last executing test programs: 3m7.327679091s ago: executing program 0 (id=3634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 3m7.147489794s ago: executing program 0 (id=3638): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, 0x0, 0x0) close(0x4) 3m6.929304625s ago: executing program 0 (id=3642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000280)=""/50, 0x32}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdea}], 0x5) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0xffffffc8, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m5.724213896s ago: executing program 1 (id=3654): socket(0x200000000000011, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0x7, 0xce, [@dev={0xac, 0x14, 0x14, 0x24}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) 3m5.698516657s ago: executing program 1 (id=3655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x40000001}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getnexthop={0x38, 0x6a, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x40) 3m5.249454787s ago: executing program 3 (id=3656): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x44}, 0x1, 0x41, 0x0, 0x2}, 0x2000400c) 3m5.188728684s ago: executing program 4 (id=3657): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xfba1, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42ad4, 0x60004}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}, @IFLA_LINK_NETNSID={0x8}]}, 0xffffffffffffff37}}, 0x4008040) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x20, 0x5, 0x0, 0xfffff024}, {0x6, 0x4, 0x0, 0x1}]}) ioctl$TUNGETVNETLE(r5, 0x40107447, &(0x7f0000000180)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x4000040) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040)=0x69, 0x4) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x0, 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) r11 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r11, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x24048890) 3m5.125362665s ago: executing program 1 (id=3658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], 0x0, 0xffffffeb, 0x1, 0x1, r1}}, 0x40) 3m4.961544884s ago: executing program 3 (id=3659): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, 0x0, 0x200840c4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000001000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3m4.811814962s ago: executing program 1 (id=3661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000001000000000000012cdb50185d04c57d3a00008501000000000000a200000000000000000048a3638a4f8e06dd2fc65322cad870c87767c4e8fddd83ee54f57c7e8cb0889055afae3af096eb829d910f0eae03f3875a4efcf4303b1da4a68f2996401579ba96de69bcb678b67abcc1752b682728078884afeaad1bd64b2024706a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000091119b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000000, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa900000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c00040007"]}, 0x58}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000240)="a68770a2", 0x4, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x400d}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x30, 0x9, 0x1f86307}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={r5, 0xfffa, 0x800, 0x8, 0xb, 0x2}, 0x14) 3m4.672512732s ago: executing program 0 (id=3662): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000340)=r4}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, r2, 0x25, 0x2, @val=@tracing={r7, 0x2e5b}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) close(0x3) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="a1218f7f40c470c846f71f4cbbbbbbbbbbbb00000000ca000086dd6076b2af00082f00fc000000050000000000000000000000010000883e000890"], 0x0) r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) setsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, &(0x7f00000000c0), 0x4) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000280)={{r5}, 0x7ff, 0x5, 0x9}) r10 = socket(0x1e, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500004000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r7, @ANYRES32=r3, @ANYRESHEX], 0x50) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r17, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000ffffffff000000000d00000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000000083000000bf0900000000000055090100000000009500000000000000bf9100000000007c8e8d8200b7020000020000008500000085000000b7000000000000009500000000000000000000c94cf6af6adcf3ebe1db0987fb21d97489b1e92631b685b9949e31487b6ce33b72529c50771d85382617e0dff2e1869e72eee900"], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9}, 0x10, 0x30d33, r12, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3m4.654940589s ago: executing program 2 (id=3663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18090000000000000000000001000000850000007500000018480000fcffffff000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x81, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, 0x28, 0x0, 0x9, 0x0, 0x22}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1}, &(0x7f00000001c0)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xa, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) 3m4.577098937s ago: executing program 4 (id=3664): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x80, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fbf8834123605c7e705e266282785604a3925450d5f83040085f44c05a33dae19c6f63d4c4eefccd130875299a32ca90414f0711ff52c7627cab6eae4c739c3a7abfe0ab3a38957e10bed7203c8cd63bc87efb9b39725e4f71ccce81b6ee245fee4297b4a02a445a82308e92bd155b96b651ed7869b3d6f29e160c9b51969ac0bdf54ca8067a55e00b0be30377cbc6649034e2e6e6ce16f9f2285c1b49f162d28bb6aa35e23444d34590c29309c5c57627143ad1ad09caabeb40fd562d2df3602b64566604551ab6818664c08bdae9588c", @ANYRES64=r2, @ANYRESOCT=r1, @ANYBLOB="f5a0c900"], 0x134}, 0x1, 0x0, 0x0, 0x400c090}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, "090086ddffff0000"}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x1}, 0x10) write(r1, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x3, @none, 0x10, 0x2}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="cc4790b302000000b705000008002f44850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) 3m4.57644311s ago: executing program 3 (id=3665): socket(0x200000000000011, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0x7, 0xce, [@dev={0xac, 0x14, 0x14, 0x24}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) 3m4.474439346s ago: executing program 4 (id=3666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FIONCLEX(r3, 0x5450) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000002200)=""/89, 0x59, 0x10000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0), 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210000001f000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0xd00}, 0x4068040) 3m4.460806731s ago: executing program 0 (id=3667): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x40040) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700210008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m4.42947619s ago: executing program 2 (id=3668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x8809}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0xa, 0x0, @opaque='W\v'}}}}}}, 0x34) 3m4.380957954s ago: executing program 3 (id=3669): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000044) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x82, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x3}, 0xe) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x53, 0x3, 0x6a, @ipv4={'\x00', '\xff\xff', @local}, @mcast2={0xff, 0x5}, 0x8, 0x80, 0xe3e1, 0xcff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff00"], 0x50}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x234, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @remote, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x92}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffe00}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000810}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r8, &(0x7f0000000900)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0x8, 0x6, "33c3f0", 0x44, 0x2f, 0x1, @remote, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0xa0, 0x3, 0x0, 0x1, 0x3, 0x7}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0xff, 0x2, 0x1, 0x0, 0x0, 0x3}, 0x2, {0x6448, 0x4b0f, 0x0, 0x9, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}}}, 0x86) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@loopback, 0x63, r3}) 3m4.300485025s ago: executing program 4 (id=3670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100001a00330600000020fddbdf25000000000000ffffffffff0700000000000080000000000040004e2400ff00008000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd70000335000002000500000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210002"], 0x140}, 0x1, 0x0, 0x0, 0x20000090}, 0x200080d4) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2d, 'freezer'}, {0x2b, 'blkio'}, {0x2d, 'net_prio'}]}, 0x1a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x2}, 0x18}}, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x0, 0x11, 0xff, @local, @private1}}}, 0x36) 3m4.282519504s ago: executing program 2 (id=3671): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000200)=@can, 0x80, 0x0}}], 0x2, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) socket$kcm(0xa, 0x3, 0x87) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000030000000700000000000000", @ANYRES32, @ANYBLOB="0000000000b464d41a63000000000000000000002f04f4111bfac0f2ecb31e0926cac6bfea966ba19fe849537521ce3275", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES64=r8], 0xfdef) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0xd4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r6, 0x6, 0x0, 0xffffffff, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0]}, 0x40) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000400007012bbd700000000000047c00000400c2800c000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) 3m4.20825549s ago: executing program 0 (id=3672): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x20000000, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) splice(r2, 0x0, r3, 0x0, 0x2, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000180), 0x4) 3m4.073114011s ago: executing program 4 (id=3673): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x810, r0, 0x10032000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x211d9572}, &(0x7f00000001c0)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x20) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 3m3.979270126s ago: executing program 2 (id=3674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x74, r2, 0x20, 0x70bd2a, 0xe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x810}, 0xb21366d1b4e2d9a7) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001600010325bd7000fcffffff2000000008000380"], 0x1c}, 0x1, 0x0, 0x0, 0x440d3}, 0x0) 3m3.952582192s ago: executing program 2 (id=3675): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'batadv0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3m3.845431756s ago: executing program 2 (id=3676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8481) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r1}, 0x14) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x135, &(0x7f0000001b00)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x2}}, {@ipv4={0x800, @tcp={{0x1b, 0x4, 0x1, 0x9, 0x11f, 0x64, 0x0, 0x5, 0x6, 0x0, @multicast2, @local, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x76, [@broadcast, @empty, @broadcast]}, @timestamp={0x44, 0x18, 0x25, 0x0, 0x1, [0x9, 0x10000, 0x1, 0x4, 0x4]}, @timestamp={0x44, 0x18, 0x4a, 0x0, 0x3, [0x7, 0x6, 0x9, 0x8, 0x3]}, @generic={0x89, 0x2}, @rr={0x7, 0x13, 0xb0, [@rand_addr=0x64010101, @local, @private=0xa010102, @rand_addr=0x64010102]}]}}, {{0x4e21, 0x4e21, r7, 0x41424344, 0x1, 0x0, 0xd, 0x2, 0x9c8d, 0x0, 0xe50, {[@mptcp=@mp_join={0x1e, 0x3}, @sack={0x5, 0x12, [0xa7, 0xd0d, 0xffffffff, 0x3]}, @eol, @generic={0x0, 0x4, "d80c"}, @window={0x3, 0x3, 0x3c}]}}, {"33f789cf31cc61c358fd294145120b834ed8edcba5baa6fb8fa7372c3ad25276bad72178ff819318fc0adb092cc67567b03a05114ca3e5005a8ca3efba1ce2059185f0a990dc1a600bf7094f1713d875118ef49c0de67bd3b8f307d4d5119bd05d5ae79250d8dd1aec139a3099592e8fd3dd2c677ae2036d9db79a018ff72d"}}}}}}, 0x0) 3m3.841830562s ago: executing program 1 (id=3677): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x2000000, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x0, 0xe5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x1a0}}, 0x24004000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x1, 0x2, 0x10001}, {0x7, 0xd9, 0x9, 0xfffffff7}, {0x84, 0x9, 0xff, 0x3}, {0x6, 0x2, 0x4, 0x4}]}, 0x10) 3m3.800195306s ago: executing program 3 (id=3678): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f00000004c0)=0x8) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x7}, 0x6) write(r0, &(0x7f0000000080)="05000000010001", 0x7) close(0x4) 3m3.687952943s ago: executing program 4 (id=3679): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000013020000000000000000000000000000000800"], 0x0, 0x32, 0x0, 0x1}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 3m3.687143886s ago: executing program 1 (id=3680): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004880)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @uid}]}]}, 0x24}], 0x1}, 0x44010) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002540)={@multicast1, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@deltaction={0x2a8, 0x31, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x52}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x69f8}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2a8}}, 0x4800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000280)="0232e6fefa8ce2d4c14866321c084bb58c3dd1666a19af3cf299188914a89370a50d9126b6ecb773704fb3e6430d12727a375df737de35a42869d1e92883480dcb474e0200000000", 0x48}, {&(0x7f00000003c0)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa66d403a08c07bbbe72da665341d6592092455897fe84a54e94a", 0x36}], 0x2) write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000110080070032c508000700451d00280100ac1414bb4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5110000790780006"], 0x36) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x401c5820, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="c40000000101010200000000000000000a00000808001a40000000090c000e8006000340000400000800034000000000280017000000000000005b2b00000006000000067fffffff00000007000000030000000400000052080003400000000414000e8006000340000000000600034000040000100005800a000100482e323434000000200006801c000380060001004e220000060001004e200000060002004e2000000600124000010000180004801400018005000200000000000500010000008000"], 0xc4}, 0x1, 0x0, 0x0, 0x20000014}, 0x2400c001) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x88, 0x2c, 0x20, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x2, 0x4, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a4, 0x4, 0x4, 0x4, 0x3}}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x997f}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041890}, 0x40010) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'dvmrp1\x00', 0x2}) 3m3.68612456s ago: executing program 3 (id=3681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x8809}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0xa, 0x0, @opaque='W\v'}}}}}}, 0x34) 0s ago: executing program 32 (id=3672): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x20000000, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) splice(r2, 0x0, r3, 0x0, 0x2, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000180), 0x4) kernel console output (not intermixed with test programs): tribute type 11 has an invalid length. [ 386.322285][ T13] veth1_macvtap: left promiscuous mode [ 386.322344][ T13] veth0_macvtap: left promiscuous mode [ 386.329383][ T13] veth1_vlan: left promiscuous mode [ 386.329516][ T13] veth0_vlan: left promiscuous mode [ 386.365290][T15874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3215'. [ 386.494783][ T5626] Bluetooth: hci3: command tx timeout [ 386.910657][T15718] team0: Port device team_slave_0 added [ 387.021332][T15718] team0: Port device team_slave_1 added [ 387.079990][T15718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.087937][T15718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.120955][T15718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.125448][T15718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.125465][T15718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.125489][T15718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.255507][T15718] hsr_slave_0: entered