last executing test programs: 41.639771883s ago: executing program 2 (id=1561): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x101, 0x1ff, {{0x7, 0x4, 0x3, 0x3, 0x1c, 0x68, 0x0, 0x0, 0x5da560b198b0cdda, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp={0x44, 0x8, 0x72, 0x0, 0xa, [0x8]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r9, @ANYBLOB="4000ac0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r10) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001100)={0x60, r11, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}]}}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x138, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) 40.795132128s ago: executing program 1 (id=1567): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000200)="52540012345652540012345786dd6000000000003b400000031f8bce6af7cc4200000000000100000000000000000000000100000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.563103243s ago: executing program 2 (id=1568): r0 = socket(0x2, 0x80805, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 40.303383751s ago: executing program 1 (id=1569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=@gettaction={0x54, 0x30, 0x100, 0x0, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xab74}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8004}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x54}}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @fixed}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="184d2c94742cd1c1bb548df74e16f7c7240900070000000000000061104d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 39.917234117s ago: executing program 2 (id=1570): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000003000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback=r0, r0, 0x38, 0xc, r1, @void, @value=r0}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaabb00002200000088a8260081000e0000ffffffff"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 39.711217417s ago: executing program 1 (id=1572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$FIOCLEX(r0, 0x5451) 39.709854451s ago: executing program 0 (id=1573): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000280)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x200, &(0x7f0000000080)={@align=0xfffffffffffffff9, {0x2, 0x6, 0x6, 0x9}}, 0x5e4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7}, {[0x3, 0x5, 0x5, 0xd]}, 0xfffffff7, 0x48, &(0x7f0000000200)=""/72}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="fdff0000000000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7f}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @generic={0x0, 0xe, 0x0, 0x8001, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0xffffffffffffff20) (async) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f00000008c0)={&(0x7f00000001c0)=0x20006, 0x2, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000880)}) 39.573108838s ago: executing program 3 (id=1574): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'veth0_to_hsr\x00', {0x7}, 0x5}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x90) 39.360424064s ago: executing program 2 (id=1575): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x33, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x9, 0x101, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x700, 0x1, 0x8000}}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newtclass={0x54, 0x28, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x1}, {0xffff, 0x2}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_ingress={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008801}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x5c, 0x7, 0x107, 0xfffffffe, 0xffffffff, {0x13, 0x7c}, [@nested={0x48, 0x4, 0x0, 0x1, [@nested={0x41, 0x68, 0x0, 0x1, [@generic="55ed2c84fe33af6a667218e36e9cfb7653085c523587bd905079af759fa9f0859cb8fad5ac1771c3b2883b24c0e05959f7494d38d5ec48a6e03e446eac"]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40004000) 39.227328889s ago: executing program 1 (id=1576): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) 39.226922278s ago: executing program 0 (id=1577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000980)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004803c0001800c0001007061796c6f6164002c000280080002400000000108000440000000fe080003400000002c080005400000001408000740000000010900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008006900c42a45faed07d7929520f9999b64696f6215f0a09d7edc0f61f4450c8271d024eafd7c1b3707c069303dc17746c3eb3af36f6ef25d6e3631cc40f57c9edbac1f9d92d46b86437c778ed17ecd6fe6ab852408e5059de88aced0770acdc867bc889698b0d4cb4d34a5bd160f7f1f826676d88093b3a91fbf55145b48a1582d5a5b6fe5420b3e2b59670648fdcfcc7e14506d272377fc524e5c76938b95", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050001000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="34005080140001000102030405060708090a0b0c0d0e0f1805000200060000000800030006ac0f000a0004000000000000000000"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6(0xa, 0x5, 0x6) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc001888}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r8, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x2200c010}, 0x20000810) 39.061923042s ago: executing program 3 (id=1578): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0x4}, {}, {0xfff1, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb0000010400000000"}]}, 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x8000, 0x4}, 0x48) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x20000001, 0x4, "30bd05a76e0edbcbe6cce5984343e09c262fc62d381cd6515d33e142245708d9", "85db081dcb26409ecb60274324d72410", {"0c1c28b8552c9dfdf23da2340cb8cbc7", "1f5489d79cc13665174cedcb215e4a1a"}}}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fdffffff000000004e5736aa7d3b1500000000181100000eb336527e5232ae85b3e41a86098c0bb3ab90028e51b3d66323ffe5bab2778d82b55821fc525c8c5b37fa08e93a6149aa3307c211e63e8ae0d65224e255035d578f6c0746d9bcaf5dcedce30f729a9ca4b635af5498d8368437b1affd68b5b71bfda0ca90605c3b9d5869b00bbfbb5a8dcd3785bb1cff0b640b35709a0a660cc0dfbb0b3221255bde461ab662aa06d356c5687f267d508d19b7d4dc5edc3c1c8b22fb5170bd62f73d6a6f736bef7a805cf73c39926b", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 38.294465045s ago: executing program 0 (id=1581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0xfffffe8e}}, 0x0) 38.105799292s ago: executing program 1 (id=1582): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000040000000400000007000000040000009c684bc72a707e2c89b9ea5a5dc615dda3a45f661636c1c0214e7c569739a2f2d1c941d3d795a0f6782c125ee0345c8f5110903384bee673dede5cb844b7d196a660db7a9d1181d88e37fe2b6c0f9200a771e947de4e4b3762a3d43c13ec0016041d259a99c6ae7ad8cdf0956453bcb7db63585c0ccf4ea188216650fad02b7d1a3c80c95a16626c22", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x30, 0x3, 0x74}, 0x2c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x5) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001", @ANYRES16=r11, @ANYRESDEC=r12, @ANYRESDEC=r8, @ANYRES64=r4, @ANYRESOCT=r9], 0x30}, 0x1, 0x0, 0x0, 0x24884}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1fff1, 0xfff1}, {0xffec, 0xfff1}, {0xe, 0xffe0}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 37.435434394s ago: executing program 2 (id=1585): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x800) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000740)={0x98f6, 0x202, 0x5, 0x7ff, 0x0}, &(0x7f0000000780)=0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffff"], 0x0, 0x2}, 0x94) (async, rerun: 32) r3 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000340)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x18, r5}, 0x10) (async) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000001, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300080004"], 0x40}}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000007c0)={r2, @in={{0x2, 0x4e20, @multicast1}}, 0x5, 0x5c, 0x10, 0x9, 0xe}, &(0x7f0000000880)=0x98) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8}}}]}, 0x38}}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002340)={0xffffffffffffffff, &(0x7f0000001300)="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", &(0x7f0000002300)=@udp6=r8}, 0x20) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xa, 0x4}, {}, {0xfff1, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000800000004000000009000000000000000000000905000000070000000000000e0100000000000000000000000000000d02000000000000000000000d00000000000000000000000200000000000000000000005f00"], 0x0, 0x61}, 0x20) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aa2600000000000007000000010102ac1414aa0103070402000200"/46, @ANYRES32=0x41424344, @ANYRESOCT=r9, @ANYBLOB="5c00000790780000"], 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='^\\@}\'\\\x00', 0x2, &(0x7f0000000040)={@align=0xff, {0x2, 0x5, 0x6, 0x72}}, 0xfffffffc, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xb}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) (rerun: 64) 36.547211274s ago: executing program 0 (id=1586): r0 = socket(0x1d, 0x2, 0x6) bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd72, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010100000000000000000300000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000040000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005ffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003800000800800034000000002100002800c000280088f3c80ffffffff140000001000010000000000000000000084000a"], 0xe0}}, 0x0) 35.402800638s ago: executing program 1 (id=1587): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x8, 0x0, 0x0, 0x1, 0x8, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdfa55200000008000300", @ANYRES32=r3, @ANYBLOB="42008900050000000500880007000000060048002b000000", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x20810}, 0x8800) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xa0, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80, 0x6b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xfffffcff, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008080}, 0x4044880) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket(0x2c, 0x3, 0x40) (async) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x39) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x128, 0x2c, 0xd27, 0x30bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xf8, 0x2, [@TCA_FLOW_EMATCHES={0xf4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x40}, {0xffff, 0xa, 0x2, "3a5eb7b559039c6542cb"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x2, 0x2, 0x4}, {0x2, 0x8, 0x2, "84009ca69c247159"}}}, @TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0xff, 0x0, 0x3}, "e0c0d0039df5ae80353897a7437433612c0859ab4ca130226a083506d4e71e9a1faf2b1154f70042b796d03f0bcf303e7689835f336d50f3cfeeca8a3d32189c57dbfa6e7928285af292c76fa0a909644f68e0aa31842bdd5bb810768fcfdc922afc512611121824df2dd3bf8c7655bdf0d8e0611e45cd3cedaec23d3dce586c2142c0d3899fd35b85eb08"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x1}, {0x0, 0xfffffffa, 0x7ff, 0xfe}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x128}}, 0x2008c010) (async) shutdown(r5, 0x2) (async) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, 0x0) (async, rerun: 64) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (rerun: 64) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) 35.393459264s ago: executing program 3 (id=1588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x16, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000f4ff00000000000000000000000000000019000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000001"], 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 35.279014552s ago: executing program 0 (id=1589): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0x10, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=@newtfilter={0x2054, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x2024, 0x2, [@TCA_BASIC_ACT={0x1384, 0x3, [@m_sample={0xfc, 0x1a, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0xe559, 0x5, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0xffffffff, 0xffffffffffffffff, 0x2ad5, 0xcc6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x92}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xf}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffff0000, 0x2, 0x6, 0x1, 0xff}}]}, {0x78, 0x6, "7bdfea3bd9085b06cbe998ceed77f204511e681d3175fd626b7e68a4d930f20ab184085af444dcce8a374cb98f9845c74478a6435c99623fc2e4018dc26204fe474ce2c4dcb3b2d4513d0f701c953854afa23d507164056f80f378f8d7de3592e49e1457e2a67022f530024bcb968aeae4599ef1"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x120, 0x0, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e828e8dfd957130cd2d82689c14570fd"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}]}, {0xc3, 0x6, "ee437fb760b26850927756940ce6b2be7cc797f28c169c0e0d0f4c48a31cde2b15452b0ac5cb22ce7defd63a9cffc521eedbe18052e15365739b0e85372f5284e20735032ad71bacd35cc615c851fcdca7265574411ea093bfa816680e0c0cb1c654d085e583ab2b6067b4a8d0db690c307501daa1fafbc297938a02e2de9a1158010f3c6a49bc137bc846ae7f031cd1c341ef6c8935991769aff0a6a150f19ac4aa414f6e9f37ad2e1f0faedbea88c5e41cd984c7bfdcb2971392d96e1f76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x10dc, 0x1b, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf49, 0xffffffff, 0x10000000, 0xee7, 0xc24}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0xa, 0x2, 0x91e, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0xfffffffffffffffe, 0xf81, 0x3}, 0x1fa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x3, 0x800, 0xd67}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x6, 0x6, 0x7fff}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xf908, 0x20000000, 0x400, 0xfffffffb}, 0x5}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x400, 0x5, 0x7, 0x24d9, 0xe}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x200, 0x0, 0x10000000, 0x7, 0x2ec86d3f}}}, @TCA_IFE_SMAC={0xa, 0x4, @random="63c5745a193c"}]}, {0x1a, 0x6, "594c044db9e2f2e34bd9fbfb2d2c75d627eb11ad2344"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xc}}, @TCA_BASIC_POLICE={0xc94, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0xf78cd2c, 0x7fffffff, 0x4, {0x7, 0x2, 0x1, 0x8, 0xc6d2, 0x9}, {0x3d, 0x1, 0x8, 0x3, 0x9, 0x3}, 0x7ede347e, 0xdd, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x1, 0xffffff00, 0x7, 0x4, 0x9, 0x3, 0x8, 0x2, 0xfff, 0x8, 0x4, 0x8000, 0x32, 0x8, 0x8, 0x2fbed1a6, 0x8, 0x5, 0x0, 0x200, 0x7f, 0x8, 0x401, 0x10001, 0x7, 0x1, 0xfffffc00, 0x5, 0x3, 0x3, 0x5, 0x64, 0x0, 0x1, 0x8, 0x5, 0x100, 0x2238, 0x7, 0x7, 0x1, 0xde, 0x40, 0x2, 0x3ff, 0xc6d, 0xb3, 0x7, 0x7fff, 0x6, 0x8, 0x7, 0x6, 0x9, 0x2, 0x7, 0x5, 0x0, 0x7, 0xfffffff9, 0xa0c7, 0x9, 0xffffffc0, 0x401, 0xa6d, 0x6, 0x3, 0xfffffffa, 0x4, 0x1, 0x9, 0xffff, 0x6, 0x8, 0x101, 0x53e67234, 0xffff, 0x80, 0xbc7, 0x4, 0x4, 0xaef, 0x7, 0x101, 0x401, 0x0, 0x5, 0x2, 0x9, 0x8, 0xa6, 0x1, 0x3, 0x3, 0x401, 0x5, 0x8, 0x5, 0x3, 0xded7, 0x134571aa, 0x7f, 0x4, 0x10001, 0x1800, 0x5, 0x8000, 0x8, 0x8000, 0x4, 0x700, 0x4e, 0x8, 0x6, 0x7, 0x3, 0x7, 0x3, 0x8, 0x9, 0x7, 0xffffffe0, 0x80000000, 0x20, 0x5, 0x2, 0xc6, 0xc, 0x835, 0x4, 0xfff, 0x2, 0x80000001, 0x9c08, 0x7, 0xc, 0x75a8, 0xffffff80, 0x4, 0x0, 0x0, 0x2, 0x1, 0x6, 0x9, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0x2, 0x8, 0x7, 0xffff6480, 0x0, 0x29, 0x7, 0x9, 0xffff5cbd, 0x5, 0x9, 0x9, 0x7ff, 0x8, 0x194, 0x4, 0x0, 0x7fffffff, 0x6, 0x100, 0xfffffff7, 0x5, 0xf, 0x4, 0x4, 0x6, 0x6, 0x3, 0x2, 0x5, 0x1, 0x7, 0x6, 0x1, 0x3, 0x7, 0x8001, 0x7, 0x3, 0x9, 0x8001, 0x5, 0xec8f, 0x6, 0x51e6, 0x100, 0x100, 0xce7, 0x4, 0x5, 0x1, 0x4, 0x401, 0x30, 0x9, 0x2, 0x9, 0x9cb7, 0xea20, 0x2, 0x2, 0x7, 0x0, 0xff, 0x9, 0x40, 0xd, 0x8, 0x6, 0xfffffffe, 0x7fff, 0xeabf, 0x6, 0x0, 0x4, 0xb, 0x3, 0x7, 0x4, 0x5, 0xe, 0x0, 0x4, 0x1, 0x7, 0x8, 0x1000, 0x3, 0x5, 0xfd7, 0xfffffffa, 0x9, 0x101, 0x23, 0xfffffffb, 0xcf, 0xffff, 0x9, 0x6, 0x5, 0x200, 0x8d, 0xa355, 0x59]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x1, 0x7, 0x1, 0x59, {0x0, 0x0, 0x1, 0x0, 0x7b1c, 0x6}, {0x2, 0x1, 0x9, 0x177, 0xbd7, 0xfffffff7}, 0x3, 0x8, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x67, 0x6, 0x5, 0xc, 0xfffffffd, 0x151, 0xc, 0x1, 0x80000001, 0x81, 0x8, 0x32, 0x5, 0xffffff7d, 0x6, 0x7, 0x80000000, 0x10, 0x2, 0x5, 0x1, 0x8, 0x4, 0x6, 0x1000, 0x325, 0x0, 0x0, 0x100, 0x2, 0x1e0, 0xfffff958, 0x7, 0xe9, 0x0, 0x8, 0x5, 0x161379ac, 0x2, 0x4, 0x10a, 0x4, 0x6, 0x1, 0x7, 0xff, 0x4, 0x3, 0x6, 0x7fff, 0x2, 0xec, 0x6, 0xffff, 0x4, 0x0, 0x2, 0x380, 0x9, 0xcb, 0x8, 0x5, 0x6, 0x6, 0x8, 0xb, 0xdc, 0x2, 0x8, 0x401, 0x10001, 0x7ff, 0xc84, 0x8, 0x7, 0x1000, 0x6, 0x7fffffff, 0x3, 0x6, 0x13, 0x6, 0xa, 0x3, 0x7, 0xfffffff0, 0x2, 0x7, 0x0, 0x3, 0x6bf, 0x3, 0x2, 0x5, 0x5, 0x4c5, 0x3, 0x40, 0x1, 0xfffffffa, 0x4, 0xe88b, 0xfffff7c4, 0x1, 0xfffffeb8, 0x10001, 0x0, 0x8, 0xfffffffa, 0xa, 0xfffff1a3, 0xdd, 0x1, 0x8, 0x7, 0x1, 0x4, 0x9, 0x7838, 0x5dd, 0x400, 0x3, 0xa9d8, 0x0, 0x9, 0x400, 0xffff, 0x2, 0x6, 0x4, 0x6, 0x8, 0xa0, 0x4, 0x2, 0x10001, 0x0, 0x0, 0x9ed, 0x25, 0xe38, 0x10, 0x3, 0x7, 0x40000, 0x3ff, 0x80000001, 0xa, 0x100, 0xd9, 0x8001, 0x3, 0x9, 0x9, 0x5, 0xa1e1, 0x400, 0x7fffffff, 0x3, 0x5, 0xe4, 0xb, 0x8000, 0x80, 0x40, 0x2, 0x10000, 0x4, 0x0, 0x5, 0x7, 0x4, 0x7fff, 0x1000, 0x6, 0x1, 0xffffffff, 0x0, 0x8, 0x5, 0x6, 0x5, 0x5, 0xfff, 0x8, 0x0, 0x6, 0x3fe, 0x8001, 0xbc58, 0x2, 0x1, 0xfffffbff, 0x3ff, 0x1, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfffffffb, 0x1, 0x7, 0xc, 0x1, 0x80000001, 0x50, 0x9, 0x36000, 0xe7, 0x5, 0x8, 0x2, 0x401, 0x15a, 0x2, 0xd8, 0x0, 0x5, 0x9, 0x6f76a2e1, 0x9, 0x6, 0x9, 0x8, 0x6, 0x5fd9e5f6, 0x5e, 0x0, 0x7fff, 0x8, 0x5, 0x7, 0x0, 0x28a, 0x2, 0x4, 0x80, 0x9, 0x5, 0x7, 0x5, 0x5, 0x5, 0x80, 0x401, 0x5, 0xa04, 0x6, 0xa1, 0x2, 0x81, 0xe, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x9, 0x2, 0xfe, 0xf, 0xff, 0x8, 0x7fff, 0x3, 0x2, 0x635f, 0x7fffffff, 0xffff0001, 0x5, 0x7, 0xe, 0x70, 0x120, 0x1, 0x7f, 0x2, 0xa82, 0x0, 0x9, 0x8, 0x81, 0x21, 0x3, 0x4, 0x6, 0x8, 0x0, 0xeb9, 0x200, 0x6, 0x400, 0x5, 0xffff, 0x7fff, 0x10, 0x8, 0x200, 0x1, 0x4, 0x0, 0x0, 0x731, 0x200, 0x5, 0x1, 0x8, 0xbf4, 0x8, 0x3, 0xfffffffd, 0x7, 0x40, 0x3, 0x9, 0x0, 0x0, 0x401, 0xec8, 0x421d, 0x8, 0x7fffffff, 0x3, 0xffff, 0x0, 0x9cb4, 0x200, 0x1, 0x8, 0x8, 0x100, 0x7, 0xbfbf, 0xee, 0x8, 0x7, 0xfffffffb, 0x87b, 0x8, 0x4, 0x8e000000, 0xdaf, 0x0, 0xfffffff8, 0x8, 0x90a0, 0xb87, 0x2, 0x0, 0x10000, 0x81, 0x80000001, 0x0, 0x7fb5, 0x4, 0xa0f, 0x4, 0x5, 0x7, 0x1, 0x433, 0xfffffffa, 0x80000001, 0xb, 0x8, 0x82, 0x1, 0xe80, 0x39662885, 0x9, 0x18f, 0x7, 0xda, 0x9, 0xc, 0x9, 0x5b33, 0x4d4, 0x0, 0x8000, 0x3, 0x7f, 0xffff, 0x10, 0x7ff, 0xe962, 0x9, 0x80000001, 0x6a, 0x7f, 0xd, 0xfff, 0x4, 0x2, 0x81, 0x9, 0x7, 0x0, 0x0, 0x2, 0xe42e, 0x8, 0xfffffff7, 0x4, 0xfffff001, 0x6, 0x179, 0xe, 0x3, 0x7f, 0x2, 0xfff, 0x100, 0xff, 0xffff8001, 0x2, 0x1, 0x4, 0x7f, 0xd79, 0x89b, 0x2, 0x7ff, 0x7, 0x81, 0xe, 0x3, 0x6, 0x9, 0x5, 0x10001, 0x10001, 0x4, 0x7, 0x9, 0x0, 0x9, 0x1, 0x8, 0x5, 0x870c, 0x3, 0x4, 0xfffffc01, 0x2, 0x2, 0x0, 0xa8ef, 0x5, 0x2, 0x800, 0xc, 0x1f0f, 0x9, 0x9, 0x2, 0x6, 0xeb, 0x6, 0x7, 0x7, 0x7, 0x7, 0x8, 0x668, 0x1000, 0x2, 0x8, 0x9, 0xffff, 0x2, 0x0, 0x10, 0x4, 0xfff, 0x8001, 0x100000, 0x2, 0x2, 0x7, 0x5, 0x2, 0x8, 0xe, 0xd7bc, 0x78, 0x333, 0x81, 0x1000, 0x2, 0x9b5, 0x971, 0x5, 0x8000, 0x7, 0x200, 0xdc, 0x8, 0x10, 0x0, 0xf5, 0xe7f8, 0x9, 0x6, 0xd, 0x0, 0x6, 0x3, 0x0, 0x80000000, 0x8001, 0x2c3e]}]}]}}]}, 0x2054}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) (async) r5 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@delqdisc={0xf8, 0x25, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x8, 0xd}, {0x8, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x908f}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x8, 0xfffffa94, 0x1, 0x7, 0x0, 0x6}}, {0x10, 0x2, [0xc26, 0x6, 0xcbe2, 0x1ff, 0x2, 0x81]}}, {{0x1c, 0x1, {0x6, 0x5, 0x2, 0xffffffff, 0x1, 0x1, 0xc27a, 0x6}}, {0x10, 0x2, [0x4, 0x0, 0x8, 0x6, 0xc, 0x0]}}, {{0x1c, 0x1, {0x7, 0x4, 0x0, 0xfff, 0x0, 0x7ff, 0x2, 0x2}}, {0x8, 0x2, [0x6, 0xffc2]}}, {{0x1c, 0x1, {0x2, 0x0, 0x5, 0x6, 0x0, 0x9, 0x8a, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x9, 0x6, 0x7, 0xffffffff, 0x1, 0x10011, 0x7, 0x3}}, {0xa, 0x2, [0xfff8, 0x1ff, 0xc]}}]}]}, 0xf8}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0xfffc, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "263cb220ceea43c6", "c98b594dbcc2bca3f34365edbd055f48", "0500c230", "9e301b61c0d123b3"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7050023eb00", "d21b0e8a0e000000000000000600", "1d1cbe23", "717c34f544025fe2"}, 0x28) socket$packet(0x11, 0xa, 0x300) (async) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 33.726686097s ago: executing program 2 (id=1591): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x2, 0x3, 0xd, 0x82, 0x200, 0x3, 0xffff, 0x4}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x2, 0x3, 0xd, 0x82, 0x200, 0x3, 0xffff, 0x4}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x200000, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.487435274s ago: executing program 3 (id=1592): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f00000000009500170000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 33.365244106s ago: executing program 4 (id=1593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x4, 0x500, 0x6, 0x180107}) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x27, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 33.352952197s ago: executing program 3 (id=1594): r0 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe80000000000000000000000000002a4e234e22ef5fc851739afba27ff65300", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0x9, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@empty, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @rand_addr=' \x01\x00', {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x400}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000000608000140000000090900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000340)="f4001100032b2c25", 0x8}], 0x1}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000240)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x1e0, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x3, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x22, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x3, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 33.111225694s ago: executing program 4 (id=1595): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x8}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x4c000) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r3, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x26}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "f32424bc9fa671802b3e00f107a195cf"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d6f75e80a0f2346ea4097f7178dbdbb9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x88d1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc4, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x8044) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x15, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@jmp={0x5, 