last executing test programs:

2m21.169798291s ago: executing program 0 (id=583):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0})
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000)

2m20.96108678s ago: executing program 0 (id=586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x3000c030)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m20.043446555s ago: executing program 4 (id=597):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000184200000600000000fff20000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

2m20.041765903s ago: executing program 4 (id=600):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8)
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000001c0)={0x11, 0x16, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3b0, 0x2a8, 0x2a8, 0x3b0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_hsr\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xcced, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x17, 0x0, [{0x3, 0xe, 0x8d, 0x8}, {0x1, 0xe, 0x6, 0x4}, {0x800, 0x9, 0x2, 0x100}, {0xb, 0x49, 0xfb, 0xfffff001}, {0x9, 0x9, 0xfd, 0x2}, {0x1000, 0x1, 0x9, 0xfffff801}, {0x6, 0x4, 0x3}, {0x1, 0x13, 0x1, 0x3}, {0xcec, 0x3, 0xaa, 0x80000001}, {0x6, 0xf6, 0xb6, 0xfffffffc}, {0x8, 0x57, 0x8e, 0xc}, {0x4, 0xad, 0x8}, {0x5, 0x0, 0xfb, 0x3}, {0xacde, 0x2, 0xfd, 0xd4db}, {0x87, 0x10, 0x6, 0x3ff}, {0x2820, 0x5, 0x6}, {0x3, 0x2, 0x89, 0x80000001}, {0x4, 0x8, 0x3, 0x10001}, {0x101, 0x80, 0x6, 0x7}, {0x2, 0x7, 0xc}, {0x9, 0x23, 0x71, 0x1}, {0x4, 0x7f, 0xa, 0x1ff}, {0x80, 0xa9, 0x7, 0x5}, {0x5, 0x3c, 0x9, 0x9}, {0x5, 0x7, 0x6, 0x8}, {0x9, 0xfe, 0xb, 0xd7}, {0x4, 0x81, 0x0, 0xf78000}, {0x4, 0x3, 0x6, 0x1000}, {0x56d, 0x7, 0x1, 0x2}, {0x5, 0x7, 0x0, 0x7}, {0x5, 0x43, 0x8a, 0x16c}, {0x0, 0x81, 0x2, 0x4}, {0x8, 0x1, 0x2, 0x2}, {0x9, 0x6, 0x4, 0x5}, {0x6, 0x12, 0x1, 0x7}, {0x4, 0x3, 0xfd, 0x7}, {0x4, 0xb, 0x6, 0x5}, {0x400, 0x6, 0xae, 0x80002}, {0x1a, 0x6, 0x8, 0x80}, {0x5, 0x8e, 0xe, 0x7fffffff}, {0x6, 0x5, 0x8, 0x8000}, {0x5e, 0x7, 0x4, 0x401}, {0xf, 0x5, 0x0, 0x1}, {0x2, 0x2, 0x3, 0x7}, {0x10, 0x3, 0x7, 0x1}, {0x5, 0xc, 0x3, 0x8}, {0x4, 0xd8, 0x6, 0x3}, {0x0, 0x6b, 0x3, 0x7}, {0x5, 0x6, 0xfd, 0x7fffffff}, {0x8, 0x8, 0x6, 0x7}, {0x95, 0x6, 0xb9, 0xd6cd}, {0x401, 0x3, 0xfc, 0x8}, {0x9, 0xfb, 0x5, 0x9}, {0x4, 0x8, 0x7, 0x5}, {0x0, 0x9, 0x47, 0x4}, {0x5, 0x4, 0x7, 0x7fff}, {0x8, 0xff, 0x1d, 0x2}, {0x81, 0x5, 0x2, 0x2}, {0x1, 0x4, 0x8, 0x5}, {0x1f1c, 0xc, 0x3, 0x6}, {0x3830, 0x3, 0x40, 0x7}, {0x9, 0x8, 0x4, 0x8}, {0x200, 0x2, 0x1, 0xa23}, {0x2, 0xe2, 0x5, 0xffffffff}], {0x400}}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0x0, 0xffffffff, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d, 0x0, 0x2a}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x9a, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a8)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@random={0xdd, 0x6, 'abcdef'}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000680)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac, {}, @value=@ver_80211n={0x0, 0x59fd, 0x2, 0x0, 0x0, 0x2}}, 0x20000, @random, 0x201, @void, @val={0x1, 0x6, [{0x2, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0xff}, @val={0x5, 0x2b, {0x3, 0xd9, 0x2, "a752d56ceb8c9659fbd40cc8c44688d82715574353a77faf00be084e4a66547cd7b4d42b64f0d313"}}, @void, @void, @void, @void, @void, @void, @void}, 0x61)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
getpeername$packet(r1, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', <r8=>0x0, 0x7800, 0x20, 0x400, 0x8, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x67, 0x0, 0x0, 0x29, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x3c, 0xbe, 0x3, 0x0, [{@remote, 0x4}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local}, {@remote, 0x5}, {@broadcast, 0x3}, {@private=0xa010101, 0x9}]}]}}}}})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8, 0x9, 0xb, 0x400, 0x2, 0x420200, r8})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xe, &(0x7f00000002c0)=0x7ffffffd, 0x4)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000080)=@ethtool_cmd={0x2f, 0x2, 0x4, 0xb, 0x9, 0x7, 0x9, 0x7, 0x7, 0x80, 0x7fff, 0x3, 0x1, 0x3, 0x81, 0xb, [0xf1]}})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r11, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000041000701feffffff00000000017c0000040042802800018010000400cab1893a20b8d2a93521800a14001c800c0001000000000000000080040003"], 0x44}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000003c0001800c00028005000100010000002c0001801400"], 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x8084)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xa, &(0x7f0000000100)=""/10, 0x41100, 0x66, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x2, 0x3, 0x8, 0xc}]}, 0x94)

2m20.040412458s ago: executing program 3 (id=603):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r3, r2}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
close(r1)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'ip6gretap0\x00'})
syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88000001"], 0x0)

2m19.98455487s ago: executing program 0 (id=604):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/13, 0xd}, 0x101}], 0x1, 0x60, 0x0)
listen(r1, 0x5)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, 0x0, 0x0)
bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8)
sendmmsg(r1, 0x0, 0x0, 0x10)
sendmsg$nl_route(r0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000280))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$inet_tcp_int(r5, 0x6, 0x6, 0x0, 0x0)
write(r4, &(0x7f0000000300)="110000001000"/22, 0x16)
socket$inet6_sctp(0xa, 0x1, 0x84)
vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0)
r6 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0xe06}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x10000}}, 0xe8)
socket$key(0xf, 0x3, 0x2)

2m19.930794169s ago: executing program 3 (id=606):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={<r5=>r1})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100024220}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf0, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20040804}, 0x4810) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r8, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3c}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44885}, 0x8004) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000009c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xce26ee087e6387c6}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r10, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xed, 0x2a}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_SSID={0x15, 0x34, @random="fff6f315cee2bed5cc5dad81b0d8731d99"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "de7246954e671adf96fb8ec022ac8289"}, @NL80211_ATTR_PMKID={0x14, 0x55, "320f9e1e72889499edfd31d1df360223"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x12}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (async)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="77d0e0f430", @ANYRES16=r6, @ANYBLOB="0900fdffffff000000001c0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r14=>0x0})
setsockopt$inet_tcp_TLS_RX(r13, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x303}, "ae3610af82dc5b68", "0234c64199158f1f578f4abc76e49106f4b954566843a3726551c341db55791e", "9ee69809", "b5800fc63aa45d5a"}, 0x38) (async)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r15, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000002d00000500000a68000000060a010400000000000000000a0000010900010073797a31000000003c00048018000180080001006c6f67000c00028008000540ffffff0820000180070001007274000014000280080002400000000108000140000000100900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
socket$unix(0x1, 0x5, 0x0) (async)
sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r8, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r14, @ANYRESHEX=0x0, @ANYRESHEX=r11], 0x3c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
write(r11, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff9000", 0xfdef)

2m19.77374538s ago: executing program 0 (id=607):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0xf, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x6, 0x3, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}}, 0x24008004)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
syz_emit_ethernet(0x62, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@generic={0x13, 0x11, "d5226ece9085b75ccf4bf7b00aa21f"}]}}}}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2, 0x1ff}, 0x1c, 0x0}}], 0x1, 0x40)
sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010000000000000000001000000018000180140002007866726d3000"/38], 0x2c}}, 0x24008080)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r9, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x62}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7f}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x401}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x1)

2m19.769400295s ago: executing program 1 (id=608):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000}}, @TCA_SKBEDIT_PTYPE={0x2, 0x4}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0x9, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xea37}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000), 0xe)
listen(r1, 0x0)
close(0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @empty}, &(0x7f0000000040)=0xc)

2m19.696257171s ago: executing program 2 (id=609):
unshare(0x2a020400)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)
syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa45cd30e03e82e4abc0903f07eb18aaaaaa020800460000140000000000019078ac1414bbac1e00014404000008009078010106b1"], 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000)
recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x1, 0x40010000, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000000)=0x7fff, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000004e000100000000000000124e9a1302"], 0x14}}, 0x0)

2m19.621033734s ago: executing program 1 (id=610):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000184200000600000000fff90000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

2m19.579434757s ago: executing program 2 (id=611):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [], {0x95, 0x0, 0xb}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = socket$packet(0x11, 0x3, 0x300)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b19, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7040fedbdf250f000000080039000d00000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x2000e020}, 0x18)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x80000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000340), &(0x7f0000000140)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffe, @empty}, 0x1c)

2m19.463246706s ago: executing program 1 (id=612):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xa)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xffff0000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x44}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401ffff00000000000000010004000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010401040000000000000000050000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000bf0c0000400000000210000780090001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x0, 0x1, 0x7b8})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xea2930ad9e218d39}, 0x48)

2m19.397498968s ago: executing program 4 (id=613):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@generic={0x13, 0x11, "d5226ece9085b75ccf4bf7b00aa21f"}]}}}}}}}}, 0x0) (fail_nth: 4)

2m19.233382274s ago: executing program 2 (id=614):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000a00)={0x8, 0x9, 0x6, 0x1000, 0xa, 0x7e, 0x72, 0x7f1c}, 0x0, 0x0, &(0x7f0000000ac0), 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x8001)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r2, 0x25, 0xc, @void}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_ivalue=0x1}})

2m19.11561227s ago: executing program 4 (id=615):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x80)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010101}}}], 0x20}, 0x24048894)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)

2m19.088585555s ago: executing program 1 (id=616):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0xe)
unshare(0x24020400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_getaddr={0x93, 0x16, 0x100, 0x70bd26, 0x25dfdbff, {0x2, 0x40, 0x80, 0xfd, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_TARGET_NETNSID={0x0, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc85}, @IFA_LABEL={0x14, 0x3, 'pim6reg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c6)

2m19.036433903s ago: executing program 4 (id=617):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x40}}, 0x0) (async, rerun: 64)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x8001, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x88) (rerun: 64)

2m18.907955109s ago: executing program 3 (id=618):
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x1)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000082ada487c05ac94a12e9de55a5873cbc7c38b2b93b9abb7ed77ff4cfa4d93ad50945", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf254a0000000f00a8007365636f6e646e616d6500000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) (async)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom$inet(r3, 0x0, 0x1f, 0x40000120, 0x0, 0xfffffe91)
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r5, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) (async, rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x8001, 0xfffffffffffffece) (rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x6, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x20, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0xf, 0x32, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async)
connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) (async)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1ce8561332c3298586"], 0x9) (async)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xa0388004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x402, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x40014)
sendmmsg$inet(r7, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="b5", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x0)

2m18.851934106s ago: executing program 2 (id=619):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000380)={0x0, r1, 0x0, 0x80000000, 0x7d8})
r3 = socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8020ffa1}, {0xfffffff9, 0x80500}]}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000001c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000360200000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08100100", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x404c094)
write$nci(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5)
sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, 0x0, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)='z', 0x14}], 0x1}, 0x4011)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="4503040701c106001400128009000100626f6e6400050000008b868611b5e2d3221d4a45486c5939cd7dcfa1cf346eb813c83de71430527ca04e43ae030090a51990278ee0be44ab4b8d5dc9235a7500"/90], 0x3c}, 0x1, 0x0, 0x0, 0x48811}, 0x34048851)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)

2m18.83601502s ago: executing program 1 (id=620):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280), 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000004000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800500028008000180fffffffe0900010073797a3000000000140000001000010000000000000000000000000a"], 0xc8}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000004000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800500028008000180fffffffe0900010073797a3000000000140000001000010000000000000000000000000a"], 0xc8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x12, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8014)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', <r4=>0x0, 0x2f, 0x0, 0x6, 0x54, 0xf, @private0, @empty, 0x8000, 0x0, 0x2, 0x6}})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b40)={'gretap0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b40)={'gretap0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0x5f}]}, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendto$packet(r5, &(0x7f0000000180)="0503070000000000000043a2b387229559fc01d14c809599", 0x18, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x3, 0x6, @multicast}, 0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@private0, r4}, 0x14)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000e00)={0x1, &(0x7f0000000dc0)=[{0xe7, 0x7f, 0xce, 0x1019}]}, 0x10)