promiscuous mode [ 387.262293][T15718] hsr_slave_1: entered promiscuous mode [ 387.269077][T15718] debugfs: 'hsr0' already exists in 'hsr' [ 387.275071][T15718] Cannot create hsr debugfs directory [ 387.518123][T15892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3218'. [ 387.548267][ T13] IPVS: stop unused estimator thread 0... [ 387.574074][T15892] x_tables: duplicate underflow at hook 1 [ 387.755849][T15911] FAULT_INJECTION: forcing a failure. [ 387.755849][T15911] name failslab, interval 1, probability 0, space 0, times 0 [ 387.770390][T15911] CPU: 1 UID: 0 PID: 15911 Comm: syz.1.3225 Not tainted syzkaller #0 PREEMPT(full) [ 387.770418][T15911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.770430][T15911] Call Trace: [ 387.770438][T15911] [ 387.770445][T15911] dump_stack_lvl+0xe8/0x150 [ 387.770478][T15911] should_fail_ex+0x410/0x560 [ 387.770510][T15911] should_failslab+0xa8/0x100 [ 387.770534][T15911] __kmalloc_cache_noprof+0xa3/0x600 [ 387.770561][T15911] ? nft_trans_table_add+0x56/0x430 [ 387.770658][T15911] ? nft_trans_table_add+0x56/0x430 [ 387.770691][T15911] nft_trans_table_add+0x56/0x430 [ 387.770715][T15911] nf_tables_newtable+0xd26/0x1990 [ 387.770752][T15911] nfnetlink_rcv+0x1288/0x28c0 [ 387.770803][T15911] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 387.770839][T15911] ? ref_tracker_free+0x689/0x830 [ 387.770885][T15911] ? skb_clone+0x246/0x3a0 [ 387.770910][T15911] ? __netlink_deliver_tap+0x811/0x860 [ 387.770941][T15911] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.770965][T15911] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.770992][T15911] netlink_unicast+0x7bd/0x940 [ 387.771025][T15911] netlink_sendmsg+0x813/0xb40 [ 387.771058][T15911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.771089][T15911] ? apparmor_socket_sendmsg+0x98/0x360 [ 387.771138][T15911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.771159][T15911] sock_sendmsg_nosec+0x13a/0x180 [ 387.771187][T15911] ____sys_sendmsg+0x54e/0x850 [ 387.771214][T15911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.771244][T15911] ? import_iovec+0x73/0xa0 [ 387.771268][T15911] ___sys_sendmsg+0x2a5/0x360 [ 387.771287][T15911] ? __lock_acquire+0x6df/0x2e50 [ 387.771312][T15911] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.771370][T15911] ? __fget_files+0x2a/0x420 [ 387.771393][T15911] ? __fget_files+0x3a2/0x420 [ 387.771428][T15911] __x64_sys_sendmsg+0x1b1/0x290 [ 387.771451][T15911] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.771494][T15911] do_syscall_64+0x166/0x520 [ 387.771520][T15911] ? trace_irq_disable+0x3b/0x140 [ 387.771538][T15911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.771557][T15911] ? clear_bhb_loop+0x70/0xc0 [ 387.771581][T15911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.771599][T15911] RIP: 0033:0x7f6f96f9e159 [ 387.771617][T15911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.771633][T15911] RSP: 002b:00007f6f97db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.771653][T15911] RAX: ffffffffffffffda RBX: 00007f6f97225fa0 RCX: 00007f6f96f9e159 [ 387.771667][T15911] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 387.771685][T15911] RBP: 00007f6f97db4090 R08: 0000000000000000 R09: 0000000000000000 [ 387.771696][T15911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.771708][T15911] R13: 00007f6f97226038 R14: 00007f6f97225fa0 R15: 00007ffd8e9ec258 [ 387.771740][T15911] [ 388.567819][ T5626] Bluetooth: hci3: command tx timeout [ 388.588371][T15938] netlink: 'syz.0.3232': attribute type 1 has an invalid length. [ 389.065911][T15718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 389.108097][T15718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.117891][T15718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.147959][T15718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.155976][T15718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.176088][T15718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.186452][T15718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 389.201909][T15959] netlink: 'syz.2.3239': attribute type 2 has an invalid length. [ 389.201956][T15959] netlink: 'syz.2.3239': attribute type 2 has an invalid length. [ 389.220435][T15718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.374395][T15718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.421279][T15718] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.439698][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.439805][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.468941][T11151] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.469052][T11151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.631897][T15977] __nla_validate_parse: 5 callbacks suppressed [ 389.640148][T15977] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3241'. [ 389.730445][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3242'. [ 389.782160][T15973] syzkaller0: entered promiscuous mode [ 389.782208][T15973] syzkaller0: entered allmulticast mode [ 389.993111][T15992] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 390.647474][ T5626] Bluetooth: hci3: command tx timeout [ 390.661208][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 391.142755][T15718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.375455][T16056] tipc: Enabling of bearer rejected, failed to enable media [ 391.691633][T16072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3257'. [ 391.742949][T15718] veth0_vlan: entered promiscuous mode [ 391.758500][T15718] veth1_vlan: entered promiscuous mode [ 391.812532][T16072] netlink: 'syz.3.3257': attribute type 2 has an invalid length. [ 391.812585][T16072] netlink: 'syz.3.3257': attribute type 2 has an invalid length. [ 391.845173][T15718] veth0_macvtap: entered promiscuous mode [ 391.884119][T15718] veth1_macvtap: entered promiscuous mode [ 392.024515][T15718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.055312][T15718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.095090][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3260'. [ 392.128580][T16089] netlink: 'syz.2.3262': attribute type 1 has an invalid length. [ 392.150206][T16094] xt_nat: multiple ranges no longer supported [ 392.169117][T16089] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3262'. [ 392.253517][T11151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.320780][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.320823][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.327229][T11150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.338105][T11150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.339897][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.402823][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.402879][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.757364][T16109] tipc: Started in network mode [ 392.757415][T16109] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 392.757569][T16109] tipc: Enabled bearer , priority 10 [ 392.899639][T16111] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 392.991532][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.005828][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.015784][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.024349][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.037822][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.141359][T16118] block nbd0: reconnected socket [ 393.192768][T16122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3272'. [ 393.204322][ T5626] block nbd0: Receive control failed (result -32) [ 393.248780][T11151] erspan0: left allmulticast mode [ 393.248828][T11151] erspan0: left promiscuous mode [ 393.251176][T11151] bridge1: port 1(erspan0) entered disabled state [ 393.381298][T16125] netlink: 'syz.3.3272': attribute type 2 has an invalid length. [ 393.381327][T16125] netlink: 'syz.3.3272': attribute type 2 has an invalid length. [ 393.506457][T11151] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 393.526293][T11151] ip6gretap1 (unregistering): left allmulticast mode [ 393.558167][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 393.591876][T16137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3276'. [ 393.746593][T11151] bond0 (unregistering): Released all slaves [ 393.753218][T11151] bond1 (unregistering): Released all slaves [ 393.763922][T11151] bond2 (unregistering): Released all slaves [ 393.776213][T11151] bond3 (unregistering): Released all slaves [ 393.797021][T11151] bond4 (unregistering): Released all slaves [ 393.808217][T11151] bond5 (unregistering): Released all slaves [ 393.818271][T11151] bond6 (unregistering): Released all slaves [ 393.828456][T11151] bond7 (unregistering): Released all slaves [ 393.849087][T11151] bond8 (unregistering): Released all slaves [ 393.859700][T11151] bond9 (unregistering): Released all slaves [ 393.870520][T11151] bond10 (unregistering): Released all slaves [ 393.884495][T16128] FAULT_INJECTION: forcing a failure. [ 393.884495][T16128] name failslab, interval 1, probability 0, space 0, times 0 [ 393.897523][T16128] CPU: 1 UID: 0 PID: 16128 Comm: syz.4.3274 Not tainted syzkaller #0 PREEMPT(full) [ 393.897550][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.897561][T16128] Call Trace: [ 393.897570][T16128] [ 393.897579][T16128] dump_stack_lvl+0xe8/0x150 [ 393.897613][T16128] should_fail_ex+0x410/0x560 [ 393.897656][T16128] should_failslab+0xa8/0x100 [ 393.897682][T16128] __kmalloc_cache_noprof+0xa3/0x600 [ 393.897711][T16128] ? qdisc_get_rtab+0x105/0x480 [ 393.897851][T16128] ? qdisc_get_rtab+0x105/0x480 [ 393.897881][T16128] qdisc_get_rtab+0x105/0x480 [ 393.897904][T16128] ? tcf_police_init+0x549/0x15d0 [ 393.897953][T16128] tcf_police_init+0x569/0x15d0 [ 393.897985][T16128] ? __pfx_tcf_police_init+0x10/0x10 [ 393.898026][T16128] ? __kasan_kmalloc+0x93/0xb0 [ 393.898049][T16128] ? tcf_action_init_1+0x202/0x740 [ 393.898079][T16128] ? __asan_memcpy+0x40/0x70 [ 393.898110][T16128] tcf_action_init_1+0x4ba/0x740 [ 393.898143][T16128] ? __pfx_tcf_action_init_1+0x10/0x10 [ 393.898170][T16128] ? _raw_read_unlock+0x28/0x50 [ 393.898225][T16128] ? tc_action_load_ops+0x247/0x540 [ 393.898270][T16128] ? __nla_parse+0x40/0x60 [ 393.898294][T16128] tcf_action_init+0x30e/0xb10 [ 393.898332][T16128] ? __pfx_tcf_action_init+0x10/0x10 [ 393.898382][T16128] ? __pfx___nla_validate_parse+0x10/0x10 [ 393.898403][T16128] ? lockdep_hardirqs_on+0x7b/0x110 [ 393.898466][T16128] tc_ctl_action+0x43b/0xc70 [ 393.898495][T16128] ? __pfx_tc_ctl_action+0x10/0x10 [ 393.898529][T16128] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 393.898595][T16128] ? __pfx_tc_ctl_action+0x10/0x10 [ 393.898621][T16128] rtnetlink_rcv_msg+0x7b9/0xc00 [ 393.898725][T16128] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 393.898752][T16128] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.898777][T16128] ? ref_tracker_free+0x689/0x830 [ 393.898799][T16128] ? __pfx_ref_tracker_free+0x10/0x10 [ 393.898828][T16128] netlink_rcv_skb+0x226/0x4a0 [ 393.898853][T16128] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.898882][T16128] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.898918][T16128] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.898940][T16128] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.898967][T16128] netlink_unicast+0x7bd/0x940 [ 393.898999][T16128] netlink_sendmsg+0x813/0xb40 [ 393.899031][T16128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.899063][T16128] ? apparmor_socket_sendmsg+0x98/0x360 [ 393.899094][T16128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.899115][T16128] sock_sendmsg_nosec+0x13a/0x180 [ 393.899142][T16128] ____sys_sendmsg+0x54e/0x850 [ 393.899170][T16128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.899202][T16128] ? import_iovec+0x73/0xa0 [ 393.899226][T16128] ___sys_sendmsg+0x2a5/0x360 [ 393.899246][T16128] ? __lock_acquire+0x6df/0x2e50 [ 393.899269][T16128] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.899327][T16128] ? __fget_files+0x2a/0x420 [ 393.899350][T16128] ? __fget_files+0x3a2/0x420 [ 393.899385][T16128] __x64_sys_sendmsg+0x1b1/0x290 [ 393.899409][T16128] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.899453][T16128] do_syscall_64+0x166/0x520 [ 393.899479][T16128] ? trace_irq_disable+0x3b/0x140 [ 393.899497][T16128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.899517][T16128] ? clear_bhb_loop+0x70/0xc0 [ 393.899541][T16128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.899559][T16128] RIP: 0033:0x7f94bcd9e159 [ 393.899578][T16128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.899594][T16128] RSP: 002b:00007f94bdc68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.899614][T16128] RAX: ffffffffffffffda RBX: 00007f94bd025fa0 RCX: 00007f94bcd9e159 [ 393.899627][T16128] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000004 [ 393.899647][T16128] RBP: 00007f94bdc68090 R08: 0000000000000000 R09: 0000000000000000 [ 393.899659][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.899670][T16128] R13: 00007f94bd026038 R14: 00007f94bd025fa0 R15: 00007ffe392e0068 [ 393.899702][T16128] [ 394.310904][T16142] netlink: 'syz.4.3277': attribute type 39 has an invalid length. [ 394.356485][T16137] vlan2: entered promiscuous mode [ 394.357975][T16137] bond0: entered promiscuous mode [ 394.357993][T16137] bond_slave_0: entered promiscuous mode [ 394.358202][T16137] bond_slave_1: entered promiscuous mode [ 394.405096][ T5748] tipc: Node number set to 10136234 [ 394.436890][T11151] ´: left promiscuous mode [ 395.065882][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 395.127077][ T5626] Bluetooth: hci1: command tx timeout [ 396.103118][T11151] tipc: Disabling bearer [ 396.110900][T11151] tipc: Left network mode [ 396.300356][T16114] lo speed is unknown, defaulting to 1000 [ 396.474275][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 396.613995][T16176] tipc: Enabling of bearer rejected, failed to enable media [ 396.638539][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3287'. [ 396.666011][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3287'. [ 396.722353][T16180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3288'. [ 396.783225][T16180] netlink: 'syz.1.3288': attribute type 2 has an invalid length. [ 396.783270][T16180] netlink: 'syz.1.3288': attribute type 2 has an invalid length. [ 396.799725][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3289'. [ 396.926262][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3289'. [ 397.208530][ T5626] Bluetooth: hci1: command tx timeout [ 397.283413][T11151] hsr_slave_0: left promiscuous mode [ 397.290663][T11151] hsr_slave_1: left promiscuous mode [ 397.305910][T11151] veth1_macvtap: left promiscuous mode [ 397.312328][T11151] veth0_macvtap: left promiscuous mode [ 397.318236][T11151] veth1_vlan: left promiscuous mode [ 397.323581][T11151] veth0_vlan: left promiscuous mode [ 397.336520][ T37] IPVS: starting estimator thread 0... [ 397.418695][T16204] IPVS: using max 34 ests per chain, 81600 per kthread [ 397.534087][T11151] team0 (unregistering): Port device vlan4 removed [ 397.551405][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3299'. [ 397.741522][T16218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3301'. [ 398.067989][ T5748] lo speed is unknown, defaulting to 1000 [ 398.068043][ T5748] syz0: Port: 1 Link DOWN [ 398.068068][T11150] smbdirect: ib_dev[syz0] removed [ 398.379227][T16114] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.381894][T16114] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.382059][T16114] bridge_slave_0: entered allmulticast mode [ 398.429365][T16114] bridge_slave_0: entered promiscuous mode [ 398.431877][T16114] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.431966][T16114] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.432108][T16114] bridge_slave_1: entered allmulticast mode [ 398.449055][T16114] bridge_slave_1: entered promiscuous mode [ 398.476120][T16233] FAULT_INJECTION: forcing a failure. [ 398.476120][T16233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.476172][T16233] CPU: 0 UID: 0 PID: 16233 Comm: syz.1.3304 Not tainted syzkaller #0 PREEMPT(full) [ 398.476195][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.476207][T16233] Call Trace: [ 398.476215][T16233] [ 398.476224][T16233] dump_stack_lvl+0xe8/0x150 [ 398.476265][T16233] should_fail_ex+0x410/0x560 [ 398.476300][T16233] _copy_to_user+0x31/0xb0 [ 398.476323][T16233] simple_read_from_buffer+0xe1/0x170 [ 398.476353][T16233] proc_fail_nth_read+0x1bb/0x230 [ 398.476378][T16233] ? common_file_perm+0x20e/0x2b0 [ 398.476401][T16233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.476432][T16233] ? rw_verify_area+0x24a/0x4c0 [ 