0x1, 0x3, 0xa, 0x2, 0x30, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x8, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940)=[{0x3, 0x3, 0x3, 0x7}, {0x1, 0x2, 0xb, 0xc}, {0x1, 0x4, 0xf, 0x4}, {0x4, 0x5, 0xa, 0x1}, {0x3, 0x2, 0xb, 0x9}], 0x10, 0x10}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a80)=@o_path={&(0x7f0000000740)='./file0\x00', r6, 0x4000, r1}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00', r6}, 0x18) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xcdb4987f01728664) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000d80)={'nat\x00', 0x6e, "d132e9a70854b58ecd269d68de9de4d57797846195303b143cd0378b2c180d3b6c38a324827ff9f5086316d625b2d2ed09b7fb93f8d8a3708b7237f7795e6bf1904edf48fca2f3bf61f0a1b3c93cb20455d01b712b2443def0354e1a8c11fed46fe50964c36ffdb38e1e68b87eac"}, &(0x7f0000000e40)=0x92) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x5c, r9, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x804) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001300)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001040)={0x258, r3, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5e}}}}, [@NL80211_ATTR_FRAME_MATCH={0x6e, 0x5b, "f40d3bf37b7f41bec493deb38b7d0eabf2ee1fd608a1827cdd45b79ab70bc337a2bdd75d51245790bf2a026cadf7f852713618b01c871ff3c2d62dbf1f0492794009c5a88110a2bd6247e5838ad48a0482247b056f067688d887bfe4ed162be2dbf449e99926ec4607c4"}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "faf0768e3af117c67ad088e17f634aafaeb3e1480c2b023891c5764927f1e26de8bb690502bdc4a9c0e239bf043c6821e1fc024b32008dc772c197e39e6b96bfe5c328742c49045fcea0f1bc6e2285f214e7767a447906df29a54233a1fb59bebcfaaec458edf91296520546eeeb56aadd6ffad37a8794713c1eb1075f53153c5d26a7ef6b6edb5822572ed8c42cca200b2143669e222040a03bae0703a540a4e9ccd9cb5d3b67"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1000}, @NL80211_ATTR_FRAME_MATCH={0x92, 0x5b, "416ea4dc35955a5ffb7951419ffd8782a4209ccd34e290c71943797c6378fa90f45b737fce726719276607e08f09ea44cb96fdb2d5d9f19bd8df1b8dd0fb47972f3f911b4bf0ec3560daeda4ef61fe3ecd1b99c7b818ddb0afcbf935efe066c058290de22e09b9cf196a068777ab13b50d6ca9f1c4a234dd7df1026d59e45d0af9383ecece1067edbea3036bebd9"}, @NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "ce3ea671674ec70d19b29968a859d366964a2a7306288ed1df776a731bd3ec0ef02489475b6dc02b2267"}, @NL80211_ATTR_FRAME_MATCH={0x2f, 0x5b, "71206103b6611093ffc1ade87b573d4a7a79817f42f8816842526ccd0d42e996d77361358985a51f4f1d7e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x258}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x90808400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001440)={"769f2367b59b88a68ed342ef2d07cf6b", 0x0, 0x0, {0x6, 0x236}, {0x5, 0x8}, 0x5ba, [0xffffffffffff0000, 0xffffffff80000000, 0x7, 0x7, 0xa, 0x400, 0xf, 0x2, 0x10000, 0x9, 0x51, 0x101, 0x622, 0x2, 0x4, 0x400]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001540)={"408efd571db25a8708fff605d0de0baa", r10, 0x0, {0x2db, 0x2}, {0x8, 0x3}, 0x2, [0xffffffff, 0xf9c, 0x8, 0x80000001, 0x85a1, 0x2, 0x3, 0x2, 0x0, 0x1ff, 0x20223ff3, 0x8a, 0x1ff, 0xd, 0x2, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000001640)=0x2) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000001680)={0x80}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001b80)={0x0, 0x16, "b87be21b2ab2976190331d2fdffe20a53745ad5fb11c"}, &(0x7f0000001bc0)=0x1e) sendmmsg$inet_sctp(r11, &(0x7f0000001c80)=[{&(0x7f0000001740)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001980)=[{&(0x7f0000001780)="69b6c04f393120bb5c10dcc9a15308e06d16c10eec258eee334f454e12e4255fdf89e198bb71dac90b78d728b6ad011bd9328df02b63f2ba1190c86605c48c803c02015721cd4ae4b18c6de5fe84b69e3c6df18208466cd1cf77c2", 0x5b}, {&(0x7f0000001800)="f85fe76c094ee916784920b7d8dc", 0xe}, {&(0x7f0000001840)="5c022bf8426c0e3e43cb332bd0882aa4e153aadec4bc", 0x16}, {&(0x7f0000001880)="1de26138063ac8b1a3332249c4dfb2d76ca0cdc6a983aed345bb7c871eb44042ea44c666b7f390219b47eeea2bdefcd3952c0a", 0x33}, {&(0x7f00000018c0)="7b6abcdeca5fd10471832f4eb28cb0a659fae1855218f4e9427d249c22cfd100fffe56b65cd9f036d53aca1ef6d99a8365f06e6dcf3d9285c0e5d0354cc85e935795b32c350e124d71c562b4bceb41743bcbb03b651de064712bc80ad60994dc546147e37ec6fc88dd263a138e517ad5c573f2025a3fe3ec42c9cb", 0x7b}, {&(0x7f0000001940)}], 0x6, &(0x7f0000001a00)=[@init={0x18, 0x84, 0x0, {0x5, 0x82, 0x4, 0x8001}}, @init={0x18, 0x84, 0x0, {0x5, 0xc19e, 0x9, 0x401}}], 0x30, 0x4}, {&(0x7f0000001a40)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000001a80)="b50ce1bba5a08b12b0d0ad0a9d9898a0c235d49b40cdc71b5dc196d1254e2ae8436ceefeddd24b3747d033f07f7a7a484817e15f48ebad31b4460cd1fd8641cf889bab7cd9749b81d0e16ba7463a67b1e47f0d315efead17995e6146f761dd51c7352f807ba81288cb3300b6f89d9e51f5b206b49a067bbca3c163474fa1fdfffc7f72fcb35789d1e49a91da274631ea7554", 0x92}], 0x1, &(0x7f0000001c00)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xf}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndrcv={0x30, 0x84, 0x1, {0xf80, 0x7fff, 0x200, 0x5, 0x2, 0x919, 0x9, 0x0, r12}}], 0x80, 0x20000010}], 0x2, 0x20040000) 32.768762153s ago: executing program 3 (id=1596): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 32.483913987s ago: executing program 0 (id=1597): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000180)={'batadv0\x00', @ifru_addrs=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f00"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 32.110878411s ago: executing program 4 (id=1598): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\t0', @ANYRES32=r0, @ANYRESDEC=r1], 0x44}}, 0x4000811) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 32.017554839s ago: executing program 4 (id=1599): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x620, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x22}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) (async, rerun: 64) sendto$inet(r1, &(0x7f00000000c0)="4f69bc74ea35596b88ce448ea0b547b0f0c9aa6b6e1ac5949565096dc9b2412756a32faea22cc82d52fffb05ab4760c92b5703aea222f6d516254c1a25c6052092c337c4e160dc794d84896ef506cbba31d7a772cc5bf30ade9d1e0be6b3c4aca6c6750a4b773154ffad21642c2e9d54d3a481d5159826db1c8f084579c8dbad4585b79345d607a5e37bd7db9c50382ae99f929c68283c6e5ff626465c88aec4", 0xa0, 0x40001, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000b80)) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async, rerun: 64) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 31.892848063s ago: executing program 4 (id=1600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010410000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b7040000000000008500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010410000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b7040000000000008500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) (async) 31.739120493s ago: executing program 4 (id=1601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x6, &(0x7f00000006c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xaf}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x7}], 0x0, 0x4, 0xffffff02, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000b4e5b9aff95892cfe88c4cf2000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000de287e2c4658fd38b9e3f979f6cbe400000080400000020000f2ffff070000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c000000c1d2cab4ffffffff0000000000000000000000000000000000030000000000000000000000000000e61cb394604f77839b5f4aaba0db107c2563b4940ddcc50b3524ffaac0f416bbbaca4469bbf662eb5f754cc82ec79825b652e629de8619e1f3277ab8835af48fd999530ab633e3817fd233be831d080c4503f26f8b343313dcaeb7fc58b781b0f3dda910"], 0xfc}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0x7}, {}, {0xa, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0x7}, {}, {0xa, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r12, 0xff06, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0x20, &(0x7f0000001700)={&(0x7f0000001640)=""/49, 0x31, 0x0, &(0x7f0000001680)=""/81, 0x51}}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000001880)={r7, &(0x7f0000001780)='*\x00', 0x101200, &(0x7f00000017c0)={@_ha_fsid={[0xff, 0x5]}, {0xffb0, 0x9, 0x80000001, 0x40}}, 0xda98, &(0x7f0000001800)={@_ha_fsid}, &(0x7f0000001840)=0x4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{0x1}, &(0x7f00000018c0), &(0x7f0000001900)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{0x1}, &(0x7f00000018c0), &(0x7f0000001900)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) 0s ago: executing program 32 (id=1587): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x8, 0x0, 0x0, 0x1, 0x8, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdfa55200000008000300", @ANYRES32=r3, @ANYBLOB="42008900050000000500880007000000060048002b000000", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x20810}, 0x8800) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xa0, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80, 0x6b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xfffffcff, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008080}, 0x4044880) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket(0x2c, 0x3, 0x40) (async) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x39) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x128, 0x2c, 0xd27, 0x30bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xf8, 0x2, [@TCA_FLOW_EMATCHES={0xf4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x40}, {0xffff, 0xa, 0x2, "3a5eb7b559039c6542cb"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x2, 0x2, 0x4}, {0x2, 0x8, 0x2, "84009ca69c247159"}}}, @TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0xff, 0x0, 0x3}, "e0c0d0039df5ae80353897a7437433612c0859ab4ca130226a083506d4e71e9a1faf2b1154f70042b796d03f0bcf303e7689835f336d50f3cfeeca8a3d32189c57dbfa6e7928285af292c76fa0a909644f68e0aa31842bdd5bb810768fcfdc922afc512611121824df2dd3bf8c7655bdf0d8e0611e45cd3cedaec23d3dce586c2142c0d3899fd35b85eb08"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x1}, {0x0, 0xfffffffa, 0x7ff, 0xfe}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x128}}, 0x2008c010) (async) shutdown(r5, 0x2) (async) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, 0x0) (async, rerun: 64) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (rerun: 64) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) kernel console output (not intermixed with test programs): [ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.293'. [ 114.238731][ T6981] syzkaller1: entered promiscuous mode [ 114.238754][ T6981] syzkaller1: entered allmulticast mode [ 114.341504][ T6983] netlink: 44 bytes leftover after parsing attributes in process `syz.2.299'. [ 114.411331][ T6992] netlink: 'syz.0.300': attribute type 8 has an invalid length. [ 114.522978][ T7003] netlink: 'syz.4.297': attribute type 12 has an invalid length. [ 114.568690][ T6998] netlink: 'syz.1.301': attribute type 12 has an invalid length. [ 115.031674][ T7020] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 115.254684][ T7025] geneve2: entered promiscuous mode [ 115.254710][ T7025] geneve2: entered allmulticast mode [ 115.278219][ T7030] syzkaller1: entered promiscuous mode [ 115.278246][ T7030] syzkaller1: entered allmulticast mode [ 115.418922][ T7033] tc_dump_action: action bad kind [ 115.953197][ T7058] netlink: 'syz.2.317': attribute type 3 has an invalid length. [ 116.210607][ T7069] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 116.260495][ T7069] xt_hashlimit: size too large, truncated to 1048576 [ 116.798122][ T5617] Bluetooth: hci2: connection err: -111 [ 116.801046][ T5617] Bluetooth: hci2: connection err: -111 [ 116.890960][ T7098] x_tables: duplicate underflow at hook 2 [ 116.990983][ T6234] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.991179][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.991254][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.018897][ T6234] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.242625][ T7115] tipc: Started in network mode [ 117.242659][ T7115] tipc: Node identity e66f69a86b0d, cluster identity 4711 [ 117.242884][ T7115] tipc: Enabled bearer , priority 0 [ 117.245211][ T7115] netlink: 'syz.2.332': attribute type 3 has an invalid length. [ 117.245230][ T7115] __nla_validate_parse: 13 callbacks suppressed [ 117.245242][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 117.298261][ T7118] syzkaller0: entered promiscuous mode [ 117.298285][ T7118] syzkaller0: entered allmulticast mode [ 117.359903][ T7119] netlink: 'syz.2.332': attribute type 32 has an invalid length. [ 117.359927][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 117.584259][ T7119] bond1: option coupled_control: invalid value (192) [ 117.648976][ T7119] bond1 (unregistering): Released all slaves [ 117.828205][ T7118] tipc: Resetting bearer [ 117.886724][ T7114] tipc: Resetting bearer [ 117.913572][ T7114] tipc: Disabling bearer [ 117.968458][ T7137] dvmrp8: entered allmulticast mode [ 118.439900][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 118.816982][ T7177] ip6t_srh: unknown srh match flags 5F28 [ 119.382078][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 119.738459][ T7208] netlink: 36 bytes leftover after parsing attributes in process `syz.0.356'. [ 119.826814][ T7215] tipc: Enabling of bearer rejected, failed to enable media [ 119.906315][ T7217] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 120.040527][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 120.090633][ T7231] vlan0: entered promiscuous mode [ 120.096372][ T7231] vlan0: entered allmulticast mode [ 120.097593][ T7231] veth0_vlan: entered allmulticast mode [ 120.273244][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 120.273518][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 120.706735][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 120.707246][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 120.783386][ T7256] xt_CT: No such helper "pptp" [ 120.851277][ T7266] xt_HMARK: proto mask must be zero with L3 mode [ 120.885149][ T7254] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 120.922066][ T7268] x_tables: duplicate underflow at hook 3 [ 121.288031][ T7281] netlink: 'syz.0.380': attribute type 58 has an invalid length. [ 121.484063][ T7278] bond1 (unregistering): Released all slaves [ 122.028660][ T7307] syzkaller1: entered allmulticast mode [ 122.125986][ T7313] netlink: 'syz.1.387': attribute type 4 has an invalid length. [ 122.275558][ T7327] Cannot find add_set index 65532 as target [ 122.315299][ T5722] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 122.338170][ T7322] 8021q: VLANs not supported on ip6tnl0 [ 122.338661][ T7308] __nla_validate_parse: 7 callbacks suppressed [ 122.338675][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.386'. [ 122.338689][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.386'. [ 122.530939][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 122.532858][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 123.013514][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 123.013537][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 123.315760][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 123.318381][ T5722] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 123.444852][ T7383] syz.2.396 (7383) used obsolete PPPIOCDETACH ioctl [ 124.065813][ T7407] bond0: entered allmulticast mode [ 124.065847][ T7407] bond_slave_0: entered allmulticast mode [ 124.065863][ T7407] bond_slave_1: entered allmulticast mode [ 124.367989][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 124.650525][ T7437] netlink: 96 bytes leftover after parsing attributes in process `syz.4.413'. [ 125.068563][ T7452] xt_hashlimit: size too large, truncated to 1048576 [ 125.675889][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 126.006658][ T7498] No such timeout policy "syz1" [ 126.009035][ T7464] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 126.283696][ T7472] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 127.042904][ T7535] netlink: 'syz.0.440': attribute type 6 has an invalid length. [ 127.188653][ T7539] No such timeout policy "syz1" [ 127.462440][ T5617] Bluetooth: hci0: command 0x0c20 tx timeout [ 127.863785][ T7558] __nla_validate_parse: 4 callbacks suppressed [ 127.863808][ T7558] netlink: 104 bytes leftover after parsing attributes in process `syz.0.448'. [ 129.485006][ T7514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.853695][ T7575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.453'. [ 129.853723][ T7575] netlink: 43 bytes leftover after parsing attributes in process `syz.0.453'. [ 129.853737][ T7575] netlink: 'syz.0.453': attribute type 6 has an invalid length. [ 129.853750][ T7575] netlink: 'syz.0.453': attribute type 5 has an invalid length. [ 129.853761][ T7575] netlink: 43 bytes leftover after parsing attributes in process `syz.0.453'. [ 129.857217][ T7576] Timeout policy `syz1' can only be used by L3 protocol number 35006 [ 130.380457][ T7607] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.380500][ T7607] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 133.063865][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.063927][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.205214][ T7595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.207512][ T7611] netlink: 256 bytes leftover after parsing attributes in process `syz.2.466'. [ 133.862819][ T7648] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.474'. [ 133.862846][ T7648] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 133.945021][ T7654] xt_nat: multiple ranges no longer supported [ 133.945258][ T7656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.478'. [ 134.140871][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.481'. [ 134.147231][ T7658] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 134.398129][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 134.826080][ T7702] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.862969][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.493'. [ 134.863032][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.493'. [ 135.218007][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 135.220032][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'. [ 135.405694][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.496'. [ 135.861915][ T5617] Bluetooth: hci3: command tx timeout [ 136.359520][ T7772] openvswitch: netlink: Flow key attr not present in new flow. [ 136.539603][ T7771] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 137.195975][ T7822] syzkaller1: entered promiscuous mode [ 137.196002][ T7822] syzkaller1: entered allmulticast mode [ 137.666302][ T7840] Cannot find add_set index 34 as target [ 138.560587][ T7872] __nla_validate_parse: 8 callbacks suppressed [ 138.560609][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'. [ 138.675226][ T7878] netlink: 96 bytes leftover after parsing attributes in process `syz.1.539'. [ 139.035335][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 139.035360][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 139.067540][ T7892] netlink: 'syz.0.542': attribute type 4 has an invalid length. [ 139.067565][ T7892] netlink: 152 bytes leftover after parsing attributes in process `syz.0.542'. [ 139.075590][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.546'. [ 139.103408][ T7892] .