2m18.719725967s ago: executing program 0 (id=621):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x204)

2m18.681627965s ago: executing program 1 (id=622):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m18.509253816s ago: executing program 3 (id=623):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x18, 0x27, 0x1, 0x20000, 0x0, {0xc}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) (fail_nth: 10)

2m18.367601s ago: executing program 3 (id=624):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000340))
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x14, r6, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x4) (async)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000740)={0xffffffff, 0x0, 0x5, 0xb, 0x5, 0x0, [{0xff6b, 0x9, 0x3, '\x00', 0xa00}, {0xe0, 0x20e33119, 0x7fff, '\x00', 0x2000}, {0x6ac, 0x6, 0x7ff, '\x00', 0x200}, {0x3, 0x0, 0xffff, '\x00', 0x20a}, {0x49a, 0x77b7, 0x69d6}]}) (async)
clock_gettime(0x0, &(0x7f00000001c0)={<r7=>0x0, <r8=>0x0})
ppoll(&(0x7f0000000180)=[{r0}, {r2, 0x4505}, {r3, 0x10}], 0x3, &(0x7f0000000200)={r7, r8+10000000}, &(0x7f0000000240)={[0x1000]}, 0x8) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

2m18.340994631s ago: executing program 3 (id=625):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="0213b100050000002abd7000fddbdf0403000700322000000a"], 0x28}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_TIMEOUT={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94)

2m18.095110215s ago: executing program 4 (id=626):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) (async)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) (async)

2m17.995493564s ago: executing program 2 (id=627):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=@ipv4_newrule={0x24, 0x20, 0xc15, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@FRA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=@ipv4_newrule={0x24, 0x20, 0xc15, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@FRA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x36, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37)

2m17.303289092s ago: executing program 0 (id=628):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
poll(&(0x7f00000000c0)=[{}, {r0, 0x2}], 0x2, 0x2c000000)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80002, 0x0)
socket(0x10, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x6, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020207025000000000020203c7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x23, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x88, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x54, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x21, 0x1, 0xfffffff8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xe4}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x100c0000}, 0x4004800)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0xfff2, 0xe}, {0xfff1, 0xfffe}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24040044}, 0x800)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x2}, 0xfc1e)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000)

2m4.00552784s ago: executing program 2 (id=629):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r6, &(0x7f0000000780)=[{&(0x7f0000000580)="f8d15d", 0x3}, {0x0}], 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x118, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xe8, 0x2, {{0x8000, 0x0, 0xd, 0x4, 0xfffffffe, 0x80000001}, [@TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x0, 0x3}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_DELAY_DIST={0x5b, 0x2, "30c6e752af44fb85976f24b4ba84eea75fdd9f0d7240d2f45d45929e905b7cee706e41f88091140093134089dc337e689c4f9de7e114570898e97ccc1514e6ec4ca6ceee941f336d6bdce0d2b462075639de11a2a52dfa"}, @TCA_NETEM_REORDER={0xc}, @TCA_NETEM_DELAY_DIST={0x41, 0x2, "415a0c3a967a2906d5402c709136030d523c92e1dd61a73a98fb70fa66891105a093f6643abd7b21dce1510c8e0c9cff778005847be57b49569861ebd1"}]}}}]}, 0x118}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r0, &(0x7f0000000c00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}}}}}, 0x32)

1m53.597698281s ago: executing program 32 (id=628):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
poll(&(0x7f00000000c0)=[{}, {r0, 0x2}], 0x2, 0x2c000000)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80002, 0x0)
socket(0x10, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x6, 0x4, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020207025000000000020203c7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x23, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x88, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x54, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x21, 0x1, 0xfffffff8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xe4}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x100c0000}, 0x4004800)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0xfff2, 0xe}, {0xfff1, 0xfffe}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24040044}, 0x800)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x2}, 0xfc1e)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000)

1m24.305518718s ago: executing program 33 (id=622):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

50.487356126s ago: executing program 34 (id=625):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="0213b100050000002abd7000fddbdf0403000700322000000a"], 0x28}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_TIMEOUT={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94)