398.476458][T16233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.476485][T16233] vfs_read+0x213/0xa80 [ 398.476527][T16233] ? __pfx___mutex_lock+0x10/0x10 [ 398.476556][T16233] ? __pfx_vfs_read+0x10/0x10 [ 398.476583][T16233] ? __fget_files+0x2a/0x420 [ 398.476611][T16233] ? __fget_files+0x3a2/0x420 [ 398.476633][T16233] ? __fget_files+0x2a/0x420 [ 398.476665][T16233] ksys_read+0x150/0x270 [ 398.476694][T16233] ? __pfx_ksys_read+0x10/0x10 [ 398.476726][T16233] do_syscall_64+0x166/0x520 [ 398.476750][T16233] ? trace_irq_disable+0x3b/0x140 [ 398.476766][T16233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.476784][T16233] ? clear_bhb_loop+0x70/0xc0 [ 398.476808][T16233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.476827][T16233] RIP: 0033:0x7f6f96f5e98e [ 398.476844][T16233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 398.476861][T16233] RSP: 002b:00007f6f97db3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.476881][T16233] RAX: ffffffffffffffda RBX: 00007f6f97db46c0 RCX: 00007f6f96f5e98e [ 398.476895][T16233] RDX: 000000000000000f RSI: 00007f6f97db40a0 RDI: 0000000000000005 [ 398.476907][T16233] RBP: 00007f6f97db4090 R08: 0000000000000000 R09: 0000000000000000 [ 398.476919][T16233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.476930][T16233] R13: 00007f6f97226038 R14: 00007f6f97225fa0 R15: 00007ffd8e9ec258 [ 398.476962][T16233] [ 398.605444][T16114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.632846][T16114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.787929][T16114] team0: Port device team_slave_0 added [ 398.800162][T16114] team0: Port device team_slave_1 added [ 398.831557][T16243] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 398.919286][T11151] IPVS: stop unused estimator thread 0... [ 398.954274][T16250] bond4: entered allmulticast mode [ 398.964916][T16114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.966545][T16114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.966574][T16114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.971867][T16114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.971883][T16114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.971906][T16114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.989193][T16253] ip6gretap1: entered allmulticast mode [ 398.989636][T16253] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 399.150018][T16114] hsr_slave_0: entered promiscuous mode [ 399.151767][T16114] hsr_slave_1: entered promiscuous mode [ 399.192444][T11151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.286956][ T5626] Bluetooth: hci1: command tx timeout [ 399.415139][T11151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.453719][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3313'. [ 399.554334][T11151] batman_adv: batadv0: Interface deactivated: netdevsim1 [ 399.604260][T11151] batman_adv: batadv0: Removing interface: netdevsim1 [ 399.633891][T11151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.642685][T16271] FAULT_INJECTION: forcing a failure. [ 399.642685][T16271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.642713][T16271] CPU: 1 UID: 0 PID: 16271 Comm: syz.2.3315 Not tainted syzkaller #0 PREEMPT(full) [ 399.642734][T16271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.642745][T16271] Call Trace: [ 399.642753][T16271] [ 399.642762][T16271] dump_stack_lvl+0xe8/0x150 [ 399.642793][T16271] should_fail_ex+0x410/0x560 [ 399.642826][T16271] _copy_to_user+0x31/0xb0 [ 399.642848][T16271] bpf_verifier_vlog+0x496/0x900 [ 399.642885][T16271] verbose+0x11d/0x1a0 [ 399.642924][T16271] ? __pfx_verbose+0x10/0x10 [ 399.642951][T16271] ? bpf_vlog_reset+0x2aa/0x340 [ 399.642980][T16271] ? print_insn_state+0x106/0x170 [ 399.643001][T16271] do_check_common+0x2e62/0x5d30 [ 399.643057][T16271] ? __pfx_do_check_common+0x10/0x10 [ 399.643077][T16271] ? __pfx_verbose+0x10/0x10 [ 399.643104][T16271] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 399.643141][T16271] bpf_check+0x2639/0x2e10 [ 399.643170][T16271] ? ktime_get_with_offset+0x93/0x2d0 [ 399.643193][T16271] ? __pfx_bpf_check+0x10/0x10 [ 399.643215][T16271] ? bpf_obj_name_cpy+0x194/0x1e0 [ 399.643243][T16271] bpf_prog_load+0x14d6/0x1c20 [ 399.643274][T16271] ? __pfx_bpf_prog_load+0x10/0x10 [ 399.643318][T16271] __sys_bpf+0xd0d/0xd90 [ 399.643345][T16271] ? __pfx___sys_bpf+0x10/0x10 [ 399.643374][T16271] ? __fget_files+0x2a/0x420 [ 399.643414][T16271] ? ksys_write+0x242/0x270 [ 399.643441][T16271] ? __pfx_ksys_write+0x10/0x10 [ 399.643470][T16271] __x64_sys_bpf+0xba/0xd0 [ 399.643490][T16271] do_syscall_64+0x166/0x520 [ 399.643517][T16271] ? trace_irq_disable+0x3b/0x140 [ 399.643533][T16271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.643552][T16271] ? clear_bhb_loop+0x70/0xc0 [ 399.643573][T16271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.643591][T16271] RIP: 0033:0x7fd8c099e159 [ 399.643608][T16271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.643623][T16271] RSP: 002b:00007fd8c17e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.643643][T16271] RAX: ffffffffffffffda RBX: 00007fd8c0c25fa0 RCX: 00007fd8c099e159 [ 399.643657][T16271] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 399.643668][T16271] RBP: 00007fd8c17e7090 R08: 0000000000000000 R09: 0000000000000000 [ 399.643680][T16271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.643691][T16271] R13: 00007fd8c0c26038 R14: 00007fd8c0c25fa0 R15: 00007ffe7dbbcaf8 [ 399.643721][T16271] [ 399.927123][T11151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.202657][T16277] netlink: 'syz.2.3318': attribute type 4 has an invalid length. [ 400.224423][T16277] netlink: 'syz.2.3318': attribute type 4 has an invalid length. [ 400.325560][T11151] vlan3: left allmulticast mode [ 400.325621][T11151] vlan0: left allmulticast mode [ 400.328227][T11151] veth0_vlan: left allmulticast mode [ 400.328354][T11151] vlan3: left promiscuous mode [ 400.328367][T11151] vlan0: left promiscuous mode [ 400.329115][T11151] bridge0: port 1(vlan3) entered disabled state [ 400.501779][T11151] gretap0 (unregistering): left promiscuous mode [ 400.623697][T11151] bond1 (unregistering): Released all slaves [ 400.638288][T11151] bond2 (unregistering): Released all slaves [ 400.655901][T11151] bond0 (unregistering): Released all slaves [ 400.675610][T11151] bond3 (unregistering): Released all slaves [ 400.696342][T11151] bond4 (unregistering): Released all slaves [ 400.726059][T11151] bond5 (unregistering): Released all slaves [ 400.751151][T11151] bond6 (unregistering): Released all slaves [ 400.766169][T11151] bond7 (unregistering): Released all slaves [ 400.922394][T11151] ovs-s!!: left promiscuous mode [ 401.001172][T11151] þ: left promiscuous mode [ 401.103151][T11151] tipc: Disabling bearer [ 401.121585][T11151] tipc: Disabling bearer [ 401.131636][T11151] tipc: Left network mode [ 401.366918][ T5626] Bluetooth: hci1: command tx timeout [ 401.586626][T11151] veth1_to_team: left promiscuous mode [ 401.601280][T11151] hsr_slave_0: left promiscuous mode [ 401.606899][T11151] hsr_slave_1: left promiscuous mode [ 401.613217][T11151] veth1_macvtap: left promiscuous mode [ 401.613260][T11151] veth0_macvtap: left promiscuous mode [ 401.625669][T11151] veth1_vlan: left promiscuous mode [ 401.625755][T11151] veth0_vlan: left promiscuous mode [ 401.712773][T11151] team0 (unregistering): Port device batadv1 removed [ 401.820462][T16245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.065906][T16308] __nla_validate_parse: 1 callbacks suppressed [ 402.066578][T16308] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3324'. [ 402.348618][T16114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.367700][T16114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.444504][T16114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.475283][T16114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.525356][T16114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.549209][T16114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.550045][T16114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.576104][T16114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.578159][T16313] syzkaller0: entered promiscuous mode [ 402.578179][T16313] syzkaller0: entered allmulticast mode [ 402.999084][T16325] syzkaller0: entered promiscuous mode [ 402.999126][T16325] syzkaller0: entered allmulticast mode [ 403.034369][T16338] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.042851][T16335] netlink: 472 bytes leftover after parsing attributes in process `syz.2.3330'. [ 403.084435][T16350] FAULT_INJECTION: forcing a failure. [ 403.084435][T16350] name failslab, interval 1, probability 0, space 0, times 0 [ 403.099131][T16350] CPU: 0 UID: 0 PID: 16350 Comm: syz.1.3331 Not tainted syzkaller #0 PREEMPT(full) [ 403.099157][T16350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.099168][T16350] Call Trace: [ 403.099177][T16350] [ 403.099187][T16350] dump_stack_lvl+0xe8/0x150 [ 403.099219][T16350] should_fail_ex+0x410/0x560 [ 403.099252][T16350] should_failslab+0xa8/0x100 [ 403.099276][T16350] __kmalloc_noprof+0xfe/0x720 [ 403.099305][T16350] ? bpf_test_init+0x9f/0x150 [ 403.099325][T16350] ? bpf_test_init+0x9f/0x150 [ 403.099352][T16350] bpf_test_init+0x9f/0x150 [ 403.099376][T16350] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 403.099414][T16350] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 403.099443][T16350] ? __fget_files+0x2a/0x420 [ 403.099472][T16350] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 403.099496][T16350] bpf_prog_test_run+0x2c5/0x340 [ 403.099531][T16350] __sys_bpf+0xa22/0xd90 [ 403.099563][T16350] ? __pfx___sys_bpf+0x10/0x10 [ 403.099595][T16350] ? __fget_files+0x2a/0x420 [ 403.099636][T16350] ? ksys_write+0x242/0x270 [ 403.099664][T16350] ? __pfx_ksys_write+0x10/0x10 [ 403.099695][T16350] __x64_sys_bpf+0xba/0xd0 [ 403.099717][T16350] do_syscall_64+0x166/0x520 [ 403.099743][T16350] ? trace_irq_disable+0x3b/0x140 [ 403.099761][T16350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.099780][T16350] ? clear_bhb_loop+0x70/0xc0 [ 403.099803][T16350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.099822][T16350] RIP: 0033:0x7f6f96f9e159 [ 403.099840][T16350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.099857][T16350] RSP: 002b:00007f6f97db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.099877][T16350] RAX: ffffffffffffffda RBX: 00007f6f97225fa0 RCX: 00007f6f96f9e159 [ 403.099891][T16350] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 403.099903][T16350] RBP: 00007f6f97db4090 R08: 0000000000000000 R09: 0000000000000000 [ 403.099915][T16350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.099927][T16350] R13: 00007f6f97226038 R14: 00007f6f97225fa0 R15: 00007ffd8e9ec258 [ 403.099958][T16350] [ 403.366330][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'. [ 403.512955][T11151] IPVS: stop unused estimator thread 0... [ 403.628883][T16114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.653186][T16114] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.689260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.689394][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.724930][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.725060][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.935261][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 403.935301][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3335'. [ 404.657296][T16398] batadv_slave_0: entered allmulticast mode [ 404.657818][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 404.658068][T16398] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 404.950426][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'. [ 404.956370][T16114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.993060][T16404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.053853][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3344'. [ 405.093579][T16404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.111218][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3344'. [ 405.144307][T16430] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3345'. [ 405.385392][T16466] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 405.444274][T16469] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 405.500013][T16114] veth0_vlan: entered promiscuous mode [ 405.505831][T16468] netlink: 'syz.3.3349': attribute type 2 has an invalid length. [ 405.505855][T16468] netlink: 'syz.3.3349': attribute type 2 has an invalid length. [ 405.573063][T16114] veth1_vlan: entered promiscuous mode [ 405.662113][T16114] veth0_macvtap: entered promiscuous mode [ 405.680124][T16114] veth1_macvtap: entered promiscuous mode [ 405.725188][T16114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.735753][T16478] FAULT_INJECTION: forcing a failure. [ 405.735753][T16478] name failslab, interval 1, probability 0, space 0, times 0 [ 405.743453][T16114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.757002][T16478] CPU: 0 UID: 0 PID: 16478 Comm: syz.2.3354 Not tainted syzkaller #0 PREEMPT(full) [ 405.757028][T16478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.757039][T16478] Call Trace: [ 405.757048][T16478] [ 405.757056][T16478] dump_stack_lvl+0xe8/0x150 [ 405.757087][T16478] should_fail_ex+0x410/0x560 [ 405.757119][T16478] should_failslab+0xa8/0x100 [ 405.757139][T16478] ? skb_clone+0x212/0x3a0 [ 405.757160][T16478] kmem_cache_alloc_noprof+0xa1/0x600 [ 405.757192][T16478] ? skb_clone+0x212/0x3a0 [ 405.757222][T16478] skb_clone+0x212/0x3a0 [ 405.757245][T16478] __netlink_deliver_tap+0x413/0x860 [ 405.757278][T16478] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.757303][T16478] netlink_deliver_tap+0x19c/0x1b0 [ 405.757324][T16478] netlink_unicast+0x781/0x940 [ 405.757354][T16478] netlink_sendmsg+0x813/0xb40 [ 405.757384][T16478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.757414][T16478] ? apparmor_socket_sendmsg+0x98/0x360 [ 405.757442][T16478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.757461][T16478] sock_sendmsg_nosec+0x13a/0x180 [ 405.757486][T16478] ____sys_sendmsg+0x54e/0x850 [ 405.757515][T16478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.757544][T16478] ? import_iovec+0x73/0xa0 [ 405.757568][T16478] ___sys_sendmsg+0x2a5/0x360 [ 405.757586][T16478] ? __lock_acquire+0x6df/0x2e50 [ 405.757609][T16478] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.757666][T16478] ? __fget_files+0x2a/0x420 [ 405.757689][T16478] ? __fget_files+0x3a2/0x420 [ 405.757723][T16478] __x64_sys_sendmsg+0x1b1/0x290 [ 405.757745][T16478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.757795][T16478] do_syscall_64+0x166/0x520 [ 405.757822][T16478] ? trace_irq_disable+0x3b/0x140 [ 405.757841][T16478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.757861][T16478] ? clear_bhb_loop+0x70/0xc0 [ 405.757885][T16478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.757904][T16478] RIP: 0033:0x7fd8c099e159 [ 405.757922][T16478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.757938][T16478] RSP: 002b:00007fd8c17e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.757959][T16478] RAX: ffffffffffffffda RBX: 00007fd8c0c25fa0 RCX: 00007fd8c099e159 [ 405.757973][T16478] RDX: 0000000000008410 RSI: 0000200000000000 RDI: 0000000000000003 [ 405.757985][T16478] RBP: 00007fd8c17e7090 R08: 0000000000000000 R09: 0000000000000000 [ 405.757997][T16478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.758008][T16478] R13: 00007fd8c0c26038 R14: 00007fd8c0c25fa0 R15: 00007ffe7dbbcaf8 [ 405.758040][T16478] [ 405.777775][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.830773][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.872240][T11169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.878669][T11169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.196845][T11172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.196889][T11172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.197416][T16485] tipc: Started in network mode [ 406.197441][T16485] tipc: Node identity ac14140f, cluster identity 4711 [ 406.197721][T16485] tipc: New replicast peer: 255.255.255.255 [ 406.198616][T16485] tipc: Enabled bearer , priority 10 [ 406.228455][T16485] netlink: 'syz.2.3356': attribute type 1 has an invalid length. [ 406.266083][T16485] bond2: entered promiscuous mode [ 406.266504][T16485] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.295312][T16485] bond2: entered allmulticast mode [ 406.381704][T16485] bond2: (slave bridge1): making interface the new active one [ 406.381761][T16485] bridge1: entered promiscuous mode [ 406.381948][T16485] bridge1: entered allmulticast mode [ 406.403130][T16485] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 406.433379][T16493] netlink: 