`: renamed from bond0 [ 139.125237][ T7897] netlink: 48 bytes leftover after parsing attributes in process `syz.1.546'. [ 139.156242][ T7897] netlink: 104 bytes leftover after parsing attributes in process `syz.1.546'. [ 139.191599][ T7899] netlink: 44 bytes leftover after parsing attributes in process `syz.3.547'. [ 139.420546][ T7901] netlink: 140 bytes leftover after parsing attributes in process `syz.3.548'. [ 140.459397][ T7953] x_tables: unsorted entry at hook 1 [ 141.152980][ T7991] netlink: 'syz.1.572': attribute type 7 has an invalid length. [ 141.153002][ T7991] netlink: 'syz.1.572': attribute type 8 has an invalid length. [ 141.225059][ T7991] erspan0: entered promiscuous mode [ 141.226302][ T7991] gretap0: entered promiscuous mode [ 141.245662][ T7991] erspan0: left promiscuous mode [ 141.248297][ T7991] gretap0: left promiscuous mode [ 141.280709][ T8002] netlink: 'syz.1.572': attribute type 7 has an invalid length. [ 141.280732][ T8002] netlink: 'syz.1.572': attribute type 8 has an invalid length. [ 141.333559][ T8002] erspan0: entered promiscuous mode [ 141.334887][ T8002] gretap0: entered promiscuous mode [ 141.351979][ T8002] erspan0: left promiscuous mode [ 141.366329][ T8002] gretap0: left promiscuous mode [ 141.486875][ T8009] netlink: 'syz.0.576': attribute type 9 has an invalid length. [ 141.596741][ T8014] bridge0: port 3(syz_tun) entered blocking state [ 141.596911][ T8014] bridge0: port 3(syz_tun) entered disabled state [ 141.597166][ T8014] syz_tun: entered allmulticast mode [ 141.599425][ T8014] syz_tun: entered promiscuous mode [ 141.626257][ T8014] bridge0: port 3(syz_tun) entered blocking state [ 141.626390][ T8014] bridge0: port 3(syz_tun) entered forwarding state [ 142.158108][ T8044] unsupported nlmsg_type 40 [ 142.158532][ T8045] netlink: 'syz.1.584': attribute type 3 has an invalid length. [ 142.159985][ T8043] lo: entered promiscuous mode [ 142.160168][ T8043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.409899][ T8109] x_tables: duplicate underflow at hook 1 [ 143.665917][ T8113] netlink: 'syz.2.600': attribute type 10 has an invalid length. [ 143.916556][ T8127] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 143.916579][ T8127] __nla_validate_parse: 40 callbacks suppressed [ 143.916592][ T8127] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.607'. [ 143.916608][ T8127] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 143.916629][ T8127] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.607'. [ 143.967122][ T8122] veth3: entered allmulticast mode [ 144.312053][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 144.336916][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 144.512902][ T8158] macvlan0: entered promiscuous mode [ 144.515984][ T8158] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 144.867035][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'. [ 144.914809][ T8176] veth0_to_bond: entered allmulticast mode [ 145.218973][ T8192] netlink: 36 bytes leftover after parsing attributes in process `syz.3.625'. [ 145.279230][ T8189] h: entered promiscuous mode [ 145.381691][ T8202] tipc: Enabling of bearer rejected, failed to enable media [ 145.407267][ T8202] netlink: 'syz.4.627': attribute type 2 has an invalid length. [ 145.407289][ T8202] netlink: 188 bytes leftover after parsing attributes in process `syz.4.627'. [ 145.407609][ T8203] netlink: 'syz.4.627': attribute type 2 has an invalid length. [ 145.407623][ T8203] netlink: 188 bytes leftover after parsing attributes in process `syz.4.627'. [ 145.587827][ T8215] netlink: 'syz.2.630': attribute type 29 has an invalid length. [ 145.587851][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 145.668072][ T8222] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 145.896841][ T8231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'. [ 146.090626][ T8243] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 7, id = 0 [ 146.093800][ T8241] IPVS: stopping backup sync thread 8243 ... [ 146.632298][ T8272] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 147.205463][ T8289] macvlan1: entered allmulticast mode [ 147.388466][ T8301] openvswitch: netlink: IP tunnel dst address not specified [ 147.474804][ T8303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.659940][ T8314] ip6t_srh: unknown srh invflags 4000 [ 147.896062][ T8326] netlink: 'syz.4.658': attribute type 15 has an invalid length. [ 147.948613][ T8326] netlink: 'syz.4.658': attribute type 15 has an invalid length. [ 148.001657][ T6236] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 148.001706][ T6236] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 148.001740][ T6236] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 148.001772][ T6236] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 148.025180][ T8336] sctp: [Deprecated]: syz.3.660 (pid 8336) Use of int in max_burst socket option deprecated. [ 148.025180][ T8336] Use struct sctp_assoc_value instead [ 148.152696][ T8340] netlink: 'syz.4.658': attribute type 15 has an invalid length. [ 148.165866][ T5617] block nbd0: Receive control failed (result -107) [ 148.202052][ T8340] netlink: 'syz.4.658': attribute type 15 has an invalid length. [ 148.287781][ T8339] netlink: Unknown conntrack attr (type=15110, max=9) [ 148.349108][ T8354] No such timeout policy "s" [ 148.349127][ T8354] netlink: Failed to associated timeout policy 's' [ 148.349650][ T8354] No such timeout policy "s" [ 148.349660][ T8354] netlink: Failed to associated timeout policy 's' [ 148.350132][ T8354] No such timeout policy "s" [ 148.350142][ T8354] netlink: Failed to associated timeout policy 's' [ 148.350648][ T8354] No such timeout policy "s" [ 148.350658][ T8354] netlink: Failed to associated timeout policy 's' [ 148.355762][ T5617] block nbd1: Receive control failed (result -32) [ 148.406792][ T8354] No such timeout policy "s" [ 148.406809][ T8354] netlink: Failed to associated timeout policy 's' [ 148.407366][ T8354] No such timeout policy "s" [ 148.407377][ T8354] netlink: Failed to associated timeout policy 's' [ 148.409478][ T8354] No such timeout policy "s" [ 148.409491][ T8354] netlink: Failed to associated timeout policy 's' [ 148.410061][ T8354] No such timeout policy "s" [ 148.410594][ T8354] No such timeout policy "s" [ 148.448116][ T8354] No such timeout policy "s" [ 148.776134][ T8365] netlink: 'syz.1.669': attribute type 4 has an invalid length. [ 149.059552][ T8378] netlink: 'syz.2.672': attribute type 32 has an invalid length. [ 149.059576][ T8378] __nla_validate_parse: 21 callbacks suppressed [ 149.059587][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 149.126055][ T8378] bond3: Setting coupled_control to off (0) [ 149.126447][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 149.317557][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 149.319440][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 149.468475][ T8399] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 149.479600][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.679'. [ 149.573476][ T31] audit: type=1800 audit(1789918296.010:4): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.682" name="memory.events" dev="tmpfs" ino=770 res=0 errno=0 [ 149.595588][ T31] audit: type=1804 audit(1789918296.030:5): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.682" name="/newroot/146/memory.events" dev="tmpfs" ino=770 res=1 errno=0 [ 149.615948][ T8405] netlink: 132 bytes leftover after parsing attributes in process `syz.0.682'. [ 149.650814][ T8412] sctp: [Deprecated]: syz.2.681 (pid 8412) Use of int in maxseg socket option. [ 149.650814][ T8412] Use struct sctp_assoc_value instead [ 149.650852][ T8412] sctp: [Deprecated]: syz.2.681 (pid 8412) Use of int in maxseg socket option. [ 149.650852][ T8412] Use struct sctp_assoc_value instead [ 149.650877][ T8412] sctp: [Deprecated]: syz.2.681 (pid 8412) Use of int in maxseg socket option. [ 149.650877][ T8412] Use struct sctp_assoc_value instead [ 149.650900][ T8412] sctp: [Deprecated]: syz.2.681 (pid 8412) Use of int in maxseg socket option. [ 149.650900][ T8412] Use struct sctp_assoc_value instead [ 149.650924][ T8412] sctp: [Deprecated]: syz.2.681 (pid 8412) Use of int in maxseg socket option. [ 149.650924][ T8412] Use struct sctp_assoc_value instead [ 149.650948][ T8412] sctp: [Deprecated]: syz.2.681 (pid 8412) Use of int in maxseg socket option. [ 149.650948][ T8412] Use struct sctp_assoc_value instead [ 149.650971][ T8412] sctp: [Deprecated]: syz.2.681 (pid 8412) Use of int in maxseg socket option. [ 149.650971][ T8412] Use struct sctp_assoc_value instead [ 149.650994][ T8412] sctp: [Deprecated]: syz.2.681 (pid 8412) Use of int in maxseg socket option. [ 149.650994][ T8412] Use struct sctp_assoc_value instead [ 149.651017][ T8412] sctp: [Deprecated]: syz.2.681 (pid 8412) Use of int in maxseg socket option. [ 149.651017][ T8412] Use struct sctp_assoc_value instead [ 149.651042][ T8412] sctp: [Deprecated]: syz.2.681 (pid 8412) Use of int in maxseg socket option. [ 149.651042][ T8412] Use struct sctp_assoc_value instead [ 149.829628][ T8417] netlink: 244 bytes leftover after parsing attributes in process `syz.0.683'. [ 149.830258][ T8417] netlink: 36 bytes leftover after parsing attributes in process `syz.0.683'. [ 150.119367][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 150.423009][ T8434] validate_nla: 3 callbacks suppressed [ 150.423030][ T8434] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 150.423043][ T8434] netlink: 224 bytes leftover after parsing attributes in process `syz.1.689'. [ 150.423216][ T8434] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 150.423371][ T8434] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 150.423523][ T8434] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 150.423674][ T8434] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 150.423821][ T8434] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 150.432705][ T8434] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 150.433517][ T8434] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 150.436270][ T8434] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 150.436425][ T8434] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 150.496793][ T8444] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 150.496793][ T8444] Please contact the netfilter-devel mailing list or update your nftables rules. [ 150.574014][ T8439] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 150.592897][ T8439] bond1 (unregistering): Released all slaves [ 151.010467][ T8440] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 151.024761][ T8440] bond1 (unregistering): Released all slaves [ 152.348445][ T8508] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.810191][ T8524] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 152.814939][ T8524] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 152.819200][ T8524] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 153.396432][ T8535] net_ratelimit: 62 callbacks suppressed [ 153.396454][ T8535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.418375][ T8532] xt_l2tp: invalid flags combination: 0 [ 153.736957][ T8546] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.036755][ T43] IPVS: starting estimator thread 0... [ 154.129630][ T8555] IPVS: Scheduler module ip_vs_mh not found [ 154.129736][ T8557] IPVS: using max 24 ests per chain, 57600 per kthread [ 154.233461][ T8555] __nla_validate_parse: 64 callbacks suppressed [ 154.233511][ T8555] netlink: 64 bytes leftover after parsing attributes in process `syz.3.722'. [ 154.765947][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 154.810974][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 154.816898][ T8567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.725'. [ 154.816924][ T8567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.725'. [ 154.886212][ T8562] x_tables: duplicate underflow at hook 1 [ 156.067797][ T8613] ip6_vti0: entered promiscuous mode [ 156.083139][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 156.437686][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 156.483602][ T8625] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 156.483637][ T8625] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 156.483671][ T8625] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 156.559995][ T8625] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.578244][ T8625] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 156.595073][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 157.000365][ T8643] nf_ct_set_timeout: 55 callbacks suppressed [ 157.000387][ T8643] No such timeout policy "syz1" [ 157.529163][ T59] smbdirect: ib_dev[syz2] removed [ 157.763097][ T8625] siw: device registration error -19 [ 158.895455][ T8697] validate_nla: 12 callbacks suppressed [ 158.895477][ T8697] netlink: 'syz.2.758': attribute type 32 has an invalid length. [ 159.337267][ T8710] No such timeout policy "syz1" [ 159.588602][ T8715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.765'. [ 159.742842][ T8715] raw_sendmsg: syz.2.765 forgot to set AF_INET. Fix it! [ 159.995719][ T52] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 160.261146][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 160.373343][ T8744] tipc: Can't bind to reserved service type 2 [ 160.595878][ T8752] x_tables: duplicate underflow at hook 1 [ 160.596853][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 160.598304][ T8753] x_tables: duplicate underflow at hook 1 [ 160.770178][ T8755] No such timeout policy "syz1" [ 161.047458][ T8763] bridge0: port 3(veth1_to_bridge) entered blocking state [ 161.047652][ T8763] bridge0: port 3(veth1_to_bridge) entered disabled state [ 161.047820][ T8763] veth1_to_bridge: entered allmulticast mode [ 161.050132][ T8763] veth1_to_bridge: entered promiscuous mode [ 161.056019][ T8763] netlink: 256 bytes leftover after parsing attributes in process `syz.2.780'. [ 161.555835][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 162.273709][ T8796] netlink: 'syz.4.791': attribute type 83 has an invalid length. [ 162.279744][ T8797] Timeout policy `syz1' can only be used by L3 protocol number 35006 [ 162.850247][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 162.950479][ T8809] tipc: Enabled bearer , priority 0 [ 162.964645][ T8811] syzkaller0: entered promiscuous mode [ 162.964709][ T8811] syzkaller0: entered allmulticast mode [ 163.253146][ T8824] tipc: Resetting bearer [ 163.293438][ T8806] tipc: Resetting bearer [ 163.352470][ T8806] tipc: Disabling bearer [ 163.392706][ T8844] tipc: Enabling of bearer rejected, failed to enable media [ 163.465384][ T8846] netlink: 112 bytes leftover after parsing attributes in process `syz.0.803'. [ 163.817665][ T8858] syzkaller0: entered promiscuous mode [ 163.817689][ T8858] syzkaller0: entered allmulticast mode [ 164.523788][ T8876] netlink: 76 bytes leftover after parsing attributes in process `syz.1.812'. [ 164.660504][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.810'. [ 164.795933][ T8887] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 165.030121][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 165.030158][ T8896] netlink: 'syz.2.817': attribute type 10 has an invalid length. [ 165.030175][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 165.071577][ T8887] bond5: entered promiscuous mode [ 165.078180][ T8898] netlink: 'syz.4.818': attribute type 9 has an invalid length. [ 165.089105][ T8887] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.412558][ T8907] netlink: 144 bytes leftover after parsing attributes in process `syz.2.820'. [ 165.533315][ T8916] netlink: 13 bytes leftover after parsing attributes in process `syz.2.824'. [ 165.538967][ T8912] netlink: 524 bytes leftover after parsing attributes in process `syz.1.821'. [ 166.016785][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 166.467914][ T8939] sctp: [Deprecated]: syz.3.832 (pid 8939) Use of int in max_burst socket option. [ 166.467914][ T8939] Use struct sctp_assoc_value instead [ 166.555627][ T8941] netlink: 'syz.3.832': attribute type 29 has an invalid length. [ 166.603768][ T8944] netlink: 48 bytes leftover after parsing attributes in process `syz.2.836'. [ 166.626325][ T8944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.665451][ T8945] netlink: 'syz.3.832': attribute type 29 has an invalid length. [ 166.816377][ T8951] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 166.997901][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 167.023911][ T8951] macvlan2: entered promiscuous mode [ 167.023935][ T8951] macvlan2: entered allmulticast mode [ 167.025111][ T8951] bond0: entered promiscuous mode [ 167.026005][ T8951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.030405][ T8951] bond0: left promiscuous mode [ 167.037569][ T8964] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 167.077678][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 167.086174][ T8955] can: request_module (can-proto-0) failed. [ 167.264200][ T8962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.356892][ T8960] macvlan2: entered promiscuous mode [ 167.356916][ T8960] macvlan2: entered allmulticast mode [ 167.357745][ T8960] bond0: entered promiscuous mode [ 167.359901][ T8960] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.396812][ T8960] bond0: left promiscuous mode [ 167.397044][ T8967] can: request_module (can-proto-0) failed. [ 167.837952][ T8984] netlink: 'syz.4.838': attribute type 11 has an invalid length. [ 167.864404][ T8984] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 168.243395][ T8998] bond3: entered promiscuous mode [ 168.295637][ T8992] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 168.539052][ T9015] netlink: 'syz.4.847': attribute type 3 has an invalid length. [ 169.964141][ T9044] __nla_validate_parse: 3 callbacks suppressed [ 169.964161][ T9044] netlink: 76 bytes leftover after parsing attributes in process `syz.4.859'. [ 170.919970][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.857'. [ 171.773552][ T9090] netlink: 92 bytes leftover after parsing attributes in process `syz.1.870'. [ 173.004865][ T9109] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.004963][ T9109] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.235858][ T9094] bridge1: entered promiscuous mode [ 173.235897][ T9094] bridge1: entered allmulticast mode [ 173.273703][ T6234] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.603439][ T9131] netlink: 'syz.2.880': attribute type 28 has an invalid length. [ 173.603463][ T9131] netlink: 'syz.2.880': attribute type 3 has an invalid length. [ 173.603474][ T9131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.880'. [ 173.604474][ T9131] netlink: 'syz.2.880': attribute type 29 has an invalid length. [ 173.615596][ T9125] 8021q: adding VLAN 0 to HW filter on device bond6 [ 173.616788][ T9131] netlink: 'syz.2.880': attribute type 29 has an invalid length. [ 173.618006][ T9131] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 173.632606][ T9131] team0: Port device dummy0 added [ 174.094077][ T9135] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 174.116772][ T9135] bond1 (unregistering): Released all slaves [ 174.410104][ T6234] IPVS: starting estimator thread 0... [ 174.501881][ T9159] IPVS: using max 26 ests per chain, 62400 per kthread [ 174.576269][ T9165] sock: sock_set_timeout: `syz.0.887' (pid 9165) tries to set negative timeout [ 174.872506][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 175.114171][ T9180] xt_LOG: level 8 >= 8 [ 175.186919][ T9189] xt_LOG: level 8 >= 8 [ 175.454806][ T9191] xt_hashlimit: size too large, truncated to 1048576 [ 175.672285][ T9199] veth0: entered promiscuous mode [ 175.693468][ T9202] Bluetooth: hci0: unsupported parameter 5161 [ 175.693529][ T9202] Bluetooth: hci0: unsupported parameter 8192 [ 175.693559][ T9202] Bluetooth: hci0: unsupported parameter 5161 [ 175.693570][ T9202] Bluetooth: hci0: unsupported parameter 8192 [ 176.220463][ T5277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.244638][ T9193] veth0: left promiscuous mode [ 176.573115][ T9228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.616456][ T9231] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 176.624562][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 176.711814][ T9235] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.905'. [ 176.711840][ T9235] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 177.297073][ T9254] IPVS: set_ctl: invalid protocol: 0 172.20.20.11:20004 [ 177.304284][ T9254] xt_bpf: check failed: parse error [ 177.318743][ T9250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.910'. [ 177.320377][ T9250] netlink: 'syz.1.910': attribute type 10 has an invalid length. [ 177.356498][ T9250] syz_tun: entered promiscuous mode [ 177.472700][ T9250] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 177.562716][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 177.564802][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 178.001666][ T9267] syzkaller0: entered promiscuous mode [ 178.001699][ T9267] syzkaller0: entered allmulticast mode [ 178.553760][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 178.968684][ T9296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.048940][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 179.067321][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 179.067786][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 179.068112][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 179.097007][ T9296] tipc: Started in network mode [ 179.097036][ T9296] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 179.116629][ T9296] tipc: Enabled bearer , priority 10 [ 179.474248][ T9310] netlink: 'syz.4.929': attribute type 18 has an invalid length. [ 179.474959][ T9310] netlink: 'syz.4.929': attribute type 18 has an invalid length. [ 179.865716][ T9328] syzkaller0: entered promiscuous mode [ 179.865740][ T9328] syzkaller0: entered allmulticast mode [ 180.226651][ T9] tipc: Node number set to 4269801488 [ 180.376892][ T9344] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 181.081471][ T9359] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 181.224258][ T9359] bond4: entered promiscuous mode [ 181.224914][ T9359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.273949][ T9364] ipvlan2: entered allmulticast mode [ 181.273972][ T9364] bond4: entered allmulticast mode [ 181.275749][ T9364] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 181.275773][ T9364] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 181.275788][ T9364] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 181.277722][ T9364] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 181.886496][ T52] Bluetooth: hci3: ACL packet too small [ 182.169997][ T9393] __nla_validate_parse: 7 callbacks suppressed [ 182.170056][ T9393] netlink: 104 bytes leftover after parsing attributes in process `syz.0.952'. [ 182.217340][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 182.226919][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 182.334001][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 182.334760][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 182.335380][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 182.360212][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 182.369425][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 182.369943][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 182.370439][ T9395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 183.066747][ T9412] netlink: 'syz.4.955': attribute type 15 has an invalid length. [ 184.524634][ T9449] netlink: 'syz.1.964': attribute type 10 has an invalid length. [ 184.540128][ T9450] netlink: 'syz.1.964': attribute type 10 has an invalid length. [ 184.803820][ T9450] netlink: Unknown conntrack attr (type=8198, max=9) [ 184.803860][ T9450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.508621][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.823056][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 206.827142][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 206.827184][ T5628] Bluetooth: hci0: command 0x0c20 tx timeout [ 206.837164][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 214.986031][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 247.972259][ T9473] veth1: entered promiscuous mode [ 247.995479][ T9476] tunl0: entered promiscuous mode [ 248.018090][ T9476] netlink: 'syz.1.969': attribute type 4 has an invalid length. [ 248.018156][ T9476] __nla_validate_parse: 27 callbacks suppressed [ 248.018191][ T9476] netlink: 9 bytes leftover after parsing attributes in process `syz.1.969'. [ 248.891155][ T9504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.975'. [ 249.103943][ T9510] 8021q: VLANs not supported on ip_vti0 [ 249.132934][ T5730] hid-generic 0005:07C0:0002.0001: unknown main item tag 0x0 [ 249.185981][ T5730] hid-generic 0005:07C0:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 249.771398][ T9530] bridge3: entered promiscuous mode [ 249.771525][ T9530] bridge3: entered allmulticast mode [ 249.981852][ T9546] netlink: 'syz.3.989': attribute type 11 has an invalid length. [ 250.038033][ T9548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.987'. [ 250.964928][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'. [ 251.086340][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 251.719810][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'. [ 252.043837][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 252.083794][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 252.993994][ T5617] Bluetooth: hci1: unexpected cc 0x2003 length: 0 < 9 [ 252.994090][ T5617] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 253.148402][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 253.596117][ T9644] syz.3.1018 (9644) used greatest stack depth: 18312 bytes left [ 253.597202][ T9649] syz.3.1018 (9649) used greatest stack depth: 17392 bytes left [ 253.623982][ T9653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 