0s ago: executing program 35 (id=626):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) (async)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts.
[   71.699034][ T5604] cgroup: Unknown subsys name 'net'
[   71.833103][ T5604] cgroup: Unknown subsys name 'cpuset'
[   71.835843][ T5604] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.201525][ T5604] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   75.364178][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.365191][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.367873][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.368162][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.369041][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.370443][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.372537][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.372857][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.373841][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.374133][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.403125][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.406095][ T4937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.407627][ T4937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.414433][ T4937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.415677][ T4937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.418401][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.424133][ T4937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.424618][ T4937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.425680][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.432518][ T4937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.433488][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.433934][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.441801][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.443559][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   75.453813][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.226869][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.227022][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.227146][ T5617] bridge_slave_0: entered allmulticast mode
[   77.229045][ T5617] bridge_slave_0: entered promiscuous mode
[   77.233999][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.234157][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.234523][ T5617] bridge_slave_1: entered allmulticast mode
[   77.236207][ T5617] bridge_slave_1: entered promiscuous mode
[   77.324690][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.324782][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.324890][ T5619] bridge_slave_0: entered allmulticast mode
[   77.326339][ T5619] bridge_slave_0: entered promiscuous mode
[   77.327946][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.328035][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.328409][ T5615] bridge_slave_0: entered allmulticast mode
[   77.332184][ T5615] bridge_slave_0: entered promiscuous mode
[   77.399429][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.399526][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.399653][ T5619] bridge_slave_1: entered allmulticast mode
[   77.402721][ T5619] bridge_slave_1: entered promiscuous mode
[   77.404729][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.404824][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.404935][ T5615] bridge_slave_1: entered allmulticast mode
[   77.407339][ T5615] bridge_slave_1: entered promiscuous mode
[   77.413727][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.431956][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.432055][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.432224][ T5614] bridge_slave_0: entered allmulticast mode
[   77.433938][ T5614] bridge_slave_0: entered promiscuous mode
[   77.437444][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.437539][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.437904][ T5614] bridge_slave_1: entered allmulticast mode
[   77.439679][ T5614] bridge_slave_1: entered promiscuous mode
[   77.451017][ T4937] Bluetooth: hci1: command tx timeout
[   77.451204][ T4937] Bluetooth: hci0: command tx timeout
[   77.451745][   T52] Bluetooth: hci2: command tx timeout
[   77.451919][ T5622] Bluetooth: hci3: command tx timeout
[   77.470304][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.470463][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.470613][ T5624] bridge_slave_0: entered allmulticast mode
[   77.472277][ T5624] bridge_slave_0: entered promiscuous mode
[   77.505596][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.532137][ T5623] Bluetooth: hci4: command tx timeout
[   77.534719][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.534818][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.534935][ T5624] bridge_slave_1: entered allmulticast mode
[   77.537826][ T5624] bridge_slave_1: entered promiscuous mode
[   77.605451][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.621391][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.623763][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.626072][ T5617] team0: Port device team_slave_0 added
[   77.628053][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.645351][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.662257][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.681211][ T5617] team0: Port device team_slave_1 added
[   77.693642][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.736536][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.737908][ T5619] team0: Port device team_slave_0 added
[   77.739746][ T5615] team0: Port device team_slave_0 added
[   77.743501][ T5615] team0: Port device team_slave_1 added
[   77.761903][ T5614] team0: Port device team_slave_0 added
[   77.764860][ T5614] team0: Port device team_slave_1 added
[   77.779984][ T5619] team0: Port device team_slave_1 added
[   77.789531][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.789546][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.789568][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.859737][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.859752][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.860658][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.877204][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.877221][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.877245][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.894084][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.894099][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.894123][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.897465][ T5624] team0: Port device team_slave_0 added
[   77.899143][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.899156][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.899180][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.935206][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.935222][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.935246][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.947822][ T5624] team0: Port device team_slave_1 added
[   77.983315][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.983330][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.983355][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.022550][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.022566][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.022589][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.067328][ T5614] hsr_slave_0: entered promiscuous mode
[   78.068722][ T5614] hsr_slave_1: entered promiscuous mode
[   78.070732][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.070745][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.070769][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.142408][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.142424][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.142449][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.193358][ T5617] hsr_slave_0: entered promiscuous mode
[   78.197916][ T5617] hsr_slave_1: entered promiscuous mode
[   78.199262][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   78.199346][ T5617] Cannot create hsr debugfs directory
[   78.232844][ T5615] hsr_slave_0: entered promiscuous mode
[   78.233827][ T5615] hsr_slave_1: entered promiscuous mode
[   78.234514][ T5615] debugfs: 'hsr0' already exists in 'hsr'
[   78.234532][ T5615] Cannot create hsr debugfs directory
[   78.305300][ T5619] hsr_slave_0: entered promiscuous mode
[   78.306312][ T5619] hsr_slave_1: entered promiscuous mode
[   78.307008][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   78.307026][ T5619] Cannot create hsr debugfs directory
[   78.397307][ T5624] hsr_slave_0: entered promiscuous mode
[   78.397928][ T5624] hsr_slave_1: entered promiscuous mode
[   78.398409][ T5624] debugfs: 'hsr0' already exists in 'hsr'
[   78.398427][ T5624] Cannot create hsr debugfs directory
[   78.859171][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.876028][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.877264][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.882947][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.886502][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.897714][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.898645][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.911219][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.995442][ T5617] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.007262][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.008117][ T5617] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.012581][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.028422][ T5617] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.036257][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.046208][ T5617] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.057535][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.122471][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.136997][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.138683][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.148810][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.165470][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.168064][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.168733][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.174400][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.246452][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.279529][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.291530][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.292256][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.295088][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.308030][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.317714][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.335746][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   79.336946][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.343016][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.379304][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.379385][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.415934][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.416175][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.453934][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.456815][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.458559][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.465861][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.483407][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.497719][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.498483][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.504367][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.530665][ T5623] Bluetooth: hci3: command tx timeout
[   79.530697][ T5623] Bluetooth: hci2: command tx timeout
[   79.530717][ T5623] Bluetooth: hci0: command tx timeout
[   79.530737][ T5623] Bluetooth: hci1: command tx timeout
[   79.586034][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.611047][ T5622] Bluetooth: hci4: command tx timeout
[   79.644491][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   79.679197][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.679296][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.701263][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.730614][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.730716][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.788070][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[   79.839441][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.839562][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.855949][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.877884][  T734] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.877988][  T734] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.932401][ T5624] 8021q: adding VLAN 0 to HW filter on device team0
[   79.954705][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.996683][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.996835][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.085160][  T734] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.085302][  T734] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.098051][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   80.146427][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.147193][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.166848][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.166966][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.566049][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.722772][ T5614] veth0_vlan: entered promiscuous mode
[   80.751344][ T5614] veth1_vlan: entered promiscuous mode
[   80.835781][ T5614] veth0_macvtap: entered promiscuous mode
[   80.863818][ T5614] veth1_macvtap: entered promiscuous mode
[   80.939341][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.972828][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.197939][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.288011][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.414571][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.414601][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.431715][ T1173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.432032][ T1173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.432304][ T1173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.570473][ T3399] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.576680][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.576705][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.584568][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.622671][ T5623] Bluetooth: hci0: command tx timeout
[   81.622706][ T5623] Bluetooth: hci3: command tx timeout
[   81.622767][ T5622] Bluetooth: hci1: command tx timeout
[   81.622767][   T52] Bluetooth: hci2: command tx timeout
[   81.674535][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.685904][ T5615] veth0_vlan: entered promiscuous mode
[   81.701891][   T52] Bluetooth: hci4: command tx timeout
[   81.745027][ T5615] veth1_vlan: entered promiscuous mode
[   81.749580][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.820447][ T5624] veth0_vlan: entered promiscuous mode
[   81.883361][ T5624] veth1_vlan: entered promiscuous mode
[   81.908011][ T5619] veth0_vlan: entered promiscuous mode
[   81.956750][ T5615] veth0_macvtap: entered promiscuous mode
[   81.986275][ T5619] veth1_vlan: entered promiscuous mode
[   82.004372][ T5615] veth1_macvtap: entered promiscuous mode
[   82.122096][ T5617] veth0_vlan: entered promiscuous mode
[   82.145490][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.153214][ T5624] veth0_macvtap: entered promiscuous mode
[   82.191224][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.193284][ T5617] veth1_vlan: entered promiscuous mode
[   82.204004][ T5624] veth1_macvtap: entered promiscuous mode
[   82.223810][ T5619] veth0_macvtap: entered promiscuous mode
[   82.245669][ T5811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'.
[   82.256888][ T5619] veth1_macvtap: entered promiscuous mode
[   82.284287][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.292981][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.398612][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.478430][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.484986][ T5617] veth0_macvtap: entered promiscuous mode
[   82.504841][ T1173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.514039][ T5617] veth1_macvtap: entered promiscuous mode
[   82.525163][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.525183][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.650862][   T38] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652483][ T1055] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652523][ T1055] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652558][ T1055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652592][ T1055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652627][ T1055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652661][ T1055] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652694][ T1055] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652727][ T1055] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652761][ T1055] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.652795][ T1055] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.662239][ T3399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.662259][ T3399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.813034][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.813055][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.827957][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.867715][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.961911][   T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.963140][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.963156][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.963404][ T1055] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.990958][   T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.993732][ T1055] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.055593][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.055614][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.206549][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.206569][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.222966][ T5834] syz.1.10: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   83.223424][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(full) 
[   83.223448][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   83.223466][ T5834] Call Trace:
[   83.223474][ T5834]  <TASK>
[   83.223483][ T5834]  dump_stack_lvl+0xe8/0x150
[   83.223528][ T5834]  warn_alloc+0x24d/0x270
[   83.223550][ T5834]  ? kasan_save_track+0x4f/0x80
[   83.223570][ T5834]  ? kasan_save_track+0x3e/0x80
[   83.223593][ T5834]  ? __pfx_warn_alloc+0x10/0x10
[   83.223611][ T5834]  ? __x64_sys_setsockopt+0x13d/0x1b0
[   83.223638][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.223675][ T5834]  __vmalloc_node_range_noprof+0x127/0x1540
[   83.223727][ T5834]  ? rcu_is_watching+0x16/0xb0
[   83.223758][ T5834]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   83.223787][ T5834]  ? __kmalloc_cache_noprof+0x321/0x600
[   83.223808][ T5834]  ? __kmalloc_cache_noprof+0x14d/0x600
[   83.223827][ T5834]  ? xskq_create+0x56/0x220
