686][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.292130][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.292542][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1333.292946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1333.293388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.294805][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.295249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1333.296693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1334.840397][T26039] Bluetooth: hci3: command tx timeout [ 1335.080837][T26039] Bluetooth: hci2: command tx timeout [ 1336.920312][T26039] Bluetooth: hci3: command tx timeout [ 1338.299766][ C1] net_ratelimit: 7071 callbacks suppressed [ 1338.299791][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1338.300229][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.301615][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.302214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1338.302678][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1338.303123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.304588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.305017][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1338.305467][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1338.305898][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1339.000818][T26039] Bluetooth: hci3: command tx timeout [ 1340.682830][T26039] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1340.820784][T26039] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1340.989174][T26039] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1341.021113][T26039] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1341.108825][T26039] Bluetooth: hci3: command tx timeout [ 1341.115873][T26039] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1343.260063][T26039] Bluetooth: hci5: command tx timeout [ 1343.309806][ C1] net_ratelimit: 6989 callbacks suppressed [ 1343.309830][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1343.310335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1343.310777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.312169][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.312618][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1343.313026][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1343.313474][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.314953][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.315414][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1343.315854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1345.350018][T26039] Bluetooth: hci5: command tx timeout [ 1347.410274][T26039] Bluetooth: hci5: command tx timeout [ 1348.319982][ C1] net_ratelimit: 7121 callbacks suppressed [ 1348.320008][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.320447][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1348.320871][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1348.321325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1348.321737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.323176][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.323584][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1348.323996][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1348.324422][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1348.324832][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.994319][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1349.480232][ T5628] Bluetooth: hci5: command tx timeout [ 1349.572196][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1349.839237][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1350.255074][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1350.286380][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1352.440435][ T5628] Bluetooth: hci0: command tx timeout [ 1353.329851][ C1] net_ratelimit: 7397 callbacks suppressed [ 1353.329879][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.330316][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.331148][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.331603][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1353.332035][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1353.332468][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1353.332869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.334672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.335165][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.335998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1354.530446][ T5628] Bluetooth: hci0: command tx timeout [ 1356.600297][ T5628] Bluetooth: hci0: command tx timeout [ 1358.339797][ C1] net_ratelimit: 7030 callbacks suppressed [ 1358.339825][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.340294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1358.340707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1358.341128][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1358.341531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.344117][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.344523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.345320][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1358.345799][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.346227][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1358.699281][ T5628] Bluetooth: hci0: command tx timeout [ 1363.349779][ C1] net_ratelimit: 7400 callbacks suppressed [ 1363.349806][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1363.350323][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1363.350746][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.352643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.353064][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.353907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1363.354383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.354816][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1363.355257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1363.355812][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1368.361434][ C1] net_ratelimit: 7297 callbacks suppressed [ 1368.361508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.361979][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.363000][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1368.363498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.363961][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1368.364453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1368.364981][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1368.365479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.367503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.368017][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.370020][ C1] net_ratelimit: 7468 callbacks suppressed [ 1373.370047][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1373.370477][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.372296][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.372709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.373531][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1373.373945][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1373.374414][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1373.374826][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1373.375289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1373.375691][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.379974][ C1] net_ratelimit: 7131 callbacks suppressed [ 1378.380000][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.380472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1378.380990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1378.381466][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1378.381922][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.383892][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.384433][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.385330][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1378.385776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1378.386249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1383.211644][T26039] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1383.388689][T26039] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1383.389850][ C1] net_ratelimit: 7191 callbacks suppressed [ 