254.413220][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 254.523528][ T9678] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 255.244646][ T9703] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1030'. [ 255.465105][ T9713] Bluetooth: hci0: unsupported parameter 5135 [ 255.465131][ T9713] Bluetooth: hci0: unsupported parameter 8192 [ 255.465144][ T9713] Bluetooth: hci0: unsupported parameter 5135 [ 255.465156][ T9713] Bluetooth: hci0: unsupported parameter 8192 [ 255.679498][ T9716] ip_tables: iptables: counters copy to user failed while replacing table [ 255.692226][ T9716] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 255.777380][ T9721] veth1_macvtap: left promiscuous mode [ 255.945011][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.139199][ T9731] netlink: 'syz.0.1037': attribute type 25 has an invalid length. [ 256.307793][ T5617] Bluetooth: hci4: link tx timeout [ 256.308088][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 256.308891][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1039'. [ 256.309733][ T5617] Bluetooth: hci4: link tx timeout [ 256.309763][ T5617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 256.367346][ T9739] veth1_to_bond: entered allmulticast mode [ 256.519138][ T9745] veth1_to_bond: left allmulticast mode [ 256.729923][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 256.842320][ T9745] bond0: (slave bond_slave_1): Releasing backup interface [ 257.328642][ T9758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1044'. [ 258.342059][ T4932] Bluetooth: hci4: command 0x0405 tx timeout [ 258.350172][ T9794] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 258.391054][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1051'. [ 258.391117][ T9796] openvswitch: netlink: Flow actions attr not present in new flow. [ 258.419751][ T9794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1051'. [ 258.697614][ T9794] ip6tnl1: entered promiscuous mode [ 258.697641][ T9794] ip6tnl1: entered allmulticast mode [ 258.814722][ T5277] veth1_macvtap: entered promiscuous mode [ 260.157091][ T9832] bond1: entered promiscuous mode [ 260.423152][ T4932] Bluetooth: hci4: command 0x0405 tx timeout [ 260.928708][ T9868] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 260.938326][ T9868] team0: Device ipvlan2 is already an upper device of the team interface [ 260.970539][ T9877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.350248][ T9862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.886634][ T9908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1074'. [ 261.886671][ T9908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1074'. [ 262.349685][ T9917] IPVS: length: 185 != 24 [ 262.712889][ T9929] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1080'. [ 262.730467][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1080'. [ 262.770179][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 262.946452][ T9912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1077'. [ 262.956555][ T9936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.231408][ T9936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.291544][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1082'. [ 263.299592][ T9948] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1084'. [ 263.490626][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 263.636432][ T9954] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1086'. [ 263.684059][ T9954] netlink: 'syz.0.1086': attribute type 21 has an invalid length. [ 263.704083][ T9954] netlink: 'syz.0.1086': attribute type 6 has an invalid length. [ 263.704149][ T9954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1086'. [ 263.745500][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1086'. [ 263.958250][ T9964] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 264.241450][ T9973] veth0_to_bond: left allmulticast mode [ 264.367411][ T9975] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1092'. [ 264.367579][ T9975] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1092'. [ 264.367736][ T9975] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1092'. [ 264.367879][ T9975] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1092'. [ 264.368024][ T9975] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1092'. [ 264.368171][ T9975] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1092'. [ 266.176314][T10041] netlink: 'syz.4.1107': attribute type 21 has an invalid length. [ 266.176342][T10041] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.176449][T10041] netlink: 'syz.4.1107': attribute type 1 has an invalid length. [ 266.476459][ T31] audit: type=1800 audit(1789918412.910:6): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1108" name=0A dev="tmpfs" ino=1216 res=0 errno=0 [ 266.706845][ T31] audit: type=1800 audit(1789918413.140:7): pid=10053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1108" name=0A dev="tmpfs" ino=1216 res=0 errno=0 [ 266.877456][T10057] netlink: 'syz.4.1109': attribute type 4 has an invalid length. [ 267.264741][T10068] netlink: Conntrack attr has 1 unknown bytes [ 267.264780][T10068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.466622][T10077] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 267.785773][T10096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.970187][T10084] af_packet: tpacket_rcv: packet too big, clamped from 160 to 4294967272. macoff=96 [ 268.567511][T10118] __nla_validate_parse: 34 callbacks suppressed [ 268.567531][T10118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1128'. [ 268.569395][T10119] netlink: 'syz.3.1128': attribute type 1 has an invalid length. [ 268.569413][T10119] netlink: 'syz.3.1128': attribute type 4 has an invalid length. [ 268.569425][T10119] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1128'. [ 268.704254][T10111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.705046][T10111] bridge0: port 4(bond4) entered blocking state [ 268.706287][T10111] bridge0: port 4(bond4) entered disabled state [ 268.706443][T10111] bond4: entered allmulticast mode [ 268.743155][T10111] bond4: entered promiscuous mode [ 269.206511][T10145] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 269.206536][T10145] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 269.443181][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 269.480006][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 269.652204][T10151] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.877839][T10161] netlink: 'syz.2.1137': attribute type 1 has an invalid length. [ 269.877861][T10161] netlink: 'syz.2.1137': attribute type 3 has an invalid length. [ 269.877873][T10161] netlink: 'syz.2.1137': attribute type 7 has an invalid length. [ 269.877884][T10161] netlink: 'syz.2.1137': attribute type 8 has an invalid length. [ 269.877896][T10161] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1137'. [ 269.877910][T10161] NCSI netlink: No device for ifindex 131092 [ 270.072632][T10158] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.1138'. [ 270.115566][ T5617] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 270.250416][T10158] vlan4: entered allmulticast mode [ 270.250472][T10158] bond0: entered allmulticast mode [ 270.277531][T10174] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 270.349803][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 270.527324][T10186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.673145][T10190] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1148'. [ 271.386408][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'. [ 271.390143][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1153'. [ 272.962501][T10253] netlink: 'syz.3.1168': attribute type 11 has an invalid length. [ 273.126736][ T5617] Bluetooth: hci4: unexpected event 0x10 length: 87 > 1 [ 273.128379][ T4932] Bluetooth: hci4: hardware error 0x66 [ 273.955584][T10294] batadv_slave_0: entered promiscuous mode [ 274.082511][T10298] __nla_validate_parse: 2 callbacks suppressed [ 274.082573][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 274.115026][T10298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.430558][T10298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.454213][T10279] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 274.557435][T10309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1178'. [ 274.982388][T10316] veth1_to_bond: entered allmulticast mode [ 275.037348][T10316] veth1_to_bond: left allmulticast mode [ 275.139966][T10325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1184'. [ 275.221206][ T4932] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 275.705820][ T4932] Bluetooth: hci0: command 0x0c20 tx timeout [ 275.835674][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1190'. [ 276.183411][T10355] openvswitch: netlink: IP tunnel dst address not specified [ 276.208591][T10357] openvswitch: netlink: IP tunnel dst address not specified [ 276.283234][T10360] nftables ruleset with unbound chain [ 276.374050][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1194'. [ 276.979376][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 277.825903][T10404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.896608][T10404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.958118][T10404] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 278.007529][T10404] bond0 (unregistering): Released all slaves [ 279.395173][T10456] sctp: [Deprecated]: syz.2.1219 (pid 10456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.395173][T10456] Use struct sctp_sack_info instead [ 279.575612][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 280.327141][T10484] geneve2: entered promiscuous mode [ 280.327166][T10484] geneve2: entered allmulticast mode [ 280.376447][T10484] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 280.472630][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 280.582924][T10498] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1225'. [ 280.915560][T10510] nbd: nbd1 already in use [ 280.988542][T10508] gre2: entered promiscuous mode [ 280.988566][T10508] gre2: entered allmulticast mode [ 281.004720][T10518] block nbd1: NBD_DISCONNECT [ 281.005071][T10518] block nbd1: Send disconnect failed -32 [ 281.005092][T10518] block nbd1: shutting down sockets [ 281.276149][T10524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1234'. [ 281.592251][T10533] sctp: [Deprecated]: syz.2.1238 (pid 10533) Use of int in max_burst socket option. [ 281.592251][T10533] Use struct sctp_assoc_value instead [ 281.729992][T10532] syzkaller1: entered promiscuous mode [ 281.730016][T10532] syzkaller1: entered allmulticast mode [ 282.325681][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 282.478279][T10564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1244'. [ 283.449501][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 283.449527][T10600] openvswitch: netlink: Flow key attr not present in new flow. [ 283.460031][T10600] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1249'. [ 283.834160][T10611] netlink: 'syz.2.1252': attribute type 2 has an invalid length. [ 283.884026][T10613] ªªªªª»: renamed from dummy0 (while UP) [ 283.886328][ T4932] Bluetooth: hci1: connection err: -111 [ 284.029999][ T4932] Bluetooth: hci1: connection err: -111 [ 284.465872][T10633] netlink: 'syz.3.1256': attribute type 8 has an invalid length. [ 284.847060][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'. [ 284.847202][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.928407][T10645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.271598][T10656] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 285.844134][T10677] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.924114][T10681] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 285.927060][T10681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1267'. [ 286.105643][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'. [ 286.128060][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1269'. [ 286.576888][T10700] netlink: 199784 bytes leftover after parsing attributes in process `syz.2.1271'. [ 286.576914][T10700] netlink: 'syz.2.1271': attribute type 1 has an invalid length. [ 287.262791][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1275'. [ 289.083303][T10779] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 289.636008][T10799] FAULT_INJECTION: forcing a failure. [ 289.636008][T10799] name failslab, interval 1, probability 0, space 0, times 1 [ 289.636389][T10799] CPU: 1 UID: 0 PID: 10799 Comm: syz.0.1288 Not tainted syzkaller #0 PREEMPT(full) [ 289.636422][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.636434][T10799] Call Trace: [ 289.636442][T10799] [ 289.636451][T10799] dump_stack_lvl+0xe8/0x150 [ 289.636486][T10799] should_fail_ex+0x410/0x560 [ 289.636513][T10799] ? __alloc_skb+0x1db/0x7a0 [ 289.636537][T10799] should_failslab+0xa8/0x100 [ 289.636562][T10799] ? __alloc_skb+0x1db/0x7a0 [ 289.636582][T10799] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 289.636612][T10799] ? __alloc_skb+0x18d/0x7a0 [ 289.636635][T10799] ? __alloc_skb+0x1db/0x7a0 [ 289.636665][T10799] __alloc_skb+0x1db/0x7a0 [ 289.636694][T10799] netlink_sendmsg+0x5d4/0xb40 [ 289.636734][T10799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.636772][T10799] ? apparmor_socket_sendmsg+0x98/0x360 [ 289.636796][T10799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.636823][T10799] sock_sendmsg_nosec+0x13a/0x180 [ 289.636846][T10799] ____sys_sendmsg+0x54e/0x850 [ 289.636877][T10799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.636909][T10799] ? import_iovec+0x73/0xa0 [ 289.636936][T10799] ___sys_sendmsg+0x2a5/0x360 [ 289.636960][T10799] ? __lock_acquire+0x747/0x2de0 [ 289.636985][T10799] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.637043][T10799] ? __fget_files+0x2a/0x420 [ 289.637069][T10799] ? __fget_files+0x3a2/0x420 [ 289.637105][T10799] __x64_sys_sendmsg+0x1b1/0x290 [ 289.637133][T10799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.637181][T10799] do_syscall_64+0x166/0x520 [ 289.637205][T10799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.637224][T10799] ? clear_bhb_loop+0x70/0xc0 [ 289.637248][T10799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.637265][T10799] RIP: 0033:0x7fb21259e159 [ 289.637284][T10799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.637300][T10799] RSP: 002b:00007fb213401028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.637320][T10799] RAX: ffffffffffffffda RBX: 00007fb212826090 RCX: 00007fb21259e159 [ 289.637333][T10799] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 289.637345][T10799] RBP: 00007fb213401090 R08: 0000000000000000 R09: 0000000000000000 [ 289.637356][T10799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.637367][T10799] R13: 00007fb212826128 R14: 00007fb212826090 R15: 00007ffe730f9148 [ 289.637409][T10799] [ 290.037661][T10712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.297537][T10806] syzkaller1: entered promiscuous mode [ 290.297562][T10806] syzkaller1: entered allmulticast mode [ 290.349821][T10804] syzkaller1: left promiscuous mode [ 290.349885][T10804] syzkaller1: left allmulticast mode [ 290.684739][T10822] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1294'. [ 290.789354][T10824] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1294'. [ 290.888086][T10827] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1296'. [ 290.893595][T10822] team0: Port device dummy0 removed [ 291.244385][T10837] nbd: must specify a size in bytes for the device [ 291.455218][T10845] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 291.460266][T10839] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1301'. [ 291.800326][T10860] netlink: 'syz.4.1306': attribute type 26 has an invalid length. [ 291.851699][T10845] xt_CT: No such helper "snmp_trap" [ 291.905171][T10857] bond2: option fail_over_mac: invalid value (16) [ 291.924316][T10857] bond2 (unregistering): Released all slaves [ 293.934611][T10879] syzkaller1: entered promiscuous mode [ 293.934635][T10879] syzkaller1: entered allmulticast mode [ 294.138037][T10888] netlink: 'syz.3.1315': attribute type 21 has an invalid length. [ 294.138156][T10888] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1315'. [ 294.197532][T10888] netlink: 'syz.3.1315': attribute type 21 has an invalid length. [ 294.197593][T10888] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1315'. [ 294.336406][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 294.434805][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'. [ 295.235189][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 295.294865][T10937] netlink: 'syz.2.1324': attribute type 2 has an invalid length. [ 295.739581][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'. [ 296.146855][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 296.247262][T10958] bond0: entered promiscuous mode [ 296.250555][T10958] batadv0: entered promiscuous mode [ 296.276800][T10958] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 296.279247][T10958] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 296.670251][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 296.670606][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 296.718151][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 296.765104][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 296.776019][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 296.799541][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 296.843166][T11001] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 297.477208][T11018] netlink: 'syz.0.1341': attribute type 15 has an invalid length. [ 297.477232][T11018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1341'. [ 298.067948][T11030] syzkaller1: entered promiscuous mode [ 298.067973][T11030] syzkaller1: entered allmulticast mode [ 298.105204][T11033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1346'. [ 298.258597][T11045] netlink: NAT attribute has 5 unknown bytes [ 298.258638][T11045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.916299][T11060] macvlan1: entered allmulticast mode [ 298.940825][T11060] veth1_vlan: entered allmulticast mode [ 298.961321][T11060] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 299.145610][ T50] wlan1: Trigger new scan to find an IBSS to join [ 299.346650][T11075] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 299.347483][T11073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.020084][T11101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.892776][T11127] __nla_validate_parse: 6 callbacks suppressed [ 300.892798][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'. [ 300.923094][T11127] syzkaller0: entered promiscuous mode [ 300.923158][T11127] syzkaller0: entered allmulticast mode [ 301.469634][T11154] xt_hashlimit: size too large, truncated to 1048576 [ 301.713229][T11140] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1370'. [ 301.851107][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1373'. [ 301.851135][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1373'. [ 302.029214][T11202] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1377'. [ 302.065080][T11202] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 302.065152][T11202] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 302.091941][T11202] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 302.092009][T11202] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 302.092242][T11202] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 302.092293][T11202] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 302.134592][T11202] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 302.150987][T11202] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 302.151260][T11202] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 302.155179][ T43] wlan1: Trigger new scan to find an IBSS to join [ 302.737252][T11225] x_tables: duplicate underflow at hook 1 [ 303.313511][T11257] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1383'. [ 303.364558][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 304.043098][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1385'. [ 304.689361][T11277] pim6reg: entered allmulticast mode [ 304.700451][T11281] pim6reg: left allmulticast mode [ 304.803446][T11291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1390'. [ 304.842296][T11292] validate_nla: 57 callbacks suppressed [ 304.842318][T11292] netlink: 'syz.2.1390': attribute type 6 has an invalid length. [ 304.842331][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 305.142619][ T154] wlan1: Trigger new scan to find an IBSS to join [ 305.360969][T11305] bridge0: port 3(veth1_to_bridge) entered blocking state [ 305.361071][T11305] bridge0: port 3(veth1_to_bridge) entered disabled state [ 305.361221][T11305] veth1_to_bridge: entered allmulticast mode [ 305.369202][T11305] veth1_to_bridge: entered promiscuous mode [ 305.369374][T11305] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.413146][T11305] bridge0: port 3(veth1_to_bridge) entered blocking state [ 305.413269][T11305] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 305.460490][T11312] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 305.939243][T11329] __nla_validate_parse: 2 callbacks suppressed [ 305.939264][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1396'. [ 306.084997][ T43] wlan1: Creating new IBSS network, BSSID 56:0b:85:88:d3:2e [ 306.234976][T11335] bond4: entered promiscuous mode [ 306.235000][T11335] bond4: entered allmulticast mode [ 306.868513][T11367] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20000 [ 307.148103][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'. [ 307.560024][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 308.112360][ T6232] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.664426][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 308.742138][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 308.919351][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1420'. [ 309.195340][T11440] sock: sock_set_timeout: `syz.1.1423' (pid 11440) tries to set negative timeout [ 309.237867][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 309.459475][T11446] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 309.596635][T11446] bond1: entered promiscuous mode [ 309.597104][T11446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.663045][T11446] ipvlan2: entered allmulticast mode [ 309.663067][T11446] bond1: entered allmulticast mode [ 309.663364][T11446] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 309.663383][T11446] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 309.663398][T11446] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 309.665826][T11446] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 