[   83.223859][ T5834]  xskq_create+0x148/0x220
[   83.223885][ T5834]  ? xsk_init_queue+0x8a/0xe0
[   83.223912][ T5834]  xsk_init_queue+0x8a/0xe0
[   83.223939][ T5834]  xsk_setsockopt+0x52a/0x960
[   83.223967][ T5834]  ? __pfx_xsk_setsockopt+0x10/0x10
[   83.223991][ T5834]  ? __pfx_aa_sk_perm+0x10/0x10
[   83.224026][ T5834]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   83.224052][ T5834]  ? __pfx_xsk_setsockopt+0x10/0x10
[   83.224078][ T5834]  do_sock_setsockopt+0x17c/0x1b0
[   83.224108][ T5834]  __x64_sys_setsockopt+0x13d/0x1b0
[   83.224139][ T5834]  do_syscall_64+0x166/0x520
[   83.224180][ T5834]  ? trace_irq_disable+0x3b/0x140
[   83.224202][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.224221][ T5834]  ? clear_bhb_loop+0x70/0xc0
[   83.224246][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.224266][ T5834] RIP: 0033:0x7faf78d9e159
[   83.224289][ T5834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.224306][ T5834] RSP: 002b:00007faf79bbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   83.224325][ T5834] RAX: ffffffffffffffda RBX: 00007faf79025fa0 RCX: 00007faf78d9e159
[   83.224340][ T5834] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[   83.224352][ T5834] RBP: 00007faf78e3506b R08: 0000000000000004 R09: 0000000000000000
[   83.224364][ T5834] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.224377][ T5834] R13: 00007faf79026038 R14: 00007faf79025fa0 R15: 00007fffe6139448
[   83.224410][ T5834]  </TASK>
[   83.224810][ T5834] Mem-Info:
[   83.224826][ T5834] active_anon:5584 inactive_anon:0 isolated_anon:0
[   83.224826][ T5834]  active_file:0 inactive_file:41789 isolated_file:0
[   83.224826][ T5834]  unevictable:0 dirty:1539 writeback:0
[   83.224826][ T5834]  slab_reclaimable:9875 slab_unreclaimable:92104
[   83.224826][ T5834]  mapped:29047 shmem:520 pagetables:1095
[   83.224826][ T5834]  sec_pagetables:0 bounce:0
[   83.224826][ T5834]  kernel_misc_reclaimable:0
[   83.224826][ T5834]  free:1336261 free_pcp:16915 free_cma:0
[   83.224880][ T5834] Node 0 active_anon:22336kB inactive_anon:0kB active_file:0kB inactive_file:166952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116188kB dirty:6144kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11980kB pagetables:4240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   83.224937][ T5834] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   83.224988][ T5834] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   83.225050][ T5834] lowmem_reserve[]: 0 2487 2487 2487 2487
[   83.225085][ T5834] Node 0 DMA32 free:1389980kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22336kB inactive_anon:0kB active_file:0kB inactive_file:166952kB unevictable:0kB writepending:6144kB zspages:0kB present:3129332kB managed:2547104kB mlocked:0kB bounce:0kB free_pcp:67160kB local_pcp:61640kB free_cma:0kB
[   83.225144][ T5834] lowmem_reserve[]: 0 0 0 0 0
[   83.225189][ T5834] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   83.225245][ T5834] lowmem_reserve[]: 0 0 0 0 0
[   83.225278][ T5834] Node 1 Normal free:3939704kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:12kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB
[   83.225337][ T5834] lowmem_reserve[]: 0 0 0 0 0
[   83.225370][ T5834] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   83.225493][ T5834] Node 0 DMA32: 1*4kB (E) 1*8kB (M) 3*16kB (UME) 3*32kB (UME) 3*64kB (UME) 1*128kB (M) 2*256kB (UE) 7*512kB (M) 9*1024kB (UM) 6*2048kB (M) 333*4096kB (UM) = 1390044kB
[   83.225644][ T5834] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   83.225738][ T5834] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 4*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939700kB
[   83.225893][ T5834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   83.225911][ T5834] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.225927][ T5834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   83.225943][ T5834] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.225959][ T5834] 42328 total pagecache pages
[   83.225969][ T5834] 0 pages in swap cache
[   83.225976][ T5834] Free swap  = 124996kB
[   83.225983][ T5834] Total swap = 124996kB
[   83.225990][ T5834] 2097051 pages RAM
[   83.225996][ T5834] 0 pages HighMem/MovableOnly
[   83.226002][ T5834] 428659 pages reserved
[   83.226008][ T5834] 0 pages cma reserved
[   83.442861][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.442881][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.690722][   T52] Bluetooth: hci2: command tx timeout
[   83.690756][   T52] Bluetooth: hci0: command tx timeout
[   83.707464][ T5622] Bluetooth: hci1: command tx timeout
[   83.707496][ T5622] Bluetooth: hci3: command tx timeout
[   83.726505][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.726524][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.770111][   T52] Bluetooth: hci4: command tx timeout
[   83.952134][ T5847] netlink: 'syz.0.1': attribute type 7 has an invalid length.
[   83.957992][ T5841] syzkaller0: entered promiscuous mode
[   83.958015][ T5841] syzkaller0: entered allmulticast mode
[   84.163487][ T5857] netlink: 'syz.4.5': attribute type 1 has an invalid length.
[   84.164323][ T5850] Zero length message leads to an empty skb
[   84.296411][ T5853] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[   84.322815][ T5853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'.
[   84.442560][ T5868] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET)
[   84.510569][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'.
[   85.543333][ T5855] tipc: Started in network mode
[   85.543367][ T5855] tipc: Node identity ac14140f, cluster identity 4711
[   85.546057][ T5855] tipc: New replicast peer: 255.255.255.255
[   85.547187][ T5855] tipc: Enabled bearer <udp:syz2>, priority 10
[   85.547484][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'.
[   85.870667][ T5875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'.
[   85.915874][ T5879] batadv0: entered promiscuous mode
[   85.917777][ T5879] vlan2: entered promiscuous mode
[   85.944762][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'.
[   85.944787][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'.
[   86.187280][ T5899] nbd: must specify a size in bytes for the device
[   86.265866][ T5909] netlink: 176 bytes leftover after parsing attributes in process `syz.3.25'.
[   86.285086][ T5909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25'.
[   86.291528][ T5910] Cannot find set identified by id 0 to match
[   86.327714][ T5909] netlink: 'syz.3.25': attribute type 1 has an invalid length.
[   86.327737][ T5909] netlink: 228 bytes leftover after parsing attributes in process `syz.3.25'.
[   86.541309][ T5815] tipc: Node number set to 2886997007
[   86.683543][ T5926] syzkaller0: entered promiscuous mode
[   86.683566][ T5926] syzkaller0: entered allmulticast mode
[   87.014267][   T25] cfg80211: failed to load regulatory.db
[   87.384541][ T5967] xt_hashlimit: size too large, truncated to 1048576
[   87.686996][ T3399] IPVS: starting estimator thread 0...
[   87.773852][ T6000] IPVS: using max 33 ests per chain, 79200 per kthread
[   87.977449][ T5981] syzkaller1: entered promiscuous mode
[   87.977472][ T5981] syzkaller1: entered allmulticast mode
[   88.179439][ T6022] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'.
[   88.194707][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'.
[   88.233953][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'.
[   88.403333][ T6034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.422774][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.47'.
[   88.622006][ T6044] netlink: 68 bytes leftover after parsing attributes in process `syz.3.51'.
[   88.623211][ T6045] netlink: 32 bytes leftover after parsing attributes in process `syz.3.51'.
[   88.872244][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'.
[   89.038981][ T6072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.260230][ T6085] netlink: 36 bytes leftover after parsing attributes in process `syz.3.62'.
[   89.382033][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'.
[   92.245862][ T6086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   92.337619][ T6133] macsec0: entered promiscuous mode
[   92.350516][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'.
[   92.372166][ T6134] veth1_macvtap: left promiscuous mode
[   92.406987][ T6134] macsec0 (unregistering): left promiscuous mode
[   92.482108][ T6142] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   92.584561][ T6145] syzkaller0: entered promiscuous mode
[   92.584590][ T6145] syzkaller0: entered allmulticast mode
[   92.920204][ T6153] netlink: 'syz.0.80': attribute type 2 has an invalid length.
[   92.928007][ T6168] rdma_op ffff8880297ba238 conn xmit_rdma 0000000000000000
[   92.968821][ T6153] ovs-s!: entered promiscuous mode
[   93.245819][ T1055] nci: nci_ntf_packet: unknown ntf opcode 0x123
[   93.313276][ T6191] netlink: 'syz.4.84': attribute type 16 has an invalid length.
[   93.313300][ T6191] netlink: 'syz.4.84': attribute type 17 has an invalid length.
[   93.354129][ T6192] bridge0: port 3(macsec1) entered blocking state
[   93.354387][ T6192] bridge0: port 3(macsec1) entered disabled state
[   93.354551][ T6192] macsec1: entered allmulticast mode
[   93.354567][ T6192] bridge0: entered allmulticast mode
[   93.354606][ T6192] bridge0: entered promiscuous mode
[   93.397860][ T6192] macsec1: left allmulticast mode
[   93.397884][ T6192] bridge0: left allmulticast mode
[   93.613566][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.615626][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.809175][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.822622][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.060504][   T30] bridge0: left promiscuous mode
[   94.061722][ T1055] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.061767][ T1055] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.061802][ T1055] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.091520][ T1157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.255560][ T6239] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[   94.255596][ T6239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.446986][ T6246] Bluetooth: MGMT ver 1.23
[   94.454543][ T6246] Bluetooth: hci0: unsupported parameter 5135
[   94.454562][ T6246] Bluetooth: hci0: unsupported parameter 8192
[   94.454579][ T6246] Bluetooth: hci0: unsupported parameter 5135
[   94.454591][ T6246] Bluetooth: hci0: unsupported parameter 8192
[   94.895514][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'.
[   94.895774][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'.
[   94.897413][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'.
[   95.003649][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'.
[   96.144814][ T6184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.420113][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'.
[   96.439403][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'.
[   96.468427][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'.
[   96.476837][ T6298] syzkaller0: entered promiscuous mode
[   96.476864][ T6298] syzkaller0: entered allmulticast mode
[   96.896341][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.108'.
[   96.896399][ T6311] netlink: 'syz.1.108': attribute type 1 has an invalid length.
[   96.913438][ T6316] nbd: must specify a size in bytes for the device
[   96.924139][ T6311] geneve2: entered promiscuous mode
[   96.989043][ T6315] bond2: entered promiscuous mode
[   96.989071][ T6315] bond2: entered allmulticast mode
[   97.107706][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'.
[   97.224686][ T6326] ieee802154 phy0 wpan0: encryption failed: -22
[   97.262801][ T6329] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.114'.
[   97.982179][ T6370] nbd: must specify a size in bytes for the device
[   98.711881][ T6404] ipip0: entered promiscuous mode
[   98.905591][ T6426] macsec0: entered promiscuous mode
[   98.919438][ T6426] veth1_macvtap: left promiscuous mode
[   98.946633][ T6426] macsec0 (unregistering): left promiscuous mode
[   98.996046][ T6428] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”à�I�ƺ¥þ àø§%
[   98.999287][ T6430] netlink: 'syz.3.142': attribute type 8 has an invalid length.
[   99.098023][ T6430] veth3: entered allmulticast mode
[   99.184953][ T6443] nbd: must specify a size in bytes for the device
[   99.519324][ T6464] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes
[   99.815952][ T6480] openvswitch: netlink: Duplicate key (type 3).
[  100.111133][ T6493] syzkaller0: entered promiscuous mode
[  100.111160][ T6493] syzkaller0: entered allmulticast mode
[  100.116293][ T6493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.145248][ T6493] tipc: Resetting bearer <eth:syzkaller0>
[  100.167231][ T6491] tipc: Resetting bearer <eth:syzkaller0>
[  100.215510][ T6491] tipc: Disabling bearer <eth:syzkaller0>
[  100.401010][ T6504] warning: `syz.4.163' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.757863][ T6519] IPVS: set_ctl: invalid protocol: 0 172.20.20.44:20003
[  101.033167][ T6535] __nla_validate_parse: 12 callbacks suppressed
[  101.033195][ T6535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'.
[  101.254471][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.256841][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.482276][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.528584][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.889877][ T1157] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.889932][ T1157] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.889966][ T1157] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.889998][ T1157] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.982225][ T6555] syzkaller0: entered promiscuous mode
[  101.982251][ T6555] syzkaller0: entered allmulticast mode
[  102.018896][ T6555] tipc: Started in network mode
[  102.018934][ T6555] tipc: Node identity 72ca611f42b6, cluster identity 4711
[  102.019150][ T6555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.070101][ T6555] tipc: Resetting bearer <eth:syzkaller0>
[  102.076972][ T6554] tipc: Resetting bearer <eth:syzkaller0>
[  102.130810][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'.
[  102.132441][ T6554] tipc: Disabling bearer <eth:syzkaller0>
[  102.176835][ T6565] netlink: 'syz.2.176': attribute type 3 has an invalid length.
[  102.177156][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'.
[  102.514648][   T49] tipc: Subscription rejected, illegal request
[  102.538039][ T6583] vlan2: entered promiscuous mode
[  102.538064][ T6583] ip6gretap0: entered promiscuous mode
[  102.566853][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'.
[  102.578365][ T6585] syzkaller0: entered promiscuous mode
[  102.578387][ T6585] syzkaller0: entered allmulticast mode
[  102.724792][ T6591] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.829388][ T6596] veth1_to_bond: entered allmulticast mode
[  102.836950][ T6596] veth1_to_bond: entered promiscuous mode
[  102.837292][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'.
[  102.848773][ T6596] veth1_to_bond (unregistering): left allmulticast mode
[  102.848809][ T6596] veth1_to_bond (unregistering): left promiscuous mode
[  102.874156][ T6596] bond0: (slave bond_slave_1): Releasing backup interface
[  102.899494][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'.
[  103.071556][ T6608] syzkaller0: entered promiscuous mode
[  103.071578][ T6608] syzkaller0: entered allmulticast mode
[  103.084467][ T6608] tipc: Started in network mode
[  103.084495][ T6608] tipc: Node identity d2aea45f3f09, cluster identity 4711
[  103.089130][ T6608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.099112][ T6608] tipc: Resetting bearer <eth:syzkaller0>
[  103.115827][ T6607] tipc: Resetting bearer <eth:syzkaller0>
[  103.166187][ T6607] tipc: Disabling bearer <eth:syzkaller0>
[  103.755639][ T6652] netlink: 'syz.4.198': attribute type 1 has an invalid length.
[  103.758580][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.197'.
[  103.758826][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.197'.
[  103.953907][ T6656] syzkaller0: entered promiscuous mode
[  103.953937][ T6656] syzkaller0: entered allmulticast mode
[  104.068175][ T6656] veth3: entered allmulticast mode
[  104.089269][ T6656] bond1: (slave veth3): Enslaving as an active interface with a down link
[  104.121448][ T6652] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  104.222388][ T6665] syzkaller0: entered promiscuous mode
[  104.222411][ T6665] syzkaller0: entered allmulticast mode
[  104.247550][ T6665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.273248][ T6664] tipc: Resetting bearer <eth:syzkaller0>
[  104.345651][ T6664] tipc: Disabling bearer <eth:syzkaller0>
[  104.404916][ T6677] gre1: entered promiscuous mode
[  104.428960][ T6681] netlink: 'syz.4.205': attribute type 2 has an invalid length.
[  104.498376][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'.
[  104.679673][ T6692] tipc: Started in network mode
[  104.679699][ T6692] tipc: Node identity ac14140f, cluster identity 4711
[  104.680251][ T6692] tipc: New replicast peer: 255.255.255.255
[  104.680976][ T6692] tipc: Enabled bearer <udp:syz2>, priority 10
[  104.759683][ T6698] FAULT_INJECTION: forcing a failure.
[  104.759683][ T6698] name failslab, interval 1, probability 0, space 0, times 1
[  104.759729][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: syz.1.211 Not tainted syzkaller #0 PREEMPT(full) 
[  104.759751][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  104.759764][ T6698] Call Trace:
[  104.759771][ T6698]  <TASK>
[  104.759778][ T6698]  dump_stack_lvl+0xe8/0x150
[  104.759806][ T6698]  should_fail_ex+0x410/0x560
[  104.759832][ T6698]  ? __alloc_skb+0x1db/0x7a0
[  104.759856][ T6698]  should_failslab+0xa8/0x100
[  104.759882][ T6698]  ? __alloc_skb+0x1db/0x7a0
[  104.759902][ T6698]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  104.759933][ T6698]  ? __alloc_skb+0x18d/0x7a0
[  104.759956][ T6698]  ? __alloc_skb+0x1db/0x7a0
[  104.759984][ T6698]  __alloc_skb+0x1db/0x7a0
[  104.760010][ T6698]  netlink_sendmsg+0x5d4/0xb40
[  104.760040][ T6698]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.760068][ T6698]  ? apparmor_socket_sendmsg+0x98/0x360
[  104.760093][ T6698]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.760111][ T6698]  sock_sendmsg_nosec+0x14e/0x190
[  104.760143][ T6698]  ____sys_sendmsg+0x54e/0x850
[  104.760173][ T6698]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.760206][ T6698]  ? import_iovec+0x73/0xa0
[  104.760234][ T6698]  ___sys_sendmsg+0x2a5/0x360
[  104.760258][ T6698]  ? __lock_acquire+0x747/0x2de0
[  104.760282][ T6698]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.760340][ T6698]  ? __fget_files+0x2a/0x420
[  104.760366][ T6698]  ? __fget_files+0x3a2/0x420
[  104.760402][ T6698]  __x64_sys_sendmsg+0x1b1/0x290
[  104.760431][ T6698]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  104.760477][ T6698]  do_syscall_64+0x166/0x520
[  104.760499][ T6698]  ? trace_irq_disable+0x3b/0x140
[  104.760515][ T6698]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.760534][ T6698]  ? clear_bhb_loop+0x70/0xc0
[  104.760556][ T6698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.760572][ T6698] RIP: 0033:0x7faf78d9e159
[  104.760589][ T6698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.760604][ T6698] RSP: 002b:00007faf79bbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.760625][ T6698] RAX: ffffffffffffffda RBX: 00007faf79025fa0 RCX: 00007faf78d9e159