'syz.1.3359': attribute type 4 has an invalid length. [ 406.456064][T11150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.465748][T11150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.483301][T16493] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 406.528240][T16496] FAULT_INJECTION: forcing a failure. [ 406.528240][T16496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.547775][T16496] CPU: 0 UID: 0 PID: 16496 Comm: syz.3.3361 Not tainted syzkaller #0 PREEMPT(full) [ 406.547803][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 406.547815][T16496] Call Trace: [ 406.547823][T16496] [ 406.547832][T16496] dump_stack_lvl+0xe8/0x150 [ 406.547864][T16496] should_fail_ex+0x410/0x560 [ 406.547897][T16496] _copy_to_user+0x31/0xb0 [ 406.547920][T16496] simple_read_from_buffer+0xe1/0x170 [ 406.547950][T16496] proc_fail_nth_read+0x1bb/0x230 [ 406.547975][T16496] ? common_file_perm+0x20e/0x2b0 [ 406.547998][T16496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.548029][T16496] ? rw_verify_area+0x24a/0x4c0 [ 406.548054][T16496] ? tun_chr_write_iter+0x18a/0x200 [ 406.548201][T16496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.548226][T16496] vfs_read+0x213/0xa80 [ 406.548255][T16496] ? __pfx___mutex_lock+0x10/0x10 [ 406.548282][T16496] ? __pfx_vfs_read+0x10/0x10 [ 406.548308][T16496] ? __fget_files+0x2a/0x420 [ 406.548336][T16496] ? __fget_files+0x3a2/0x420 [ 406.548358][T16496] ? __fget_files+0x2a/0x420 [ 406.548390][T16496] ksys_read+0x150/0x270 [ 406.548416][T16496] ? __pfx_ksys_read+0x10/0x10 [ 406.548450][T16496] do_syscall_64+0x166/0x520 [ 406.548473][T16496] ? trace_irq_disable+0x3b/0x140 [ 406.548491][T16496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.548510][T16496] ? clear_bhb_loop+0x70/0xc0 [ 406.548533][T16496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.548552][T16496] RIP: 0033:0x7f7c6a35e98e [ 406.548571][T16496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 406.548587][T16496] RSP: 002b:00007f7c6b1bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.548607][T16496] RAX: ffffffffffffffda RBX: 00007f7c6b1bb6c0 RCX: 00007f7c6a35e98e [ 406.548621][T16496] RDX: 000000000000000f RSI: 00007f7c6b1bb0a0 RDI: 0000000000000004 [ 406.548633][T16496] RBP: 00007f7c6b1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 406.548645][T16496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.548657][T16496] R13: 00007f7c6a626038 R14: 00007f7c6a625fa0 R15: 00007ffd38d91f88 [ 406.548689][T16496] [ 406.847173][T16509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 406.913049][T16506] syzkaller0: entered promiscuous mode [ 406.913103][T16506] syzkaller0: entered allmulticast mode [ 407.071238][T16501] __nla_validate_parse: 69 callbacks suppressed [ 407.071290][T16501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3363'. [ 407.316979][T11893] tipc: Node number set to 2886997007 [ 407.708320][T16537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3374'. [ 407.983113][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3379'. [ 408.022618][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3379'. [ 408.073529][T16552] Cannot find del_set index 0 as target [ 408.191048][T16559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3383'. [ 408.227680][T16559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3383'. [ 408.442979][T16570] tipc: Enabling of bearer rejected, failed to enable media [ 408.514115][T16580] 8021q: VLANs not supported on syzkaller1 [ 408.625599][T16587] bridge0: port 3(vlan2) entered blocking state [ 408.632248][T16587] bridge0: port 3(vlan2) entered disabled state [ 408.638905][T16587] vlan2: entered allmulticast mode [ 408.643990][T16585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3395'. [ 408.653672][T16587] vlan0: entered allmulticast mode [ 408.659030][T16587] veth0_vlan: entered allmulticast mode [ 408.666921][T16587] vlan2: entered promiscuous mode [ 408.672044][T16587] vlan0: entered promiscuous mode [ 408.689322][T16585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3395'. [ 408.690519][T16591] FAULT_INJECTION: forcing a failure. [ 408.690519][T16591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.690547][T16591] CPU: 1 UID: 0 PID: 16591 Comm: syz.3.3398 Not tainted syzkaller #0 PREEMPT(full) [ 408.690567][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.690578][T16591] Call Trace: [ 408.690586][T16591] [ 408.690594][T16591] dump_stack_lvl+0xe8/0x150 [ 408.690626][T16591] should_fail_ex+0x410/0x560 [ 408.690659][T16591] _copy_to_user+0x31/0xb0 [ 408.690682][T16591] simple_read_from_buffer+0xe1/0x170 [ 408.690711][T16591] proc_fail_nth_read+0x1bb/0x230 [ 408.690736][T16591] ? common_file_perm+0x20e/0x2b0 [ 408.690758][T16591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.690787][T16591] ? rw_verify_area+0x24a/0x4c0 [ 408.690813][T16591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.690839][T16591] vfs_read+0x213/0xa80 [ 408.690868][T16591] ? __pfx___mutex_lock+0x10/0x10 [ 408.690896][T16591] ? __pfx_vfs_read+0x10/0x10 [ 408.690922][T16591] ? __fget_files+0x2a/0x420 [ 408.690947][T16591] ? __fget_files+0x3a2/0x420 [ 408.690976][T16591] ? __fget_files+0x2a/0x420 [ 408.691007][T16591] ksys_read+0x150/0x270 [ 408.691034][T16591] ? __pfx_ksys_read+0x10/0x10 [ 408.691070][T16591] do_syscall_64+0x166/0x520 [ 408.691095][T16591] ? trace_irq_disable+0x3b/0x140 [ 408.691113][T16591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.691132][T16591] ? clear_bhb_loop+0x70/0xc0 [ 408.691154][T16591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.691173][T16591] RIP: 0033:0x7f7c6a35e98e [ 408.691190][T16591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.691205][T16591] RSP: 002b:00007f7c6b1bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.691225][T16591] RAX: ffffffffffffffda RBX: 00007f7c6b1bb6c0 RCX: 00007f7c6a35e98e [ 408.691239][T16591] RDX: 000000000000000f RSI: 00007f7c6b1bb0a0 RDI: 0000000000000008 [ 408.691250][T16591] RBP: 00007f7c6b1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 408.691262][T16591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.691273][T16591] R13: 00007f7c6a626038 R14: 00007f7c6a625fa0 R15: 00007ffd38d91f88 [ 408.691304][T16591] [ 409.140955][T16605] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3402'. [ 409.154657][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3403'. [ 409.270987][T16612] syzkaller1: entered promiscuous mode [ 409.271031][T16612] syzkaller1: entered allmulticast mode [ 409.461112][T16617] syzkaller0: entered promiscuous mode [ 409.461147][T16617] syzkaller0: entered allmulticast mode [ 409.463673][T16621] tipc: Started in network mode [ 409.463690][T16621] tipc: Node identity , cluster identity 4711 [ 409.463703][T16621] tipc: Failed to obtain node identity [ 409.463728][T16621] tipc: Enabling of bearer rejected, failed to enable media [ 410.049924][T16647] xt_limit: Overflow, try lower: 0/0 [ 412.156848][T16655] __nla_validate_parse: 3 callbacks suppressed [ 412.156907][T16655] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3421'. [ 412.156927][T16655] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 412.381415][T16661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3423'. [ 412.438865][T16661] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3423'. [ 412.453103][T16661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3423'. [ 412.885059][T16684] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3431'. [ 412.940556][T16679] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.941140][T16679] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.040316][T16679] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 413.079429][T16682] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 413.122538][T16688] pim6reg: entered allmulticast mode [ 413.173227][T16691] pim6reg: left allmulticast mode [ 413.375821][T16705] netlink: 'syz.3.3439': attribute type 15 has an invalid length. [ 413.375863][T16705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3439'. [ 413.380190][T16707] netlink: 'syz.1.3438': attribute type 40 has an invalid length. [ 413.411146][T16707] syzkaller0: entered promiscuous mode [ 413.411183][T16707] syzkaller0: entered allmulticast mode [ 413.832802][T16728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3447'. [ 413.870149][T16728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3447'. [ 414.052168][T16738] netlink: 'syz.4.3452': attribute type 4 has an invalid length. [ 414.055745][T16738] netlink: 'syz.4.3452': attribute type 4 has an invalid length. [ 414.105812][T16743] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3453'. [ 414.162781][T16746] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3454'. [ 414.471713][T16762] IPv6: Can't replace route, no match found [ 414.694628][T16768] syz_tun: entered promiscuous mode [ 414.933651][T16776] bridge0: port 3(veth0) entered blocking state [ 414.940371][T16776] bridge0: port 3(veth0) entered disabled state [ 414.948229][T16776] veth0: entered allmulticast mode [ 414.959614][T16776] veth0: entered promiscuous mode [ 414.966737][T16776] bridge0: port 3(veth0) entered blocking state [ 414.966875][T16776] bridge0: port 3(veth0) entered forwarding state [ 414.999375][T16778] tipc: Invalid UDP bearer configuration [ 414.999452][T16778] tipc: Enabling of bearer rejected, failed to enable media [ 415.353594][T16790] netlink: 'syz.1.3468': attribute type 1 has an invalid length. [ 415.500741][T16790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.579525][T16782] ip6gretap0: entered promiscuous mode [ 415.579566][T16782] ip6gretap0: entered allmulticast mode [ 415.634397][T16797] gtp0: entered promiscuous mode [ 415.634423][T16797] gtp0: entered allmulticast mode [ 415.638335][T16797] team0: Device gtp0 is of different type [ 415.929262][T16815] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.929901][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.953302][T16815] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.953449][T16815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.953822][T16815] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.953941][T16815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.991218][T16815] team0: Port device bridge0 added [ 416.167070][T16824] netlink: 'syz.1.3481': attribute type 1 has an invalid length. [ 416.235851][T16832] FAULT_INJECTION: forcing a failure. [ 416.235851][T16832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.256876][T16832] CPU: 1 UID: 0 PID: 16832 Comm: syz.3.3483 Not tainted syzkaller #0 PREEMPT(full) [ 416.256903][T16832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.256915][T16832] Call Trace: [ 416.256923][T16832] [ 416.256932][T16832] dump_stack_lvl+0xe8/0x150 [ 416.256965][T16832] should_fail_ex+0x410/0x560 [ 416.256998][T16832] _copy_from_user+0x2d/0xb0 [ 416.257020][T16832] generic_map_update_batch+0x6a3/0x9a0 [ 416.257056][T16832] ? __pfx_generic_map_update_batch+0x10/0x10 [ 416.257082][T16832] ? __fget_files+0x2a/0x420 [ 416.257112][T16832] ? __pfx_generic_map_update_batch+0x10/0x10 [ 416.257137][T16832] bpf_map_do_batch+0x391/0x630 [ 416.257175][T16832] __sys_bpf+0xbe5/0xd90 [ 416.257203][T16832] ? __pfx___sys_bpf+0x10/0x10 [ 416.257234][T16832] ? __fget_files+0x2a/0x420 [ 416.257272][T16832] ? ksys_write+0x242/0x270 [ 416.257299][T16832] ? __pfx_ksys_write+0x10/0x10 [ 416.257329][T16832] __x64_sys_bpf+0xba/0xd0 [ 416.257351][T16832] do_syscall_64+0x166/0x520 [ 416.257377][T16832] ? trace_irq_disable+0x3b/0x140 [ 416.257399][T16832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.257417][T16832] ? clear_bhb_loop+0x70/0xc0 [ 416.257441][T16832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.257460][T16832] RIP: 0033:0x7f7c6a39e159 [ 416.257478][T16832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.257493][T16832] RSP: 002b:00007f7c6b1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.257515][T16832] RAX: ffffffffffffffda RBX: 00007f7c6a625fa0 RCX: 00007f7c6a39e159 [ 416.257529][T16832] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 416.257541][T16832] RBP: 00007f7c6b1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 416.257551][T16832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 416.257561][T16832] R13: 00007f7c6a626038 R14: 00007f7c6a625fa0 R15: 00007ffd38d91f88 [ 416.257589][T16832] [ 416.433164][T16824] bond2: (slave geneve2): making interface the new active one [ 416.460142][T16824] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 416.464881][T16831] bond2: entered promiscuous mode [ 416.464904][T16831] geneve2: entered promiscuous mode [ 416.477098][T11150] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 416.477385][T11150] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 416.477420][T11150] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 416.477450][T11150] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 416.840700][T16841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.046171][T16861] tipc: Enabling of bearer rejected, already enabled [ 418.155986][T16925] __nla_validate_parse: 8 callbacks suppressed [ 418.163494][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3511'. [ 418.182575][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'. [ 418.184525][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'. [ 418.201429][T16923] veth0: left allmulticast mode [ 418.201471][T16923] veth0: left promiscuous mode [ 418.201717][T16923] bridge0: port 3(veth0) entered disabled state [ 418.248549][T11150] IPVS: starting estimator thread 0... [ 418.337932][T16932] IPVS: using max 26 ests per chain, 62400 per kthread [ 418.370036][T16925] vlan3: entered promiscuous mode [ 418.375307][T16925] bond0: entered promiscuous mode [ 418.381048][T16925] bond_slave_0: entered promiscuous mode [ 418.388948][T16925] bond_slave_1: entered promiscuous mode [ 418.760539][T16959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3520'. [ 418.769835][T16959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3520'. [ 419.061013][T16973] vlan2: entered promiscuous mode [ 419.067369][T16973] syz_tun: entered promiscuous mode [ 419.091213][T16970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3526'. [ 419.415364][T16986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3532'. [ 419.415486][T16986] openvswitch: netlink: Invalid VLAN frame [ 419.436381][T16987] FAULT_INJECTION: forcing a failure. [ 419.436381][T16987] name failslab, interval 1, probability 0, space 0, times 0 [ 419.450341][T16987] CPU: 1 UID: 0 PID: 16987 Comm: syz.0.3533 Not tainted syzkaller #0 PREEMPT(full) [ 419.450367][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.450378][T16987] Call Trace: [ 419.450385][T16987] [ 419.450393][T16987] dump_stack_lvl+0xe8/0x150 [ 419.450424][T16987] should_fail_ex+0x410/0x560 [ 419.450455][T16987] should_failslab+0xa8/0x100 [ 419.450477][T16987] __kmalloc_cache_noprof+0xa3/0x600 [ 419.450503][T16987] ? nf_tables_newchain+0x1e10/0x28b0 [ 419.450520][T16987] ? nf_tables_newchain+0x1e10/0x28b0 [ 419.450541][T16987] nf_tables_newchain+0x1e10/0x28b0 [ 419.450571][T16987] ? __pfx_nf_tables_newchain+0x10/0x10 [ 419.450618][T16987] ? nfnl_pernet+0x23/0x240 [ 419.450645][T16987] ? __nla_parse+0x40/0x60 [ 419.450668][T16987] nfnetlink_rcv+0x1288/0x28c0 [ 419.450715][T16987] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 419.450730][T16987] ? __lock_acquire+0x6df/0x2e50 [ 419.450792][T16987] ? lock_acquire+0x115/0x350 [ 419.450817][T16987] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.450837][T16987] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.450861][T16987] netlink_unicast+0x7bd/0x940 [ 419.450890][T16987] netlink_sendmsg+0x813/0xb40 [ 419.450918][T16987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.450946][T16987] ? apparmor_socket_sendmsg+0x98/0x360 [ 419.450973][T16987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.450993][T16987] sock_sendmsg_nosec+0x13a/0x180 [ 419.451031][T16987] ____sys_sendmsg+0x54e/0x850 [ 419.451055][T16987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.451081][T16987] ? import_iovec+0x73/0xa0 [ 419.451102][T16987] ___sys_sendmsg+0x2a5/0x360 [ 419.451119][T16987] ? __lock_acquire+0x6df/0x2e50 [ 419.451140][T16987] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.451191][T16987] ? __fget_files+0x2a/0x420 [ 419.451214][T16987] ? __fget_files+0x3a2/0x420 [ 419.451247][T16987] __x64_sys_sendmsg+0x1b1/0x290 [ 419.451270][T16987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.451311][T16987] do_syscall_64+0x166/0x520 [ 419.451338][T16987] ? trace_irq_disable+0x3b/0x140 [ 419.451360][T16987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.451381][T16987] ? clear_bhb_loop+0x70/0xc0 [ 