310.544524][T11477] xt_SECMARK: invalid mode: 9 [ 310.571731][T11477] xt_SECMARK: invalid mode: 9 [ 310.572739][T11477] xt_SECMARK: invalid mode: 9 [ 310.599543][T11477] xt_SECMARK: invalid mode: 9 [ 310.600528][T11477] xt_SECMARK: invalid mode: 9 [ 310.618460][T11478] xt_HMARK: spi-set and port-set can't be combined [ 310.628348][T11478] xt_HMARK: spi-set and port-set can't be combined [ 310.640456][T11478] xt_HMARK: spi-set and port-set can't be combined [ 310.651251][T11478] xt_HMARK: spi-set and port-set can't be combined [ 310.656740][T11478] xt_HMARK: spi-set and port-set can't be combined [ 310.677308][T11478] xt_HMARK: spi-set and port-set can't be combined [ 310.680102][T11478] xt_HMARK: spi-set and port-set can't be combined [ 310.688013][T11478] xt_HMARK: spi-set and port-set can't be combined [ 310.702058][T11478] xt_HMARK: spi-set and port-set can't be combined [ 310.707389][T11478] xt_HMARK: spi-set and port-set can't be combined [ 311.004142][T11499] syzkaller0: entered promiscuous mode [ 311.004168][T11499] syzkaller0: entered allmulticast mode [ 311.241880][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 311.506665][T11509] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.735482][T11519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1443'. [ 311.735554][T11519] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1443'. [ 311.735614][T11519] netlink: 'syz.2.1443': attribute type 5 has an invalid length. [ 311.735649][T11519] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1443'. [ 311.818061][T11523] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1444'. [ 311.846076][T11523] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1444'. [ 313.282019][T11563] netlink: 'syz.2.1458': attribute type 2 has an invalid length. [ 313.805498][T11583] netlink: 'syz.4.1467': attribute type 11 has an invalid length. [ 313.872781][T11571] IPv6: sit1: Disabled Multicast RS [ 313.913572][T11584] wg0 speed is unknown, defaulting to 1000 [ 313.913802][T11584] wg0 speed is unknown, defaulting to 1000 [ 313.926549][T11584] wg0 speed is unknown, defaulting to 1000 [ 313.937850][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 313.946936][T11584] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 313.946993][T11584] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 313.947059][T11584] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 314.013215][T11584] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 314.119060][T11584] wg0 speed is unknown, defaulting to 1000 [ 314.204718][T11584] wg0 speed is unknown, defaulting to 1000 [ 314.229863][T11584] wg0 speed is unknown, defaulting to 1000 [ 314.235462][T11584] wg0 speed is unknown, defaulting to 1000 [ 314.239860][T11584] wg0 speed is unknown, defaulting to 1000 [ 314.324503][T11594] netlink: 'syz.0.1468': attribute type 1 has an invalid length. [ 314.757293][T11603] 8021q: VLANs not supported on syzkaller1 [ 314.805482][T11606] 8021q: VLANs not supported on lo [ 315.070414][T11620] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 7, id = 0 [ 315.109483][T11616] dvmrp8: entered allmulticast mode [ 315.488129][T11639] FAULT_INJECTION: forcing a failure. [ 315.488129][T11639] name failslab, interval 1, probability 0, space 0, times 0 [ 315.488163][T11639] CPU: 0 UID: 0 PID: 11639 Comm: syz.4.1480 Not tainted syzkaller #0 PREEMPT(full) [ 315.488185][T11639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.488197][T11639] Call Trace: [ 315.488205][T11639] [ 315.488214][T11639] dump_stack_lvl+0xe8/0x150 [ 315.488248][T11639] should_fail_ex+0x410/0x560 [ 315.488275][T11639] should_failslab+0xa8/0x100 [ 315.488299][T11639] ? skb_clone+0x212/0x3a0 [ 315.488325][T11639] kmem_cache_alloc_noprof+0xa1/0x600 [ 315.488358][T11639] ? skb_clone+0x212/0x3a0 [ 315.488390][T11639] skb_clone+0x212/0x3a0 [ 315.488419][T11639] __netlink_deliver_tap+0x413/0x860 [ 315.488462][T11639] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.488490][T11639] netlink_deliver_tap+0x19c/0x1b0 [ 315.488519][T11639] netlink_sendskb+0x68/0x140 [ 315.488546][T11639] netlink_rcv_skb+0x2a4/0x4a0 [ 315.488575][T11639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.488599][T11639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.488644][T11639] ? down_read+0x2be/0x330 [ 315.488674][T11639] genl_rcv+0x28/0x40 [ 315.488694][T11639] netlink_unicast+0x7bd/0x940 [ 315.488731][T11639] netlink_sendmsg+0x813/0xb40 [ 315.488777][T11639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.488814][T11639] ? apparmor_socket_sendmsg+0x98/0x360 [ 315.488837][T11639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.488862][T11639] sock_sendmsg_nosec+0x13a/0x180 [ 315.488886][T11639] ____sys_sendmsg+0x54e/0x850 [ 315.488917][T11639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.488951][T11639] ? import_iovec+0x73/0xa0 [ 315.488980][T11639] ___sys_sendmsg+0x2a5/0x360 [ 315.489003][T11639] ? __lock_acquire+0x747/0x2de0 [ 315.489029][T11639] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.489095][T11639] ? __fget_files+0x2a/0x420 [ 315.489119][T11639] ? __fget_files+0x3a2/0x420 [ 315.489156][T11639] __x64_sys_sendmsg+0x1b1/0x290 [ 315.489184][T11639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.489233][T11639] do_syscall_64+0x166/0x520 [ 315.489253][T11639] ? trace_irq_disable+0x3b/0x140 [ 315.489272][T11639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.489290][T11639] ? clear_bhb_loop+0x70/0xc0 [ 315.489313][T11639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.489331][T11639] RIP: 0033:0x7fc26519e159 [ 315.489350][T11639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.489365][T11639] RSP: 002b:00007fc26605b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.489387][T11639] RAX: ffffffffffffffda RBX: 00007fc265425fa0 RCX: 00007fc26519e159 [ 315.489401][T11639] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 315.489412][T11639] RBP: 00007fc26605b090 R08: 0000000000000000 R09: 0000000000000000 [ 315.489424][T11639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.489435][T11639] R13: 00007fc265426038 R14: 00007fc265425fa0 R15: 00007ffde332bec8 [ 315.489469][T11639] [ 315.580214][T11642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1481'. [ 315.895070][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 316.041060][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1482'. [ 316.887261][T11665] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1487'. [ 317.044885][T11668] openvswitch: netlink: Missing valid actions attribute. [ 317.349466][T11682] openvswitch: netlink: Message has 8 unknown bytes. [ 317.389280][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.514081][T11684] FAULT_INJECTION: forcing a failure. [ 317.514081][T11684] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 317.514115][T11684] CPU: 0 UID: 0 PID: 11684 Comm: syz.0.1492 Not tainted syzkaller #0 PREEMPT(full) [ 317.514137][T11684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.514147][T11684] Call Trace: [ 317.514156][T11684] [ 317.514164][T11684] dump_stack_lvl+0xe8/0x150 [ 317.514198][T11684] should_fail_ex+0x410/0x560 [ 317.514231][T11684] _copy_from_user+0x2d/0xb0 [ 317.514257][T11684] kstrtouint_from_user+0xd6/0x180 [ 317.514281][T11684] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 317.514311][T11684] ? lock_acquire+0x115/0x350 [ 317.514337][T11684] proc_fail_nth_write+0x8e/0x210 [ 317.514357][T11684] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.514396][T11684] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.514424][T11684] vfs_write+0x296/0xba0 [ 317.514462][T11684] ? __pfx_vfs_write+0x10/0x10 [ 317.514492][T11684] ? __fget_files+0x2a/0x420 [ 317.514523][T11684] ? __fget_files+0x3a2/0x420 [ 317.514546][T11684] ? __fget_files+0x2a/0x420 [ 317.514588][T11684] ksys_write+0x150/0x270 [ 317.514619][T11684] ? __pfx_ksys_write+0x10/0x10 [ 317.514659][T11684] do_syscall_64+0x166/0x520 [ 317.514682][T11684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.514702][T11684] ? clear_bhb_loop+0x70/0xc0 [ 317.514727][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.514746][T11684] RIP: 0033:0x7fb21255e98e [ 317.514764][T11684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 317.514780][T11684] RSP: 002b:00007fb213421fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.514801][T11684] RAX: ffffffffffffffda RBX: 00007fb2134226c0 RCX: 00007fb21255e98e [ 317.514816][T11684] RDX: 0000000000000001 RSI: 00007fb2134220a0 RDI: 0000000000000004 [ 317.514828][T11684] RBP: 00007fb213422090 R08: 0000000000000000 R09: 0000000000000000 [ 317.514840][T11684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.514851][T11684] R13: 00007fb212826038 R14: 00007fb212825fa0 R15: 00007ffe730f9148 [ 317.514884][T11684] [ 318.016198][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1496'. [ 318.563147][T11722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1500'. [ 319.161590][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 319.165200][T11735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.177997][T11736] geneve0: entered allmulticast mode [ 319.305229][T11738] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 319.307083][T11738] netlink: 'syz.1.1509': attribute type 5 has an invalid length. [ 319.307129][T11738] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1509'. [ 319.554051][T11747] netlink: 'syz.4.1513': attribute type 10 has an invalid length. [ 319.646288][T11747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.656556][T11747] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 319.678649][T11747] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 319.832971][T11757] openvswitch: netlink: Key type 1542 is out of range max 32 [ 320.023087][T11763] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1517'. [ 320.063227][T11765] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1517'. [ 320.179599][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1516'. [ 320.179697][T11769] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1516'. [ 320.179757][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 320.283241][T11772] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 320.283265][T11772] netlink: 'syz.0.1518': attribute type 4 has an invalid length. [ 320.355273][T11772] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 320.355297][T11772] netlink: 'syz.0.1518': attribute type 4 has an invalid length. [ 320.969490][T11794] netlink: 'syz.4.1524': attribute type 1 has an invalid length. [ 321.065539][T11800] netlink: 'syz.1.1528': attribute type 21 has an invalid length. [ 321.156156][T11794] 8021q: adding VLAN 0 to HW filter on device bond5 [ 321.335703][T11794] bond5: (slave gretap1): making interface the new active one [ 321.370222][T11794] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 321.953308][T11828] netlink: 'syz.4.1533': attribute type 4 has an invalid length. [ 321.953357][T11828] __nla_validate_parse: 7 callbacks suppressed [ 321.953408][T11828] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1533'. [ 322.153101][T11836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1535'. [ 322.154499][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'. [ 322.322912][T11836] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 322.361019][T11836] bond0 (unregistering): Released all slaves [ 322.449559][T11822] syzkaller0: left promiscuous mode [ 322.449582][T11822] syzkaller0: left allmulticast mode [ 322.474559][T11845] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 322.518030][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.519827][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.520846][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.521320][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.521769][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.522219][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.522679][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.523138][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.524050][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.524500][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.987895][T11853] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1540'. [ 323.106812][T11855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1541'. [ 323.445324][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1543'. [ 323.500896][ T5617] Bluetooth: hci0: command 0x0c20 tx timeout [ 323.501004][ T4932] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 324.019579][T11867] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1545'. [ 324.722333][T11888] bond5: Removing last ns target with arp_interval on [ 324.920601][T11898] netlink: 'syz.1.1552': attribute type 10 has an invalid length. [ 325.016520][T11898] team0: Port device dummy0 added [ 325.490438][T11916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1557'. [ 325.880631][T11922] netlink: 'syz.0.1558': attribute type 4 has an invalid length. [ 325.911435][T11922] netlink: 'syz.0.1558': attribute type 4 has an invalid length. [ 325.969024][T11925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1560'. [ 326.259481][T11925] bond0: entered allmulticast mode [ 326.548186][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 326.598905][T11934] tipc: Enabling of bearer rejected, media not registered [ 327.024119][T11948] __nla_validate_parse: 1 callbacks suppressed [ 327.024141][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1565'. [ 327.521482][ C1] net_ratelimit: 5471 callbacks suppressed [ 327.521542][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.522891][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.524296][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.525641][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.526992][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.528430][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.529704][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.531052][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.532099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.533121][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 328.116654][T11965] netlink: 'syz.2.1570': attribute type 21 has an invalid length. [ 328.116758][T11965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1570'. [ 328.778707][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'. [ 328.833179][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 330.015526][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1582'. [ 331.163334][T12032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1586'. [ 332.531154][ C1] net_ratelimit: 6280 callbacks suppressed [ 332.531199][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.532282][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.533307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.534453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.535524][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.536518][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.537537][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.538519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.539596][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.540748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.851493][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1587'. [ 332.851534][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1587'. [ 333.688467][T12059] netlink: 'syz.4.1590': attribute type 8 has an invalid length. [ 333.688493][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 334.024451][T12040] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 334.024912][T12040] gretap1: entered promiscuous mode [ 334.024930][T12040] gretap1: entered allmulticast mode [ 334.450159][T12072] netlink: 'syz.4.1593': attribute type 1 has an invalid length. [ 334.450185][T12072] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1593'. [ 334.618575][T12076] SET target dimension over the limit! [ 335.396734][T12089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1597'. [ 336.036969][ T43] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 336.110341][T12108] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1601'. [ 337.541254][ C1] net_ratelimit: 8777 callbacks suppressed [ 337.541315][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.542130][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.542471][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.542851][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.543189][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.543557][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.543885][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.544234][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.544565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.544948][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.325946][T12107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.785432][ T6236] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 342.550825][ C0] net_ratelimit: 16547 callbacks suppressed [ 342.550851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.551039][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 342.551344][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.551792][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.552055][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 342.552226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.552671][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.553009][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 342.553104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.553547][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.253444][ C0] sched: DL replenish lagged too much [ 347.560916][ C0] net_ratelimit: 16719 callbacks suppressed [ 347.560950][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.561456][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.561548][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.561891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.562327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.562569][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.562818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.563519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.563655][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.564095][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.570856][ C0] net_ratelimit: 16626 callbacks suppressed [ 352.570883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.571497][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 352.571604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.572011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.572403][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.572419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 352.572857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.573249][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.573342][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 352.573647][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.581105][ C0] net_ratelimit: 17024 callbacks suppressed [ 357.581132][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.581393][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 357.581888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.582237][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 357.582327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.582780][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.583190][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 357.583217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.583656][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.584104][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 362.590915][ C0] net_ratelimit: 16497 callbacks suppressed [ 362.590941][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.591256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 362.591364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.591796][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.592213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.592330][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 362.592639][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.593048][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.593415][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 362.593465][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.600747][ C0] net_ratelimit: 16077 callbacks suppressed [ 367.600774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.601213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.601457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 367.601656][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.602091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.602503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 367.602616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.603057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.603489][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.603563][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 372.610845][ C0] net_ratelimit: 16367 callbacks suppressed [ 372.610873][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.610915][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 372.611316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.611762][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.612099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 372.612259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.612710][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.613143][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.613154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 372.613601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.620720][ C1] net_ratelimit: 16295 callbacks suppressed [ 377.620754][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.620766][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 377.621163][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.621612][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.621724][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 377.622018][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.622419][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.622673][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 377.622858][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.623260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.870595][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.630735][ C0] net_ratelimit: 16938 callbacks suppressed [ 382.630762][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.631162][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 