[  104.760638][ T6698] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  104.760650][ T6698] RBP: 00007faf79bbd090 R08: 0000000000000000 R09: 0000000000000000
[  104.760662][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.760673][ T6698] R13: 00007faf79026038 R14: 00007faf79025fa0 R15: 00007fffe6139448
[  104.760703][ T6698]  </TASK>
[  105.219427][ T6719] IPVS: ip_vs_edit_dest(): server weight less than zero
[  105.235378][ T3354] IPVS: starting estimator thread 0...
[  105.320317][ T6721] IPVS: using max 42 ests per chain, 100800 per kthread
[  105.428472][ T6735] Bluetooth: MGMT ver 1.23
[  105.430123][ T6734] netlink: 'syz.1.219': attribute type 1 has an invalid length.
[  105.430791][ T6733] netlink: 'syz.1.219': attribute type 1 has an invalid length.
[  105.485584][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.219'.
[  105.535123][ T6737] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.820245][ T5713] tipc: Node number set to 2886997007
[  106.253220][ T6762] netlink: 'syz.2.227': attribute type 2 has an invalid length.
[  106.956016][ T6797] tipc: Can't bind to reserved service type 0
[  107.134762][   T59] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  107.154020][ T6804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  107.356747][ T6823] macsec0: entered promiscuous mode
[  107.356768][ T6823] veth1_macvtap: entered promiscuous mode
[  107.656234][ T6850] __nla_validate_parse: 3 callbacks suppressed
[  107.656253][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'.
[  107.656266][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'.
[  107.707442][ T6850] netlink: 156 bytes leftover after parsing attributes in process `syz.2.248'.
[  107.874056][ T6865] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  107.876359][ T6865] netlink: 388 bytes leftover after parsing attributes in process `syz.1.252'.
[  107.880565][ T6854] netlink: 'syz.0.249': attribute type 30 has an invalid length.
[  107.909461][ T6865] netlink: 64 bytes leftover after parsing attributes in process `syz.1.252'.
[  107.919919][ T6866] netlink: 64 bytes leftover after parsing attributes in process `syz.1.252'.
[  107.921455][ T6865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.252'.
[  108.040306][ T6865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.073975][ T6854] netlink: 'syz.0.249': attribute type 30 has an invalid length.
[  108.138558][ T6881] syzkaller0: entered promiscuous mode
[  108.138580][ T6881] syzkaller0: entered allmulticast mode
[  108.888594][ T6914] block nbd0: not configured, cannot reconfigure
[  108.890943][ T6916] netlink: 'syz.2.260': attribute type 9 has an invalid length.
[  108.906867][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[  108.945543][ T6920] netlink: 'syz.4.261': attribute type 4 has an invalid length.
[  109.087354][ T6928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.263'.
[  109.343911][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'.
[  109.498663][ T6954] netlink: 'syz.0.268': attribute type 1 has an invalid length.
[  109.587362][ T6945] tipc: Started in network mode
[  109.587391][ T6945] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  109.587541][ T6945] tipc: Enabled bearer <eth:team0>, priority 0
[  109.708857][ T6954] 8021q: adding VLAN 0 to HW filter on device bond3
[  109.754022][ T6956] bond3: (slave gretap1): making interface the new active one
[  109.756482][ T6956] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  109.817575][ T6966] netlink: 'syz.3.271': attribute type 11 has an invalid length.
[  109.904880][ T6969] lo: entered promiscuous mode
[  109.904898][ T6969] lo: entered allmulticast mode
[  109.923560][ T6969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.055474][ T6976] netlink: 'syz.0.274': attribute type 4 has an invalid length.
[  110.107641][ T6975] batman_adv: batadv0: Adding interface: macvlan2
[  110.107657][ T6975] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.107683][ T6975] batman_adv: batadv0: Interface activated: macvlan2
[  110.358286][ T6997] ieee802154 phy0 wpan0: encryption failed: -22
[  110.642537][ T7020] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  110.702968][ T6213] tipc: Node number set to 11578026
[  110.796473][ T7024] netlink: 'syz.3.286': attribute type 32 has an invalid length.
[  110.827319][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.838503][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.944399][ T7032] vlan2: entered allmulticast mode
[  110.944420][ T7032] bond0: entered allmulticast mode
[  110.944432][ T7032] bond_slave_0: entered allmulticast mode
[  110.944447][ T7032] bond_slave_1: entered allmulticast mode
[  110.978626][ T7036] ip_tables: iptables: counters copy to user failed while replacing table
[  111.067633][ T7040] openvswitch: netlink: Flow key attr not present in new flow.
[  113.109185][ T7127] __nla_validate_parse: 7 callbacks suppressed
[  113.109232][ T7127] netlink: 72 bytes leftover after parsing attributes in process `syz.3.304'.
[  113.126389][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'.
[  113.275837][ T7127] team0: Port device team_slave_0 removed
[  113.364764][ T7132] syzkaller1: entered allmulticast mode
[  113.813894][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'.
[  113.901990][ T7168] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  113.963927][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'.
[  113.982472][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'.
[  114.244701][ T7182] block nbd0: Unsupported socket: should be TCP or UNIX.
[  114.394773][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'.
[  114.394811][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'.
[  114.466833][ T7201] netlink: 48 bytes leftover after parsing attributes in process `syz.2.321'.
[  114.466859][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[  114.466873][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.321'.
[  114.507017][ T7204] netlink: 'syz.4.320': attribute type 21 has an invalid length.
[  114.507041][ T7204] IPv6: NLM_F_CREATE should be specified when creating new route
[  114.507128][ T7204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.507137][ T7204] IPv6: NLM_F_CREATE should be set when creating new route
[  114.507384][ T7204] IPv6: NLM_F_CREATE should be set when creating new route
[  114.507408][ T7204] IPv6: NLM_F_CREATE should be set when creating new route
[  114.566525][ T7207] netlink: 'syz.4.320': attribute type 21 has an invalid length.
[  114.566605][ T7207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.957069][ T7234] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  115.464159][ T7248] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  115.464469][ T7248] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  115.465081][ T7248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  115.744965][ T7260] netlink: 'syz.3.335': attribute type 1 has an invalid length.
[  117.738651][ T7218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  117.917985][ T7276] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  118.245619][ T7298] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  118.248532][ T7304] __nla_validate_parse: 3 callbacks suppressed
[  118.248552][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.346'.
[  118.248567][ T7304] netlink: 11 bytes leftover after parsing attributes in process `syz.3.346'.
[  118.248583][ T7304] netlink: 11 bytes leftover after parsing attributes in process `syz.3.346'.
[  118.248597][ T7304] netlink: 52 bytes leftover after parsing attributes in process `syz.3.346'.
[  118.278922][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.346'.
[  118.278961][ T7308] netlink: 11 bytes leftover after parsing attributes in process `syz.3.346'.
[  118.278977][ T7308] netlink: 11 bytes leftover after parsing attributes in process `syz.3.346'.
[  118.278991][ T7308] netlink: 52 bytes leftover after parsing attributes in process `syz.3.346'.
[  118.363171][ T7311] sctp: [Deprecated]: syz.1.347 (pid 7311) Use of int in maxseg socket option.
[  118.363171][ T7311] Use struct sctp_assoc_value instead
[  118.602626][ T7319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.350'.
[  118.802276][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'.
[  119.123252][ T7341] netlink: 'syz.4.355': attribute type 1 has an invalid length.
[  119.123745][ T7342] netlink: 'syz.4.355': attribute type 1 has an invalid length.
[  119.283929][ T7357] bridge_slave_0: left allmulticast mode
[  119.283960][ T7357] bridge_slave_0: left promiscuous mode
[  119.286217][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.396001][ T7367] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  119.676853][ T7387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.039433][ T7399] syzkaller0: entered promiscuous mode
[  120.039454][ T7399] syzkaller0: entered allmulticast mode
[  120.071338][ T7398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.073079][ T7402] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  120.145715][ T7399] tipc: Resetting bearer <eth:syzkaller0>
[  120.231626][ T7397] tipc: Resetting bearer <eth:syzkaller0>
[  120.248750][ T7397] tipc: Disabling bearer <eth:syzkaller0>
[  120.252991][ T7412] netlink: 'syz.0.374': attribute type 1 has an invalid length.
[  120.392006][ T7412] bond4: option mode: invalid value (11)
[  120.396785][ T7412] bond4 (unregistering): Released all slaves
[  120.437605][ T7428] netlink: 'syz.0.374': attribute type 10 has an invalid length.
[  120.702885][ T7428] dummy0: entered promiscuous mode
[  120.705848][ T7439] ip6gretap0: entered promiscuous mode
[  120.705874][ T7439] ip6gretap0: entered allmulticast mode
[  122.486356][ T7462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.486799][ T7463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.716583][ T7476] netlink: 'syz.1.384': attribute type 62 has an invalid length.
[  122.985258][ T7483] netlink: 'syz.1.386': attribute type 1 has an invalid length.
[  123.005554][ T7465] virtio_blk virtio5: 1/0/0 default/read/poll queues
[  123.008686][ T7465] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  123.350198][ T7445] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.350247][ T7445] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.350280][ T7445] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.350310][ T7445] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.828203][ T7518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.105847][ T7524] __nla_validate_parse: 9 callbacks suppressed
[  124.105874][ T7524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.396'.
[  124.468989][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.400'.
[  125.838747][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.409'.
[  125.898661][ T7595] Cannot find del_set index 17 as target
[  126.306227][ T7624] netlink: 44 bytes leftover after parsing attributes in process `syz.2.412'.
[  126.542885][ T7642] netlink: 108 bytes leftover after parsing attributes in process `syz.1.414'.
[  126.656105][ T7645] nbd: must specify a size in bytes for the device
[  126.991665][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'.
[  126.991697][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'.
[  127.103230][ T7658] netlink: 3784 bytes leftover after parsing attributes in process `syz.4.420'.
[  127.465502][   T31] audit: type=1800 audit(1790983746.397:2): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.426" name="blkio.bfq.time_recursive" dev="tmpfs" ino=422 res=0 errno=0
[  127.602539][ T7690] netlink: 132 bytes leftover after parsing attributes in process `syz.3.425'.
[  127.867210][ T7702] nbd: must specify a size in bytes for the device
[  127.978413][ T7709] raw_sendmsg: syz.1.430 forgot to set AF_INET. Fix it!
[  128.318737][ T7723] IPv6: sit1: Disabled Multicast RS
[  128.643234][ T7740] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[  128.646875][ T7743] nbd: must specify a size in bytes for the device
[  128.697157][ T7740] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.792106][ T7740] bond4: (slave geneve2): making interface the new active one
[  128.815652][ T7740] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  128.838389][ T7740] netlink: 116 bytes leftover after parsing attributes in process `syz.0.440'.
[  129.185311][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.185335][ T7769] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.209380][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.209401][ T7769] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.893327][ T7446] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfb
[  130.088090][ T7818] netlink: 'syz.0.454': attribute type 2 has an invalid length.
[  131.333522][ T7445] IPVS: starting estimator thread 0...
[  131.419905][ T7851] IPVS: using max 52 ests per chain, 124800 per kthread
[  132.655705][ T7788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  132.848800][ T7855] syzkaller0: entered promiscuous mode
[  132.848822][ T7855] syzkaller0: entered allmulticast mode
[  132.932478][ T7866] syzkaller0: entered promiscuous mode
[  132.932499][ T7866] syzkaller0: entered allmulticast mode
[  133.051975][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  133.052037][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  133.355152][ T7890] nbd: must specify a size in bytes for the device
[  133.561476][ T7899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.676545][ T7908] syzkaller0: entered promiscuous mode
[  133.676567][ T7908] syzkaller0: entered allmulticast mode
[  133.748227][ T7911] netlink: 'syz.3.480': attribute type 1 has an invalid length.
[  133.898459][ T7919] netlink: 56 bytes leftover after parsing attributes in process `syz.1.482'.
[  133.927209][ T7922] nbd: must specify a size in bytes for the device
[  134.086617][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'.
[  134.121789][ T7927] bond5: entered promiscuous mode
[  134.122270][ T7927] 8021q: adding VLAN 0 to HW filter on device bond5
[  134.258106][ T7934] bridge3: entered promiscuous mode
[  134.264153][ T7934] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  134.430336][ T7946] syzkaller0: entered promiscuous mode
[  134.430363][ T7946] syzkaller0: entered allmulticast mode
[  134.492498][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'.
[  134.629255][ T7958] netlink: 44 bytes leftover after parsing attributes in process `syz.0.496'.
[  134.664405][ T7959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.497'.
[  135.228057][ T7995] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  135.280822][ T8000] netlink: 'syz.2.508': attribute type 1 has an invalid length.
[  135.280844][ T8000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.508'.
[  135.459575][ T8010] syzkaller0: entered promiscuous mode
[  135.459599][ T8010] syzkaller0: entered allmulticast mode
[  135.472133][ T8010] netlink: 2724 bytes leftover after parsing attributes in process `syz.1.512'.
[  135.472295][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.512'.
[  135.472315][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.512'.
[  135.480674][ T8010] TC_ACT_REPEAT abuse ?
[  135.607990][ T8023] ovs-system: entered promiscuous mode
[  135.992759][ T8040] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  135.992795][ T8040] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  135.992834][ T8040] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  139.625658][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'.
[  139.666822][ T8070] bond6: entered promiscuous mode
[  139.666850][ T8070] bond6: entered allmulticast mode
[  139.715433][   T31] audit: type=1804 audit(1790983758.657:3): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.533" name="/newroot/104/cgroup.controllers" dev="tmpfs" ino=547 res=1 errno=0
[  139.718674][   T31] audit: type=1800 audit(1790983758.657:4): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.533" name="cgroup.controllers" dev="tmpfs" ino=547 res=0 errno=0
[  139.731610][   T31] audit: type=1804 audit(1790983758.677:5): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.533" name="/newroot/104/cgroup.controllers" dev="tmpfs" ino=547 res=1 errno=0
[  139.888025][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'.
[  139.906491][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'.
[  139.929462][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'.
[  139.940166][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'.
[  139.940416][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'.
[  139.940610][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'.
[  139.940808][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'.
[  139.941006][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'.
[  139.941274][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'.
[  140.524508][ T8117] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  140.587484][ T8117] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.655220][ T8121] x_tables: duplicate entry at hook 1
[  140.688447][ T8121] netlink: 'syz.3.545': attribute type 1 has an invalid length.
[  141.089288][ T8141] netlink: 'syz.1.550': attribute type 1 has an invalid length.
[  141.326833][ T8156] netlink: 'syz.0.555': attribute type 1 has an invalid length.
[  141.989165][ T8189] netlink: 'syz.1.563': attribute type 30 has an invalid length.
[  142.009680][ T8194] netlink: 'syz.1.563': attribute type 30 has an invalid length.
[  143.206070][ T8190] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  143.385650][ T8210] netlink: 'syz.3.566': attribute type 39 has an invalid length.
[  143.434643][ T8203] netlink: zone id is out of range
[  143.434658][ T8203] netlink: zone id is out of range
[  143.434665][ T8203] netlink: zone id is out of range
[  143.434673][ T8203] netlink: zone id is out of range
[  143.434680][ T8203] netlink: zone id is out of range
[  143.434687][ T8203] netlink: zone id is out of range
[  143.434694][ T8203] netlink: zone id is out of range
[  143.434702][ T8203] netlink: zone id is out of range
[  143.434709][ T8203] netlink: zone id is out of range
[  143.434716][ T8203] netlink: set zone limit has 4 unknown bytes
[  143.790474][ T8230] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  143.862071][ T8228] bridge0: port 3(wlan1) entered blocking state
[  143.863593][ T8228] bridge0: port 3(wlan1) entered disabled state
[  143.868600][ T8228] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  143.897426][ T8228] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  144.097377][ T8234] mac80211_hwsim hwsim5 wlan1 (unregistering): left allmulticast mode
[  144.097408][ T8234] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode
[  144.099804][ T8234] bridge0: port 3(wlan1) entered disabled state
[  144.378430][ T8251] bridge0: port 3(veth1_to_bridge) entered blocking state
[  144.378593][ T8251] bridge0: port 3(veth1_to_bridge) entered disabled state
[  144.378747][ T8251] veth1_to_bridge: entered allmulticast mode
[  144.413748][ T8251] veth1_to_bridge: entered promiscuous mode
[  144.536840][ T8258] netlink: 'syz.1.582': attribute type 2 has an invalid length.
[  144.553559][ T8258] : entered promiscuous mode
[  144.641839][ T8266] FAULT_INJECTION: forcing a failure.
[  144.641839][ T8266] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  144.641888][ T8266] CPU: 1 UID: 0 PID: 8266 Comm: syz.2.585 Not tainted syzkaller #0 PREEMPT(full) 