1383.389869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1383.390323][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1383.390789][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1383.391329][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.396172][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.397392][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.399974][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1383.401243][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1383.402573][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1383.403799][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1383.486838][T26039] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1383.517997][T26039] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1383.545251][T26039] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1385.860223][T26039] Bluetooth: hci7: command tx timeout [ 1387.884117][T26039] Bluetooth: hci7: command tx timeout [ 1387.927259][T26039] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1388.080969][T26039] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1388.120319][T26039] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1388.399915][ C1] net_ratelimit: 6987 callbacks suppressed [ 1388.399949][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.400759][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1388.401196][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.401608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1388.402061][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1388.402484][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1388.402889][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.404726][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.405157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1388.405946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1389.221020][T26039] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1389.267860][T26039] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1389.970075][T26039] Bluetooth: hci7: command tx timeout [ 1391.003221][T22269] smc: removing ib device syz1 [ 1391.320758][T26039] Bluetooth: hci8: command tx timeout [ 1392.049734][T26039] Bluetooth: hci7: command tx timeout [ 1393.409908][ C1] net_ratelimit: 7201 callbacks suppressed [ 1393.409934][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1393.410456][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1393.410907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1393.411388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1393.413445][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1393.413897][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1393.414802][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1393.415280][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1393.415732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1393.416201][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1393.548063][T26039] Bluetooth: hci8: command tx timeout [ 1395.640183][T26039] Bluetooth: hci8: command tx timeout [ 1395.813546][ T5628] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1395.840757][ T5628] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1395.929196][ T5628] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1396.497940][ T5628] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1396.511494][ T5628] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1397.742462][T26039] Bluetooth: hci8: command tx timeout [ 1398.420238][ C1] net_ratelimit: 6938 callbacks suppressed [ 1398.420264][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1398.420692][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1398.423178][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1398.423604][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1398.424029][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1398.424469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1398.424886][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1398.425334][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1398.427202][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1398.427662][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1398.920301][ T5628] Bluetooth: hci9: command tx timeout [ 1400.037335][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 1401.006258][ T5628] Bluetooth: hci9: command tx timeout [ 1403.080495][T26039] Bluetooth: hci9: command tx timeout [ 1403.429718][ C1] net_ratelimit: 7388 callbacks suppressed [ 1403.429744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1403.430226][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1403.432847][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1403.433309][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1403.434156][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1403.434588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1403.435058][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1403.435537][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1403.435964][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1403.436454][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1405.214977][T26039] Bluetooth: hci9: command tx timeout [ 1408.440284][ C1] net_ratelimit: 7448 callbacks suppressed [ 1408.440312][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1408.440714][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1408.441539][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1408.441956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1408.442388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1408.442799][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1408.443226][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1408.443677][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1408.445450][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1408.446015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1410.498520][ T5628] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1410.568389][ T5628] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1411.238750][ T5628] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1411.371424][ T5628] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1411.373016][ T5628] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1413.449904][ C1] net_ratelimit: 7332 callbacks suppressed [ 1413.449931][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1413.450381][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1413.452263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1413.452687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1413.454303][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1413.454741][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1413.455184][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1413.455591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1413.456013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1413.456466][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1413.484332][T26039] Bluetooth: hci10: command tx timeout [ 1415.571099][T26039] Bluetooth: hci10: command tx timeout [ 1417.131920][ T5628] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1417.174714][ T5628] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1417.220581][ T5628] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1417.248604][ T5628] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1417.278060][ T5628] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1417.643707][ T5628] Bluetooth: hci10: command tx timeout [ 1418.459815][ C1] net_ratelimit: 7118 callbacks suppressed [ 1418.459842][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1418.460286][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1418.462926][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1418.463354][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1418.464158][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1418.464564][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1418.464977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1418.465404][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1418.465878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1418.466346][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1419.641503][ T5628] Bluetooth: hci11: command tx timeout [ 1419.720677][T26039] Bluetooth: hci10: command tx timeout [ 1421.773237][T26039] Bluetooth: hci11: command tx timeout [ 1423.471822][ C1] net_ratelimit: 7176 callbacks suppressed [ 1423.471850][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1423.472317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1423.473158][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1423.473589][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1423.474035][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1423.476338][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1423.476773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1423.477247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1423.479144][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1423.479555][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1423.842111][T26039] Bluetooth: hci11: command tx timeout [ 