382.631203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.631650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.632082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.632099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 382.632527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.632966][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.633020][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 382.633401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.641010][ C0] net_ratelimit: 16400 callbacks suppressed [ 387.641037][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.641099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 387.641524][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.641993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.642152][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 387.642466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.642968][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.643207][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 387.643439][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.643979][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.650895][ C0] net_ratelimit: 16352 callbacks suppressed [ 392.650920][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.650950][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 392.651388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.651897][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.651907][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 392.652364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.652838][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.652856][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 392.653302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.653762][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.660680][ C0] net_ratelimit: 14603 callbacks suppressed [ 397.660705][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.660879][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 397.661156][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.661589][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.662031][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.662467][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.662917][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.662947][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 397.663395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.663828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.670704][ C0] net_ratelimit: 13559 callbacks suppressed [ 402.670739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.670934][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.671164][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.671580][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.672001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.672461][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.672890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.672900][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.673367][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.673789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.680853][ C1] net_ratelimit: 13758 callbacks suppressed [ 407.680904][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.680983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.681404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.681826][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.682285][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.682701][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.683007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.683114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.683573][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.683997][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.690839][ C0] net_ratelimit: 14637 callbacks suppressed [ 412.690866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.691274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.691669][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.692065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.692467][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.692474][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.692863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.693266][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.693701][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.694136][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.700977][ C0] net_ratelimit: 15469 callbacks suppressed [ 417.701004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.701045][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.701402][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.701852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.702250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.702654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.703042][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.703052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.703488][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.703889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.710715][ C0] net_ratelimit: 14618 callbacks suppressed [ 422.710740][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.711204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.711458][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 422.711718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.712179][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.712648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.713107][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.713295][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 422.713578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.714039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.721045][ C0] net_ratelimit: 15013 callbacks suppressed [ 427.721071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.721803][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.722208][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.722256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.722603][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.723009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.723404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.723798][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.724198][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.724253][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.730838][ C0] net_ratelimit: 15444 callbacks suppressed [ 432.730863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.731261][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.731711][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.732104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.732313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.732507][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.732900][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.733293][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.733695][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.734088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.740997][ C0] net_ratelimit: 15368 callbacks suppressed [ 437.741024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.741458][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.741852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.742065][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.742248][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.742651][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.743050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.743453][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.743846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.744098][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.750767][ C1] net_ratelimit: 15183 callbacks suppressed [ 442.750812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.750822][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.751220][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.751613][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.752059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.752453][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.752866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.752873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.753263][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.753658][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.177065][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.760808][ C0] net_ratelimit: 15220 callbacks suppressed [ 447.760833][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.761156][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.761231][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.761636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.762028][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.762423][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.762882][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.763052][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.763278][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.763681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.770641][ C0] net_ratelimit: 15314 callbacks suppressed [ 452.770666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.771094][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.771490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.771895][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.772327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.772418][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.772721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.773125][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.773540][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.773942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.780946][ C0] net_ratelimit: 15204 callbacks suppressed [ 457.780971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.781381][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.781785][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.782267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.782391][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.782686][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.783091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.783485][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.783880][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.784282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.790887][ C0] net_ratelimit: 15347 callbacks suppressed [ 462.790915][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.791322][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.791717][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.791994][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.792123][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.792518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.792913][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.793374][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.793770][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.793861][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 467.800758][ C0] net_ratelimit: 14789 callbacks suppressed [ 467.800786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.801223][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.801669][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.801871][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 467.802104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.802590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.803030][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.803464][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.803707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 467.804233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.810834][ C0] net_ratelimit: 15071 callbacks suppressed [ 472.810867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.811244][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.811616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.811994][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.812128][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 472.812365][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.812819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.813198][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.813570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.813948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.820667][ C1] net_ratelimit: 14598 callbacks suppressed [ 477.820725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 477.820860][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.821259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.821703][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.822099][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.822570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.822756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 477.822967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.823360][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.823761][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.830820][ C0] net_ratelimit: 15292 callbacks suppressed [ 482.830846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.831245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.831650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.832042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.832151][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 482.832488][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.832889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.833283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.833689][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.833955][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 486.669511][ T32] INFO: task kworker/u8:0:12 blocked for more than 144 seconds. [ 486.929894][ T32] Not tainted syzkaller #0 [ 486.929917][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.929926][ T32] task:kworker/u8:0 state:D stack:23712 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 486.929991][ T32] Workqueue: ipv6_addrconf addrconf_dad_work [ 486.930135][ T32] Call Trace: [ 486.930162][ T32] [ 486.930178][ T32] __schedule+0x17db/0x58f0 [ 486.930252][ T32] ? stack_trace_save+0xa9/0x100 [ 486.930310][ T32] ? __pfx___schedule+0x10/0x10 [ 486.930353][ T32] ? schedule+0x90/0x2b0 [ 486.930378][ T32] schedule+0x164/0x2b0 [ 486.930402][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.930426][ T32] __mutex_lock+0x7c1/0x1550 [ 486.930456][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.930485][ T32] ? addrconf_dad_work+0x116/0x15c0 [ 486.930508][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.930555][ T32] addrconf_dad_work+0x116/0x15c0 [ 486.944374][ T32] ? __pfx_addrconf_dad_work+0x10/0x10 [ 486.944419][ T32] ? rcu_is_watching+0x16/0xb0 [ 486.944495][ T32] ? process_scheduled_works+0x97a/0x1630 [ 486.944564][ T32] process_scheduled_works+0xc3d/0x1630 [ 486.944626][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 486.944660][ T32] ? assign_work+0x3cf/0x5d0 [ 486.944692][ T32] worker_thread+0xa47/0xfb0 [ 486.944749][ T32] kthread+0x38b/0x480 [ 486.944793][ T32] ? __pfx_worker_thread+0x10/0x10 [ 486.944817][ T32] ? __pfx_kthread+0x10/0x10 [ 486.944839][ T32] ret_from_fork+0x514/0xb70 [ 486.944885][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 486.944906][ T32] ? __switch_to+0xc89/0x1420 [ 486.944976][ T32] ? __pfx_kthread+0x10/0x10 [ 486.945000][ T32] ret_from_fork_asm+0x1a/0x30 [ 486.945136][ T32] [ 486.945258][ T32] INFO: task kworker/u8:13:6234 blocked for more than 145 seconds. [ 486.945276][ T32] Not tainted syzkaller #0 [ 486.945286][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.945296][ T32] task:kworker/u8:13 state:D stack:24584 pid:6234 tgid:6234 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 486.945377][ T32] Workqueue: events_unbound linkwatch_event [ 486.945457][ T32] Call Trace: [ 486.945464][ T32] [ 486.945477][ T32] __schedule+0x17db/0x58f0 [ 486.945533][ T32] ? __pfx___schedule+0x10/0x10 [ 486.945566][ T32] ? schedule+0x90/0x2b0 [ 486.945591][ T32] schedule+0x164/0x2b0 [ 486.945616][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.945637][ T32] __mutex_lock+0x7c1/0x1550 [ 486.945667][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.945695][ T32] ? linkwatch_event+0xe/0x60 [ 486.945725][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.945751][ T32] ? lock_acquire+0x115/0x350 [ 486.945804][ T32] ? rcu_is_watching+0x16/0xb0 [ 486.945829][ T32] ? process_scheduled_works+0x97a/0x1630 [ 486.945855][ T32] linkwatch_event+0xe/0x60 [ 486.945883][ T32] process_scheduled_works+0xc3d/0x1630 [ 486.945944][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 486.945977][ T32] ? assign_work+0x3cf/0x5d0 [ 486.946009][ T32] worker_thread+0xa47/0xfb0 [ 486.946067][ T32] kthread+0x38b/0x480 [ 486.946087][ T32] ? __pfx_worker_thread+0x10/0x10 [ 486.946109][ T32] ? __pfx_kthread+0x10/0x10 [ 486.946130][ T32] ret_from_fork+0x514/0xb70 [ 486.946153][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 486.946172][ T32] ? __switch_to+0xc89/0x1420 [ 486.946201][ T32] ? __pfx_kthread+0x10/0x10 [ 486.946223][ T32] ret_from_fork_asm+0x1a/0x30 [ 486.946270][ T32] [ 486.946291][ T32] INFO: task kworker/0:8:11207 blocked for more than 145 seconds. [ 486.946306][ T32] Not tainted syzkaller #0 [ 486.946323][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.946332][ T32] task:kworker/0:8 state:D stack:24328 pid:11207 tgid:11207 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 486.946388][ T32] Workqueue: events netdev_work_proc [ 486.946461][ T32] Call Trace: [ 486.946469][ T32] [ 486.946481][ T32] __schedule+0x17db/0x58f0 [ 486.946526][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.946559][ T32] ? __pfx___schedule+0x10/0x10 [ 486.946592][ T32] ? schedule+0x90/0x2b0 [ 486.946618][ T32] schedule+0x164/0x2b0 [ 486.946643][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.946664][ T32] __mutex_lock+0x7c1/0x1550 [ 486.946693][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.946721][ T32] ? netdev_work_proc+0x6f/0x770 [ 486.946752][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.946784][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.946821][ T32] netdev_work_proc+0x6f/0x770 [ 486.946852][ T32] ? __pfx_netdev_work_proc+0x10/0x10 [ 486.946885][ T32] ? rcu_is_watching+0x16/0xb0 [ 486.946911][ T32] ? process_scheduled_works+0x97a/0x1630 [ 486.946937][ T32] process_scheduled_works+0xc3d/0x1630 [ 486.946998][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 486.947032][ T32] ? assign_work+0x3cf/0x5d0 [ 486.947064][ T32] worker_thread+0xa47/0xfb0 [ 486.947105][ T32] ? __kthread_parkme+0x71/0x1f0 [ 486.947145][ T32] kthread+0x38b/0x480 [ 486.947166][ T32] ? __pfx_worker_thread+0x10/0x10 [ 486.947190][ T32] ? __pfx_kthread+0x10/0x10 [ 486.947211][ T32] ret_from_fork+0x514/0xb70 [ 486.947234][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 486.947255][ T32] ? __switch_to+0xc89/0x1420 [ 486.947285][ T32] ? __pfx_kthread+0x10/0x10 [ 486.947307][ T32] ret_from_fork_asm+0x1a/0x30 [ 486.947362][ T32] [ 486.947375][ T32] INFO: task syz.1.1587:12035 blocked for more than 145 seconds. [ 486.947390][ T32] Not tainted syzkaller #0 [ 486.947399][ T32] Blocked by coredump. [ 486.947405][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.947414][ T32] task:syz.1.1587 state:D stack:26760 pid:12035 tgid:12033 ppid:5613 task_flags:0x40054c flags:0x00080001 [ 486.947470][ T32] Call Trace: [ 486.947476][ T32] [ 486.947489][ T32] __schedule+0x17db/0x58f0 [ 486.947529][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 486.947553][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 486.947636][ T32] ? __pfx___schedule+0x10/0x10 [ 486.947668][ T32] ? schedule+0x90/0x2b0 [ 486.947693][ T32] schedule+0x164/0x2b0 [ 486.947718][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.947738][ T32] __mutex_lock+0x7c1/0x1550 [ 486.947767][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.947796][ T32] ? tun_chr_close+0x3e/0x1c0 [ 486.947845][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.947890][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 486.947911][ T32] tun_chr_close+0x3e/0x1c0 [ 486.947930][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 486.947950][ T32] __fput+0x418/0xa50 [ 486.948029][ T32] task_work_run+0x1d9/0x270 [ 486.948055][ T32] ? __pfx_task_work_run+0x10/0x10 [ 486.948077][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 486.948113][ T32] do_exit+0x73a/0x2360 [ 486.948192][ T32] ? __pfx_do_exit+0x10/0x10 [ 486.948217][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.948257][ T32] do_group_exit+0x22d/0x2f0 [ 486.948276][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.948333][ T32] get_signal+0x121b/0x12c0 [ 486.948409][ T32] arch_do_signal_or_restart+0xbb/0x860 [ 486.948438][ T32] ? __pfx_task_work_add+0x10/0x10 [ 486.948460][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 486.948486][ T32] ? sock_ioctl+0x159/0x7e0 [ 486.948569][ T32] ? __fput_deferred+0x222/0x390 [ 486.948605][ T32] exit_to_user_mode_loop+0x10e/0x770 [ 486.948649][ T32] ? rcu_is_watching+0x16/0xb0 [ 486.948676][ T32] do_syscall_64+0x328/0x520 [ 486.948747][ T32] ? trace_irq_disable+0x3b/0x140 [ 486.948789][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.948811][ T32] ? clear_bhb_loop+0x70/0xc0 [ 486.948835][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.948856][ T32] RIP: 0033:0x7fef3339e159 [ 486.948876][ T32] RSP: 002b:00007fef341e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.948898][ T32] RAX: ffffffffffffffed RBX: 00007fef33625fa0 RCX: 00007fef3339e159 [ 486.948913][ T32] RDX: 0000200000000040 RSI: 0000000000008b32 RDI: 0000000000000004 [ 486.948926][ T32] RBP: 00007fef3343506b R08: 0000000000000000 R09: 0000000000000000 [ 486.948938][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.948951][ T32] R13: 00007fef33626038 R14: 00007fef33625fa0 R15: 00007ffff9675038 [ 486.948986][ T32] [ 486.948996][ T32] INFO: task syz.2.1591:12064 blocked for more than 145 seconds. [ 486.949010][ T32] Not tainted syzkaller #0 [ 486.949020][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.949029][ T32] task:syz.2.1591 state:D stack:28808 pid:12064 tgid:12062 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 486.949087][ T32] Call Trace: [ 486.949094][ T32] [ 486.949107][ T32] __schedule+0x17db/0x58f0 [ 486.949162][ T32] ? __pfx___schedule+0x10/0x10 [ 486.949195][ T32] ? schedule+0x90/0x2b0 [ 486.949220][ T32] schedule+0x164/0x2b0 [ 486.949244][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.949266][ T32] __mutex_lock+0x7c1/0x1550 [ 486.949288][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.949322][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.949351][ T32] ? dev_ethtool+0x3a0/0x29e0 [ 486.949405][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.949438][ T32] ? dev_get_by_name+0x21/0x200 [ 486.949489][ T32] ? dev_get_by_name+0x21/0x200 [ 486.949527][ T32] dev_ethtool+0x3a0/0x29e0 [ 486.949549][ T32] ? __lock_acquire+0x747/0x2de0 [ 486.949586][ T32] ? __pfx_dev_ethtool+0x10/0x10 [ 486.949610][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 486.949661][ T32] ? lock_acquire+0x115/0x350 [ 486.949692][ T32] ? dev_load+0x21/0x1f0 [ 486.949739][ T32] ? dev_load+0x21/0x1f0 [ 486.949764][ T32] dev_ioctl+0x392/0x1150 [ 486.949793][ T32] sock_do_ioctl+0x23e/0x320 [ 486.949816][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 486.949833][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 486.949899][ T32] sock_ioctl+0x57a/0x7e0 [ 486.949931][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 486.949961][ T32] ? __fget_files+0x2a/0x420 [ 486.950013][ T32] ? __fget_files+0x3a2/0x420 [ 486.950037][ T32] ? __fget_files+0x2a/0x420 [ 486.950067][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 486.950135][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 486.950164][ T32] __se_sys_ioctl+0xfc/0x170 [ 486.950211][ T32] do_syscall_64+0x166/0x520 [ 486.950234][ T32] ? trace_irq_disable+0x3b/0x140 [ 486.950253][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.950273][ T32] ? clear_bhb_loop+0x70/0xc0 [ 486.950298][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.950326][ T32] RIP: 0033:0x7f569139e159 [ 486.950344][ T32] RSP: 002b:00007f569223b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.950364][ T32] RAX: ffffffffffffffda RBX: 00007f5691626090 RCX: 00007f569139e159 [ 486.950378][ T32] RDX: 00002000000001c0 RSI: 0000000000008946 RDI: 0000000000000008 [ 486.950390][ T32] RBP: 00007f569143506b R08: 0000000000000000 R09: 0000000000000000 [ 486.950403][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.950415][ T32] R13: 00007f5691626128 R14: 00007f5691626090 R15: 00007fffc29bc398 [ 486.950450][ T32] [ 486.950458][ T32] INFO: task syz.2.1591:12066 blocked for more than 145 seconds. [ 486.950472][ T32] Not tainted syzkaller #0 [ 486.950481][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.950489][ T32] task:syz.2.1591 state:D stack:28808 pid:12066 tgid:12062 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 486.950546][ T32] Call Trace: [ 486.950554][ T32] [ 486.950566][ T32] __schedule+0x17db/0x58f0 [ 486.964704][ T32] ? __pfx___schedule+0x10/0x10 [ 486.964749][ T32] ? schedule+0x90/0x2b0 [ 486.964775][ T32] schedule+0x164/0x2b0 [ 486.964800][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.964821][ T32] __mutex_lock+0x7c1/0x1550 [ 486.964843][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.964871][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.964899][ T32] ? dev_ethtool+0x3a0/0x29e0 [ 486.964925][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.964956][ T32] ? dev_get_by_name+0x21/0x200 [ 486.964983][ T32] ? dev_get_by_name+0x21/0x200 [ 486.965022][ T32] dev_ethtool+0x3a0/0x29e0 [ 486.965042][ T32] ? __lock_acquire+0x747/0x2de0 [ 486.965081][ T32] ? __pfx_dev_ethtool+0x10/0x10 [ 486.965104][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 486.965131][ T32] ? lock_acquire+0x115/0x350 [ 486.965163][ T32] ? dev_load+0x21/0x1f0 [ 486.965188][ T32] ? dev_load+0x21/0x1f0 [ 486.965214][ T32] dev_ioctl+0x392/0x1150 [ 486.965242][ T32] sock_do_ioctl+0x23e/0x320 [ 486.965266][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 486.965284][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 486.965334][ T32] sock_ioctl+0x57a/0x7e0 [ 486.965366][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 486.965397][ T32] ? __fget_files+0x2a/0x420 [ 486.965422][ T32] ? __fget_files+0x3a2/0x420 [ 486.965447][ T32] ? __fget_files+0x2a/0x420 [ 486.965477][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 486.965503][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 486.965532][ T32] __se_sys_ioctl+0xfc/0x170 [ 486.965557][ T32] do_syscall_64+0x166/0x520 [ 486.965581][ T32] ? trace_irq_disable+0x3b/0x140 [ 486.965601][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.965621][ T32] ? clear_bhb_loop+0x70/0xc0 [ 486.965646][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.965665][ T32] RIP: 0033:0x7f569139e159 [ 486.965684][ T32] RSP: 002b:00007f569221a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.965705][ T32] RAX: ffffffffffffffda RBX: 00007f5691626180 RCX: 00007f569139e159 [ 486.965719][ T32] RDX: 00002000000001c0 RSI: 0000000000008946 RDI: 0000000000000008 [ 486.965732][ T32] RBP: 00007f569143506b R08: 0000000000000000 R09: 0000000000000000 [ 486.965745][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.965757][ T32] R13: 00007f5691626218 R14: 00007f5691626180 R15: 00007fffc29bc398 [ 486.965792][ T32] [ 486.965804][ T32] INFO: task syz.3.1596:12081 blocked for more than 145 seconds. [ 486.965818][ T32] Not tainted syzkaller #0 [ 486.965828][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.965836][ T32] task:syz.3.1596 state:D stack:28552 pid:12081 tgid:12080 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 486.965895][ T32] Call Trace: [ 486.965902][ T32] [ 486.965915][ T32] __schedule+0x17db/0x58f0 [ 486.965970][ T32] ? __pfx___schedule+0x10/0x10 [ 486.966004][ T32] ? schedule+0x90/0x2b0 [ 486.966029][ T32] schedule+0x164/0x2b0 [ 486.966053][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.966074][ T32] __mutex_lock+0x7c1/0x1550 [ 486.966104][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.966133][ T32] ? __tun_chr_ioctl+0x3da/0x1e70 [ 486.966158][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.966205][ T32] __tun_chr_ioctl+0x3da/0x1e70 [ 486.966239][ T32] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 486.966268][ T32] ? __fget_files+0x2a/0x420 [ 486.966292][ T32] ? __fget_files+0x3a2/0x420 [ 486.966324][ T32] ? __fget_files+0x2a/0x420 [ 486.966354][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 486.966381][ T32] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 486.966403][ T32] __se_sys_ioctl+0xfc/0x170 [ 486.966428][ T32] do_syscall_64+0x166/0x520 [ 486.966449][ T32] ? trace_irq_disable+0x3b/0x140 [ 486.966468][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.966488][ T32] ? clear_bhb_loop+0x70/0xc0 [ 486.966514][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.966534][ T32] RIP: 0033:0x7fb493f9e159 [ 486.966551][ T32] RSP: 002b:00007fb494dd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.966570][ T32] RAX: ffffffffffffffda RBX: 00007fb494225fa0 RCX: 00007fb493f9e159 [ 486.966584][ T32] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000004 [ 486.966597][ T32] RBP: 00007fb49403506b R08: 0000000000000000 R09: 0000000000000000 [ 486.966609][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.966622][ T32] R13: 00007fb494226038 R14: 00007fb494225fa0 R15: 00007ffcc873cd08 [ 486.966657][ T32] [ 486.966664][ T32] INFO: task syz.3.1596:12082 blocked for more than 145 seconds. [ 486.966679][ T32] Not tainted syzkaller #0 [ 486.966689][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.966697][ T32] task:syz.3.1596 state:D stack:28808 pid:12082 tgid:12080 ppid:5615 task_flags:0x400140 flags:0x00080002 [ 486.966755][ T32] Call Trace: [ 486.966761][ T32] [ 486.966773][ T32] __schedule+0x17db/0x58f0 [ 486.966826][ T32] ? __pfx___schedule+0x10/0x10 [ 486.966860][ T32] ? schedule+0x90/0x2b0 [ 486.966886][ T32] schedule+0x164/0x2b0 [ 486.966910][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.966931][ T32] __mutex_lock+0x7c1/0x1550 [ 486.966960][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.966989][ T32] ? __tun_chr_ioctl+0x3da/0x1e70 [ 486.967014][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.967050][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 486.967080][ T32] __tun_chr_ioctl+0x3da/0x1e70 [ 486.967114][ T32] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 486.967141][ T32] ? __fget_files+0x2a/0x420 [ 486.967166][ T32] ? __fget_files+0x3a2/0x420 [ 486.967191][ T32] ? __fget_files+0x2a/0x420 [ 486.967221][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 486.967249][ T32] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 486.967270][ T32] __se_sys_ioctl+0xfc/0x170 [ 486.967294][ T32] do_syscall_64+0x166/0x520 [ 486.967324][ T32] ? trace_irq_disable+0x3b/0x140 [ 486.967344][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.967364][ T32] ? clear_bhb_loop+0x70/0xc0 [ 486.967388][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.967407][ T32] RIP: 0033:0x7fb493f9e159 [ 486.967424][ T32] RSP: 002b:00007fb494db3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.967443][ T32] RAX: ffffffffffffffda RBX: 00007fb494226090 RCX: 00007fb493f9e159 [ 486.967457][ T32] RDX: 0000000000000118 RSI: 00000000400454cd RDI: 0000000000000004 [ 486.967469][ T32] RBP: 00007fb49403506b R08: 0000000000000000 R09: 0000000000000000 [ 486.967482][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.967494][ T32] R13: 00007fb494226128 R14: 00007fb494226090 R15: 00007ffcc873cd08 [ 486.967529][ T32] [ 486.967537][ T32] INFO: task syz.3.1596:12083 blocked for more than 145 seconds. [ 486.967550][ T32] Not tainted syzkaller #0 [ 486.967560][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.967569][ T32] task:syz.3.1596 state:D stack:27568 pid:12083 tgid:12080 ppid:5615 task_flags:0x400140 flags:0x00080002 [ 486.967624][ T32] Call Trace: [ 486.967630][ T32] [ 486.967643][ T32] __schedule+0x17db/0x58f0 [ 486.967689][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.967723][ T32] ? __pfx___schedule+0x10/0x10 [ 486.967755][ T32] ? schedule+0x90/0x2b0 [ 486.967781][ T32] schedule+0x164/0x2b0 [ 486.967807][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.967826][ T32] __mutex_lock+0x7c1/0x1550 [ 486.967855][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.967883][ T32] ? devinet_ioctl+0x2fb/0x1c50 [ 486.967986][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.968020][ T32] ? bpf_lsm_capable+0x9/0x20 [ 486.968038][ T32] ? security_capable+0x7e/0x2c0 [ 486.968095][ T32] devinet_ioctl+0x2fb/0x1c50 [ 486.968135][ T32] ? __pfx_devinet_ioctl+0x10/0x10 [ 486.968166][ T32] ? get_user_ifreq+0x12b/0x180 [ 486.968221][ T32] inet_ioctl+0x42a/0x560 [ 486.968245][ T32] ? __pfx_inet_ioctl+0x10/0x10 [ 486.968291][ T32] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 486.968336][ T32] ? packet_ioctl+0x26b/0x350 [ 486.968386][ T32] sock_do_ioctl+0x101/0x320 [ 486.968410][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 486.968427][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 486.968467][ T32] sock_ioctl+0x57a/0x7e0 [ 486.968500][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 486.968530][ T32] ? __fget_files+0x2a/0x420 [ 486.968555][ T32] ? __fget_files+0x3a2/0x420 [ 486.968579][ T32] ? __fget_files+0x2a/0x420 [ 486.968610][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 486.968637][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 486.968665][ T32] __se_sys_ioctl+0xfc/0x170 [ 486.968691][ T32] do_syscall_64+0x166/0x520 [ 486.968712][ T32] ? trace_irq_disable+0x3b/0x140 [ 486.968732][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.968752][ T32] ? clear_bhb_loop+0x70/0xc0 [ 486.968777][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.968796][ T32] RIP: 0033:0x7fb493f9e159 [ 486.968813][ T32] RSP: 002b:00007fb494d92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.968833][ T32] RAX: ffffffffffffffda RBX: 00007fb494226180 RCX: 00007fb493f9e159 [ 486.968847][ T32] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000005 [ 486.968859][ T32] RBP: 00007fb49403506b R08: 0000000000000000 R09: 0000000000000000 [ 486.968872][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.968884][ T32] R13: 00007fb494226218 R14: 00007fb494226180 R15: 00007ffcc873cd08 [ 486.968918][ T32] [ 486.968927][ T32] INFO: task syz.0.1597:12088 blocked for more than 145 seconds. [ 486.968941][ T32] Not tainted syzkaller #0 [ 486.968951][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.968960][ T32] task:syz.0.1597 state:D stack:28552 pid:12088 tgid:12087 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 486.969017][ T32] Call Trace: [ 486.969023][ T32] [ 486.969036][ T32] __schedule+0x17db/0x58f0 [ 486.969075][ T32] ? __kasan_slab_free+0x5c/0x80 [ 486.969124][ T32] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 486.969170][ T32] ? do_syscall_64+0x166/0x520 [ 486.969203][ T32] ? __pfx___schedule+0x10/0x10 [ 486.969235][ T32] ? schedule+0x90/0x2b0 [ 486.969261][ T32] schedule+0x164/0x2b0 [ 486.969285][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.969307][ T32] __mutex_lock+0x7c1/0x1550 [ 486.969344][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.969372][ T32] ? dev_ioctl+0x7a4/0x1150 [ 486.969398][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.969431][ T32] ? dev_load+0x21/0x1f0 [ 486.969457][ T32] ? dev_load+0x21/0x1f0 [ 486.969483][ T32] dev_ioctl+0x7a4/0x1150 [ 486.969512][ T32] sock_do_ioctl+0x23e/0x320 [ 486.969535][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 486.969552][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 486.969593][ T32] sock_ioctl+0x57a/0x7e0 [ 486.969626][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 486.969656][ T32] ? __fget_files+0x2a/0x420 [ 486.969680][ T32] ? __fget_files+0x3a2/0x420 [ 486.969705][ T32] ? __fget_files+0x2a/0x420 [ 486.969735][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 486.969762][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 486.969790][ T32] __se_sys_ioctl+0xfc/0x170 [ 486.969814][ T32] do_syscall_64+0x166/0x520 [ 486.969837][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.969856][ T32] ? clear_bhb_loop+0x70/0xc0 [ 486.969881][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.969901][ T32] RIP: 0033:0x7fb21259e159 [ 486.969919][ T32] RSP: 002b:00007fb213422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.969938][ T32] RAX: ffffffffffffffda RBX: 00007fb212825fa0 RCX: 00007fb21259e159 [ 486.969952][ T32] RDX: 0000200000000180 RSI: 0000000000008991 RDI: 0000000000000003 [ 486.969965][ T32] RBP: 00007fb21263506b R08: 0000000000000000 R09: 0000000000000000 [ 486.969977][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.969989][ T32] R13: 00007fb212826038 R14: 00007fb212825fa0 R15: 00007ffe730f9148 [ 486.970023][ T32] [ 486.970031][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 486.970041][ T32] INFO: task syz.4.1601:12109 blocked for more than 145 seconds. [ 486.970055][ T32] Not tainted syzkaller #0 [ 486.970064][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.970072][ T32] task:syz.4.1601 state:D stack:27200 pid:12109 tgid:12102 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 486.970127][ T32] Call Trace: [ 486.970133][ T32] [ 486.970145][ T32] __schedule+0x17db/0x58f0 [ 486.970200][ T32] ? __pfx___schedule+0x10/0x10 [ 486.970232][ T32] ? schedule+0x90/0x2b0 [ 486.970257][ T32] schedule+0x164/0x2b0 [ 486.970281][ T32] schedule_preempt_disabled+0x13/0x30 [ 486.970302][ T32] __mutex_lock+0x7c1/0x1550 [ 486.970339][ T32] ? __mutex_lock+0x5d4/0x1550 [ 486.970368][ T32] ? rtnetlink_rcv_msg+0x767/0xc00 [ 486.970396][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 486.970420][ T32] ? lock_acquire+0x115/0x350 [ 486.970460][ T32] rtnetlink_rcv_msg+0x767/0xc00 [ 486.970489][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 486.970512][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 486.970534][ T32] ? ref_tracker_free+0x689/0x830 [ 486.970562][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 487.840801][ C1] net_ratelimit: 14914 callbacks suppressed [ 487.840833][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.840858][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 487.841300][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.841701][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.842153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.842553][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.842629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 487.842963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.843362][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.843761][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.850834][ C0] net_ratelimit: 14598 callbacks suppressed [ 492.850861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.851310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.851749][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.852219][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.852653][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.852819][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 492.853097][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.853567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.854001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.854446][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.860834][ C0] net_ratelimit: 14871 callbacks suppressed [ 497.860860][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.861282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.861686][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.862086][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.862341][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 497.862495][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.862943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.863354][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.863754][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.864173][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 502.870732][ C0] net_ratelimit: 14575 callbacks suppressed [ 502.870758][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.870751][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 502.871162][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.871570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.871972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.872372][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.872750][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 502.872781][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.873182][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.873634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.902525][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.880636][ C0] net_ratelimit: 14961 callbacks suppressed [ 507.880661][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.881106][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.881505][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.881901][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.882142][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 507.882304][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.882704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.883107][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.883504][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.883898][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.127319][ T32] netlink_rcv_skb+0x226/0x4a0 [ 508.127459][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.127489][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.127531][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 508.127561][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 508.127597][ T32] netlink_unicast+0x7bd/0x940 [ 508.127637][ T32] netlink_sendmsg+0x813/0xb40 [ 508.127678][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.127717][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 508.127770][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.127797][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 508.127823][ T32] ____sys_sendmsg+0x54e/0x850 [ 508.127857][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.127894][ T32] ? import_iovec+0x73/0xa0 [ 508.127968][ T32] ___sys_sendmsg+0x2a5/0x360 [ 508.127993][ T32] ? __lock_acquire+0x747/0x2de0 [ 508.128028][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.128059][ T32] ? futex_wait+0x2a2/0x390 [ 508.128165][ T32] ? __fget_files+0x2a/0x420 [ 508.128192][ T32] ? __fget_files+0x3a2/0x420 [ 508.128231][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 508.128262][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.128314][ T32] do_syscall_64+0x166/0x520 [ 508.128337][ T32] ? trace_irq_disable+0x3b/0x140 [ 508.128359][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.128380][ T32] ? clear_bhb_loop+0x70/0xc0 [ 508.128406][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.128425][ T32] RIP: 0033:0x7fc26519e159 [ 508.128445][ T32] RSP: 002b:00007fc265ff8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.128471][ T32] RAX: ffffffffffffffda RBX: 00007fc265426270 RCX: 00007fc26519e159 [ 508.128486][ T32] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 000000000000000a [ 508.128499][ T32] RBP: 00007fc26523506b R08: 0000000000000000 R09: 0000000000000000 [ 508.128512][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.128524][ T32] R13: 00007fc265426308 R14: 00007fc265426270 R15: 00007ffde332bec8 [ 508.128558][ T32] [ 508.128567][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 508.128608][ T32] [ 508.128608][ T32] Showing all locks held in the system: [ 508.128617][ T32] locks held by kthreadd/2: 2, last CPU#1: [ 508.128632][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 508.128683][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 508.128757][ T32] locks held by kworker/u8:0/12: 3, on CPU#0: [ 508.128773][ T32] #0: ffff888031fbe940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.128826][ T32] #1: ffffc90000117c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.128880][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 508.128929][ T32] locks held by kworker/u8:1/13: 4, last CPU#1: [ 508.128943][ T32] #0: ffff888032b32140 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.129001][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.129063][ T32] #2: ffff888034651440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.129212][ T32] #3: ffff8880329f8330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.129270][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 508.129284][ T32] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 508.129379][ T32] locks held by kworker/1:1/30: 3, last CPU#1: [ 508.129393][ T32] #0: ffff88801b06a940 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.129445][ T32] #1: ffffc90000a57c40 ((work_completion)(&(&br->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.129498][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: br_fdb_cleanup+0xb9/0x4d0 [ 508.129571][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 508.129584][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 508.129654][ T32] locks held by kworker/u8:2/43: 4, last CPU#0: [ 508.129668][ T32] #0: ffff888032b30140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.129726][ T32] #1: ffffc90000b37c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.129780][ T32] #2: ffff88803472d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.129836][ T32] #3: ffff88807e275c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.129894][ T32] locks held by kworker/u8:3/50: 4, last CPU#1: [ 508.129907][ T32] #0: ffff88807d48e140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.129965][ T32] #1: ffffc90000bb7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.130027][ T32] #2: ffff8880358e9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.130084][ T32] #3: ffff888076283ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.130141][ T32] locks held by kworker/u8:4/59: 4, last CPU#0: [ 508.130155][ T32] #0: ffff88807611c140 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.130213][ T32] #1: ffffc9000200fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.130265][ T32] #2: ffff88807e6c5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.130322][ T32] #3: ffff8880762820e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.130378][ T32] locks held by kworker/u8:5/82: 3, last CPU#0: [ 508.130391][ T32] #0: ffff88807611e940 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.130448][ T32] #1: ffffc9000247fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.130502][ T32] #2: ffff88807e272cb0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 508.144212][ T32] locks held by kworker/u8:6/136: 4, last CPU#0: [ 508.144233][ T32] #0: ffff888032b34140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.144292][ T32] #1: ffffc9000201fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.144346][ T32] #2: ffff888035769440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.144404][ T32] #3: ffff8880329fdc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.144461][ T32] locks held by kworker/u8:7/154: 4, last CPU#0: [ 508.144474][ T32] #0: ffff888020f51940 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.144533][ T32] #1: ffffc90002e5fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.144585][ T32] #2: ffff888033f75440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.144640][ T32] #3: ffff8880329f9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.144702][ T32] locks held by kworker/u8:8/1253: 2, on CPU#0: [ 508.144716][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.144769][ T32] #1: ffffc90005527c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.144822][ T32] locks held by kworker/0:2/1926: 3, on CPU#0: [ 508.144835][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.144886][ T32] #1: ffffc900063d7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.144939][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 508.145058][ T32] locks held by kworker/R-bat_e/3226: 2, last CPU#0: [ 508.145072][ T32] #0: ffff8880321bb140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.145124][ T32] #1: ffffc9000dd8fc20 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.145178][ T32] locks held by klogd/4971: 2, last CPU#0: [ 508.145192][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 508.145239][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 508.145290][ T32] locks held by udevd/4982: 4, last CPU#0: [ 508.145303][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 508.145401][ T32] #1: ffff88807e9683b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 508.145495][ T32] #2: ffff88802b61d038 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 508.145554][ T32] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 508.145600][ T32] locks held by dhcpcd/5276: 2, last CPU#1: [ 508.145614][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 508.145659][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 508.145729][ T32] locks held by dhcpcd/5277: 1, last CPU#1: [ 508.145743][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 508.145789][ T32] locks held by kworker/1:3/5348: 2, last CPU#1: [ 508.145802][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.145854][ T32] #1: ffffc9000381fc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.145908][ T32] locks held by crond/5355: 3, last CPU#1: [ 508.145921][ T32] #0: ffffffff8f4f1938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 508.145970][ T32] #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 508.146014][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 508.146072][ T32] locks held by getty/5373: 2, on CPU#1: [ 508.146085][ T32] #0: ffff888033ee30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 508.146185][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 508.146238][ T32] locks held by syz-executor/5603: 1, last CPU#1: [ 508.146252][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 508.146303][ T32] locks held by kworker/0:5/5729: 2, last CPU#0: [ 508.146317][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.146369][ T32] #1: ffffc90004dd7c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.146423][ T32] locks held by kworker/u8:9/6230: 2, last CPU#0: [ 508.146437][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.146488][ T32] #1: ffffc90006ff7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.146540][ T32] locks held by kworker/u8:10/6231: 4, last CPU#0: [ 508.146554][ T32] #0: ffff88807d48e140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.146610][ T32] #1: ffffc90006b4fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.146664][ T32] #2: ffff8880358e9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.146720][ T32] #3: ffff8880762834b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.146776][ T32] locks held by kworker/u8:11/6232: 4, last CPU#1: [ 508.146790][ T32] #0: ffff888032b34140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.146841][ T32] #1: ffffc90007437c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.146894][ T32] #2: ffff888035769440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.146950][ T32] #3: ffff8880329fd270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.147007][ T32] locks held by kworker/u8:12/6233: 3, last CPU#1: [ 508.147029][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.147081][ T32] #1: ffffc900078a7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.147135][ T32] #2: ffff88807d5a0258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 508.147218][ T32] locks held by kworker/u8:13/6234: 3, on CPU#0: [ 508.147231][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.147284][ T32] #1: ffffc90007c8fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.147337][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 508.147393][ T32] locks held by kworker/u8:14/6235: 4, last CPU#1: [ 508.147407][ T32] #0: ffff888032b35140 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.147457][ T32] #1: ffffc90007c9fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.147510][ T32] #2: ffff888033f71440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.147565][ T32] #3: ffff8880329fe640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.147621][ T32] locks held by kworker/u8:15/6236: 4, last CPU#0: [ 508.147635][ T32] #0: ffff88807611f140 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.147691][ T32] #1: ffffc90007cafc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.147744][ T32] #2: ffff888079121440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.147800][ T32] #3: ffff888076286640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.147857][ T32] locks held by kworker/u8:16/6237: 4, last CPU#0: [ 508.147870][ T32] #0: ffff88807d48f140 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.147926][ T32] #1: ffffc90007cbfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.147995][ T32] #2: ffff888034729440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.148060][ T32] #3: ffff888076284888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.148118][ T32] locks held by kworker/u8:17/6238: 4, last CPU#0: [ 508.148131][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.148183][ T32] #1: ffffc900080b7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.148235][ T32] #2: ffff888068080800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 508.148337][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: _ieee80211_wake_txqs+0x2a/0xbf0 [ 508.148434][ T32] locks held by dhcpcd/6763: 1, last CPU#0: [ 508.148448][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 508.148497][ T32] locks held by kworker/0:8/11207: 3, on CPU#0: [ 508.148510][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.148561][ T32] #1: ffffc9001a98fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.148611][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 508.148668][ T32] locks held by kworker/u8:18/11514: 2, last CPU#0: [ 508.148682][ T32] #0: ffff888032b32140 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.148739][ T32] #1: ffffc9000d75fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.148793][ T32] locks held by kworker/u8:20/11517: 4, last CPU#0: [ 508.148807][ T32] #0: ffff88807611f140 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.148863][ T32] #1: ffffc90005537c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.148916][ T32] #2: ffff888079121440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 508.148970][ T32] #3: ffff88807e273ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 508.149033][ T32] locks held by kworker/R-bond5/11797: 6, last CPU#1: [ 508.149046][ T32] #0: ffff88802a4ba140 ((wq_completion)bond5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.149099][ T32] #1: ffffc900050d7c20 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 508.149152][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 508.149225][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xa2/0x3f0 [ 508.149278][ T32] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xa2/0x3f0 [ 508.149327][ T32] #5: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 508.163031][ T32] locks held by syz.1.1587/12035: 1, on CPU#0: [ 508.163050][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 508.163103][ T32] locks held by syz.2.1591/12063: 2, last CPU#1: [ 508.163117][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810 [ 508.163168][ T32] #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 508.163216][ T32] locks held by syz.2.1591/12064: 1, on CPU#0: [ 508.163229][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x3a0/0x29e0 [ 508.163280][ T32] locks held by syz.2.1591/12066: 1, on CPU#0: [ 508.163293][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x3a0/0x29e0 [ 508.163343][ T32] locks held by syz.3.1596/12081: 1, on CPU#0: [ 508.163357][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 508.163406][ T32] locks held by syz.3.1596/12082: 1, on CPU#0: [ 508.163420][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 508.163469][ T32] locks held by syz.3.1596/12083: 1, on CPU#0: [ 508.163483][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 508.163535][ T32] locks held by syz.0.1597/12088: 1, on CPU#0: [ 508.163547][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 508.163597][ T32] locks held by syz.4.1601/12109: 1, on CPU#0: [ 508.163611][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 508.163662][ T32] [ 508.163667][ T32] ============================================= [ 508.163667][ T32] [ 508.163677][ T32] NMI backtrace for cpu 0 [ 508.163762][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 508.163785][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.163797][ T32] Call Trace: [ 508.163805][ T32] [ 508.163814][ T32] dump_stack_lvl+0xe8/0x150 [ 508.163844][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 508.163918][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 508.163993][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 508.164034][ T32] sys_info+0x135/0x170 [ 508.164059][ T32] watchdog+0xfd7/0x1030 [ 508.164108][ T32] ? watchdog+0x1c7/0x1030 [ 508.164136][ T32] kthread+0x38b/0x480 [ 508.164156][ T32] ? __pfx_watchdog+0x10/0x10 [ 508.164173][ T32] ? __pfx_kthread+0x10/0x10 [ 508.164195][ T32] ret_from_fork+0x514/0xb70 [ 508.164218][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 508.164237][ T32] ? __switch_to+0xc89/0x1420 [ 508.164267][ T32] ? __pfx_kthread+0x10/0x10 [ 508.164287][ T32] ret_from_fork_asm+0x1a/0x30 [ 508.164332][ T32] [ 508.164341][ T32] Sending NMI from CPU 0 to CPUs 1: [ 508.164372][ C1] NMI backtrace for cpu 1 [ 508.164388][ C1] CPU: 1 UID: 0 PID: 11797 Comm: kworker/R-bond5 Not tainted syzkaller #0 PREEMPT(full) [ 508.164411][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.164423][ C1] Workqueue: bond5 bond_mii_monitor [ 508.164477][ C1] RIP: 0010:lock_is_held_type+0xdf/0x150 [ 508.164500][ C1] Code: eb 1c 83 fd ff 74 12 31 c0 f6 43 22 03 0f 95 c0 31 db 39 c5 0f 94 c3 eb 05 bb 01 00 00 00 48 c7 c7 35 c8 69 8e e8 61 1b 00 00 ff ff ff ff 65 0f c1 05 dc ac af 07 83 f8 01 75 25 9c 58 a9 00 [ 508.164516][ C1] RSP: 0018:ffffc90000a17640 EFLAGS: 00000006 [ 508.164539][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000100 [ 508.164552][ C1] RDX: 8000000000000100 RSI: ffffffff8e69c835 RDI: ffffffff8c6da080 [ 508.164565][ C1] RBP: 00000000ffffffff R08: 0000000000000100 R09: ffffc90000a179b0 [ 508.164577][ C1] R10: ffffc90000a17800 R11: fffff52000142f02 R12: 0000000000000246 [ 508.164590][ C1] R13: ffff888077fd5dc0 R14: ffffffff8ed5c8e0 R15: 0000000000000002 [ 508.164602][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 508.164618][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.164631][ C1] CR2: 00007fb494db3d58 CR3: 000000007a666000 CR4: 00000000003526f0 [ 508.164648][ C1] Call Trace: [ 508.164655][ C1] [ 508.164663][ C1] ip6_ignore_linkdown+0x66/0x140 [ 508.164712][ C1] find_match+0x9c/0xb40 [ 508.164739][ C1] __find_rr_leaf+0x243/0x740 [ 508.164767][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 508.164790][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 508.164831][ C1] ? __lock_acquire+0x747/0x2de0 [ 508.164851][ C1] fib6_table_lookup+0x3c6/0xae0 [ 508.164879][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 508.164901][ C1] ip6_pol_route+0x229/0x14d0 [ 508.164917][ C1] ? ip6_pol_route+0x163/0x14d0 [ 508.164936][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 508.164956][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 508.164977][ C1] fib6_rule_action+0x9d7/0xc00 [ 508.165015][ C1] ? lock_acquire+0x115/0x350 [ 508.165032][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 508.165051][ C1] ? fib6_rule_match+0x799/0xa80 [ 508.165067][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 508.165085][ C1] fib_rules_lookup+0x770/0xeb0 [ 508.165148][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 508.165175][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 508.165199][ C1] ? l3mdev_update_flow+0x26/0x610 [ 508.165239][ C1] ? l3mdev_update_flow+0x4ad/0x610 [ 508.165263][ C1] fib6_rule_lookup+0x1a0/0x730 [ 508.165279][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 508.165297][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 508.165316][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 508.165335][ C1] ? lock_acquire+0x115/0x350 [ 508.165355][ C1] ip6_route_input+0x78d/0xb20 [ 508.165376][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 508.165404][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 508.165447][ C1] ip6_rcv_finish+0x141/0x280 [ 508.165470][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 508.165490][ C1] ip_sabotage_in+0x1e1/0x270 [ 508.165551][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 508.165576][ C1] nf_hook_slow+0xc5/0x220 [ 508.165615][ C1] NF_HOOK+0x21f/0x3c0 [ 508.165637][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 508.165658][ C1] ? NF_HOOK+0x9e/0x3c0 [ 508.165678][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 508.165698][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 508.165721][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 508.165745][ C1] ? netif_receive_skb+0x102/0xbf0 [ 508.165763][ C1] netif_receive_skb+0x278/0xbf0 [ 508.165780][ C1] ? lock_acquire+0x115/0x350 [ 508.165797][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 508.165816][ C1] ? br_netif_receive_skb+0x126/0x190 [ 508.165842][ C1] NF_HOOK+0xa4/0x3a0 [ 508.165864][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 508.165888][ C1] ? NF_HOOK+0xfa/0x3a0 [ 508.165910][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 508.165935][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 508.165961][ C1] ? br_pass_frame_up+0x275/0x420 [ 508.165987][ C1] br_handle_frame_finish+0x1136/0x1950 [ 508.166011][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 508.166074][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 508.166103][ C1] ? nf_hook_slow+0x176/0x220 [ 508.166122][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 508.166146][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 508.166174][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 508.166199][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 508.166223][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 508.166266][ C1] ? lock_acquire+0x115/0x350 [ 508.166284][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 508.166311][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 508.166339][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 508.166365][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 508.166391][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 508.166418][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 508.166444][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 508.166471][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 508.166494][ C1] br_handle_frame+0x1329/0x1600 [ 508.166531][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 508.166556][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 508.166580][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 508.166598][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 508.166620][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 508.166643][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 508.166669][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 508.166686][ C1] ? ip6_rcv_finish+0x265/0x280 [ 508.166709][ C1] ? NF_HOOK+0x336/0x3c0 [ 508.166738][ C1] ? process_backlog+0x3de/0x18b0 [ 508.166757][ C1] ? process_backlog+0x3de/0x18b0 [ 508.166777][ C1] process_backlog+0x727/0x18b0 [ 508.166797][ C1] ? call_timer_fn+0xd5/0x5f0 [ 508.166857][ C1] ? process_backlog+0x3de/0x18b0 [ 508.166882][ C1] __napi_poll+0xaa/0x330 [ 508.166901][ C1] net_rx_action+0x61d/0xf50 [ 508.166925][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 508.166943][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 508.167009][ C1] ? net_tx_action+0xbff/0xc30 [ 508.167031][ C1] handle_softirqs+0x226/0x860 [ 508.167073][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 508.167097][ C1] __irq_exit_rcu+0xcb/0x220 [ 508.167119][ C1] irq_exit_rcu+0x9/0x30 [ 508.167140][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 508.167160][ C1] [ 508.167166][ C1] [ 508.167173][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 508.167192][ C1] RIP: 0010:queue_delayed_work_on+0x18a/0x1e0 [ 508.167235][ C1] Code: 39 00 e8 69 6d 57 0a 4d 85 f6 74 ea e8 1f 8b 39 00 fb 65 48 8b 05 be d8 06 12 48 3b 44 24 20 75 56 89 d8 48 83 c4 28 5b 41 5c <41> 5d 41 5e 41 5f 5d e9 da 71 5a 0a cc e8 f4 8a 39 00 48 8d 7c 24 [ 508.167250][ C1] RSP: 0018:ffffc900050d77f8 EFLAGS: 00000286 [ 508.167264][ C1] RAX: 0000000054ced201 RBX: 0000000000000064 RCX: ffff888077fd5dc0 [ 508.167277][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 508.167288][ C1] RBP: 0000000000000008 R08: ffffffff907a417f R09: 1ffffffff20f482f [ 508.167300][ C1] R10: dffffc0000000000 R11: fffffbfff20f4830 R12: dffffc0000000000 [ 508.167312][ C1] R13: 0000000000000000 R14: 0000000000000200 R15: 0000000000000000 [ 508.167333][ C1] bond_mii_monitor+0x309d/0x3260 [ 508.167353][ C1] ? register_lock_class+0x31/0x2e0 [ 508.167371][ C1] ? bond_mii_monitor+0x16e/0x3260 [ 508.167387][ C1] ? __lock_acquire+0x747/0x2de0 [ 508.167406][ C1] ? __pfx_bond_mii_monitor+0x10/0x10 [ 508.167424][ C1] ? irqentry_exit+0x218/0x910 [ 508.167444][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 508.167463][ C1] ? irqentry_exit+0x218/0x910 [ 508.167482][ C1] ? trace_irq_disable+0x3b/0x140 [ 508.167509][ C1] ? rcu_is_watching+0x16/0xb0 [ 508.167537][ C1] ? process_scheduled_works+0x97a/0x1630 [ 508.167559][ C1] process_scheduled_works+0xc3d/0x1630 [ 508.167593][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 508.167614][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 508.167641][ C1] ? assign_work+0x3af/0x5d0 [ 508.167664][ C1] rescuer_thread+0x7c5/0x10e0 [ 508.167691][ C1] ? rescuer_thread+0xb8/0x10e0 [ 508.167721][ C1] kthread+0x38b/0x480 [ 508.167738][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 508.167760][ C1] ? __pfx_kthread+0x10/0x10 [ 508.167777][ C1] ret_from_fork+0x514/0xb70 [ 508.167794][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 508.167811][ C1] ? __switch_to+0xc89/0x1420 [ 508.167834][ C1] ? __pfx_kthread+0x10/0x10 [ 508.167852][ C1] ret_from_fork_asm+0x1a/0x30 [ 508.167883][ C1] [ 508.168379][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 514.917467][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 514.926599][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.936677][ T32] Call Trace: [ 514.939975][ T32] [ 514.942929][ T32] vpanic+0x56d/0xa60 [ 514.947009][ T32] ? __pfx_vpanic+0x10/0x10 [ 514.951546][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 514.957132][ T32] panic+0xc5/0xd0 [ 514.960884][ T32] ? __pfx_panic+0x10/0x10 [ 514.965335][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 514.970388][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 514.976580][ T32] watchdog+0x1030/0x1030 [ 514.980939][ T32] ? watchdog+0x1c7/0x1030 [ 514.985388][ T32] kthread+0x38b/0x480 [ 514.989483][ T32] ? __pfx_watchdog+0x10/0x10 [ 514.994189][ T32] ? __pfx_kthread+0x10/0x10 [ 514.998802][ T32] ret_from_fork+0x514/0xb70 [ 515.003415][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 515.008551][ T32] ? __switch_to+0xc89/0x1420 [ 515.013258][ T32] ? __pfx_kthread+0x10/0x10 [ 515.017875][ T32] ret_from_fork_asm+0x1a/0x30 [ 515.022684][ T32] [ 515.025932][ T32] Kernel Offset: disabled [ 515.030255][ T32] Rebooting in 86400 seconds..