[  144.641909][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  144.641921][ T8266] Call Trace:
[  144.641928][ T8266]  <TASK>
[  144.641937][ T8266]  dump_stack_lvl+0xe8/0x150
[  144.641978][ T8266]  should_fail_ex+0x410/0x560
[  144.642007][ T8266]  _copy_from_iter+0x1d3/0x1660
[  144.642030][ T8266]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  144.642057][ T8266]  ? __pfx_policy_nodemask+0x10/0x10
[  144.642084][ T8266]  ? lock_acquire+0x115/0x350
[  144.642104][ T8266]  ? __pfx__copy_from_iter+0x10/0x10
[  144.642137][ T8266]  ? alloc_pages_mpol+0x256/0x390
[  144.642170][ T8266]  copy_page_from_iter+0x219/0x2d0
[  144.642197][ T8266]  tun_get_user+0x1c16/0x44d0
[  144.642222][ T8266]  ? tun_get_user+0x70a/0x44d0
[  144.642259][ T8266]  ? aa_file_perm+0x4ed/0x15f0
[  144.642285][ T8266]  ? __pfx_tun_get_user+0x10/0x10
[  144.642308][ T8266]  ? __lock_acquire+0x747/0x2de0
[  144.642342][ T8266]  ? ref_tracker_alloc+0x172/0x530
[  144.642366][ T8266]  ? lock_acquire+0x115/0x350
[  144.642386][ T8266]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  144.642412][ T8266]  ? lock_acquire+0x115/0x350
[  144.642432][ T8266]  ? tun_get+0x1c/0x2f0
[  144.642458][ T8266]  ? tun_get+0x1c/0x2f0
[  144.642477][ T8266]  ? tun_get+0x1c/0x2f0
[  144.642502][ T8266]  tun_chr_write_iter+0x113/0x200
[  144.642526][ T8266]  vfs_write+0x612/0xba0
[  144.642562][ T8266]  ? __pfx_vfs_write+0x10/0x10
[  144.642601][ T8266]  ? __fget_files+0x2a/0x420
[  144.642634][ T8266]  ksys_write+0x150/0x270
[  144.642659][ T8266]  ? __pfx_ksys_write+0x10/0x10
[  144.642702][ T8266]  do_syscall_64+0x166/0x520
[  144.642729][ T8266]  ? trace_irq_disable+0x3b/0x140
[  144.642749][ T8266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.642769][ T8266]  ? clear_bhb_loop+0x70/0xc0
[  144.642793][ T8266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.642813][ T8266] RIP: 0033:0x7fb21d35e98e
[  144.642835][ T8266] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  144.642855][ T8266] RSP: 002b:00007fb21e212fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  144.642879][ T8266] RAX: ffffffffffffffda RBX: 00007fb21e2136c0 RCX: 00007fb21d35e98e
[  144.642893][ T8266] RDX: 000000000000005e RSI: 00002000000003c0 RDI: 00000000000000c8
[  144.642906][ T8266] RBP: 00007fb21e213090 R08: 0000000000000000 R09: 0000000000000000
[  144.642918][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.642930][ T8266] R13: 00007fb21d626038 R14: 00007fb21d625fa0 R15: 00007ffd6b7bdd08
[  144.642961][ T8266]  </TASK>
[  145.162379][ T8284] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  145.174124][ T8284] __nla_validate_parse: 41 callbacks suppressed
[  145.174144][ T8284] netlink: 660 bytes leftover after parsing attributes in process `syz.3.593'.
[  145.174159][ T8284] netlink: 76 bytes leftover after parsing attributes in process `syz.3.593'.
[  145.214159][ T8285] netlink: 'syz.1.592': attribute type 1 has an invalid length.
[  145.217416][ T8287] netlink: 'syz.2.594': attribute type 2 has an invalid length.
[  145.387017][ T8293] xt_CONNSECMARK: invalid mode: 254
[  145.571344][ T8312] xt_bpf: check failed: parse error
[  145.591364][ T8312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.611381][ T8303] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  145.611420][ T8303] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  145.611460][ T8303] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  145.721738][ T8315] validate_nla: 1 callbacks suppressed
[  145.721755][ T8315] netlink: 'syz.3.606': attribute type 83 has an invalid length.
[  145.727584][ T8320] netlink: 'syz.2.605': attribute type 4 has an invalid length.
[  145.786399][ T8320] netlink: 'syz.2.605': attribute type 4 has an invalid length.
[  145.802804][ T8320] lo: left promiscuous mode
[  145.802826][ T8320] lo: left allmulticast mode
[  145.942926][ T8330] netlink: 36 bytes leftover after parsing attributes in process `syz.1.608'.
[  146.015858][ T8335] netlink: 'syz.0.607': attribute type 3 has an invalid length.
[  146.016386][ T8335] netlink: 'syz.0.607': attribute type 16 has an invalid length.
[  146.016402][ T8335] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.607'.
[  146.174006][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'.
[  146.253141][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'.
[  146.276911][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'.
[  146.304410][ T8353] FAULT_INJECTION: forcing a failure.
[  146.304410][ T8353] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.304441][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.4.613 Not tainted syzkaller #0 PREEMPT(full) 
[  146.304462][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  146.304472][ T8353] Call Trace:
[  146.304479][ T8353]  <TASK>
[  146.304487][ T8353]  dump_stack_lvl+0xe8/0x150
[  146.304519][ T8353]  should_fail_ex+0x410/0x560
[  146.304546][ T8353]  _copy_to_user+0x31/0xb0
[  146.304576][ T8353]  simple_read_from_buffer+0xe1/0x170
[  146.304609][ T8353]  proc_fail_nth_read+0x1bb/0x230
[  146.304627][ T8353]  ? common_file_perm+0x20e/0x2b0
[  146.304654][ T8353]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  146.304677][ T8353]  ? rw_verify_area+0x24a/0x4c0
[  146.304703][ T8353]  ? tun_chr_write_iter+0x18a/0x200
[  146.304725][ T8353]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  146.304743][ T8353]  vfs_read+0x213/0xa80
[  146.304776][ T8353]  ? __pfx___mutex_lock+0x10/0x10
[  146.304805][ T8353]  ? __pfx_vfs_read+0x10/0x10
[  146.304832][ T8353]  ? __fget_files+0x2a/0x420
[  146.304861][ T8353]  ? __fget_files+0x3a2/0x420
[  146.304884][ T8353]  ? __fget_files+0x2a/0x420
[  146.304916][ T8353]  ksys_read+0x150/0x270
[  146.304946][ T8353]  ? __pfx_ksys_read+0x10/0x10
[  146.304986][ T8353]  do_syscall_64+0x166/0x520
[  146.305012][ T8353]  ? trace_irq_disable+0x3b/0x140
[  146.305030][ T8353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.305049][ T8353]  ? clear_bhb_loop+0x70/0xc0
[  146.305072][ T8353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.305091][ T8353] RIP: 0033:0x7f8d7795e98e
[  146.305118][ T8353] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  146.305134][ T8353] RSP: 002b:00007f8d78811fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  146.305155][ T8353] RAX: ffffffffffffffda RBX: 00007f8d788126c0 RCX: 00007f8d7795e98e
[  146.305169][ T8353] RDX: 000000000000000f RSI: 00007f8d788120a0 RDI: 0000000000000004
[  146.305182][ T8353] RBP: 00007f8d78812090 R08: 0000000000000000 R09: 0000000000000000
[  146.305194][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.305206][ T8353] R13: 00007f8d77c26038 R14: 00007f8d77c25fa0 R15: 00007fffd658b708
[  146.305237][ T8353]  </TASK>
[  146.563472][ T8356] netlink: 'syz.2.614': attribute type 1 has an invalid length.
[  146.659604][ T8356] bond1: entered promiscuous mode
[  146.663570][ T8356] 8021q: adding VLAN 0 to HW filter on device bond1
[  146.832127][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.833566][ T8370] 8021q: adding VLAN 0 to HW filter on device team0
[  146.834011][ T8370] tipc: Resetting bearer <eth:team0>
[  146.838568][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.923217][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.925361][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.948096][ T8370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  146.948134][ T8370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.984858][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.984941][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.986339][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.986394][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.987169][ T6017] bridge0: port 3(veth1_to_bridge) entered blocking state
[  146.987223][ T6017] bridge0: port 3(veth1_to_bridge) entered forwarding state
[  147.032131][ T8373] netlink: 'syz.3.618': attribute type 3 has an invalid length.
[  147.034114][ T8373] netlink: 'syz.3.618': attribute type 3 has an invalid length.
[  147.460261][   T38] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.711997][ T8406] syzkaller0: entered promiscuous mode
[  147.712023][ T8406] syzkaller0: entered allmulticast mode
[  147.717912][ T8407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.439970][    C0] net_ratelimit: 5474 callbacks suppressed
[  148.439992][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.440024][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.440396][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.440396][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.440763][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.440791][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.441158][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.441172][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.441452][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  148.441533][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  152.286627][    C1] sched: DL replenish lagged too much
[  153.449936][    C1] net_ratelimit: 24945 callbacks suppressed
[  153.449959][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.450046][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  153.450263][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.450649][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.451039][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.451342][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.451357][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  153.451728][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.451745][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  153.452093][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.460049][    C1] net_ratelimit: 23887 callbacks suppressed
[  158.460071][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.460375][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.460571][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  158.460799][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.460929][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.461176][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.461225][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.461530][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.461584][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  158.461915][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.470021][    C1] net_ratelimit: 23615 callbacks suppressed
[  163.470043][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.470048][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.470460][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.470484][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.470856][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  163.470928][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.471295][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.471782][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  163.472184][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  163.472238][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.480008][    C1] net_ratelimit: 23122 callbacks suppressed
[  168.480029][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.480403][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.480548][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  168.480782][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.480912][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.481077][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.481210][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.481454][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.481574][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  168.481831][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.489829][    C1] net_ratelimit: 22917 callbacks suppressed
[  173.489851][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.489948][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  173.490188][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.490576][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.490978][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.491308][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.491342][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  173.491695][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.491734][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  173.492045][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.923842][ T8392] tipc: Resetting bearer <eth:syzkaller0>
[  178.500008][    C0] net_ratelimit: 22973 callbacks suppressed
[  178.500032][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  178.500074][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.500387][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.500823][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.501226][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.501415][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  178.501540][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.501804][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.501936][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  178.502120][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.509923][    C1] net_ratelimit: 23067 callbacks suppressed
[  183.509950][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.510091][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.510310][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.510505][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  183.510701][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.510986][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.511350][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.511717][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  183.511842][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  183.512002][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.519789][    C1] net_ratelimit: 23277 callbacks suppressed
[  188.519817][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.519881][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.520102][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.520172][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.520466][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.520532][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.520820][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.520901][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  188.521103][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.521462][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.529994][    C1] net_ratelimit: 22679 callbacks suppressed
[  193.530021][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.530022][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  193.530426][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.530443][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.530765][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.531051][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.531191][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.531356][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  193.531597][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  193.531728][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.703538][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  194.715029][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  198.539789][    C0] net_ratelimit: 23245 callbacks suppressed
[  198.539816][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.539996][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.540215][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.540385][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.540618][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  198.540741][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.541133][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.541520][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.541833][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  198.541942][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  203.550016][    C0] net_ratelimit: 23200 callbacks suppressed
[  203.550044][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.550127][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.550413][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.550447][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  203.550766][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.551128][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.551412][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.551765][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.551777][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  203.552127][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.559781][    C1] net_ratelimit: 23195 callbacks suppressed
[  208.559809][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.560131][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  208.560185][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.560533][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.560630][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.560854][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.561078][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.561262][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.561447][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  208.561659][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  210.587000][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  210.587043][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  213.127152][ T8428] Bluetooth: hci0: command tx timeout
[  213.127198][ T8428] Bluetooth: hci1: command tx timeout
[  213.569851][    C0] net_ratelimit: 23087 callbacks suppressed
[  213.569878][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  213.569938][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.570353][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.570662][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  213.570831][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.571313][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.571431][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  213.571704][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.571803][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  213.572091][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.579830][    C0] net_ratelimit: 23317 callbacks suppressed
[  218.579852][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  218.580002][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.580392][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.580637][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  218.580888][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.580978][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.581210][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.581276][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.581601][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  218.581637][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.589790][    C1] net_ratelimit: 23607 callbacks suppressed
[  223.589813][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.589820][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.590260][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.590283][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.590635][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.590733][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  223.591066][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.591499][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  223.591740][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  223.591865][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.599854][    C1] net_ratelimit: 23242 callbacks suppressed