1425.888678][T26039] Bluetooth: hci11: command tx timeout [ 1428.480099][ C1] net_ratelimit: 7136 callbacks suppressed [ 1428.480127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1428.480590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1428.481004][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1428.481435][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1428.481838][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1428.482269][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1428.484005][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1428.484440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1428.485294][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1428.485696][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1433.490011][ C1] net_ratelimit: 6997 callbacks suppressed [ 1433.490038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1433.490881][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1433.491322][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1433.491832][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1433.492286][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1433.492657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1433.493038][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1433.494716][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1433.495119][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1433.495844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1438.499872][ C1] net_ratelimit: 6946 callbacks suppressed [ 1438.499905][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1438.500387][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1438.500832][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1438.502792][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1438.503251][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1438.504105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1438.504533][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1438.505003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1438.505480][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1438.505917][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1443.510302][ C1] net_ratelimit: 7153 callbacks suppressed [ 1443.510331][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.510739][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.511596][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1443.512003][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.512439][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1443.512858][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1443.513291][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1443.513693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.515486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1443.515938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1448.519691][ C1] net_ratelimit: 7150 callbacks suppressed [ 1448.519719][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1448.520166][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1448.520991][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1448.521435][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1448.521865][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1448.522354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1448.522786][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1448.524506][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1448.526306][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1448.526722][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1451.166063][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 1453.530075][ C1] net_ratelimit: 7027 callbacks suppressed [ 1453.530104][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1453.530567][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1453.531010][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1453.532902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1453.533360][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1453.534930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1453.535426][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1453.535936][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1453.536412][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1453.536856][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1456.440549][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 1458.540621][ C1] net_ratelimit: 6969 callbacks suppressed [ 1458.540649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1458.542349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1458.543210][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1458.543630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1458.544074][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1458.544498][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1458.544914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1458.545355][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1458.547207][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1458.547630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1463.550727][ C1] net_ratelimit: 7174 callbacks suppressed [ 1463.550764][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1463.551191][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1463.553527][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1463.553947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1463.554378][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1463.554792][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1463.555224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1463.555628][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1463.557425][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1463.557838][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1464.939341][ T5623] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1464.970996][ T5623] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1465.025896][ T5623] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1465.051000][ T5623] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1465.052471][ T5623] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1465.295864][ T5623] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1465.320486][ T5623] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1465.322951][ T5623] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1465.414231][ T5623] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1465.427698][ T5623] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1466.544475][T26039] Bluetooth: hci5: command 0x0406 tx timeout [ 1466.830003][T22276] smc: removing ib device syƒ0 [ 1467.241087][T26039] Bluetooth: hci12: command tx timeout [ 1467.582341][T26039] Bluetooth: hci13: command tx timeout [ 1468.559893][ C1] net_ratelimit: 7439 callbacks suppressed [ 1468.559921][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1468.560795][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1468.561226][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1468.561649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1468.562076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1468.562490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1468.562897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1468.564798][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1468.565240][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1468.566072][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1469.324021][ T5628] Bluetooth: hci12: command tx timeout [ 1469.667756][ T5628] Bluetooth: hci13: command tx timeout [ 1470.800431][T22276] smbdirect: ib_dev[syƒ0] removed [ 1471.401456][ T5628] Bluetooth: hci12: command tx timeout [ 1471.781887][ T5628] Bluetooth: hci13: command tx timeout [ 1473.480238][ T5628] Bluetooth: hci12: command tx timeout [ 1473.569816][ C1] net_ratelimit: 7003 callbacks suppressed [ 1473.569843][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1473.570303][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1473.572262][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1473.572755][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1473.573645][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1473.574114][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1473.574557][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1473.574999][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1473.575512][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1473.575953][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1473.812185][ T5628] Bluetooth: hci13: command tx timeout [ 1476.783419][T26039] Bluetooth: hci0: command 0x0406 tx timeout [ 1478.580042][ C1] net_ratelimit: 7190 callbacks suppressed [ 