419.451406][T16987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.451425][T16987] RIP: 0033:0x7fe96cb9e159 [ 419.451444][T16987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.451461][T16987] RSP: 002b:00007fe96dac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.451483][T16987] RAX: ffffffffffffffda RBX: 00007fe96ce25fa0 RCX: 00007fe96cb9e159 [ 419.451497][T16987] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 419.451509][T16987] RBP: 00007fe96dac7090 R08: 0000000000000000 R09: 0000000000000000 [ 419.451521][T16987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.451533][T16987] R13: 00007fe96ce26038 R14: 00007fe96ce25fa0 R15: 00007ffe86ead098 [ 419.451566][T16987] [ 419.652949][T16992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3532'. [ 419.838527][T17000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3539'. [ 419.922624][T17001] netlink: 'syz.2.3539': attribute type 2 has an invalid length. [ 419.935606][T17001] netlink: 'syz.2.3539': attribute type 2 has an invalid length. [ 419.979222][T17005] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.979573][T17005] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.979922][T17005] bridge0: entered allmulticast mode [ 420.010108][T17005] bridge_slave_1: left allmulticast mode [ 420.010184][T17005] bridge_slave_1: left promiscuous mode [ 420.012038][T17005] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.055926][T17005] bridge_slave_0: left allmulticast mode [ 420.064290][T17005] bridge_slave_0: left promiscuous mode [ 420.071986][T17005] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.473527][T17030] netlink: 8210 bytes leftover after parsing attributes in process `syz.3.3547'. [ 420.692666][T17039] netlink: 'syz.0.3551': attribute type 2 has an invalid length. [ 420.692721][T17039] netlink: 'syz.0.3551': attribute type 2 has an invalid length. [ 420.720123][T16449] team_slave_0: entered promiscuous mode [ 420.720181][T16449] team_slave_1: entered promiscuous mode [ 420.781272][T17044] FAULT_INJECTION: forcing a failure. [ 420.781272][T17044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.795047][T17044] CPU: 1 UID: 0 PID: 17044 Comm: syz.3.3554 Not tainted syzkaller #0 PREEMPT(full) [ 420.795071][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.795081][T17044] Call Trace: [ 420.795089][T17044] [ 420.795096][T17044] dump_stack_lvl+0xe8/0x150 [ 420.795123][T17044] should_fail_ex+0x410/0x560 [ 420.795150][T17044] _copy_to_user+0x31/0xb0 [ 420.795169][T17044] bpf_verifier_vlog+0x496/0x900 [ 420.795210][T17044] bpf_verifier_log_write+0x11d/0x1a0 [ 420.795238][T17044] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 420.795266][T17044] ? bpf_verifier_log_write+0x11d/0x1a0 [ 420.795290][T17044] print_verifier_state+0x1f5/0x1a40 [ 420.795306][T17044] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 420.795334][T17044] ? __pfx_print_verifier_state+0x10/0x10 [ 420.795347][T17044] ? bpf_vlog_reset+0x2aa/0x340 [ 420.795371][T17044] ? print_insn_state+0x106/0x170 [ 420.795388][T17044] do_check_common+0x2d55/0x5d30 [ 420.795436][T17044] ? __pfx_do_check_common+0x10/0x10 [ 420.795452][T17044] ? __pfx_verbose+0x10/0x10 [ 420.795472][T17044] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 420.795504][T17044] bpf_check+0x2639/0x2e10 [ 420.795528][T17044] ? ktime_get_with_offset+0x93/0x2d0 [ 420.795547][T17044] ? __pfx_bpf_check+0x10/0x10 [ 420.795565][T17044] ? bpf_obj_name_cpy+0x194/0x1e0 [ 420.795589][T17044] bpf_prog_load+0x14d6/0x1c20 [ 420.795615][T17044] ? __pfx_bpf_prog_load+0x10/0x10 [ 420.795651][T17044] __sys_bpf+0xd0d/0xd90 [ 420.795675][T17044] ? __pfx___sys_bpf+0x10/0x10 [ 420.795700][T17044] ? __fget_files+0x2a/0x420 [ 420.795734][T17044] ? ksys_write+0x242/0x270 [ 420.795756][T17044] ? __pfx_ksys_write+0x10/0x10 [ 420.795781][T17044] __x64_sys_bpf+0xba/0xd0 [ 420.795799][T17044] do_syscall_64+0x166/0x520 [ 420.795821][T17044] ? trace_irq_disable+0x3b/0x140 [ 420.795835][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.795851][T17044] ? clear_bhb_loop+0x70/0xc0 [ 420.795873][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.795888][T17044] RIP: 0033:0x7f7c6a39e159 [ 420.795904][T17044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.795917][T17044] RSP: 002b:00007f7c6b1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.795935][T17044] RAX: ffffffffffffffda RBX: 00007f7c6a625fa0 RCX: 00007f7c6a39e159 [ 420.795946][T17044] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 420.795957][T17044] RBP: 00007f7c6b1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 420.795967][T17044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.795977][T17044] R13: 00007f7c6a626038 R14: 00007f7c6a625fa0 R15: 00007ffd38d91f88 [ 420.796002][T17044] [ 421.200499][T17060] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 421.646328][T17084] ip_tables: iptables: counters copy to user failed while replacing table [ 422.365578][T11150] tipc: Subscription rejected, illegal request [ 422.514653][T17122] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.516564][T17122] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.642632][T17122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.681116][T17122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.809803][T17134] ovs-s!!: entered promiscuous mode [ 422.827314][T11172] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.829800][ T147] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.829842][ T147] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.829873][ T147] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.047191][T17142] netlink: 'syz.0.3595': attribute type 2 has an invalid length. [ 423.055085][T17142] netlink: 'syz.0.3595': attribute type 2 has an invalid length. [ 423.245555][T17154] tipc: Enabled bearer , priority 10 [ 423.309411][T17157] Cannot find del_set index 0 as target [ 423.339751][T17158] netlink: 'syz.4.3602': attribute type 3 has an invalid length. [ 423.742095][T17189] __nla_validate_parse: 73 callbacks suppressed [ 423.750050][T17189] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3615'. [ 424.120615][T17209] gtp0: entered promiscuous mode [ 424.120660][T17209] gtp0: entered allmulticast mode [ 424.130400][T17209] team0: Device gtp0 is of different type [ 424.138609][T17211] FAULT_INJECTION: forcing a failure. [ 424.138609][T17211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.138668][T17211] CPU: 1 UID: 0 PID: 17211 Comm: syz.3.3623 Not tainted syzkaller #0 PREEMPT(full) [ 424.138690][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.138701][T17211] Call Trace: [ 424.138709][T17211] [ 424.138717][T17211] dump_stack_lvl+0xe8/0x150 [ 424.138749][T17211] should_fail_ex+0x410/0x560 [ 424.138782][T17211] _copy_from_user+0x2d/0xb0 [ 424.138802][T17211] generic_map_update_batch+0x651/0x9a0 [ 424.138837][T17211] ? __pfx_generic_map_update_batch+0x10/0x10 [ 424.138864][T17211] ? __fget_files+0x2a/0x420 [ 424.138895][T17211] ? __pfx_generic_map_update_batch+0x10/0x10 [ 424.138920][T17211] bpf_map_do_batch+0x391/0x630 [ 424.138944][T17211] __sys_bpf+0xbe5/0xd90 [ 424.138972][T17211] ? __pfx___sys_bpf+0x10/0x10 [ 424.139002][T17211] ? __fget_files+0x2a/0x420 [ 424.139041][T17211] ? ksys_write+0x242/0x270 [ 424.139066][T17211] ? __pfx_ksys_write+0x10/0x10 [ 424.139095][T17211] __x64_sys_bpf+0xba/0xd0 [ 424.139116][T17211] do_syscall_64+0x166/0x520 [ 424.139141][T17211] ? trace_irq_disable+0x3b/0x140 [ 424.139159][T17211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.139177][T17211] ? clear_bhb_loop+0x70/0xc0 [ 424.139200][T17211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.139218][T17211] RIP: 0033:0x7f7c6a39e159 [ 424.139235][T17211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.139251][T17211] RSP: 002b:00007f7c6b1bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.139270][T17211] RAX: ffffffffffffffda RBX: 00007f7c6a625fa0 RCX: 00007f7c6a39e159 [ 424.139284][T17211] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 424.139297][T17211] RBP: 00007f7c6b1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 424.139309][T17211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.139320][T17211] R13: 00007f7c6a626038 R14: 00007f7c6a625fa0 R15: 00007ffd38d91f88 [ 424.139359][T17211] [ 424.184282][T17214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3624'. [ 424.258583][T17217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 424.395229][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3626'. [ 424.738928][T17221] veth3: entered allmulticast mode [ 424.751437][T11150] ip6_tunnel:  xmit: Local address not yet configured! [ 424.908879][T17236] netlink: 'syz.1.3630': attribute type 2 has an invalid length. [ 424.996608][T17245] bond1: entered allmulticast mode [ 425.098960][T17251] ip6gretap1: entered allmulticast mode [ 425.102492][T17251] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 425.442468][T17272] bond5: entered promiscuous mode [ 425.442513][T17272] bond5: entered allmulticast mode [ 425.527764][T17279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.538002][T17279] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.554164][T17279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.633691][T17279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.644746][T17279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.657672][T17279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.674531][T17279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.694544][T17279] veth1_vlan: left promiscuous mode [ 425.748793][T17279] veth1_vlan: entered promiscuous mode [ 425.780726][T17279] tipc: Resetting bearer [ 425.780884][T17279] tipc: Resetting bearer [ 425.781170][T17279] veth1_macvtap: left promiscuous mode [ 425.784996][T17279] veth0_macvtap: left promiscuous mode [ 425.797395][T17279] veth0_macvtap: entered promiscuous mode [ 425.806210][T17279] veth1_macvtap: entered promiscuous mode [ 425.855650][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.860062][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.861058][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.868895][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.209948][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'. [ 426.242812][T17311] x_tables: unsorted entry at hook 2 [ 426.775746][T17279] bridge0: port 3(vlan2) entered blocking state [ 426.775860][T17279] bridge0: port 3(vlan2) entered forwarding state [ 426.779485][T17279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.787084][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.788168][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.790737][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.790847][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.840019][T17268] syzkaller0: entered promiscuous mode [ 426.840048][T17268] syzkaller0: entered allmulticast mode [ 426.888398][T11154] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.888450][T11154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.047554][T11154] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.073811][T11154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.091955][ T147] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.092010][ T147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.092463][T11151] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.092489][T11151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.303855][T17325] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3657'. [ 427.336995][T17338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3660'. [ 427.806562][T17359] vlan2: entered promiscuous mode [ 427.915127][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 428.042781][T17365] netlink: 'syz.2.3671': attribute type 1 has an invalid length. [ 428.042822][T17365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3671'. [ 428.146286][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3674'. [ 428.218498][T17378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'. [ 428.248251][T17378] netlink: 'syz.2.3675': attribute type 5 has an invalid length. [ 428.522185][T17386] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.543396][T17388] bridge0: port 4(veth1_to_bridge) entered blocking state [ 428.543747][T17388] bridge0: port 4(veth1_to_bridge) entered disabled state [ 428.543908][T17388] veth1_to_bridge: entered allmulticast mode [ 428.548983][T17388] veth1_to_bridge: entered promiscuous mode [ 428.549144][T17388] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 428.549622][T17388] bridge0: port 4(veth1_to_bridge) entered blocking state [ 428.549709][T17388] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 428.584456][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 428.587814][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 428.588675][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 428.589498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 428.590307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 428.593173][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 428.594052][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 428.595548][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 428.596391][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 428.597280][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 428.988201][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 433.587073][ C0] net_ratelimit: 10286 callbacks suppressed [ 433.587193][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 433.587351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 433.588062][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 433.588183][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 433.589012][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 433.589031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 433.589918][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 433.590828][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 433.591690][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 433.592665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 437.773072][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 438.596994][ C1] net_ratelimit: 10250 callbacks suppressed [ 438.597011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.597017][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 438.597815][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 438.597985][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 438.598637][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 438.598840][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 438.599457][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 438.599675][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.600226][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 438.600667][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 442.163617][ C1] sched: DL replenish lagged too much [ 443.606845][ C0] net_ratelimit: 9828 callbacks suppressed [ 443.606897][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.607070][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 443.607737][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.607894][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 443.608604][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 443.608727][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 443.609397][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.609760][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.610191][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 443.610790][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.611585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 443.639731][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.616922][ C0] net_ratelimit: 10148 callbacks suppressed [ 448.616972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.617202][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 448.617769][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 448.618022][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 448.618651][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 448.618873][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 448.619426][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 448.620269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 448.621072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.621941][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 453.627439][ C1] net_ratelimit: 10189 callbacks suppressed [ 453.627488][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 453.628289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 453.628343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 453.629120][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 