[  228.599870][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.599880][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.600255][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.600361][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.600652][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  228.600769][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.601083][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.601449][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  228.601467][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  228.601862][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  233.609783][    C1] net_ratelimit: 23518 callbacks suppressed
[  233.609814][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  233.610034][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  233.610209][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  233.610597][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  233.610806][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  233.610927][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  233.611319][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  233.611583][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  233.611708][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  233.611940][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.619755][    C0] net_ratelimit: 23229 callbacks suppressed
[  238.619754][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.619776][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.620081][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.620176][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  238.620468][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.620855][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.621091][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  238.621170][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.621554][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  238.621975][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.629855][    C0] net_ratelimit: 23087 callbacks suppressed
[  243.629882][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.630077][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.630320][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  243.630401][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.630842][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.631171][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  243.631273][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.631586][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.631969][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  243.632065][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  248.639811][    C1] net_ratelimit: 23446 callbacks suppressed
[  248.639839][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.640160][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.640242][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  248.640560][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.640988][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.641279][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.641294][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  248.641677][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.641692][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  248.642019][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.649740][    C1] net_ratelimit: 23259 callbacks suppressed
[  253.649765][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.650136][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.650200][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  253.650430][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.650812][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.651093][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  253.651183][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.651469][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.651484][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.651804][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  253.968062][ T5622] Bluetooth: hci4: command 0x0406 tx timeout
[  256.256229][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  256.268412][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  258.659985][    C1] net_ratelimit: 21824 callbacks suppressed
[  258.660012][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.660408][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.660855][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.660966][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  258.661309][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.661687][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.661822][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  258.662143][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.662587][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  258.662681][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  263.669732][    C1] net_ratelimit: 21763 callbacks suppressed
[  263.669757][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.670036][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.670395][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.670744][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.670847][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  263.671023][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.671419][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.671692][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  263.671770][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  263.672049][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.679867][    C0] net_ratelimit: 21933 callbacks suppressed
[  268.679889][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  268.679961][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.680319][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.680614][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.680663][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  268.680967][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.681027][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.681318][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.681320][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  268.681612][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.690062][    C1] net_ratelimit: 21907 callbacks suppressed
[  273.690089][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.690492][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.690498][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  273.690884][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.691198][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.691345][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  273.691592][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.691979][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  273.692233][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  273.692293][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.699753][    C0] net_ratelimit: 21201 callbacks suppressed
[  278.699776][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  278.699785][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.700102][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.700502][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.700599][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  278.700900][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.701220][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.701421][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  278.701616][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  278.701806][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.709731][    C0] net_ratelimit: 21419 callbacks suppressed
[  283.709754][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  283.709837][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.710204][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.710559][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  283.710592][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.710987][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.711300][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.711393][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  283.711723][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.711766][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.719774][    C1] net_ratelimit: 21620 callbacks suppressed
[  288.719796][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.720202][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.720525][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  288.720577][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.721005][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.721351][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  288.721409][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.721732][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.721857][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  288.722030][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.729781][    C0] net_ratelimit: 21895 callbacks suppressed
[  293.729808][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.729993][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.730228][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  293.730361][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.730659][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.731036][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.731399][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.731545][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  293.731697][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  293.732062][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.739857][    C1] net_ratelimit: 22290 callbacks suppressed
[  298.739892][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.740292][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.740297][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  298.740618][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.740978][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.741206][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  298.741332][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.741615][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.741997][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.742079][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  303.749973][    C0] net_ratelimit: 22040 callbacks suppressed
[  303.750001][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.750043][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.750380][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  303.750439][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.750761][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.751150][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.751601][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  303.751619][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.751973][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  303.752379][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.759730][    C1] net_ratelimit: 22005 callbacks suppressed
[  308.759730][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  308.759750][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.760151][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.760506][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.760792][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.761085][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  308.761154][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.761528][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.761811][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  308.762011][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  311.851018][   T32] INFO: task kworker/0:2:189 blocked for more than 156 seconds.
[  311.851046][   T32]       Not tainted syzkaller #0
[  311.851057][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  311.851066][   T32] task:kworker/0:2     state:D stack:25256 pid:189   tgid:189   ppid:2      task_flags:0x4208060 flags:0x00080000
[  311.851121][   T32] Workqueue: events tipc_net_finalize_work
[  311.851157][   T32] Call Trace:
[  311.851165][   T32]  <TASK>
[  311.851178][   T32]  __schedule+0x17db/0x58f0
[  311.851226][   T32]  ? do_raw_spin_unlock+0xf5/0x200
[  311.851262][   T32]  ? __pfx___schedule+0x10/0x10
[  311.851305][   T32]  ? schedule+0x90/0x2b0
[  311.851334][   T32]  schedule+0x164/0x2b0
[  311.851361][   T32]  schedule_preempt_disabled+0x13/0x30
[  311.851387][   T32]  __mutex_lock+0x7c1/0x1550
[  311.851419][   T32]  ? __mutex_lock+0x5d4/0x1550
[  311.851451][   T32]  ? tipc_net_finalize_work+0x1e/0x90
[  311.851474][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  311.851519][   T32]  ? rcu_is_watching+0x16/0xb0
[  311.851543][   T32]  ? process_scheduled_works+0x97a/0x1630
[  311.851570][   T32]  tipc_net_finalize_work+0x1e/0x90
[  311.851592][   T32]  process_scheduled_works+0xc3d/0x1630
[  311.851647][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  311.851679][   T32]  ? assign_work+0x3cf/0x5d0
[  311.851709][   T32]  worker_thread+0xa47/0xfb0
[  311.851762][   T32]  kthread+0x38b/0x480
[  311.851780][   T32]  ? __pfx_worker_thread+0x10/0x10
[  311.851804][   T32]  ? __pfx_kthread+0x10/0x10
[  311.851824][   T32]  ret_from_fork+0x514/0xb70
[  311.851857][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  311.851887][   T32]  ? __switch_to+0xc89/0x1420
[  311.851918][   T32]  ? __pfx_kthread+0x10/0x10
[  311.851938][   T32]  ret_from_fork_asm+0x1a/0x30
[  311.851982][   T32]  </TASK>
[  311.852063][   T32] INFO: task kworker/u8:12:3787 blocked for more than 156 seconds.
[  311.852079][   T32]       Not tainted syzkaller #0
[  311.852088][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  311.852098][   T32] task:kworker/u8:12   state:D stack:23072 pid:3787  tgid:3787  ppid:2      task_flags:0x4208060 flags:0x00080000
[  311.852148][   T32] Workqueue: ipv6_addrconf addrconf_dad_work
[  311.852172][   T32] Call Trace:
[  311.852179][   T32]  <TASK>
[  311.852190][   T32]  __schedule+0x17db/0x58f0
[  311.852245][   T32]  ? __pfx___schedule+0x10/0x10
[  311.852287][   T32]  ? schedule+0x90/0x2b0
[  311.852317][   T32]  schedule+0x164/0x2b0
[  311.852345][   T32]  schedule_preempt_disabled+0x13/0x30
[  311.852370][   T32]  __mutex_lock+0x7c1/0x1550
[  311.852404][   T32]  ? __mutex_lock+0x5d4/0x1550
[  311.852435][   T32]  ? addrconf_dad_work+0x116/0x15c0
[  311.852470][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  311.852519][   T32]  addrconf_dad_work+0x116/0x15c0
[  311.852551][   T32]  ? __pfx_addrconf_dad_work+0x10/0x10
[  311.852583][   T32]  ? rcu_is_watching+0x16/0xb0
[  311.852609][   T32]  ? process_scheduled_works+0x97a/0x1630
[  311.852635][   T32]  process_scheduled_works+0xc3d/0x1630
[  311.852690][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  311.852723][   T32]  ? assign_work+0x3cf/0x5d0
[  311.852752][   T32]  worker_thread+0xa47/0xfb0
[  311.852804][   T32]  kthread+0x38b/0x480
[  311.852824][   T32]  ? __pfx_worker_thread+0x10/0x10
[  311.852847][   T32]  ? __pfx_kthread+0x10/0x10
[  311.852867][   T32]  ret_from_fork+0x514/0xb70
[  311.852899][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  311.852928][   T32]  ? __switch_to+0xc89/0x1420
[  311.852955][   T32]  ? __pfx_kthread+0x10/0x10
[  311.852976][   T32]  ret_from_fork_asm+0x1a/0x30
[  311.853020][   T32]  </TASK>
[  311.853068][   T32] INFO: task kworker/0:6:5792 blocked for more than 156 seconds.
[  311.853084][   T32]       Not tainted syzkaller #0
[  311.853093][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  311.853102][   T32] task:kworker/0:6     state:D stack:23976 pid:5792  tgid:5792  ppid:2      task_flags:0x4208060 flags:0x00080000
[  311.853152][   T32] Workqueue: events switchdev_deferred_process_work
[  311.853184][   T32] Call Trace:
[  311.853190][   T32]  <TASK>
[  311.853202][   T32]  __schedule+0x17db/0x58f0
[  311.853230][   T32]  ? update_protect_slice+0x128/0x210
[  311.853285][   T32]  ? do_raw_spin_unlock+0xf5/0x200
[  311.853319][   T32]  ? __pfx___schedule+0x10/0x10
[  311.853354][   T32]  ? schedule+0x90/0x2b0
[  311.853382][   T32]  schedule+0x164/0x2b0
[  311.853411][   T32]  schedule_preempt_disabled+0x13/0x30
[  311.853436][   T32]  __mutex_lock+0x7c1/0x1550
[  311.853469][   T32]  ? __mutex_lock+0x5d4/0x1550
[  311.853500][   T32]  ? switchdev_deferred_process_work+0xe/0x20
[  311.853530][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  311.853559][   T32]  ? lock_acquire+0x115/0x350
[  311.853587][   T32]  ? rcu_is_watching+0x16/0xb0
[  311.853613][   T32]  ? process_scheduled_works+0x97a/0x1630
[  311.853638][   T32]  switchdev_deferred_process_work+0xe/0x20
[  311.853666][   T32]  process_scheduled_works+0xc3d/0x1630
[  311.853723][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  311.853755][   T32]  ? assign_work+0x3cf/0x5d0
[  311.853784][   T32]  worker_thread+0xa47/0xfb0
[  311.853837][   T32]  kthread+0x38b/0x480
[  311.853856][   T32]  ? __pfx_worker_thread+0x10/0x10
[  311.853880][   T32]  ? __pfx_kthread+0x10/0x10
[  311.853901][   T32]  ret_from_fork+0x514/0xb70
[  311.853934][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  311.853962][   T32]  ? __switch_to+0xc89/0x1420
[  311.853991][   T32]  ? __pfx_kthread+0x10/0x10
[  311.854011][   T32]  ret_from_fork_asm+0x1a/0x30
[  311.854135][   T32]  </TASK>
[  311.854172][   T32] INFO: task syz.1.622:8389 blocked for more than 156 seconds.
[  311.854189][   T32]       Not tainted syzkaller #0
[  311.854198][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  311.854207][   T32] task:syz.1.622       state:D stack:24360 pid:8389  tgid:8389  ppid:5614   task_flags:0x400040 flags:0x00080002
[  311.854258][   T32] Call Trace:
[  311.854264][   T32]  <TASK>
[  311.854274][   T32]  __schedule+0x17db/0x58f0
[  311.854314][   T32]  ? __pfx_stack_trace_save+0x10/0x10
[  311.854337][   T32]  ? stack_depot_save_flags+0x33/0x7f0
[  311.854366][   T32]  ? __pfx___schedule+0x10/0x10
[  311.854401][   T32]  ? schedule+0x90/0x2b0
[  311.854430][   T32]  schedule+0x164/0x2b0
[  311.854458][   T32]  schedule_preempt_disabled+0x13/0x30
[  311.854484][   T32]  __mutex_lock+0x7c1/0x1550
[  311.854515][   T32]  ? __mutex_lock+0x5d4/0x1550
[  311.854548][   T32]  ? tun_chr_close+0x3e/0x1c0
[  311.854571][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  311.854617][   T32]  ? __pfx_tun_chr_close+0x10/0x10
[  311.854639][   T32]  tun_chr_close+0x3e/0x1c0
[  311.854659][   T32]  ? __pfx_tun_chr_close+0x10/0x10
[  311.854680][   T32]  __fput+0x418/0xa50
[  311.854713][   T32]  task_work_run+0x1d9/0x270
[  311.854740][   T32]  ? __pfx_task_work_run+0x10/0x10
[  311.854789][   T32]  exit_to_user_mode_loop+0x204/0x770
[  311.854812][   T32]  ? rcu_is_watching+0x16/0xb0
[  311.854839][   T32]  do_syscall_64+0x328/0x520
[  311.854867][   T32]  ? trace_irq_disable+0x3b/0x140
[  311.854888][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.854909][   T32]  ? clear_bhb_loop+0x70/0xc0
[  311.854935][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.854955][   T32] RIP: 0033:0x7faf78d9e159
[  311.854974][   T32] RSP: 002b:00007fffe61395a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  311.854995][   T32] RAX: 0000000000000000 RBX: 00007faf79027da0 RCX: 00007faf78d9e159
[  311.855009][   T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  311.855022][   T32] RBP: 00007faf79027da0 R08: 0000000000000006 R09: 0000000000000000
[  311.855035][   T32] R10: 00007faf79027cb0 R11: 0000000000000246 R12: 000000000002413b
[  311.855048][   T32] R13: 00007faf7902609c R14: 0000000000023fff R15: 00007fffe61396b0
[  311.855080][   T32]  </TASK>
[  311.855107][   T32] 
[  311.855107][   T32] Showing all locks held in the system:
[  311.855117][   T32] locks held by kworker/u8:0/12: 4, last CPU#0:
[  311.855131][   T32]  #0: ffff88807d481140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.855187][   T32]  #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.855240][   T32]  #2: ffff888076f35440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  311.855305][   T32]  #3: ffff88807b57dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  311.855363][   T32] locks held by kworker/u8:1/13: 3, last CPU#0:
[  311.855377][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.855431][   T32]  #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.855483][   T32]  #2: ffff8880259c8258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  311.855550][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  311.855564][   T32]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  311.855625][   T32] locks held by kworker/u8:2/38: 2, last CPU#0:
[  311.855640][   T32]  #0: ffff88803465a140 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.855698][   T32]  #1: ffffc90000ae7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.855762][   T32] locks held by kworker/u8:4/59: 4, last CPU#1:
[  311.855776][   T32]  #0: ffff888034659940 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.855835][   T32]  #1: ffffc9000200fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.855889][   T32]  #2: ffff88807d145440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  311.855947][   T32]  #3: ffff888056249700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  311.856006][   T32] locks held by kworker/0:2/189: 3, on CPU#0:
[  311.856021][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.856073][   T32]  #1: ffffc90002f27c40 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.856126][   T32]  #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x1e/0x90
[  311.856178][   T32] locks held by kworker/u8:6/734: 4, last CPU#0:
[  311.856192][   T32]  #0: ffff88802c34d140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.856248][   T32]  #1: ffffc90003757c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.856301][   T32]  #2: ffff888032f5d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  311.856360][   T32]  #3: ffff88807b579700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  311.856422][   T32] locks held by kworker/u8:7/1055: 4, last CPU#0:
[  311.856436][   T32]  #0: ffff88802c34c940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.856492][   T32]  #1: ffffc90004fbfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.856546][   T32]  #2: ffff888032f59440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  311.856606][   T32]  #3: ffff88805624f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  311.856667][   T32] locks held by kworker/u8:9/1173: 3, last CPU#0:
[  311.856681][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.856734][   T32]  #1: ffffc9000543fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.856796][   T32]  #2: ffff88807bf5a258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  311.856867][   T32] locks held by kworker/u8:10/3354: 3, on CPU#1:
[  311.856882][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.856935][   T32]  #1: ffffc9000e31fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.856987][   T32]  #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  311.857033][   T32] locks held by kworker/u8:11/3399: 4, last CPU#0:
[  311.857048][   T32]  #0: ffff88802c34c940 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.857105][   T32]  #1: ffffc9000e77fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.857158][   T32]  #2: ffff888032f59440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  311.857217][   T32]  #3: ffff88807b578330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  311.857275][   T32] locks held by kworker/u8:12/3787: 3, on CPU#1:
[  311.857290][   T32]  #0: ffff88802a258940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.857343][   T32]  #1: ffffc9000eecfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.857394][   T32]  #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0
[  311.857447][   T32] locks held by klogd/4976: 1, last CPU#0:
[  311.857461][   T32]  #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  311.857511][   T32] locks held by udevd/4987: 5, last CPU#0:
[  311.857525][   T32]  #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480
[  311.857576][   T32]  #1: ffff88807e574cc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  311.857632][   T32]  #2: ffff88807eb67180 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  311.857692][   T32]  #3: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  311.857746][   T32]  #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  311.857877][   T32] locks held by getty/5372: 2, on CPU#0:
[  311.857891][   T32]  #0: ffff888029ce40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  311.857947][   T32]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  311.858001][   T32] locks held by kworker/1:4/5713: 2, last CPU#1:
[  311.858016][   T32]  #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858067][   T32]  #1: ffffc900042b7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858122][   T32] locks held by kworker/0:6/5792: 3, on CPU#0:
[  311.858136][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858186][   T32]  #1: ffffc900045a7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858248][   T32]  #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  311.858307][   T32] locks held by kworker/u8:13/6014: 2, last CPU#1:
[  311.858321][   T32]  #0: ffff88807d481940 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858372][   T32]  #1: ffffc9000502fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858424][   T32] locks held by kworker/u8:14/6016: 4, last CPU#0:
[  311.858437][   T32]  #0: ffff88807d481940 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858490][   T32]  #1: ffffc9000530fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858543][   T32]  #2: ffff88802b071440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  311.858603][   T32]  #3: ffff88807b57f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  311.858662][   T32] locks held by kworker/u8:15/6017: 4, last CPU#0:
[  311.858676][   T32]  #0: ffff88807d480140 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858728][   T32]  #1: ffffc9000531fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858781][   T32]  #2: ffff88802c9e5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  311.858840][   T32]  #3: ffff888032bfdc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  311.858917][   T32] locks held by kworker/u8:16/7444: 2, last CPU#1:
[  311.858931][   T32]  #0: ffff88802a453140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.858984][   T32]  #1: ffffc90003847c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.859039][   T32] locks held by kworker/u8:18/7446: 3, last CPU#0:
[  311.859053][   T32]  #0: ffff88803465a140 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.859111][   T32]  #1: ffffc900035b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.859165][   T32]  #2: ffff88805624a2c8 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0
[  311.859221][   T32] locks held by kworker/u8:19/7447: 4, last CPU#0:
[  311.859235][   T32]  #0: ffff88802c34e140 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.859293][   T32]  #1: ffffc900056f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.859345][   T32]  #2: ffff88807d525440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  311.859399][   T32]  #3: ffff88807b57aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  311.859458][   T32] locks held by kworker/u8:20/7448: 8, last CPU#1:
[  311.859472][   T32]  #0: ffff88807d481140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.859525][   T32]  #1: ffffc90003917c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  311.859577][   T32]  #2: ffff888076f35440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  311.859636][   T32]  #3: ffff888032bff028 (&handshake->lock
[  313.769714][    C1] net_ratelimit: 21358 callbacks suppressed
[  313.769744][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.770165][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.770339][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  313.770557][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.770873][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.771233][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:28:64:d7:5b:7d, vlan:0)
[  313.771266][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.771632][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.771650][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  313.771952][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  314.757400][   T32] ){++++}-{4:4}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  314.757454][   T32]  #4: ffff8880b8724408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  314.757506][   T32]  #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  314.757555][   T32]  #6: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  314.757609][   T32]  #7: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  314.757667][   T32] locks held by syz.1.622/8389: 1, on CPU#1:
[  314.757682][   T32]  #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  314.757729][   T32] locks held by syz.4.626/8411: 4, last CPU#0:
[  314.757744][   T32]  #0: ffffffff8f9bbae8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  314.757802][   T32]  #1: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30
[  314.757853][   T32]  #2: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  314.757899][   T32]  #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0
[  314.757948][   T32] locks held by syz.0.628/8421: 2, last CPU#1:
[  314.757962][   T32]  #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  314.758008][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  314.758057][   T32] locks held by syz-executor/8427: 5, last CPU#0:
[  314.758071][   T32]  #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480
[  314.758122][   T32]  #1: ffff88807e573440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  314.758176][   T32]  #2: ffff888033684cc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  314.758235][   T32]  #3: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  314.758280][   T32]  #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  314.758330][   T32] locks held by syz-executor/8434: 2, last CPU#0:
[  314.758344][   T32]  #0: ffff88802c738f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  314.758393][   T32]  #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  314.758439][   T32] locks held by syz-executor/8436: 5, last CPU#1:
[  314.758453][   T32]  #0: ffff888034866460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  314.758503][   T32]  #1: ffff8880760bf040 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  314.758559][   T32]  #2: ffff888034862938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200
[  314.758615][   T32]  #3: ffff888076092f68 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0
[  314.758677][   T32]  #4: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  314.758724][   T32] locks held by syz-executor/8437: 2, last CPU#1:
[  314.758738][   T32]  #0: ffff88802c73e540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  314.758791][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  314.758844][   T32] locks held by dhcpcd/8438: 2, on CPU#1:
[  314.758858][   T32]  #0: ffff8880806f8260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[  314.758911][   T32]  #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  314.758967][   T32] 
[  314.758972][   T32] =============================================
[  314.758972][   T32] 
[  314.759001][   T32] NMI backtrace for cpu 0
[  314.759015][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  314.759037][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  314.759049][   T32] Call Trace:
[  314.759057][   T32]  <TASK>
[  314.759066][   T32]  dump_stack_lvl+0xe8/0x150
[  314.759092][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  314.759112][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  314.759139][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  314.759162][   T32]  sys_info+0x135/0x170
[  314.759181][   T32]  watchdog+0xfd7/0x1030
[  314.759205][   T32]  ? watchdog+0x1c7/0x1030
[  314.759231][   T32]  kthread+0x38b/0x480
[  314.759250][   T32]  ? __pfx_watchdog+0x10/0x10
[  314.759268][   T32]  ? __pfx_kthread+0x10/0x10
[  314.759287][   T32]  ret_from_fork+0x514/0xb70
[  314.759318][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  314.759347][   T32]  ? __switch_to+0xc89/0x1420
[  314.759375][   T32]  ? __pfx_kthread+0x10/0x10
[  314.759395][   T32]  ret_from_fork_asm+0x1a/0x30
[  314.759438][   T32]  </TASK>
[  314.759445][   T32] Sending NMI from CPU 0 to CPUs 1:
[  314.759490][    C1] NMI backtrace for cpu 1
[  314.759503][    C1] CPU: 1 UID: 0 PID: 5624 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  314.759524][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  314.759535][    C1] RIP: 0010:memset_orig+0x15/0xb0
[  314.759555][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 <41> 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84
[  314.759571][    C1] RSP: 0018:ffffc90003bd74f8 EFLAGS: 00000206
[  314.759587][    C1] RAX: 0000000000000000 RBX: ffffc90003bd75f8 RCX: 0000000000000000
[  314.759600][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90003bd75f8
[  314.759612][    C1] RBP: 1ffffffff2224166 R08: ffffc90003bd7607 R09: 1ffff9200077aec0
[  314.759626][    C1] R10: ffffc90003bd75f8 R11: fffff5200077aec1 R12: dffffc0000000000
[  314.759640][    C1] R13: ffffffff91120b2e R14: ffffc90003bd75a8 R15: ffffc90003bd75f0
[  314.759656][    C1] FS:  0000000000000000(0000) GS:ffff888124ddc000(0000) knlGS:0000000000000000
[  314.759670][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  314.759681][    C1] CR2: 000055558046b7d0 CR3: 000000007f38c000 CR4: 00000000003526f0
[  314.759697][    C1] Call Trace:
[  314.759703][    C1]  <TASK>
[  314.759709][    C1]  unwind_next_frame+0xd04/0x2550
[  314.759732][    C1]  ? do_exit+0x73a/0x2360
[  314.759748][    C1]  ? unwind_next_frame+0x8f/0x2550
[  314.759768][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  314.759787][    C1]  arch_stack_walk+0x11b/0x150
[  314.759810][    C1]  ? do_group_exit+0x22d/0x2f0
[  314.759829][    C1]  stack_trace_save+0xa9/0x100
[  314.759846][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  314.759864][    C1]  ? stack_depot_save_flags+0x33/0x7f0
[  314.759888][    C1]  save_stack+0x122/0x230
[  314.759910][    C1]  ? __pfx_save_stack+0x10/0x10
[  314.759929][    C1]  ? free_pages_prepare+0x9eb/0xaf0
[  314.759953][    C1]  ? __free_contig_range_common+0x174/0x340
[  314.759976][    C1]  ? free_pages_bulk+0x48/0x120
[  314.759994][    C1]  ? vfree+0x231/0x490
[  314.760018][    C1]  ? kcov_close+0x28/0x50
[  314.760034][    C1]  ? __fput+0x418/0xa50
[  314.760056][    C1]  ? task_work_run+0x1d9/0x270
[  314.760074][    C1]  ? do_exit+0x73a/0x2360
[  314.760093][    C1]  ? page_ext_put+0x97/0xc0
[  314.760117][    C1]  __reset_page_owner+0x71/0x1f0
[  314.760139][    C1]  free_pages_prepare+0x9eb/0xaf0
[  314.760178][    C1]  __free_contig_range_common+0x174/0x340
[  314.760205][    C1]  free_pages_bulk+0x48/0x120
[  314.760226][    C1]  vfree+0x231/0x490
[  314.760252][    C1]  ? __pfx_kcov_close+0x10/0x10
[  314.760270][    C1]  kcov_close+0x28/0x50
[  314.760286][    C1]  __fput+0x418/0xa50
[  314.760313][    C1]  task_work_run+0x1d9/0x270
[  314.760333][    C1]  ? __pfx_task_work_run+0x10/0x10
[  314.760353][    C1]  ? do_exit+0x735/0x2360
[  314.760367][    C1]  ? kmem_cache_free+0x182/0x650
[  314.760385][    C1]  ? put_net+0x191/0x260
[  314.760413][    C1]  do_exit+0x73a/0x2360
[  314.760434][    C1]  ? __pfx_do_exit+0x10/0x10
[  314.760453][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  314.760484][    C1]  do_group_exit+0x22d/0x2f0
[  314.760501][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  314.760528][    C1]  get_signal+0x121b/0x12c0
[  314.760562][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  314.760590][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  314.760624][    C1]  exit_to_user_mode_loop+0x10e/0x770
[  314.760645][    C1]  ? rcu_is_watching+0x16/0xb0
[  314.760668][    C1]  do_syscall_64+0x328/0x520
[  314.760694][    C1]  ? trace_irq_disable+0x3b/0x140
[  314.760714][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.760731][    C1]  ? clear_bhb_loop+0x70/0xc0
[  314.760752][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.760771][    C1] RIP: 0033:0x7f368f99f92a
[  314.760787][    C1] Code: Unable to access opcode bytes at 0x7f368f99f900.
[  314.760816][    C1] RSP: 002b:00007fff67860ab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  314.760837][    C1] RAX: 0000000000000000 RBX: 00007fff67860ae0 RCX: 00007f368f99f92a
[  314.760851][    C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  314.760862][    C1] RBP: 0000000000000003 R08: 00007fff67860adc R09: 0000000000000000
[  314.760874][    C1] R10: 00007fff67860ae0 R11: 0000000000000246 R12: 00007f368fbede00
[  314.760888][    C1] R13: 00007fff67860adc R14: 0000000000000000 R15: 00007f368fbeffc0
[  314.760910][    C1]  </TASK>
[  314.771850][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  317.142012][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  317.151133][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  317.161198][   T32] Call Trace:
[  317.164486][   T32]  <TASK>
[  317.167434][   T32]  vpanic+0x56d/0xa60
[  317.171442][   T32]  ? __pfx___schedule+0x10/0x10
[  317.176316][   T32]  ? __pfx_vpanic+0x10/0x10
[  317.180851][   T32]  panic+0xc5/0xd0
[  317.184628][   T32]  ? __pfx_panic+0x10/0x10
[  317.189062][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  317.194541][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  317.200022][   T32]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  317.206193][   T32]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  317.212379][   T32]  watchdog+0x1030/0x1030
[  317.216739][   T32]  ? watchdog+0x1c7/0x1030
[  317.221174][   T32]  kthread+0x38b/0x480
[  317.225251][   T32]  ? __pfx_watchdog+0x10/0x10
[  317.230228][   T32]  ? __pfx_kthread+0x10/0x10
[  317.234841][   T32]  ret_from_fork+0x514/0xb70
[  317.239457][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  317.244600][   T32]  ? __switch_to+0xc89/0x1420
[  317.249315][   T32]  ? __pfx_kthread+0x10/0x10
[  317.253915][   T32]  ret_from_fork_asm+0x1a/0x30
[  317.258717][   T32]  </TASK>
[  317.262080][   T32] Kernel Offset: disabled
[  317.266411][   T32] Rebooting in 86400 seconds..