1478.580088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1478.580450][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1478.582078][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1478.582431][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1478.583144][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1478.583545][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1478.583899][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1478.584276][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1478.584638][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1478.584991][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1479.801051][ T32] INFO: task dhcpcd:5282 blocked for more than 143 seconds. [ 1479.801081][ T32] Not tainted syzkaller #0 [ 1479.801095][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.801107][ T32] task:dhcpcd state:D stack:21384 pid:5282 tgid:5282 ppid:5281 task_flags:0x400140 flags:0x00080000 [ 1479.801169][ T32] Call Trace: [ 1479.801179][ T32] [ 1479.801197][ T32] __schedule+0x17db/0x58f0 [ 1479.801251][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 1479.801302][ T32] ? __pfx___schedule+0x10/0x10 [ 1479.801339][ T32] ? schedule+0x90/0x2b0 [ 1479.801369][ T32] schedule+0x164/0x2b0 [ 1479.801398][ T32] schedule_preempt_disabled+0x13/0x30 [ 1479.801424][ T32] __mutex_lock+0x7c1/0x1550 [ 1479.801459][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1479.801493][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 1479.801531][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1479.801575][ T32] ? __nla_parse+0x40/0x60 [ 1479.801607][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 1479.801643][ T32] ? kernel_text_address+0xa5/0xe0 [ 1479.801708][ T32] ? __kernel_text_address+0xd/0x30 [ 1479.801735][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1479.801765][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1479.801802][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1479.801869][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1479.801899][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1479.801933][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1479.801957][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1479.802055][ T32] ? __lock_acquire+0x747/0x2de0 [ 1479.802098][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1479.802132][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1479.802172][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1479.802218][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1479.802248][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1479.802286][ T32] netlink_unicast+0x8ef/0xa80 [ 1479.802334][ T32] netlink_sendmsg+0x813/0xb40 [ 1479.802377][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1479.802418][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1479.802456][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1479.802485][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1479.802523][ T32] ____sys_sendmsg+0x54e/0x850 [ 1479.802557][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1479.802596][ T32] ? import_iovec+0x73/0xa0 [ 1479.802638][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1479.802664][ T32] ? __asan_memcpy+0x40/0x70 [ 1479.802697][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1479.802752][ T32] ? vfs_read+0x804/0xa80 [ 1479.802816][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1479.802848][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1479.802901][ T32] do_syscall_64+0x166/0x520 [ 1479.802931][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.802958][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1479.802988][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.803013][ T32] RIP: 0033:0x7f5b56643407 [ 1479.803037][ T32] RSP: 002b:00007ffdb17a4600 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1479.803063][ T32] RAX: ffffffffffffffda RBX: 00007f5b565b9780 RCX: 00007f5b56643407 [ 1479.803081][ T32] RDX: 0000000000000000 RSI: 00007ffdb17b87e0 RDI: 0000000000000004 [ 1479.803097][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1479.803111][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdb17c8a10 [ 1479.803127][ T32] R13: 00007f5b565b9708 R14: 0000000000000044 R15: 00007ffdb17b87e0 [ 1479.803167][ T32] [ 1479.803227][ T32] INFO: task kworker/0:1:19124 blocked for more than 143 seconds. [ 1479.803246][ T32] Not tainted syzkaller #0 [ 1479.803259][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.803270][ T32] task:kworker/0:1 state:D stack:25256 pid:19124 tgid:19124 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1479.803336][ T32] Workqueue: events smc_ib_port_event_work [ 1479.803421][ T32] Call Trace: [ 1479.803430][ T32] [ 1479.803445][ T32] __schedule+0x17db/0x58f0 [ 1479.803474][ T32] ? update_protect_slice+0x128/0x210 [ 1479.803517][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1479.803560][ T32] ? __pfx___schedule+0x10/0x10 [ 1479.803597][ T32] ? schedule+0x90/0x2b0 [ 1479.803626][ T32] schedule+0x164/0x2b0 [ 1479.803655][ T32] schedule_preempt_disabled+0x13/0x30 [ 1479.803681][ T32] __mutex_lock+0x7c1/0x1550 [ 1479.803716][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1479.803748][ T32] ? ib_get_eth_speed+0x173/0x8e0 [ 1479.803860][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1479.803898][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1479.803937][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1479.803960][ T32] ? ib_device_get_netdev+0x220/0x2f0 [ 1479.803996][ T32] ib_get_eth_speed+0x173/0x8e0 [ 1479.804030][ T32] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1479.804072][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1479.804119][ T32] rxe_query_port+0x93/0x3d0 [ 1479.804158][ T32] ib_query_port+0x16e/0x830 [ 1479.804201][ T32] smc_ib_port_event_work+0x150/0x930 [ 1479.804256][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1479.804290][ T32] process_scheduled_works+0xc3d/0x1630 [ 1479.804361][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1479.804403][ T32] ? assign_work+0x3cf/0x5d0 [ 1479.804442][ T32] worker_thread+0xa47/0xfb0 [ 1479.804509][ T32] kthread+0x38b/0x480 [ 1479.804535][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1479.804566][ T32] ? __pfx_kthread+0x10/0x10 [ 1479.804593][ T32] ret_from_fork+0x514/0xb70 [ 1479.804642][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1479.804666][ T32] ? __switch_to+0xc89/0x1420 [ 1479.804705][ T32] ? __pfx_kthread+0x10/0x10 [ 1479.804732][ T32] ret_from_fork_asm+0x1a/0x30 [ 1479.804776][ T32] [ 1479.804792][ T32] INFO: task kworker/u8:24:22277 blocked for more than 143 seconds. [ 1479.804817][ T32] Not tainted syzkaller #0 [ 1479.804830][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.804841][ T32] task:kworker/u8:24 state:D stack:21544 pid:22277 tgid:22277 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1479.804902][ T32] Workqueue: events_unbound linkwatch_event [ 1479.804952][ T32] Call Trace: [ 1479.804960][ T32] [ 1479.804976][ T32] __schedule+0x17db/0x58f0 [ 1479.805034][ T32] ? __pfx___schedule+0x10/0x10 [ 1479.805071][ T32] ? schedule+0x90/0x2b0 [ 1479.805101][ T32] schedule+0x164/0x2b0 [ 1479.805129][ T32] schedule_preempt_disabled+0x13/0x30 [ 1479.805154][ T32] __mutex_lock+0x7c1/0x1550 [ 1479.805188][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1479.805221][ T32] ? linkwatch_event+0xe/0x60 [ 1479.805253][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1479.805283][ T32] ? lock_acquire+0x115/0x350 [ 1479.805526][ T32] ? rcu_is_watching+0x16/0xb0 [ 1479.805561][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1479.805594][ T32] linkwatch_event+0xe/0x60 [ 1479.805623][ T32] process_scheduled_works+0xc3d/0x1630 [ 1479.805694][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1479.805736][ T32] ? assign_work+0x3cf/0x5d0 [ 1479.805775][ T32] worker_thread+0xa47/0xfb0 [ 1479.805850][ T32] kthread+0x38b/0x480 [ 1479.805873][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1479.805902][ T32] ? __pfx_kthread+0x10/0x10 [ 1479.805928][ T32] ret_from_fork+0x514/0xb70 [ 1479.805955][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1479.805979][ T32] ? __switch_to+0xc89/0x1420 [ 1479.806014][ T32] ? __pfx_kthread+0x10/0x10 [ 1479.806040][ T32] ret_from_fork_asm+0x1a/0x30 [ 1479.806081][ T32] [ 1479.806106][ T32] INFO: task syz-executor:26483 blocked for more than 143 seconds. [ 1479.806123][ T32] Not tainted syzkaller #0 [ 1479.806135][ T32] Blocked by coredump. [ 1479.806143][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.806154][ T32] task:syz-executor state:D stack:20976 pid:26483 tgid:26483 ppid:1 task_flags:0x40054c flags:0x00080003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1479.806212][ T32] Call Trace: [ 1479.806221][ T32] [ 1479.806236][ T32] __schedule+0x17db/0x58f0 [ 1479.806279][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 1479.806307][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 1479.806349][ T32] ? __pfx___schedule+0x10/0x10 [ 1479.806386][ T32] ? schedule+0x90/0x2b0 [ 1479.806415][ T32] schedule+0x164/0x2b0 [ 1479.806442][ T32] schedule_preempt_disabled+0x13/0x30 [ 1479.806467][ T32] __mutex_lock+0x7c1/0x1550 [ 1479.806502][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1479.806535][ T32] ? tun_chr_close+0x3e/0x1c0 [ 1479.806571][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1479.806622][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 1479.806654][ T32] tun_chr_close+0x3e/0x1c0 [ 1479.806686][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 1479.806716][ T32] __fput+0x40d/0xa50 [ 1479.806761][ T32] task_work_run+0x1d9/0x270 [ 1479.806792][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1479.806829][ T32] ? do_exit+0x735/0x2360 [ 1479.806851][ T32] ? kmem_cache_free+0x182/0x650 [ 1479.806879][ T32] ? put_net+0x191/0x260 [ 1479.806914][ T32] do_exit+0x73a/0x2360 [ 1479.806946][ T32] ? lock_acquire+0x115/0x350 [ 1479.806973][ T32] ? __pfx_do_exit+0x10/0x10 [ 1479.807002][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1479.807049][ T32] do_group_exit+0x22d/0x2f0 [ 1479.807074][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1479.807103][ T32] get_signal+0x121b/0x12c0 [ 1479.807161][ T32] arch_do_signal_or_restart+0xbb/0x860 [ 1479.807201][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1479.807247][ T32] ? ksys_read+0x1fc/0x270 [ 1479.807282][ T32] exit_to_user_mode_loop+0x10e/0x770 [ 1479.807310][ T32] ? rcu_is_watching+0x16/0xb0 [ 1479.807347][ T32] do_syscall_64+0x328/0x520 [ 1479.807375][ T32] ? trace_irq_disable+0x3b/0x140 [ 1479.807400][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.807424][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1479.807454][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.807502][ T32] RIP: 0033:0x7f904455ed8e [ 1479.807522][ T32] RSP: 002b:00007ffe01caf868 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1479.807547][ T32] RAX: fffffffffffffe00 RBX: 000055557df91500 RCX: 00007f904455ed8e [ 1479.807565][ T32] RDX: 0000000000000030 RSI: 00007ffe01caf960 RDI: 00000000000000f9 [ 1479.807581][ T32] RBP: 00007ffe01caf90c R08: 0000000000000000 R09: 0000000000000000 [ 1479.807596][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b [ 1479.807610][ T32] R13: 000055557dfa4a00 R14: 000000000013be22 R15: 00007ffe01caf960 [ 1479.807650][ T32] [ 1479.807701][ T32] INFO: task syz.8.6422:27889 blocked for more than 143 seconds. [ 1479.807718][ T32] Not tainted syzkaller #0 [ 1479.807730][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.807740][ T32] task:syz.8.6422 state:D stack:26896 pid:27889 tgid:27887 ppid:26582 task_flags:0x400140 flags:0x00080002 [ 1479.807832][ T32] Call Trace: [ 1479.807842][ T32] [ 1479.807857][ T32] __schedule+0x17db/0x58f0 [ 1479.807917][ T32] ? __pfx___schedule+0x10/0x10 [ 1479.807954][ T32] ? schedule+0x90/0x2b0 [ 1479.807983][ T32] schedule+0x164/0x2b0 [ 1479.808011][ T32] schedule_preempt_disabled+0x13/0x30 [ 1479.808036][ T32] __mutex_lock+0x7c1/0x1550 [ 1479.808070][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1479.808104][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 1479.808131][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1479.808170][ T32] ? ns_capable+0x89/0xe0 [ 1479.808205][ T32] ? rtnl_nets_add+0x16c/0x300 [ 1479.808228][ T32] ? refcount_inc+0x46/0x70 [ 1479.808264][ T32] rtnl_newlink+0xc10/0x1c30 [ 1479.808299][ T32] ? netlink_unicast+0x8c1/0xa80 [ 1479.808327][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1479.808349][ T32] ? do_syscall_64+0x166/0x520 [ 1479.808375][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.808485][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1479.808518][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1479.808545][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 1479.808573][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1479.808616][ T32] ? lock_acquire+0x115/0x350 [ 1479.808658][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1479.808681][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1479.808709][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1479.808731][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1479.808767][ T32] ? ref_tracker_free+0x689/0x830 [ 1479.808816][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 1479.808865][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1479.808895][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1479.808935][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1479.808981][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1479.809010][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1479.809046][ T32] netlink_unicast+0x8ef/0xa80 [ 1479.809096][ T32] netlink_sendmsg+0x813/0xb40 [ 1481.447831][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1481.447890][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1481.447928][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1481.447958][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1481.447996][ T32] ____sys_sendmsg+0x54e/0x850 [ 1481.448030][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1481.448068][ T32] ? import_iovec+0x73/0xa0 [ 1481.448109][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1481.448135][ T32] ? __lock_acquire+0x747/0x2de0 [ 1481.448167][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1481.448199][ T32] ? futex_wait+0x2a2/0x390 [ 1481.448290][ T32] ? __fget_files+0x2a/0x420 [ 1481.448313][ T32] ? __fget_files+0x3a2/0x420 [ 1481.448477][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1481.448509][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1481.448560][ T32] do_syscall_64+0x166/0x520 [ 1481.448590][ T32] ? trace_irq_disable+0x3b/0x140 [ 1481.448616][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.448641][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1481.448669][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.448694][ T32] RIP: 0033:0x7f9b8c39e559 [ 1481.448716][ T32] RSP: 002b:00007f9b8d354028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1481.448741][ T32] RAX: ffffffffffffffda RBX: 00007f9b8c625fa0 RCX: 00007f9b8c39e559 [ 1481.448757][ T32] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1481.448772][ T32] RBP: 00007f9b8c4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1481.448786][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.448799][ T32] R13: 00007f9b8c626038 R14: 00007f9b8c625fa0 R15: 00007ffd3524a708 [ 1481.448838][ T32] [ 1481.448855][ T32] INFO: task syz.9.6424:27895 blocked for more than 144 seconds. [ 1481.448873][ T32] Not tainted syzkaller #0 [ 1481.448885][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1481.448896][ T32] task:syz.9.6424 state:D stack:26016 pid:27895 tgid:27888 ppid:26400 task_flags:0x400140 flags:0x00080002 [ 1481.448961][ T32] Call Trace: [ 1481.448970][ T32] [ 1481.448985][ T32] __schedule+0x17db/0x58f0 [ 1481.449030][ T32] ? __pfx__printk+0x10/0x10 [ 1481.449091][ T32] ? __pfx___schedule+0x10/0x10 [ 1481.449127][ T32] ? schedule+0x90/0x2b0 [ 1481.449156][ T32] schedule+0x164/0x2b0 [ 1481.449212][ T32] schedule_preempt_disabled+0x13/0x30 [ 1481.449250][ T32] __mutex_lock+0x7c1/0x1550 [ 1481.449286][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1481.449320][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 1481.449347][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1481.449389][ T32] ? ns_capable+0x89/0xe0 [ 1481.449422][ T32] ? rtnl_nets_add+0x16c/0x300 [ 1481.449446][ T32] ? refcount_inc+0x46/0x70 [ 1481.449482][ T32] rtnl_newlink+0xc10/0x1c30 [ 1481.449516][ T32] ? netlink_unicast+0x8c1/0xa80 [ 1481.449545][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1481.449567][ T32] ? do_syscall_64+0x166/0x520 [ 1481.449594][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.774962][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 1481.775008][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1481.775044][ T32] ? nlmon_xmit+0xb0/0x100 [ 1481.775181][ T32] ? kmem_cache_free+0x182/0x650 [ 1481.775225][ T32] ? __lock_acquire+0x747/0x2de0 [ 1481.775266][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1481.775299][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1481.775326][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 1481.775354][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 1481.775397][ T32] ? lock_acquire+0x115/0x350 [ 1481.775441][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 1481.775465][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1481.775494][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1481.775517][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1481.775553][ T32] ? ref_tracker_free+0x689/0x830 [ 1481.775593][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 1481.775649][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1481.775682][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1481.775718][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1481.775764][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1481.775794][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1481.775830][ T32] netlink_unicast+0x8ef/0xa80 [ 1481.775879][ T32] netlink_sendmsg+0x813/0xb40 [ 1481.775922][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1481.775963][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1481.775999][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1481.776029][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1481.776065][ T32] ____sys_sendmsg+0x54e/0x850 [ 1481.776099][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1481.776137][ T32] ? import_iovec+0x73/0xa0 [ 1481.776176][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1481.776202][ T32] ? __lock_acquire+0x747/0x2de0 [ 1481.776231][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1481.776262][ T32] ? futex_wait+0x2a2/0x390 [ 1481.776323][ T32] ? __fget_files+0x2a/0x420 [ 1481.776345][ T32] ? __fget_files+0x3a2/0x420 [ 1481.776380][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1481.776411][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1481.776464][ T32] do_syscall_64+0x166/0x520 [ 1481.776492][ T32] ? trace_irq_disable+0x3b/0x140 [ 1481.776519][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.776545][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1481.776575][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.776600][ T32] RIP: 0033:0x7f44f099e559 [ 1481.776631][ T32] RSP: 002b:00007f44f17fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1481.776658][ T32] RAX: ffffffffffffffda RBX: 00007f44f0c26090 RCX: 00007f44f099e559 [ 1481.776677][ T32] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1481.776692][ T32] RBP: 00007f44f0a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1481.776708][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.776722][ T32] R13: 00007f44f0c26128 R14: 00007f44f0c26090 R15: 00007ffd6858bde8 [ 1481.776762][ T32] [ 1481.776779][ T32] INFO: task syz-executor:27899 blocked for more than 145 seconds. [ 1481.776798][ T32] Not tainted syzkaller #0 [ 1481.776811][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1481.776822][ T32] task:syz-executor state:D stack:26616 pid:27899 tgid:27899 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1481.776888][ T32] Call Trace: [ 1481.776898][ T32] [ 1481.776913][ T32] __schedule+0x17db/0x58f0 [ 1481.776973][ T32] ? __pfx___schedule+0x10/0x10 [ 1481.777009][ T32] ? schedule+0x90/0x2b0 [ 1481.777038][ T32] schedule+0x164/0x2b0 [ 1482.126697][ T32] schedule_preempt_disabled+0x13/0x30 [ 1482.126740][ T32] __mutex_lock+0x7c1/0x1550 [ 1482.126769][ T32] ? lock_acquire+0x115/0x350 [ 1482.126801][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1482.126835][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 1482.126872][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1482.126916][ T32] ? __nla_parse+0x40/0x60 [ 1482.126946][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 1482.126984][ T32] ? kernel_text_address+0xa5/0xe0 [ 1482.127014][ T32] ? __kernel_text_address+0xd/0x30 [ 1482.127041][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1482.127071][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1482.127101][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1482.127159][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1482.127190][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1482.127220][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1482.127242][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1482.127280][ T32] ? __lock_acquire+0x747/0x2de0 [ 1482.127323][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1482.127377][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1482.127418][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1482.127464][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1482.127494][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1482.127531][ T32] netlink_unicast+0x8ef/0xa80 [ 1482.127580][ T32] netlink_sendmsg+0x813/0xb40 [ 1482.127631][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1482.127673][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1482.127709][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1482.127739][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1482.127775][ T32] __sys_sendto+0x408/0x5a0 [ 1482.127805][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1482.127879][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 1482.127911][ T32] __x64_sys_sendto+0xde/0x100 [ 1482.127939][ T32] do_syscall_64+0x166/0x520 [ 1482.127967][ T32] ? trace_irq_disable+0x3b/0x140 [ 1482.127993][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.128019][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1482.128049][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.128075][ T32] RIP: 0033:0x7f423d35ed8e [ 1482.128097][ T32] RSP: 002b:00007ffd807335b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1482.128123][ T32] RAX: ffffffffffffffda RBX: 0000555585840500 RCX: 00007f423d35ed8e [ 1482.128141][ T32] RDX: 0000000000000028 RSI: 00007f423e154670 RDI: 0000000000000003 [ 1482.128157][ T32] RBP: 0000000000000001 R08: 00007ffd80733634 R09: 000000000000000c [ 1482.128173][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1482.128188][ T32] R13: 0000000000000000 R14: 00007f423e154670 R15: 0000000000000000 [ 1482.128226][ T32] [ 1482.128270][ T32] [ 1482.128270][ T32] Showing all locks held in the system: [ 1482.128282][ T32] locks held by kworker/0:0/9: 4, on CPU#0: [ 1482.128405][ T32] #0: ffff888067c89140 ((wq_completion)wg-kex-wg1#21){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.128523][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.128616][ T32] #2: ffff88802a279440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 1482.128725][ T32] #3: ffff888055781700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 1482.128791][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 1482.128816][ T32] #0: ffffffff8fc36518 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1482.480424][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1482.480444][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1482.480506][ T32] locks held by kworker/u8:4/59: 3, last CPU#0: [ 1482.480522][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.480588][ T32] #1: ffffc9000200fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.480654][ T32] #2: ffff8880737ff258 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1482.480829][ T32] locks held by kworker/u8:5/84: 5, on CPU#0: [ 1482.480847][ T32] #0: ffff88801d2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.480910][ T32] #1: ffffc9000208fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.480972][ T32] #2: ffffffff91247468 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1482.481034][ T32] #3: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd0/0x760 [ 1482.481101][ T32] #4: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1482.481170][ T32] locks held by kworker/u8:6/718: 3, last CPU#0: [ 1482.481187][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.481251][ T32] #1: ffffc900045cfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.481314][ T32] #2: ffff88808b540800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1482.481437][ T32] locks held by dhcpcd/5282: 1, on CPU#0: [ 1482.481454][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1482.481518][ T32] locks held by getty/5376: 2, on CPU#0: [ 1482.481535][ T32] #0: ffff888036cd30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1482.481669][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1482.481738][ T32] locks held by syz-executor/5607: 2, last CPU#0: [ 1482.481756][ T32] #0: ffff888079c86540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1482.481820][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 1482.481887][ T32] locks held by kworker/0:5/5757: 2, last CPU#0: [ 1482.481905][ T32] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.481969][ T32] #1: ffffc90004c9fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.482036][ T32] locks held by kworker/u8:14/10205: 3, last CPU#0: [ 1482.482053][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.482116][ T32] #1: ffffc9000ecdfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.482181][ T32] #2: ffff88807ea73258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1482.482248][ T32] locks held by kworker/u8:20/14632: 2, last CPU#0: [ 1482.482266][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.482329][ T32] #1: ffffc900033bfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.482394][ T32] locks held by kworker/0:1/19124: 4, on CPU#0: [ 1482.482411][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.482474][ T32] #1: ffffc90006c97c40 ((work_completion)(&smcibdev->port_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.482539][ T32] #2: ffff88807f261310 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 1482.482600][ T32] #3: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x8e0 [ 1482.482659][ T32] locks held by kworker/0:4/19128: 3, on CPU#0: [ 1482.482676][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.981481][ T32] #1: ffffc90006befc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.981563][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1482.981713][ T32] locks held by kworker/u8:1/22269: 3, on CPU#0: [ 1482.981732][ T32] #0: ffff88801c7ab940 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.981797][ T32] #1: ffffc90004e8fc40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.981862][ T32] #2: ffff88807f260730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x279/0x400 [ 1482.981925][ T32] locks held by kworker/u8:7/22270: 3, last CPU#0: [ 1482.981942][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.982006][ T32] #1: ffffc900032cfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.982071][ T32] #2: ffff88807ea73258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1482.982139][ T32] locks held by kworker/u8:18/22273: 3, last CPU#0: [ 1482.982156][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.982220][ T32] #1: ffffc90002eafc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.982285][ T32] #2: ffff88807faee258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1482.982351][ T32] locks held by kworker/u8:21/22274: 3, on CPU#0: [ 1482.982368][ T32] #0: ffff888033737940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.982432][ T32] #1: ffffc90002e8fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.982492][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1482.982608][ T32] locks held by kworker/u8:23/22276: 7, last CPU#0: [ 1482.982625][ T32] #0: ffff88801c7ab940 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.982696][ T32] #1: ffffc9000db5fc40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.982758][ T32] #2: ffff88801c7c4730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x279/0x400 [ 1482.982818][ T32] #3: ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1482.982890][ T32] #4: ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1482.982954][ T32] #5: ffff88801d2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x174/0x8e0 [ 1482.983016][ T32] #6: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 1482.983074][ T32] locks held by kworker/u8:24/22277: 3, on CPU#0: [ 1482.983092][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.983155][ T32] #1: ffffc90002e5fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.983219][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1482.983282][ T32] locks held by kworker/u8:38/22294: 3, last CPU#0: [ 1482.983299][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.983363][ T32] #1: ffffc90005827c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.983428][ T32] #2: ffff88803bbe0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1482.983499][ T32] locks held by kworker/1:9/26018: 6, last CPU#1: [ 1482.983516][ T32] #0: ffff88807da5ad40 ((wq_completion)wg-crypt-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.983586][ T32] #1: ffffc90003a1fc40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.983658][ T32] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 1482.983725][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xa2/0x3f0 [ 1482.983830][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xa2/0x3f0 [ 1482.983887][ T32] #5: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip6_pol_route+0x163/0x14d0 [ 1482.983982][ T32] locks held by kworker/1:11/26077: 2, last CPU#1: [ 1482.984000][ T32] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.984065][ T32] #1: ffffc90004ac7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.984130][ T32] locks held by kworker/1:12/26078: 4, last CPU#1: [ 1482.984147][ T32] #0: ffff888067c89140 ((wq_completion)wg-kex-wg1#21){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1482.984222][ T32] #1: ffffc90006b7fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1483.510815][ T32] #2: ffff888055781700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 1483.510882][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1483.510945][ T32] locks held by kworker/1:15/26081: 5, last CPU#1: [ 1483.510963][ T32] #0: ffff888067aaa540 ((wq_completion)wg-kex-wg2#28){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1483.511043][ T32] #1: ffffc90006adfc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1483.511127][ T32] #2: ffff88807fe5e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 1483.511190][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1483.511249][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 1483.511314][ T32] locks held by syz-executor/26483: 1, on CPU#0: [ 1483.511332][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1483.511396][ T32] locks held by syz-executor/26508: 1, on CPU#0: [ 1483.511413][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1483.511489][ T32] locks held by syz.8.6422/27889: 2, on CPU#0: [ 1483.511506][ T32] #0: ffffffff909ca208 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1483.511568][ T32] #1: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1483.511622][ T32] locks held by syz.9.6424/27895: 2, on CPU#0: [ 1483.511638][ T32] #0: ffffffff917c37a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1483.511700][ T32] #1: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1483.511754][ T32] locks held by syz-executor/27899: 1, on CPU#0: [ 1483.511771][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.511835][ T32] locks held by syz-executor/27910: 1, on CPU#0: [ 1483.511851][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.511914][ T32] locks held by syz-executor/27918: 1, on CPU#0: [ 1483.511931][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.511994][ T32] locks held by syz-executor/27928: 1, on CPU#0: [ 1483.512020][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.512083][ T32] locks held by syz.6.6430/27933: 1, on CPU#0: [ 1483.512100][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1483.512158][ T32] locks held by kworker/u8:2/27936: 3, last CPU#0: [ 1483.512176][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1483.512240][ T32] #1: ffffc90005837c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1483.512307][ T32] #2: ffff88807faee258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1483.512374][ T32] locks held by syz-executor/27940: 1, on CPU#0: [ 1483.512391][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.512453][ T32] locks held by syz-executor/27945: 1, on CPU#0: [ 1483.512470][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.512533][ T32] locks held by syz-executor/27951: 1, on CPU#0: [ 1483.512550][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.512613][ T32] locks held by syz-executor/27959: 1, on CPU#0: [ 1483.512629][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.512692][ T32] locks held by syz-executor/27964: 1, on CPU#0: [ 1483.512709][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.512773][ T32] locks held by syz-executor/27978: 1, on CPU#0: [ 1483.512790][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.512852][ T32] locks held by syz-executor/27980: 1, on CPU#0: [ 1483.512869][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1483.512931][ T32] locks held by syz-executor/27982: 4, last CPU#0: [ 1483.512949][ T32] #0: ffffffff8fe36570 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 1483.513018][ T32] #1: ffff888079c81bc0 (&mm->mmap_lock){++++}-{4:4} [ 1483.591233][ C1] net_ratelimit: 5199 callbacks suppressed [ 1483.591257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1483.592599][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1483.593324][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1483.595511][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1483.596687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1483.597793][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1483.598564][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1483.598975][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9d:7e:c9:9f:de, vlan:0) [ 1483.599401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1483.604365][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1483.850257][ T32] , at: dup_mmap+0x195/0x1dc0 [ 1483.850293][ T32] #2: ffff88802b2f7180 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1483.850360][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1483.850421][ T32] locks held by syz-executor/27987: 2, last CPU#0: [ 1483.850439][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1483.850497][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 1483.850572][ T32] locks held by syz-executor/27990: 3, last CPU#0: [ 1483.850590][ T32] #0: ffff88802c0a6110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x33/0x6f0 [ 1483.850737][ T32] #1: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1483.850796][ T32] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1483.850856][ T32] locks held by udevd/27991: 4, last CPU#0: [ 1483.850873][ T32] #0: ffff88807fc58460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1483.850937][ T32] #1: ffff8880560da4c0 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: lookup_open+0x242/0x1a40 [ 1483.851001][ T32] #2: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1483.851058][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 1483.851147][ T32] [ 1483.851154][ T32] ============================================= [ 1483.851154][ T32] [ 1483.851174][ T32] NMI backtrace for cpu 0 [ 1483.851192][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1483.851233][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1483.851256][ T32] Call Trace: [ 1483.851270][ T32] [ 1483.851283][ T32] dump_stack_lvl+0xe8/0x150 [ 1483.851319][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1483.851394][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1483.851435][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1483.851475][ T32] sys_info+0x135/0x170 [ 1483.851540][ T32] watchdog+0xfd7/0x1030 [ 1483.851583][ T32] ? watchdog+0x1c7/0x1030 [ 1483.851617][ T32] kthread+0x38b/0x480 [ 1483.851642][ T32] ? __pfx_watchdog+0x10/0x10 [ 1483.851665][ T32] ? __pfx_kthread+0x10/0x10 [ 1483.851690][ T32] ret_from_fork+0x514/0xb70 [ 1483.851717][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1483.851740][ T32] ? __switch_to+0xc89/0x1420 [ 1483.851783][ T32] ? __pfx_kthread+0x10/0x10 [ 1483.851809][ T32] ret_from_fork_asm+0x1a/0x30 [ 1483.851850][ T32] [ 1483.852057][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1483.852124][ C1] NMI backtrace for cpu 1 [ 1483.852140][ C1] CPU: 1 UID: 0 PID: 26077 Comm: kworker/1:11 Not tainted syzkaller #0 PREEMPT(full) [ 1483.852162][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1483.852175][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 1483.852214][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 1483.852239][ C1] Code: 8b 3d e4 bf ab 0c 48 89 de 5b e9 23 5e 65 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 78 ff cd 12 65 48 8b 15 78 ff cd 12 f7 c2 00 01 00 ff [ 1483.852255][ C1] RSP: 0018:ffffc90000a18180 EFLAGS: 00000246 [ 1483.852272][ C1] RAX: ffffffff851cc8a9 RBX: ffff888022ae4790 RCX: ffff888022ae4790 [ 1483.852288][ C1] RDX: 0000000000000006 RSI: 0000000000000002 RDI: ffff888085f0a3c0 [ 1483.852300][ C1] RBP: 0000000000000002 R08: 0000000000000100 R09: 1ffff1100455c8f5 [ 1483.852313][ C1] R10: dffffc0000000000 R11: ffffed100455c8f6 R12: 0000000000000002 [ 1483.852327][ C1] R13: dffffc0000000000 R14: 0000000000000006 R15: ffff888085f0a3c0 [ 1483.852341][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 1483.852358][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1483.852371][ C1] CR2: 00007f56547f7848 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 1483.852389][ C1] Call Trace: [ 1483.852396][ C1] [ 1483.852403][ C1] __nla_put+0x29/0xd0 [ 1483.852427][ C1] nla_put+0xd0/0x150 [ 1483.852448][ C1] fdb_fill_info+0x6bb/0xde0 [ 1483.852475][ C1] ? __pfx_fdb_fill_info+0x10/0x10 [ 1483.852506][ C1] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1483.852529][ C1] ? __alloc_skb+0x27a/0x7a0 [ 1483.852557][ C1] ? __alloc_skb+0x27a/0x7a0 [ 1483.852590][ C1] ? __alloc_skb+0x4d0/0x7a0 [ 1483.852621][ C1] fdb_notify+0xc6/0x160 [ 1483.852641][ C1] br_fdb_update+0x4e6/0x6c0 [ 1483.852665][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 1483.852684][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1483.852706][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 1483.852801][ C1] br_handle_frame_finish+0x600/0x1950 [ 1483.852834][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1483.852860][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 1483.852892][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1483.852922][ C1] ? nf_hook_slow+0x176/0x220 [ 1483.852980][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1483.853005][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1483.853063][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1483.853123][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1483.853150][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1483.853176][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1483.853202][ C1] ? lock_acquire+0x115/0x350 [ 1483.853233][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1483.853262][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1483.853292][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1483.853320][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1483.853347][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1483.853376][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1483.853403][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 1483.853433][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1483.853457][ C1] br_handle_frame+0x1329/0x1600 [ 1483.853514][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1483.853541][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1483.853566][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1483.853588][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1483.853614][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1483.853638][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 1483.853678][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1483.853704][ C1] ? ip6_rcv_finish+0x265/0x280 [ 1483.853752][ C1] ? NF_HOOK+0x336/0x3c0 [ 1483.853785][ C1] ? process_backlog+0x3de/0x18b0 [ 1483.853813][ C1] ? process_backlog+0x3de/0x18b0 [ 1483.853843][ C1] process_backlog+0x727/0x18b0 [ 1483.853874][ C1] ? process_backlog+0x3de/0x18b0 [ 1483.853911][ C1] __napi_poll+0xaa/0x330 [ 1483.853939][ C1] net_rx_action+0x61d/0xf50 [ 1483.853975][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1483.854002][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1483.854074][ C1] handle_softirqs+0x226/0x860 [ 1483.854113][ C1] ? do_softirq+0x77/0xd0 [ 1483.854141][ C1] ? neigh_periodic_work+0xc23/0xe40 [ 1483.854170][ C1] do_softirq+0x77/0xd0 [ 1483.854195][ C1] [ 1483.854202][ C1] [ 1483.854209][ C1] __local_bh_enable_ip+0x100/0x140 [ 1483.854236][ C1] neigh_periodic_work+0xc23/0xe40 [ 1483.854269][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1483.854296][ C1] process_scheduled_works+0xc3d/0x1630 [ 1483.854341][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1483.854371][ C1] ? assign_work+0x3cf/0x5d0 [ 1483.854399][ C1] worker_thread+0xa47/0xfb0 [ 1483.854434][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1483.854468][ C1] kthread+0x38b/0x480 [ 1483.854487][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1483.854513][ C1] ? __pfx_kthread+0x10/0x10 [ 1483.854533][ C1] ret_from_fork+0x514/0xb70 [ 1483.854554][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1483.854572][ C1] ? __switch_to+0xc89/0x1420 [ 1483.854600][ C1] ? __pfx_kthread+0x10/0x10 [ 1483.854620][ C1] ret_from_fork_asm+0x1a/0x30 [ 1483.854648][ C1] [ 1485.158313][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1487.436904][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1487.446080][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1487.456184][ T32] Call Trace: [ 1487.459511][ T32] [ 1487.462477][ T32] vpanic+0x56d/0xa60 [ 1487.466523][ T32] ? __pfx___schedule+0x10/0x10 [ 1487.471688][ T32] ? __pfx_vpanic+0x10/0x10 [ 1487.476267][ T32] panic+0xc5/0xd0 [ 1487.480091][ T32] ? __pfx_panic+0x10/0x10 [ 1487.484553][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1487.490064][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1487.495485][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1487.501703][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1487.507926][ T32] watchdog+0x1030/0x1030 [ 1487.512327][ T32] ? watchdog+0x1c7/0x1030 [ 1487.516798][ T32] kthread+0x38b/0x480 [ 1487.520915][ T32] ? __pfx_watchdog+0x10/0x10 [ 1487.525640][ T32] ? __pfx_kthread+0x10/0x10 [ 1487.530277][ T32] ret_from_fork+0x514/0xb70 [ 1487.534922][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1487.540077][ T32] ? __switch_to+0xc89/0x1420 [ 1487.544815][ T32] ? __pfx_kthread+0x10/0x10 [ 1487.549479][ T32] ret_from_fork_asm+0x1a/0x30 [ 1487.554310][ T32] [ 1487.557582][ T32] Kernel Offset: disabled [ 1487.561963][ T32] Rebooting in 86400 seconds..