453.629236][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.629911][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 453.630037][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 453.630711][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 453.630902][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 453.631800][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 455.075257][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 458.637010][ C0] net_ratelimit: 9886 callbacks suppressed [ 458.637055][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 458.637300][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 458.637917][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 458.638142][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 458.638883][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 458.638964][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 458.639739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.640474][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 458.640648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 458.641340][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 463.647338][ C1] net_ratelimit: 10044 callbacks suppressed [ 463.647362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 463.648253][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 463.649174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 463.650080][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 463.651012][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 463.651556][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 463.651897][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 463.652517][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 463.652806][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 463.653401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.625847][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 468.656913][ C0] net_ratelimit: 9850 callbacks suppressed [ 468.656925][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 468.656941][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 468.657816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 468.657852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.658747][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 468.658870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 468.659633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 468.659861][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 468.660558][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 468.663764][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 473.667154][ C1] net_ratelimit: 9817 callbacks suppressed [ 473.667212][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 473.667229][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 473.668072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.668101][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 473.668900][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 473.668996][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 473.669747][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 473.669919][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 473.670555][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.670814][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 478.677087][ C1] net_ratelimit: 10026 callbacks suppressed [ 478.677147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 478.677496][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 478.678029][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 478.678415][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.678942][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 478.679183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 478.679830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 478.680010][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 478.680708][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 478.680799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 483.686721][ C0] net_ratelimit: 10133 callbacks suppressed [ 483.686744][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 483.687069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 483.687525][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.687922][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 483.688324][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 483.688816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 483.689186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 483.689661][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 483.689972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 483.690722][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 487.710081][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 488.697015][ C1] net_ratelimit: 6877 callbacks suppressed [ 488.697119][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 488.698550][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 488.699502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 488.700319][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.701195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 488.701934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 488.702079][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 488.702889][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 488.703666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 488.704495][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 490.202785][ T5619] Bluetooth: hci2: command 0x041b tx timeout [ 493.707446][ C0] net_ratelimit: 6087 callbacks suppressed [ 493.707503][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 493.708369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 493.709835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 493.709995][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 493.710719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 493.711529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.712364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 493.712940][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 493.713233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 493.714094][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 498.717298][ C0] net_ratelimit: 5949 callbacks suppressed [ 498.717353][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 498.718415][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 498.718934][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 498.719834][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 498.720753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 498.721634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.722528][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 498.723444][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 498.725248][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 498.728948][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 503.727525][ C0] net_ratelimit: 5914 callbacks suppressed [ 503.727547][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 503.728419][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.729264][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 503.729624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 503.730124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 503.730981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 503.731861][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.732704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 503.733558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 503.734429][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 505.241224][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 506.419706][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.449486][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.736743][ C0] net_ratelimit: 5936 callbacks suppressed [ 508.736767][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 508.737699][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 508.738290][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 508.738681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.739560][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 508.740471][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 508.741353][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 508.742272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 508.742680][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 508.743140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.747110][ C0] net_ratelimit: 5761 callbacks suppressed [ 513.747137][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 513.747237][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 513.747987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.748880][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.749802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.750729][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 513.751383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 513.751608][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.752448][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.753436][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 518.757135][ C0] net_ratelimit: 5780 callbacks suppressed [ 518.757157][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 518.757970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 518.758206][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 518.758794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 518.759562][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.760393][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 518.761174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 518.761997][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 518.762787][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.763552][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 523.767307][ C0] net_ratelimit: 5864 callbacks suppressed [ 523.767330][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 523.768206][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.769092][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 523.771226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 523.772872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 523.773805][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.774654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 523.775232][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 523.775566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 523.776492][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 528.777000][ C0] net_ratelimit: 5734 callbacks suppressed [ 528.777049][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 528.777258][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 528.777970][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 528.778823][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.779665][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 528.780588][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 528.781454][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 528.782363][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 528.783204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 528.783259][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 533.787161][ C0] net_ratelimit: 5769 callbacks suppressed [ 533.787183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.788082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.789052][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 533.792795][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 533.797358][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.797694][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 533.798985][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 533.799925][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 533.800792][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 533.801664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 538.797130][ C0] net_ratelimit: 5746 callbacks suppressed [ 538.797153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.798078][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 538.798981][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.799900][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.800820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.800969][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 538.801743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 538.802668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.803524][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 538.804448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 543.806920][ C0] net_ratelimit: 5632 callbacks suppressed [ 543.806940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 543.807810][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.808772][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.809648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.810523][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.811431][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 543.812304][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.813177][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 543.814074][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 543.814122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 548.817045][ C0] net_ratelimit: 5553 callbacks suppressed [ 548.817097][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.817995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.818869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.819801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.820649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 548.821470][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.822259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 548.823102][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 548.823910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 548.824714][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 552.990549][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 553.827317][ C0] net_ratelimit: 5683 callbacks suppressed [ 553.827340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 553.828206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 553.829133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 553.829960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.830405][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 553.830897][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 553.831750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.832637][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.833510][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 553.834402][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.837051][ C0] net_ratelimit: 5563 callbacks suppressed [ 558.837075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 558.840124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.840971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.841833][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 558.842641][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 558.843440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 558.844245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 558.845057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 558.845839][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.846759][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.847604][ C0] net_ratelimit: 5578 callbacks suppressed [ 563.847656][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.848557][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.849414][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.850308][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 563.851199][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.852064][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 563.852963][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 563.853782][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 563.854727][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 563.855594][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 568.857074][ C0] net_ratelimit: 5717 callbacks suppressed [ 568.857103][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.857936][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.858834][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 568.858895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 568.859779][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 568.860638][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 568.861492][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 568.862314][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 568.863201][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 568.863384][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 573.866712][ C0] net_ratelimit: 5735 callbacks suppressed [ 573.866742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 573.867517][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 573.867524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.868250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.869143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 573.869943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 573.870737][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 573.871563][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 573.872387][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.873218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 574.993061][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 575.022064][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.878200][ C0] net_ratelimit: 5661 callbacks suppressed [ 578.878222][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 578.879258][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.880271][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 578.880639][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 578.881232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 578.882254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 578.883222][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 578.884133][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.885046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 578.885155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 583.889824][ C0] net_ratelimit: 5567 callbacks suppressed [ 583.889846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.890693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.892188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.893038][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.893874][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 583.894638][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 583.894673][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 583.895457][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 583.896295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 583.897133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 588.896842][ C0] net_ratelimit: 5601 callbacks suppressed [ 588.896864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.897799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 588.898764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 588.899624][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 588.900498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 588.901329][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 588.901329][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 588.902243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 588.903098][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 588.903944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.907019][ C0] net_ratelimit: 5758 callbacks suppressed [ 593.907041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 593.907863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.908702][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.909519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.910420][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.910683][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 593.911317][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 593.912189][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 593.913005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 593.913867][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 598.917449][ C1] net_ratelimit: 5641 callbacks suppressed [ 598.917470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 598.923307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.924199][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 598.924992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 598.925819][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 598.926590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 598.926692][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 598.928072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 598.928954][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 598.929740][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.927296][ C0] net_ratelimit: 5655 callbacks suppressed [ 603.927319][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 603.930970][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 603.932491][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 603.933359][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.934245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 603.935065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.936023][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.936430][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 603.936916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 603.937765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.937428][ C0] net_ratelimit: 5574 callbacks suppressed [ 608.937450][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.939056][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.939963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.943120][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 608.943316][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 608.943992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 608.944840][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 608.945754][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 608.946706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 608.947581][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 613.947031][ C0] net_ratelimit: 5715 callbacks suppressed [ 613.947052][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 613.947418][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 613.948121][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 613.949111][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.950250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 613.951252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 613.952322][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.953369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.954411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 613.955495][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 618.956865][ C0] net_ratelimit: 5432 callbacks suppressed [ 618.956887][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.957720][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.958578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.959480][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 618.959853][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 618.960311][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.961093][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 618.961984][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 618.962807][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 618.963628][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 623.967048][ C0] net_ratelimit: 5471 callbacks suppressed [ 623.967071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.968062][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 623.968362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 623.968930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.969841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 623.970813][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 623.971683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 623.972554][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 623.974103][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 623.974990][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 625.178611][ T31] INFO: task syz.4.3679:17398 blocked for more than 145 seconds. [ 625.178637][ T31] Not tainted syzkaller #0 [ 625.178648][ T31] Blocked by coredump. [ 625.178655][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.178664][ T31] task:syz.4.3679 state:D stack:29000 pid:17398 tgid:17387 ppid:15718 task_flags:0x40044c flags:0x00080002 [ 625.178722][ T31] Call Trace: [ 625.178730][ T31] [ 625.178745][ T31] __schedule+0x17db/0x58f0 [ 625.178810][ T31] ? __pfx___schedule+0x10/0x10 [ 625.178846][ T31] ? schedule+0x90/0x2b0 [ 625.178874][ T31] schedule+0x164/0x2b0 [ 625.178900][ T31] schedule_preempt_disabled+0x13/0x30 [ 625.178925][ T31] rwsem_down_read_slowpath+0x6ba/0x920 [ 625.178946][ T31] ? rwsem_down_read_slowpath+0x57f/0x920 [ 625.178971][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 625.179021][ T31] down_read+0x9c/0x330 [ 625.179039][ T31] ? mm_exit_exec_release+0x10d/0x290 [ 625.179069][ T31] exit_mm+0x111/0x2d0 [ 625.179093][ T31] do_exit+0x6cd/0x2360 [ 625.179117][ T31] ? lock_acquire+0x115/0x350 [ 625.179138][ T31] ? __pfx_do_exit+0x10/0x10 [ 625.179160][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 625.179196][ T31] do_group_exit+0x22d/0x2f0 [ 625.179214][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.179242][ T31] get_signal+0x121b/0x12c0 [ 625.179289][ T31] arch_do_signal_or_restart+0xbb/0x860 [ 625.179319][ T31] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 625.179345][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 625.179380][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 625.179415][ T31] exit_to_user_mode_loop+0x10e/0x770 [ 625.179469][ T31] ? rcu_is_watching+0x16/0xb0 [ 625.179495][ T31] ret_from_fork+0x593/0xb70 [ 625.179517][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 625.179546][ T31] ? __switch_to+0xc89/0x1420 [ 625.179579][ T31] ret_from_fork_asm+0x1a/0x30 [ 625.179625][ T31] [ 625.179642][ T31] [ 625.179642][ T31] Showing all locks held in the system: [ 625.179658][ T31] locks held by kthreadd/2: 2, last CPU#0: [ 625.179784][ T31] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 625.179868][ T31] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 625.179918][ T31] locks held by kworker/u8:0/12: 3, last CPU#0: [ 625.179932][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.179982][ T31] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.180040][ T31] #2: ffff888052c307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 625.180140][ T31] locks held by kworker/u8:1/13: 3, last CPU#0: [ 625.180154][ T31] #0: ffff8880793ea140 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.180214][ T31] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.180267][ T31] #2: ffff888034bd0ef8 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 625.180363][ T31] locks held by pr/ttyS0/16: 1, last CPU#1: [ 625.180376][ T31] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 625.180424][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 625.180438][ T31] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 625.180488][ T31] locks held by kworker/u8:2/37: 3, last CPU#1: [ 625.180501][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.180550][ T31] #1: ffffc90000ad7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.180598][ T31] #2: ffff888060b907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 625.180647][ T31] locks held by kworker/u8:3/52: 2, last CPU#0: [ 625.180660][ T31] #0: ffff8880793ea940 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.180711][ T31] #1: ffffc90000bd7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.180761][ T31] locks held by kworker/u9:0/54: 5, on CPU#0: [ 625.180774][ T31] #0: ffff8880362c3940 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.180822][ T31] #1: ffffc90000bf7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.180871][ T31] #2: ffff8880330a4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 625.180999][ T31] #3: ffff8880330a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 625.181043][ T31] #4: ffffffff903d72c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 625.181123][ T31] locks held by kworker/u8:4/72: 2, on CPU#0: [ 625.181137][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.181186][ T31] #1: ffffc9000206fc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.181238][ T31] locks held by kworker/u8:5/134: 4, last CPU#1: [ 625.181252][ T31] #0: ffff888055f62140 ((wq_completion)bond3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.181301][ T31] #1: ffffc90002d97c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.181353][ T31] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 625.181429][ T31] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: alb_send_learning_packets+0x138/0x300 [ 625.181479][ T31] locks held by kworker/u8:6/147: 3, last CPU#0: [ 625.181492][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.181539][ T31] #1: ffffc90002da7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.181588][ T31] #2: ffff888070c107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 625.181635][ T31] locks held by kworker/u8:7/152: 5, last CPU#1: [ 625.181649][ T31] #0: ffff8880206ef140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.181697][ T31] #1: ffffc90002d57c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.181747][ T31] #2: ffff8880361600e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 625.181801][ T31] #3: ffff88803616ec98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 625.181870][ T31] #4: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 625.181922][ T31] locks held by kworker/u8:8/166: 4, last CPU#1: [ 625.181935][ T31] #0: ffff888032fbc940 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.181996][ T31] #1: ffffc90002e47c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.182045][ T31] #2: ffff888067689440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 625.182123][ T31] #3: ffff888062941700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 625.182179][ T31] locks held by kworker/u8:9/1168: 2, last CPU#1: [ 625.182192][ T31] #0: ffff88801b0ab940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.182241][ T31] #1: ffffc9000516fc40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.182304][ T31] locks held by kworker/u8:10/4045: 4, last CPU#0: [ 625.182318][ T31] #0: ffff888031e19140 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.182371][ T31] #1: ffffc9000ed9fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.182421][ T31] #2: ffff888067691440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 625.182471][ T31] #3: ffff88802b900d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 625.182519][ T31] locks held by kworker/u8:11/4066: 3, last CPU#1: [ 625.182532][ T31] #0: ffff88807f117140 ((wq_completion)wg-kex-wg0#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.182586][ T31] #1: ffffc9000ec3fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.182635][ T31] #2: ffff888034bd0510 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 625.182683][ T31] locks held by kworker/u8:12/4078: 4, last CPU#1: [ 625.182697][ T31] #0: ffff8880679db140 ((wq_completion)wg-kex-wg0#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.182750][ T31] #1: ffffc9000ef0fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.182799][ T31] #2: ffff888034a81440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 625.182848][ T31] #3: ffff88807a8d0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 625.182900][ T31] locks held by kworker/u9:1/4935: 5, on CPU#1: [ 625.182914][ T31] #0: ffff88807dad5140 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.182961][ T31] #1: ffffc9000e6bfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.183018][ T31] #2: ffff888055668ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 625.183067][ T31] #3: ffff8880556680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 625.183112][ T31] #4: ffffffff903d72c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 625.183157][ T31] locks held by getty/5389: 2, on CPU#1: [ 625.183171][ T31] #0: ffff8880355bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 625.183346][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 625.183393][ T31] locks held by syz-executor/5606: 4, last CPU#1: [ 625.183406][ T31] #0: ffff88802b945d60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 625.183504][ T31] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x65/0x1b10 [ 625.183579][ T31] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 625.183626][ T31] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 625.183676][ T31] locks held by kworker/u9:2/5619: 7, on CPU#0: [ 625.183690][ T31] #0: ffff88806796a140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.183739][ T31] #1: ffffc90004307c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.183788][ T31] #2: ffff888052d18ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 625.183837][ T31] #3: ffff888052d180b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 625.183881][ T31] #4: ffffffff903d72c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 625.183924][ T31] #5: ffff88802ad592f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 625.184009][ T31] #6: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 625.184060][ T31] locks held by kworker/u9:4/5626: 5, on CPU#0: [ 625.184073][ T31] #0: ffff8880778ff940 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.184122][ T31] #1: ffffc90004367c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.184171][ T31] #2: ffff8880667bcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 625.184219][ T31] #3: ffff8880667bc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 625.184264][ T31] #4: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 625.184313][ T31] locks held by kworker/u9:6/5631: 4, on CPU#0: [ 625.184326][ T31] #0: ffff888022ba1140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.184375][ T31] #1: ffffc900043a7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.184425][ T31] #2: ffff8880483f8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 625.184473][ T31] #3: ffff8880483f80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 625.184518][ T31] locks held by kworker/1:5/5740: 2, last CPU#1: [ 625.184531][ T31] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.184580][ T31] #1: ffffc90004e4fc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.184632][ T31] locks held by kworker/u8:13/11149: 4, last CPU#1: [ 625.184645][ T31] #0: ffff8880793ee140 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.184698][ T31] #1: ffffc90002db7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.184748][ T31] #2: ffff888053019440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 625.184799][ T31] #3: ffff888034bd1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 625.184849][ T31] locks held by kworker/u8:14/11150: 3, last CPU#1: [ 625.184863][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.184911][ T31] #1: ffffc9000da3fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.184960][ T31] #2: ffff88805a5607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 625.185015][ T31] locks held by kworker/u8:15/11151: 3, last CPU#1: [ 625.185029][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.185079][ T31] #1: ffffc9000dad7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.185128][ T31] #2: ffff88805a5507a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 625.185176][ T31] locks held by kworker/u8:16/11152: 3, last CPU#1: [ 625.185190][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.185239][ T31] #1: ffffc9000e48fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.185289][ T31] #2: ffff88802aaf6258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 625.185405][ T31] locks held by kworker/u8:17/11154: 5, last CPU#0: [ 625.185420][ T31] #0: ffff888029c4e940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.185468][ T31] #1: ffffc90003287c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.185517][ T31] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 625.185600][ T31] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: br_multicast_rcv+0x3c2b/0x77c0 [ 625.185683][ T31] #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xa2/0x3f0 [ 625.185755][ T31] locks held by kworker/u8:18/11155: 4, last CPU#1: [ 625.185769][ T31] #0: ffff88802bb25940 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.185823][ T31] #1: ffffc90002e07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.185872][ T31] #2: ffff888023775440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 625.185923][ T31] #3: ffff88802b901700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 625.185989][ T31] locks held by kworker/u8:20/11162: 3, last CPU#1: [ 625.186003][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.186052][ T31] #1: ffffc9000d97fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.186101][ T31] #2: ffff888078c64258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 625.186155][ T31] locks held by kworker/u8:21/11163: 3, last CPU#1: [ 625.186169][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.186221][ T31] #1: ffffc90002e57c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.186271][ T31] #2: ffff88807db8d258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 625.186340][ T31] locks held by kworker/u8:22/11164: 4, last CPU#1: [ 625.186354][ T31] #0: ffff8880287d9940 ((wq_completion)wg-kex-wg1#18){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.186407][ T31] #1: ffffc9000da0fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 625.186456][ T31] #2: ffff88807b95d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 625.186505][ T31] #3: ffff88802b9020e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 625.186555][ T31] locks held by kworker/u8:23/11165: 3, last CPU#0: [ 625.186568][ T31] #0: ffff88807f53d940 ((wq_completion)wg-kex-wg2#15){+.+.}-{0:0} [ 628.977319][ C0] net_ratelimit: 5920 callbacks suppressed [ 628.977342][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 628.978150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 628.978958][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 628.979715][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.980594][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 628.981191][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 628.981376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.982242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.983043][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.983837][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 629.670257][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.704428][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.987470][ C0] net_ratelimit: 5980 callbacks suppressed [ 633.987494][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 633.988913][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 633.989759][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 633.990544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 633.991289][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.992172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 633.992956][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.993800][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.993822][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 633.994588][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.996799][ C0] net_ratelimit: 5595 callbacks suppressed [ 638.996821][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 638.997634][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.998478][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.998907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 638.999361][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 639.000171][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 639.000979][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 639.001836][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 639.002605][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.003461][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 644.009092][ C1] net_ratelimit: 5625 callbacks suppressed [ 644.009115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 644.012350][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 644.013265][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 644.014115][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 644.014965][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 644.015831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.016773][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 644.017417][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 644.017620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.018482][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.016991][ C1] net_ratelimit: 5519 callbacks suppressed [ 649.017012][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 649.021404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 649.022301][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 649.023884][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 649.024772][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 649.025571][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.026494][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 649.027399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.028282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.029004][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:3f:88:ef:0b:c1, vlan:0) [ 651.181832][ T31] , at: process_scheduled_works+0x97a/0x1630 [ 651.181870][ T31] #1: ffffc9000d9d7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.181925][ T31] #2: ffff888036281440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 651.181979][ T31] locks held by kworker/u8:24/11166: 4, last CPU#0: [ 651.181994][ T31] #0: ffff8880287d9940 ((wq_completion)wg-kex-wg1#18){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.182049][ T31] #1: ffffc9000e4e7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.182098][ T31] #2: ffff88807b95d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 651.182147][ T31] #3: ffff88802b902ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 651.182197][ T31] locks held by kworker/u8:25/11168: 3, on CPU#0: [ 651.182211][ T31] #0: ffff8880314e9140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.182259][ T31] #1: ffffc9000da2fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.182308][ T31] #2: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 651.182470][ T31] locks held by kworker/u8:26/11169: 3, last CPU#0: [ 651.182484][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.182532][ T31] #1: ffffc90002ef7c40 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.182580][ T31] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 651.182628][ T31] locks held by kworker/u8:27/11170: 3, last CPU#0: [ 651.182641][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.182699][ T31] #1: ffffc90002e37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.182747][ T31] #2: ffff888078c64258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 651.182801][ T31] locks held by kworker/u8:28/11172: 3, last CPU#0: [ 651.182815][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.182863][ T31] #1: ffffc90002e17c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.182912][ T31] #2: ffff8880654e07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 651.182965][ T31] locks held by kworker/u8:29/11174: 3, last CPU#0: [ 651.182979][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.183027][ T31] #1: ffffc900024dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.183077][ T31] #2: ffff88802aaf6258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 651.183133][ T31] locks held by syz-executor/14224: 2, last CPU#0: [ 651.183146][ T31] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 651.183199][ T31] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 651.183248][ T31] locks held by syz-executor/15718: 2, last CPU#0: [ 651.183261][ T31] #0: ffffffff8f4ef978 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 651.183378][ T31] #1: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 651.183430][ T31] locks held by syz-executor/16114: 2, last CPU#0: [ 651.183444][ T31] #0: ffff888023351078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 651.183500][ T31] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 651.183552][ T31] locks held by kworker/0:52/16450: 4, last CPU#0: [ 651.183566][ T31] #0: ffff88805318a940 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.183638][ T31] #1: ffffc90005b4fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.183705][ T31] #2: ffff888053019440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 651.183756][ T31] #3: ffff888034bd1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 651.183807][ T31] locks held by kworker/0:54/16452: 3, last CPU#0: [ 651.183820][ T31] #0: ffff888035e03140 ((wq_completion)wg-kex-wg0#16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.183874][ T31] #1: ffffc90005b9fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.183935][ T31] #2: ffff88802b901700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 651.183985][ T31] locks held by kworker/0:55/16454: 4, last CPU#0: [ 651.183998][ T31] #0: ffff888055c9e940 ((wq_completion)wg-kex-wg2#16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.184051][ T31] #1: ffffc90005befc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.184111][ T31] #2: ffff888066b85440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 651.184161][ T31] #3: ffff888034bd34b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 651.184212][ T31] locks held by kworker/0:57/16457: 5, last CPU#0: [ 651.184225][ T31] #0: ffff888031ebc140 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.184272][ T31] #1: ffffc90005e6fc40 ((work_completion)(&(&idev->mc_dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.184321][ T31] #2: ffff888054d86530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_dad_work+0x35/0x480 [ 651.184434][ T31] #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 651.184485][ T31] #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 651.184532][ T31] locks held by kworker/0:60/16460: 3, last CPU#0: [ 651.184546][ T31] #0: ffff8880567fb940 ((wq_completion)wg-kex-wg2#20){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.184598][ T31] #1: ffffc90003807c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.184664][ T31] #2: ffff88802b9034b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 651.184715][ T31] locks held by kworker/0:61/16461: 3, last CPU#0: [ 651.184728][ T31] #0: ffff88805666ed40 ((wq_completion)wg-kex-wg0#20){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.184782][ T31] #1: ffffc90005eafc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.184843][ T31] #2: ffff888034bd0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 651.184894][ T31] locks held by kworker/0:63/16463: 4, on CPU#0: [ 651.184908][ T31] #0: ffff888025bbf540 ((wq_completion)wg-kex-wg1#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.184961][ T31] #1: ffffc90005edfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 651.185023][ T31] #2: ffff88807b95d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 651.185075][ T31] #3: ffff88802b9020e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 651.185127][ T31] locks held by syz.2.3676/17386: 4, last CPU#0: [ 651.185141][ T31] #0: ffffffff902c17e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 651.185190][ T31] #1: ffff88803216f128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 651.185295][ T31] #2: ffff88803216e258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 651.185351][ T31] #3: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 651.185483][ T31] locks held by syz.4.3679/17387: 2, last CPU#0: [ 651.185497][ T31] #0: ffff8880339b9078 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 651.185550][ T31] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 651.185597][ T31] locks held by syz.4.3679/17388: 1, on CPU#1: [ 651.185611][ T31] #0: ffff8880339b9078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x111/0x2d0 [ 651.185660][ T31] locks held by syz.4.3679/17394: 1, on CPU#0: [ 651.185673][ T31] #0: ffff8880339b9078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x111/0x2d0 [ 651.185714][ T31] locks held by syz.4.3679/17398: 1, on CPU#0: [ 651.185728][ T31] #0: ffff8880339b9078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x111/0x2d0 [ 651.185770][ T31] locks held by syz.1.3680/17393: 1, last CPU#0: [ 651.185781][ T31] #0: ffff888055006400 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 651.185863][ T31] locks held by dhcpcd/17399: 3, last CPU#0: [ 651.185877][ T31] #0: ffff88801f324720 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 651.185927][ T31] #1: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 651.185979][ T31] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 651.186027][ T31] [ 651.186033][ T31] ============================================= [ 651.186033][ T31] [ 651.186048][ T31] NMI backtrace for cpu 0 [ 651.186061][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 651.186081][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.186093][ T31] Call Trace: