last executing test programs: 28.10063409s ago: executing program 1 (id=4995): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000010180)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x24048001}, 0x2000c000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000064000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61147c00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) 27.889408425s ago: executing program 3 (id=4999): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x3c}}, 0x40010) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r3, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r3, 0x1) (async) recvmmsg(r3, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/154, 0x9a}, 0xfff}, {{0x0, 0x0, 0x0}, 0x69a}], 0x2, 0x0, &(0x7f0000006f00)={0x77359400}) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000003700011802000000ffdbdf250200000008000800f40996d87c91f328bf0b394d40457f014863d26460b786a23cbe7f00450a520cefff2d37914368c2659808b72f1b70b80874e4e646a9fea72f84a10e4ee8eeb0eac81ed475d5ab31f34ee15f6e602fab49898903f918071b3868a1870a041ef7dbe38b90ac05cef965a80760ec930d4b8c3a146a7ce524da61073ec96869bcb52d05edc05891469e0e491764dd77493b69fde972360beee2de82d4d7c0fe876bbf72c140e08ff5fd2950e31848d46185090c745187d97cc1e056729fb89a24f97d3c7584dcce308c1eeeb2a4261c449aa3fe09"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x41c800, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42006}, 0x80000) (async) ioctl$TUNSETOWNER(r5, 0x400454cc, r8) (async) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000680)=ANY=[@ANYBLOB="1cf92082250000000ba52e396a5804", @ANYRES16=r11, @ANYBLOB="010025bd7000fbdbdf254500000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xa7d53535166a2377}, 0x40c0) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r9, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0xa}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x24}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xdc}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5555}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x100) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xf8, r10, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 27.840481057s ago: executing program 1 (id=5000): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x4000, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x68]}, {0x800, 0x3ff, 0x3}}, 0x1, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1ff}, {[0x4, 0x5, 0x9, 0x2]}, 0x6, 0xed, &(0x7f0000000140)=""/237}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004085}, 0x20000084) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb0}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r1, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0xb}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x4008000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000680)) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x800) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010}, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f0000000900)) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000940)) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x240, r1, 0x210, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a1ab514acc54c9f402ebec8bdafce8e2a7a774b16c61c7e2"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8510eb295eeb93954af30f851fba256686b438692946df47"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "69a036e8431baf594c2327c4151d2d463995fc0ae76ec6b1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9b83f07c5b61712738d3f5b99cbd92de8682bfa84b54c7f0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c36d90daa1f176622718be0761ddee5aed6c376b914ce51a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0e07cba2a2233a955213044f3224733ef113a5d6e9855456"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2a39334e62ad151bc539aedde689ad64569155100c8d8d34"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25ec7b0a0af9558d97f9c9ca3ddf807aa0e02c72d5a582e6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "774c6b840724b3fffe83f7d1667eb7fc03c7e5ad38a36364"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f988be64ec196eca5e07c6d075a994a7b80a5e6e74b97ff"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3ad2b7f502cad2efac6fb11d1be4312e1eae27a722bfd48d"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x240}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) (async) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000dc0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r10, 0xb00, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3c1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x48001) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r8, &(0x7f00000014c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000000f80)={0x4d4, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x584, 0x1f}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_PEER_MEASUREMENTS={0x49c, 0x111, 0x0, 0x1, {0x498, 0x5, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5a92}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x43fa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x538}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x32}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf0de}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x232}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x337}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xf5262a945c116c17}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40080}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001500)={'wlan0\x00'}) (async) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x6c, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3b9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8a}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040090}, 0x54) (async) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$SO_BINDTODEVICE_wg(r13, 0x1, 0x19, &(0x7f0000001680)='wg1\x00', 0x4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r14, &(0x7f00000017c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 27.37616343s ago: executing program 2 (id=5003): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000000f0000002d030100000000007300ffb1000000006926000000000000bf67000000000000150002000fff52004507000010000000d60600000ee60000bf0500000000000073700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8473e2060d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c196738b5f32b095f5d5b196b9e8d897e461c01c697671d1000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000810) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r5, @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRESHEX=r0], 0x1c}}, 0x4048054) write$nci(r2, &(0x7f0000000380)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x1, {0x1, 0x1}}, 0x5) write$nci(r2, 0x0, 0x87) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, 0x0, 0x4040001) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x24040020) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x4, 0x3, 0x32722, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000000d0a010808000000000000000a000001a5e2fe44b82c883012d994d02c09faffffffffffffff0000000900010073000380"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r10, 0x84, 0x80, &(0x7f0000001f00)=""/4062, &(0x7f00000001c0)=0xfde) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r6, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="9af6279201000000", @ANYRES32], 0x60}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r8, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x2, @void}, 0x10) 27.32919712s ago: executing program 1 (id=5004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000001000000008100800000001600a24e0097140002"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040)=0x9, 0x4) r4 = socket$inet6(0xa, 0x3, 0xff) close(r4) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002280)={0x1, &(0x7f0000000280)=[{0x6, 0xba, 0x2, 0x541d}]}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) close(0x3) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x2, @fixed}, 0xe) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x40080) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xfffffffffffffe32, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x2c, 0x14, 0x20, 0x70bd2a, 0x25dfdbfb, {0x2, 0x40, 0x4c, 0xff, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x200, 0x400, 0x1000}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 27.328540071s ago: executing program 3 (id=5005): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0001002abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00'/16], 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010428bd70000100000000006627", @ANYRES32=0x0, @ANYBLOB="08000000000001002400128009000100766c616e000000001400028006000100020000000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000e1ffffff0a"], 0x1c}}, 0x4000004) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000e1ffffff0a"], 0x1c}}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x38, r5, 0x87898b830c7bd19d, 0x3, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffff0, 0x67}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008000) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x38, r5, 0x87898b830c7bd19d, 0x3, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffff0, 0x67}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008000) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r2, &(0x7f0000000500)="95ab7ed1914cd9fa6ca46c946f8148eac3725424f07d9ad119bb5eb327a95583fe6000b39983e0d1a8347ce293ec63636867356995e4a0ab79266627b34c82d7ccf56cca875be577c31c4dd19cb6cd2354d1c5a561975368962fadf011bfdedac217214a969a412f6661d9ab9f6e2795876913c5e5c821fa902eef4dec9780e785eb4de990ce52feaa1efabf93cdbb6e2efbf10415ef699b5c35727cd9c27c18871909b681646987f3421bf1be4cee01962f37ebf7ab38ab82f37669f478aad8cc7875b43bf712d69860a3e465000cceceec3852db147b7c99", 0xd9, 0x404c004, 0x0, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r9 = accept(r7, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x5185}], 0x1, 0x10142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0xfffffffe, 0x17a, 0x7, 0x400, 0x8, 0x10001, r3}) (async) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0xfffffffe, 0x17a, 0x7, 0x400, 0x8, 0x10001, r3}) 27.304320179s ago: executing program 4 (id=5006): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x26a42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0xfff}]}}}]}, 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000800800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="07000000a008"], 0x80}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x40000) socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r3) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) 26.965435579s ago: executing program 2 (id=5008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x9, @loopback, 0x7}}, 0x1, 0x45a2, 0xfffffffa, 0x50, 0x4}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x4}, &(0x7f0000000180)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={r2, 0xb72}, 0x8) 26.788902822s ago: executing program 2 (id=5009): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x10, 0x0, 0x7, 0x4], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, 0x0, 0x20040010) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab", 0xa, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20004080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r4) 26.720132854s ago: executing program 2 (id=5010): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "f5fb5f0b33827ed1", "d16fe61eff9de4112683b366d69fe4d3", "8362c671", "aadc1113a7d11352"}, 0x28) 26.655755833s ago: executing program 2 (id=5011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x500, 0xfffffffe, 0x20}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48090}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x4, 0x7, 0x4, 0x5, 0x51, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0xa, 0x10001}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 26.504238854s ago: executing program 3 (id=5013): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="e4cce74d5dc6a1a3c6fa80dec2ac3952d221e7ab137e84d64a8ffaae86910f92c333d9b26b4a7a700bd6a043c93f139ffd68b82b23a617d124d449e01624d9aefba4"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x7f}, 0x10, r4}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 26.444045937s ago: executing program 4 (id=5014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000626f6ee61b0000000c0002800800130000000000"], 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80400c0) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x14, 0x7, 0xa, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x10002000}, 0x800) 26.120969616s ago: executing program 0 (id=5016): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38e6ff00", @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 26.120068831s ago: executing program 4 (id=5017): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000440)={0x0, @adiantum, 0x0, @desc1}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000580)={r0, &(0x7f0000000480)=']\x00', 0x14000, &(0x7f00000004c0)={@_ha_fsid={[0x5, 0xa]}, {0x9, 0x4, 0x10000, 0x1}}, 0x1, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x7}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000005c0)={'virt_wifi0\x00', @multicast}) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000600)={r1}) (async) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000640)={0x4, {{0x2, 0x4e20, @multicast2}}}, 0x88) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r0, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%+9llu \x00'}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x21, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x0, 0x1, 0x6, 0x7, 0x8, 0xfffffffffffffffe}, @generic={0x2, 0xe, 0x4, 0x5, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @ldst={0x3, 0x0, 0x4, 0x4, 0x8, 0x3c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000840)='GPL\x00', 0xf9, 0xb1, &(0x7f0000000880)=""/177, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000940)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x3, 0x5, 0x100}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a80)=[r0, r0, r2, r1, r0, r1, r0, r0, r0, r0], &(0x7f0000000ac0)=[{0x0, 0x4, 0x9, 0x9}, {0x1, 0x4, 0xf, 0x6}, {0x3, 0x1, 0xe, 0x6}, {0x1, 0x4, 0x9}, {0x1, 0x4, 0x8, 0x5}, {0x3, 0x5, 0x9}], 0x10, 0x1}, 0x94) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xa0, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x2c}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x44, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9cd}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0xd8f6}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x10001}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="8b06fc907728"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x495}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) write$tun(r1, &(0x7f0000000d80)={@void, @void, @ipv4=@gre={{0x1f, 0x4, 0x2, 0x3c, 0x2d7, 0x66, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@noop, @noop, @end, @lsrr={0x83, 0x1f, 0x64, [@multicast1, @multicast1, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty]}, @noop, @timestamp_prespec={0x44, 0x44, 0x46, 0x3, 0x4, [{@multicast1, 0x7}, {@rand_addr=0x64010102, 0x6}, {@private=0xa010102, 0x9}, {@private=0xa010102, 0x321}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x154}, {@broadcast, 0x2}, {@multicast1, 0x401}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x90, 0x0, [0x6, 0x100], "9efa85436af6fc8e1e87968139a8a502d7dcc60844b06786aa83223a4eeab1e2d561c085d53dfc1c3ca12c639b2949e9e24021b1e323b90247515af0bd29df2f329f698f5129152932437293624caf22fdded1dc7108583f8b046664adf46d6cf4a8692a3da6fb399059e061871de9154d0b110a0938dfd16e296e8164158f23bf6bfdd407f3569386d322192665754b"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x5, 0xff, 0x2], "587ed4545bea9e3c02adbbb23996fd29fac18f2659dc12a6c171d2501036e16a045520c2b3bce7700fe300e88ef7d3ab8cab1b38ec13b3f45ceb0aa6e3563b80f44b434af9e6c5ff35e3264c0f888b3c3d71bfc91079f97a58e67a6f5a373ceaf98cb630423f86d025819b25ae8ba0aeb23a1acb069e2474dab1894986b861dbf2e818395556904a2f5ddaef4f6fe875fe45997a0fb9becc3686526017366dd719ef258d21dd4f726ccafe9a5fdd274a5abbb0972079f7f38c2970f7049bf54571bdbdb7ba8bb98205fe24667b3e5f4296006ae9ed23680d14935a500c2f343eebe9ed1e6709126af851ed6bf631be7fd7532d0026aafdd2c983d9d35a"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4, 0x3, 0x0], "70cce5d2531da35bd645588749c39107980529f871fef293f5b0c3e29b3f0c7089f6f32fdac20b0518524e6f907921aec78cc9bb0cbcff4aec444dc71f897dc15c64f006b8b28b2d7a762e3ed40d92a72e4eee51f9bd1ee38ad3714d9f9b019a8825f64f8a363abcde1f3c3ccfc71d1cd05b50f8ef40cb0140ed"}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xb, 0x1, 0x1, 0x2, 0x1, 0x49}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x80, 0x3, 0x1, 0x1, 0x5, 0x6}, 0x2, {0x5, 0xcee, 0x1, 0x10, 0x0, 0x1, 0x2}}}, {0x8, 0x6558, 0x1}}}}, 0x2d7) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001080)) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000001280)=0x9) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r1) getsockopt$inet_mreqn(r1, 0x0, 0x7, &(0x7f0000001340)={@multicast1, @remote, 0x0}, &(0x7f0000001380)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000013c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001400)={0x0, @loopback, @empty}, &(0x7f0000001440)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001480)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000001680)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x150, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x10) (async) clock_gettime(0x0, &(0x7f0000007ec0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000016c0)=""/39, 0x27}, {&(0x7f0000001700)=""/98, 0x62}, {&(0x7f0000001780)=""/206, 0xce}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000001940)=""/95, 0x5f}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x7}, 0x3}, {{&(0x7f0000003a40)=@generic, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003ac0)=""/189, 0xbd}], 0x1, &(0x7f0000003bc0)=""/135, 0x87}}, {{&(0x7f0000003c80)=@ax25={{0x3, @default}, [@bcast, @netrom, @remote, @remote, @netrom, @remote, @netrom, @null]}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003d00)=""/72, 0x48}], 0x1, &(0x7f0000003dc0)=""/126, 0x7e}, 0xada1}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003e40)=""/217, 0xd9}, {&(0x7f0000003f40)=""/9, 0x9}], 0x2, &(0x7f0000003fc0)=""/155, 0x9b}}, {{&(0x7f0000004080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004100)=""/188, 0xbc}, {&(0x7f00000041c0)=""/108, 0x6c}, {&(0x7f0000004240)=""/15, 0xf}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/159, 0x9f}], 0x5}, 0xfffffffe}, {{&(0x7f00000053c0)=@alg, 0x80, &(0x7f0000005780)=[{&(0x7f0000005440)=""/215, 0xd7}, {&(0x7f0000005540)=""/86, 0x56}, {&(0x7f00000055c0)=""/13, 0xd}, {&(0x7f0000005600)=""/17, 0x11}, {&(0x7f0000005640)=""/72, 0x48}, {&(0x7f00000056c0)=""/27, 0x1b}, {&(0x7f0000005700)=""/120, 0x78}], 0x7, &(0x7f0000005800)=""/179, 0xb3}}, {{&(0x7f00000058c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000007b80)=[{&(0x7f0000005940)=""/156, 0x9c}, {&(0x7f0000005a00)=""/97, 0x61}, {&(0x7f0000005a80)=""/101, 0x65}, {&(0x7f0000005b00)=""/43, 0x2b}, {&(0x7f0000005b40)=""/42, 0x2a}, {&(0x7f0000005b80)=""/4096, 0x1000}, {&(0x7f0000006b80)=""/4096, 0x1000}], 0x7, &(0x7f0000007c00)=""/218, 0xda}, 0x2}], 0x7, 0x40000020, &(0x7f0000007f00)={r9, r10+10000000}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x30, r2, 0xf1546000) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000007f40)={0x0, 0x7}, &(0x7f0000007f80)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000007fc0)={r11, 0x9, 0x9}, 0x8) (async) sendmsg$nl_xfrm(r1, &(0x7f00000080c0)={&(0x7f0000008000), 0xc, &(0x7f0000008080)={&(0x7f0000008040)=@newspdinfo={0x2c, 0x24, 0x4, 0x70bd25, 0x25dfdbff, 0xc1f6, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8805) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000081c0)={&(0x7f0000008100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000008180)={&(0x7f0000008140)={0x2c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000008200)={r1, r8, 0x25, 0xc, @val=@perf_event={0x6}}, 0x18) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000008240)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000001}, 0x1c) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000008340)={&(0x7f0000008280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000008300)={&(0x7f00000082c0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000008440)={&(0x7f0000008380)={0x10, 0x0, 0x0, 0x2400159}, 0xc, &(0x7f0000008400)={&(0x7f00000083c0)={0x1c, 0x3, 0x6, 0x804, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2585e60bb64f401d}, 0x20010000) 26.053750535s ago: executing program 2 (id=5018): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth0_vlan\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'batadv_slave_1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)="db", 0x1}], 0x1}, 0x41) recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffc", 0x2}], 0x1}, 0x40001) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10a1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r10, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x80) 25.998750767s ago: executing program 3 (id=5019): unshare(0x4000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x2c, 0x80000, 0x81, &(0x7f00000003c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380), &(0x7f00000000c0)=0x8) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000180)={0x7, 0x65}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf2557c7e05e1f063fb301000000050003000100000079a836d3efe210848eb7f3011d675f24dbd4d2c3b893b34b5cab4be08b705f9568b492487beb964a2c653a9074bbeef65982c493a23425d16b22819f"], 0x24}, 0x1, 0x0, 0x0, 0xc041}, 0x80811) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x400, 0x0, 0x0, {0x2, 0x0, 0x10, 0x4, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010003904ffff0119ffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300e0000001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 25.945509729s ago: executing program 4 (id=5020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080001050600030080"], 0x22e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 25.925033001s ago: executing program 0 (id=5021): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040000) 25.866036799s ago: executing program 1 (id=5022): r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x1000000, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200)={0x96}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff340001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) 25.672707111s ago: executing program 0 (id=5023): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xc9ba, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x1) (async) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x28, 0x2c, 0x0, @remote, @local, {[], {{0x4e21, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0xc5}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000400)={@link_local={0xd}, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x8, 0x0, 0x0, 0x73, 0x0, @private, @empty}, {0xfffc, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfc}}}}}}}, 0x0) 25.67174957s ago: executing program 3 (id=5024): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) (rerun: 64) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000500)={0x0, 0x0, 0x6, r3, 0x6}, 0xc) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f00000000c0)) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000520001000000000000000000100000000400eb80"], 0x18}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @ldst={0x0, 0x1, 0x6, 0x1, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x1, 0x7f}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x4, 0x8, 0xb}, {0x2, 0x5, 0x8, 0x4}], 0x10, 0x80000000}, 0x94) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async, rerun: 32) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (rerun: 32) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000540)={0x0, @rand_addr=0x64010102, @remote}, 0xc) (async, rerun: 64) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f00000000c0)='./file0\x00', r4, 0x4000, r5}, 0x18) (rerun: 64) 25.557895991s ago: executing program 4 (id=5025): sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "6b56a6f361e3cf5e"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x5, 0x4}, {0x5, 0x4}, {0x3}, {0x7, 0x4}, {0x73, 0x2}], "0bf4dfcbde17895c"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x9, 0x1}, {0x9, 0x4}, {0x8, 0x1}, {0x10, 0x7}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x9, 0x7}, {0xff, 0x3}, {0xb8, 0x5}, {0x0, 0x1}], "fe06d3787545e54a"}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x20, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x40004050}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) 25.551836596s ago: executing program 1 (id=5026): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x4}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 25.388977448s ago: executing program 0 (id=5027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfeffeffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008011}, 0x44000040) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)={0x130, 0x0, 0x8, 0x70b92a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1800000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2c}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0xae}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6944}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa3f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}, 0x1, 0xfffff000}, 0x0) 25.331141977s ago: executing program 4 (id=5028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev, 0x7}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) ioctl$sock_SIOCADDRT(r2, 0x890b, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r4, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r5, &(0x7f0000001600), &(0x7f0000001700)=@udp=r4}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000002000)=@raw=[@jmp={0x5, 0x1, 0x3, 0x9, 0xb, 0x100, 0xfffffffffffffffc}, @generic={0xb7, 0x2}, @generic={0x97, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r6, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r1, &(0x7f0000001540)=[{&(0x7f00000001c0)="5c4e4a38f8bc29ea8089706656961cfdcd6572a1a96429814aff9e0fcc700189d13d3b624c2a12fcccb65c38f6d74f2ddc4c5813495399d6b966c01bfcd8d1f7a5feea519bbd7749ec50223a522296471e2b289fe8511e768e48d4ea0a103882cf8e1608c150539e51af42ad6965f473bc52df943cee9e4db400e1285920159a585703b9612ae3", 0x87}, {&(0x7f0000000280)="45f57ddbeaf0ee0167665b0848146772839fc077b29390a2bc0ca94c40b31ce32fb7f8354aaa0d3e3d3d2f2f3c97fdaee58a2836f20087d9283397a29ad407e018defec39fcbc419a1b2e83c06b989b58256c86056742d6707616e7c735b6bdb1e10294d9b44d03e4bb6d442455e65d043bdd6fe311f9ffddf63389c65dc95aa888679f2c4e68c1387ccdd354c4b48342d29ca0bd85602244d7fa63f97fc0701f68d80a96b9977", 0xa7}, {&(0x7f0000000340)="10c29a6172c4cc155444e3a47b9d863f462500d2e97b6fb5a49a4f23e9912429db46c4714363d01881c2d57546c3c7f8abe51b5adcd1149f095a23cb81e0356a9db17f98bd484dbccb6686c4caa6acb4a561f7dc2507dc27c5e8980ffee2bdd440ce37187dbb92aca59db1adf0a8c255953e6fbaf26d38b37cbd69f5f78fa655a51459e6fbe8b1820d7f0b8672a0731df838b58d02731bf17ee69e74f72dacfc27d5b75e83687ad4e9f26b5d1af6680cf1fc7b0055bb255fb0e12ed4d10eede4ac29b8fc67fcbbd3c93113b9ec3575918778540b0876f2783b7c04414b9eb743ab1e5dbc2a6d0beea9e87f3badd5cabb6b10", 0xf2}, {&(0x7f0000000440)="af38c038278a84c64fb183413b963bba287f3c2e6096e0a79604a80719620c2d5f603f24cda68967e04da36386254ed9935cfbf6ea21ab7134c91ce5043144fab4ca27ae9ec0a3dbb864715cd56666597be0e10f0be4f409bc428194afae4c4f198043931a94631123baf5073e37b043e623d90096df3d0ee8345992b71724699ff6e5cf3be4cfd91847aba6b4b4fd03c65842c3b44038840e9868a6f8b2ab963e961be801f3c7d85135af0b9786698ee39b75119481f6cbfae60e260b15b005c85df7afd3e3595e825cc3153a11e272d85be6d76275bf768e1a9630ecddd5df97b4b30813db20f72a73a5", 0xeb}, {&(0x7f0000000540)="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", 0xffffffc9}], 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 25.301376896s ago: executing program 3 (id=5029): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="01154e0001000011221e4455892fca01000188fbf17583f76970", 0x1a, 0x0, &(0x7f0000000040)={0x11, 0xf4, r0}, 0x14) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 22.291696342s ago: executing program 0 (id=5030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb0000010400000000"}]}, 0x54}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb0000010400000000"}]}, 0x54}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket(0x2b, 0x80801, 0x1) (async) r3 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000041}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x28}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}, 0x1, 0x0, 0x0, 0x40881}, 0x0) 21.081256154s ago: executing program 0 (id=5031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) listen(r3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, 0x0, 0x0) close(0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x8, 0x3, 0x5, 0x4, 0x0, 0x3ff, 0x8000, 0x2, 0x0, 0x10, 0x8, 0x6, 0xffffffff, 0x7f, 0x1, 0xfff, 0x6, 0x514f, 0x401, 0x6, 0x9, 0x3}}) 19.862252459s ago: executing program 1 (id=5032): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000030e464b98b207a5a6ddd78860f8ede0eb6ce1ddbd63adde5f1de838645c7bc851f436b1fb2dad6588a3518d2f1803ef05ef893e0923a23a56c49a1a64849724752cda9eb5d0c24af799414445bcdf5f5484457c36b4851602f24c5bce13cb992ce98a77f4c951e4ccf68dcdd6e4e83da5099cf78e8cee824f98b1f1f2887a994dd986f37e3bc38b9cd61c5dd521330e889e0abbe6348f09e34397f06d6492b57e1c8fa9d16ce3736e3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000030e464b98b207a5a6ddd78860f8ede0eb6ce1ddbd63adde5f1de838645c7bc851f436b1fb2dad6588a3518d2f1803ef05ef893e0923a23a56c49a1a64849724752cda9eb5d0c24af799414445bcdf5f5484457c36b4851602f24c5bce13cb992ce98a77f4c951e4ccf68dcdd6e4e83da5099cf78e8cee824f98b1f1f2887a994dd986f37e3bc38b9cd61c5dd521330e889e0abbe6348f09e34397f06d6492b57e1c8fa9d16ce3736e3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x68}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x68}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda108000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0xa, 0x3, 0x3a) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f0000000000)=[0x50, 0xe]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r7, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r9, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r9, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r8}, 0x36) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r8, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$sock_timeval(r10, 0x1, 0x2, 0x0, 0x48) (async) setsockopt$sock_timeval(r10, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 8.885602317s ago: executing program 32 (id=5018): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth0_vlan\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'batadv_slave_1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r4, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)="db", 0x1}], 0x1}, 0x41) recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffc", 0x2}], 0x1}, 0x40001) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000120) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10a1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r10, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x80) 5.517032864s ago: executing program 33 (id=5029): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="01154e0001000011221e4455892fca01000188fbf17583f76970", 0x1a, 0x0, &(0x7f0000000040)={0x11, 0xf4, r0}, 0x14) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 3.86044597s ago: executing program 34 (id=5028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev, 0x7}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) ioctl$sock_SIOCADDRT(r2, 0x890b, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r4, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r5, &(0x7f0000001600), &(0x7f0000001700)=@udp=r4}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000002000)=@raw=[@jmp={0x5, 0x1, 0x3, 0x9, 0xb, 0x100, 0xfffffffffffffffc}, @generic={0xb7, 0x2}, @generic={0x97, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r6, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r1, &(0x7f0000001540)=[{&(0x7f00000001c0)="5c4e4a38f8bc29ea8089706656961cfdcd6572a1a96429814aff9e0fcc700189d13d3b624c2a12fcccb65c38f6d74f2ddc4c5813495399d6b966c01bfcd8d1f7a5feea519bbd7749ec50223a522296471e2b289fe8511e768e48d4ea0a103882cf8e1608c150539e51af42ad6965f473bc52df943cee9e4db400e1285920159a585703b9612ae3", 0x87}, {&(0x7f0000000280)="45f57ddbeaf0ee0167665b0848146772839fc077b29390a2bc0ca94c40b31ce32fb7f8354aaa0d3e3d3d2f2f3c97fdaee58a2836f20087d9283397a29ad407e018defec39fcbc419a1b2e83c06b989b58256c86056742d6707616e7c735b6bdb1e10294d9b44d03e4bb6d442455e65d043bdd6fe311f9ffddf63389c65dc95aa888679f2c4e68c1387ccdd354c4b48342d29ca0bd85602244d7fa63f97fc0701f68d80a96b9977", 0xa7}, {&(0x7f0000000340)="10c29a6172c4cc155444e3a47b9d863f462500d2e97b6fb5a49a4f23e9912429db46c4714363d01881c2d57546c3c7f8abe51b5adcd1149f095a23cb81e0356a9db17f98bd484dbccb6686c4caa6acb4a561f7dc2507dc27c5e8980ffee2bdd440ce37187dbb92aca59db1adf0a8c255953e6fbaf26d38b37cbd69f5f78fa655a51459e6fbe8b1820d7f0b8672a0731df838b58d02731bf17ee69e74f72dacfc27d5b75e83687ad4e9f26b5d1af6680cf1fc7b0055bb255fb0e12ed4d10eede4ac29b8fc67fcbbd3c93113b9ec3575918778540b0876f2783b7c04414b9eb743ab1e5dbc2a6d0beea9e87f3badd5cabb6b10", 0xf2}, {&(0x7f0000000440)="af38c038278a84c64fb183413b963bba287f3c2e6096e0a79604a80719620c2d5f603f24cda68967e04da36386254ed9935cfbf6ea21ab7134c91ce5043144fab4ca27ae9ec0a3dbb864715cd56666597be0e10f0be4f409bc428194afae4c4f198043931a94631123baf5073e37b043e623d90096df3d0ee8345992b71724699ff6e5cf3be4cfd91847aba6b4b4fd03c65842c3b44038840e9868a6f8b2ab963e961be801f3c7d85135af0b9786698ee39b75119481f6cbfae60e260b15b005c85df7afd3e3595e825cc3153a11e272d85be6d76275bf768e1a9630ecddd5df97b4b30813db20f72a73a5", 0xeb}, {&(0x7f0000000540)="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", 0xffffffc9}], 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 1.51048965s ago: executing program 35 (id=5031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) listen(r3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, 0x0, 0x0) close(0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x8, 0x3, 0x5, 0x4, 0x0, 0x3ff, 0x8000, 0x2, 0x0, 0x10, 0x8, 0x6, 0xffffffff, 0x7f, 0x1, 0xfff, 0x6, 0x514f, 0x401, 0x6, 0x9, 0x3}}) 0s ago: executing program 36 (id=5032): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000030e464b98b207a5a6ddd78860f8ede0eb6ce1ddbd63adde5f1de838645c7bc851f436b1fb2dad6588a3518d2f1803ef05ef893e0923a23a56c49a1a64849724752cda9eb5d0c24af799414445bcdf5f5484457c36b4851602f24c5bce13cb992ce98a77f4c951e4ccf68dcdd6e4e83da5099cf78e8cee824f98b1f1f2887a994dd986f37e3bc38b9cd61c5dd521330e889e0abbe6348f09e34397f06d6492b57e1c8fa9d16ce3736e3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000030e464b98b207a5a6ddd78860f8ede0eb6ce1ddbd63adde5f1de838645c7bc851f436b1fb2dad6588a3518d2f1803ef05ef893e0923a23a56c49a1a64849724752cda9eb5d0c24af799414445bcdf5f5484457c36b4851602f24c5bce13cb992ce98a77f4c951e4ccf68dcdd6e4e83da5099cf78e8cee824f98b1f1f2887a994dd986f37e3bc38b9cd61c5dd521330e889e0abbe6348f09e34397f06d6492b57e1c8fa9d16ce3736e3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x68}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x68}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda108000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0xa, 0x3, 0x3a) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f0000000000)=[0x50, 0xe]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r7, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r9, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r9, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r8}, 0x36) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r8, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$sock_timeval(r10, 0x1, 0x2, 0x0, 0x48) (async) setsockopt$sock_timeval(r10, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) kernel console output (not intermixed with test programs): ] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'. [ 638.173504][T23641] openvswitch: netlink: Unknown key attributes 20 [ 638.179502][T23641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4168'. [ 638.213312][T23638] veth1_vlan: left promiscuous mode [ 638.213822][T23638] macvlan1: entered allmulticast mode [ 638.238645][T23638] veth1_vlan: entered promiscuous mode [ 638.238669][T23638] veth1_vlan: entered allmulticast mode [ 638.258944][T23638] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 638.356066][T23646] netlink: 'syz.0.4174': attribute type 3 has an invalid length. [ 639.016083][T23671] Bluetooth: MGMT ver 1.23 [ 639.080589][T23673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4179'. [ 640.659628][T23615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.100319][T23721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4183'. [ 641.223407][T23722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4184'. [ 641.541366][T23740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4186'. [ 641.718802][T23750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4191'. [ 641.810096][T23757] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4192'. [ 641.975638][T23739] netlink: 'syz.0.4187': attribute type 7 has an invalid length. [ 642.122567][T23765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4194'. [ 642.122603][T23765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4194'. [ 642.488135][T23749] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 642.559850][T23784] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4200'. [ 642.725467][T23782] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 643.003403][T23799] pim6reg: entered allmulticast mode [ 643.342221][T23811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 643.446722][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4204'. [ 643.516611][T23816] syzkaller1: entered promiscuous mode [ 643.516636][T23816] syzkaller1: entered allmulticast mode [ 643.699093][T23827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.940034][T23833] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4207'. [ 644.279625][T23853] --map-set only usable from mangle table [ 644.322045][T23853] netlink: zone id is out of range [ 644.322081][T23853] netlink: zone id is out of range [ 644.322093][T23853] netlink: zone id is out of range [ 644.322160][T23853] netlink: zone id is out of range [ 644.322168][T23853] netlink: zone id is out of range [ 644.322266][T23853] netlink: zone id is out of range [ 644.322318][T23853] netlink: zone id is out of range [ 649.004485][T23902] netlink: 'syz.2.4216': attribute type 19 has an invalid length. [ 649.004510][T23902] __nla_validate_parse: 4 callbacks suppressed [ 649.004522][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4216'. [ 649.046377][T23902] netlink: 'syz.2.4216': attribute type 19 has an invalid length. [ 649.046400][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4216'. [ 649.357749][T23916] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4220'. [ 649.698896][T23925] x_tables: unsorted entry at hook 2 [ 650.063996][T23938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4224'. [ 650.066767][T23942] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4227'. [ 650.066792][T23942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4227'. [ 650.237999][T23945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.258333][T23945] netlink: 'syz.3.4228': attribute type 1 has an invalid length. [ 670.202901][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 670.202929][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 670.203541][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 670.203561][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 670.204464][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 670.204486][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 670.205618][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 670.205649][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 670.207859][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 670.207882][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 670.499999][T23963] bond3 (unregistering): Released all slaves [ 670.704039][T23973] xfrm1: entered allmulticast mode [ 670.729988][T23980] net_ratelimit: 8 callbacks suppressed [ 670.730010][T23980] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 671.603235][T24010] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 671.899766][ C1] TC_ACT_REPEAT abuse ? [ 671.956108][T24019] syzkaller0: entered promiscuous mode [ 671.956133][T24019] syzkaller0: entered allmulticast mode [ 672.319571][T24035] netlink: 'syz.2.4251': attribute type 29 has an invalid length. [ 672.416440][T24038] netlink: 'syz.2.4251': attribute type 29 has an invalid length. [ 672.425711][T24030] netlink: 'syz.4.4248': attribute type 12 has an invalid length. [ 672.542458][T24035] netlink: 'syz.2.4251': attribute type 29 has an invalid length. [ 672.679030][T24020] udevd[24020]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 672.732795][T24017] udevd[24017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 673.253147][T24061] netlink: 'syz.2.4257': attribute type 23 has an invalid length. [ 673.419165][T24073] netlink: 'syz.0.4259': attribute type 2 has an invalid length. [ 674.330490][T24094] sctp: [Deprecated]: syz.2.4266 (pid 24094) Use of int in max_burst socket option deprecated. [ 674.330490][T24094] Use struct sctp_assoc_value instead [ 674.499916][T24094] sctp: [Deprecated]: syz.2.4266 (pid 24094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.499916][T24094] Use struct sctp_sack_info instead [ 676.014643][T24180] __nla_validate_parse: 72 callbacks suppressed [ 676.014667][T24180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4282'. [ 676.060137][T12560] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 676.072899][T18884] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 676.078302][T12560] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 676.152589][T24186] netlink: 'syz.1.4284': attribute type 10 has an invalid length. [ 676.432513][ T6654] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 676.953128][ T6654] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 676.954225][T24205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4289'. [ 676.954248][T24205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4289'. [ 677.054897][T24207] syzkaller0: entered promiscuous mode [ 677.054921][T24207] syzkaller0: entered allmulticast mode [ 678.307556][T24140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.870643][T24233] veth0: entered promiscuous mode [ 678.904450][T24233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4298'. [ 679.004809][T24232] veth0: left promiscuous mode [ 679.329158][T24254] netlink: 'syz.0.4302': attribute type 2 has an invalid length. [ 679.395462][T24254] : entered promiscuous mode [ 679.556625][T24269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4301'. [ 679.559993][T24265] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4305'. [ 679.711596][T24275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4306'. [ 679.837011][T24278] netlink: 'syz.0.4308': attribute type 20 has an invalid length. [ 680.049921][T24284] netlink: Unknown conntrack attr (type=259, max=9) [ 680.049966][T24284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.157090][T24295] Bluetooth: MGMT ver 1.23 [ 680.471769][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 680.652880][T24309] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4314'. [ 680.652905][T24309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4314'. [ 680.652924][T24309] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4314'. [ 681.082770][T24326] sch_tbf: peakrate 62235199251434084 is lower than or equals to rate 3424529517648753985 ! [ 681.144328][T24331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.144717][T24331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.145098][T24331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.162449][T24331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.162865][T24331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.163208][T24331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.163536][T24331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.163863][T24331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.687299][T24347] lo speed is unknown, defaulting to 1000 [ 681.687374][T24347] lo speed is unknown, defaulting to 1000 [ 681.688470][T24347] lo speed is unknown, defaulting to 1000 [ 681.741081][T24347] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 681.741123][T24347] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 681.741162][T24347] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 681.743270][T24358] __nla_validate_parse: 6 callbacks suppressed [ 681.743290][T24358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4326'. [ 681.851652][T24347] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 681.944535][T24347] lo speed is unknown, defaulting to 1000 [ 681.950049][T24347] lo speed is unknown, defaulting to 1000 [ 681.979351][T24347] lo speed is unknown, defaulting to 1000 [ 681.992099][T24347] lo speed is unknown, defaulting to 1000 [ 682.006487][T24347] lo speed is unknown, defaulting to 1000 [ 682.018426][T24347] lo speed is unknown, defaulting to 1000 [ 682.137479][T24375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4330'. [ 683.543004][T24436] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4343'. [ 683.562461][T24436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4343'. [ 684.026426][T24446] netlink: 'syz.4.4346': attribute type 30 has an invalid length. [ 684.397391][T24469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4350'. [ 684.657052][T24476] Bluetooth: hci0: unsupported parameter 5135 [ 684.657080][T24476] Bluetooth: hci0: unsupported parameter 8192 [ 684.657094][T24476] Bluetooth: hci0: unsupported parameter 5135 [ 684.657106][T24476] Bluetooth: hci0: unsupported parameter 8192 [ 685.153948][T24496] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4358'. [ 685.308117][T24496] team0: Port device dummy0 removed [ 685.501446][T24504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4360'. [ 685.547362][T24506] net_ratelimit: 9 callbacks suppressed [ 685.547384][T24506] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 685.565657][T24506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4361'. [ 685.818761][T24512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4362'. [ 685.829915][T24514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4362'. [ 685.914930][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.084937][T24517] netlink: 'syz.2.4364': attribute type 1 has an invalid length. [ 686.129109][T24517] nbd: must specify a size in bytes for the device [ 686.236656][T24520] syzkaller1: entered promiscuous mode [ 686.236682][T24520] syzkaller1: entered allmulticast mode [ 686.256595][T24525] veth1_to_bond: entered allmulticast mode [ 686.267366][T24525] netlink: NAT attribute has 4 unknown bytes [ 686.267403][T24525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.284148][T24524] netlink: 'syz.1.4367': attribute type 10 has an invalid length. [ 686.397277][T24535] netlink: NAT attribute has 4 unknown bytes [ 686.397315][T24535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.469216][T24525] veth1_to_bond (unregistering): left allmulticast mode [ 686.498305][T24525] bond0: (slave bond_slave_1): Releasing backup interface [ 686.545860][T24524] team0: Device veth0_vlan failed to register rx_handler [ 686.719495][T24542] netlink: 'syz.4.4371': attribute type 10 has an invalid length. [ 687.099613][T24562] netlink: 'syz.4.4376': attribute type 32 has an invalid length. [ 687.303411][T24571] __nla_validate_parse: 5 callbacks suppressed [ 687.303448][T24571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4378'. [ 687.303473][T24571] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 687.380451][T24573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4379'. [ 687.517963][T24572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.596309][T24581] netlink: 'syz.2.4381': attribute type 4 has an invalid length. [ 687.617340][T24581] netlink: 'syz.2.4381': attribute type 4 has an invalid length. [ 688.435712][T24613] bridge_slave_1: entered promiscuous mode [ 688.677908][T24617] netlink: zone id is out of range [ 688.677927][T24617] netlink: zone id is out of range [ 688.677936][T24617] netlink: zone id is out of range [ 688.677954][T24617] netlink: zone id is out of range [ 688.731259][T24624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4391'. [ 689.339260][T24644] sctp_getsockopt_delayed_ack: 55 callbacks suppressed [ 689.339284][T24644] sctp: [Deprecated]: syz.3.4394 (pid 24644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.339284][T24644] Use struct sctp_sack_info instead [ 689.750363][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 690.153999][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4397'. [ 690.182903][T24668] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4397'. [ 691.327399][T24696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4402'. [ 691.938633][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 692.021501][T24716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 692.572306][T24728] net_ratelimit: 1719 callbacks suppressed [ 692.572332][T24728] netlink: Unknown conntrack attr (0) [ 692.851668][T24732] veth0: entered promiscuous mode [ 692.852042][T24732] veth0: left promiscuous mode [ 692.964830][T24738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4416'. [ 693.470899][T24746] netlink: 'syz.2.4418': attribute type 10 has an invalid length. [ 693.656276][T24751] syzkaller1: entered promiscuous mode [ 693.656301][T24751] syzkaller1: entered allmulticast mode [ 693.685876][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 694.066420][T24766] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4424'. [ 694.172437][T24772] netlink: 18 bytes leftover after parsing attributes in process `syz.2.4424'. [ 694.300410][T24778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4426'. [ 694.356206][T24774] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4425'. [ 695.734332][T24799] ip_tables: iptables: counters copy to user failed while replacing table [ 696.732471][T24825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4438'. [ 698.346551][T24853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'. [ 698.514619][T24871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 698.563642][T24867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4452'. [ 698.563910][T24867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4452'. [ 698.977532][T24867] netlink: 'syz.3.4452': attribute type 21 has an invalid length. [ 699.007036][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4453'. [ 699.285775][T24892] netlink: 'syz.4.4456': attribute type 10 has an invalid length. [ 699.479355][T24900] netlink: 'syz.2.4458': attribute type 10 has an invalid length. [ 699.519222][T24900] syz_tun: entered promiscuous mode [ 699.605697][T24900] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 699.845063][T24905] bridge7: entered allmulticast mode [ 699.936566][T24905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4459'. [ 699.988678][T24905] bridge_slave_1 (unregistering): left promiscuous mode [ 699.990389][T24905] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.138640][T24921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4459'. [ 700.389299][T24916] bridge8: entered allmulticast mode [ 700.659464][T24930] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4464'. [ 700.862692][T24932] veth1_macvtap: left promiscuous mode [ 700.977258][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.977285][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.999011][T24936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4466'. [ 701.232979][T24936] Cannot find add_set index 34 as target [ 701.322538][T24950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4467'. [ 702.248767][T24989] openvswitch: netlink: Message has 4 unknown bytes. [ 702.415041][T24991] netlink: 'syz.1.4473': attribute type 29 has an invalid length. [ 702.415345][T24994] netlink: 'syz.1.4473': attribute type 29 has an invalid length. [ 702.916200][T25006] gre1: entered promiscuous mode [ 703.375626][T25032] netlink: 'syz.2.4485': attribute type 29 has an invalid length. [ 703.815480][T25050] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.958070][T25057] __nla_validate_parse: 5 callbacks suppressed [ 703.958091][T25057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4492'. [ 704.066828][T25063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'. [ 704.129867][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'. [ 704.644115][T25083] netlink: 'syz.1.4498': attribute type 1 has an invalid length. [ 704.644140][T25083] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4498'. [ 704.819593][T25083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4498'. [ 704.843601][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4498'. [ 704.992245][T25092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4502'. [ 705.165916][T25093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4501'. [ 705.166240][T25094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4501'. [ 705.439929][T25104] xt_HMARK: spi-set and port-set can't be combined [ 705.498303][T25104] xt_HMARK: spi-set and port-set can't be combined [ 706.042398][T25113] openvswitch: netlink: IPv4 tun info is not correct [ 706.063989][T25116] syzkaller0: left promiscuous mode [ 706.064010][T25116] syzkaller0: left allmulticast mode [ 706.775880][T25136] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4512'. [ 707.030656][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 707.544893][T25156] bridge7: entered allmulticast mode [ 707.567728][T25165] netlink: 'syz.3.4519': attribute type 10 has an invalid length. [ 707.882610][T25166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.938528][T25166] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 707.952402][T25166] bond0 (unregistering): Released all slaves [ 708.159066][T25177] netlink: zone id is out of range [ 708.248498][T25180] nbd: must specify an index to disconnect [ 708.310525][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 708.388814][T25182] netlink: Invalid conntrack helper [ 708.388852][T25182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.697295][T25182] macvtap1: entered promiscuous mode [ 708.698244][T25182] macvtap1: entered allmulticast mode [ 708.908464][T25197] netlink: 'syz.2.4527': attribute type 2 has an invalid length. [ 709.357991][T25208] __nla_validate_parse: 2 callbacks suppressed [ 709.358012][T25208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4529'. [ 709.517088][T25215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4529'. [ 710.251925][T25230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4531'. [ 710.361542][T25234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.890746][T25260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4540'. [ 715.973145][T25250] netlink: 'syz.1.4539': attribute type 3 has an invalid length. [ 715.974043][T25250] netlink: 'syz.1.4539': attribute type 3 has an invalid length. [ 716.014230][T25255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4538'. [ 716.014383][T25255] xt_cgroup: path and classid specified [ 716.135332][T25274] ip_tables: iptables: counters copy to user failed while replacing table [ 716.234959][T25267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.976632][T25300] tipc: New replicast peer: 255.255.255.255 [ 716.977567][T25300] tipc: Enabled bearer , priority 10 [ 716.978787][T25301] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 717.112081][T25311] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4548'. [ 717.459212][T25325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.459590][T25323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4555'. [ 717.657434][T25333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'. [ 717.776144][T25336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4556'. [ 718.090596][T23186] tipc: Node number set to 1 [ 718.218172][T25350] xt_hashlimit: size too large, truncated to 1048576 [ 719.151262][T25369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4563'. [ 719.271487][T25373] ip_vti0: left promiscuous mode [ 719.319112][T25373] macvtap1: left promiscuous mode [ 719.327724][T25373] gretap1: left promiscuous mode [ 719.328665][T25373] ip6gre1: left promiscuous mode [ 719.585135][T25382] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4566'. [ 720.153334][T25396] sock: sock_timestamping_bind_phc: sock not bind to device [ 720.171196][T25401] netlink: 'syz.1.4573': attribute type 2 has an invalid length. [ 720.267844][T25405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4575'. [ 720.357550][T25409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 720.390469][T25413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4575'. [ 720.401283][T25419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 720.581952][T25402] syzkaller0: left promiscuous mode [ 720.581979][T25402] syzkaller0: left allmulticast mode [ 720.691356][T25401] netlink: 'syz.1.4573': attribute type 10 has an invalid length. [ 720.865262][T25401] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 721.075793][T25439] __nla_validate_parse: 1 callbacks suppressed [ 721.075815][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 721.076023][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 721.076181][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 721.076344][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 721.076515][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 721.076679][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 721.076834][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 721.077003][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 721.077158][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 721.337261][T25453] xt_hashlimit: size too large, truncated to 1048576 [ 721.428419][T25455] xt_hashlimit: size too large, truncated to 1048576 [ 721.632301][T25464] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4584'. [ 721.638628][T25460] nla_validate_range_unsigned: 5 callbacks suppressed [ 721.638651][T25460] netlink: 'syz.2.4582': attribute type 11 has an invalid length. [ 722.358835][T25475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 722.417474][T25475] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 723.027454][T25509] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 723.320777][T25518] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.451132][T25519] netlink: 'syz.3.4593': attribute type 1 has an invalid length. [ 724.354149][T25550] netlink: 'syz.3.4597': attribute type 1 has an invalid length. [ 724.354177][T25550] netlink: 'syz.3.4597': attribute type 2 has an invalid length. [ 725.847451][T25597] bond3: option lp_interval: invalid value (0) [ 725.847477][T25597] bond3: option lp_interval: allowed values 1 - 2147483647 [ 725.874795][T25597] bond3 (unregistering): Released all slaves [ 726.266471][T25606] __nla_validate_parse: 10 callbacks suppressed [ 726.266495][T25606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4611'. [ 726.268906][T25606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4611'. [ 726.338944][T25619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4614'. [ 726.554107][T25625] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4614'. [ 726.809149][T25621] bond2 (unregistering): Released all slaves [ 727.008165][T25640] netlink: 'syz.2.4618': attribute type 1 has an invalid length. [ 727.158317][T25647] batman_adv: batadv0: Interface deactivated: dummy0 [ 727.171483][T25647] batman_adv: batadv0: Removing interface: dummy0 [ 727.487270][T25640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 727.631629][T25644] bond3: (slave veth5): Enslaving as an active interface with a down link [ 728.428401][T25679] h: entered promiscuous mode [ 728.585011][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4630'. [ 728.741980][T25689] netlink: 'syz.4.4632': attribute type 23 has an invalid length. [ 728.769238][T25691] syzkaller0: entered promiscuous mode [ 728.769264][T25691] syzkaller0: entered allmulticast mode [ 728.790936][ C0] TC_ACT_REPEAT abuse ? [ 728.818869][ C0] TC_ACT_REPEAT abuse ? [ 728.818979][ C0] TC_ACT_REPEAT abuse ? [ 728.819053][ C0] TC_ACT_REPEAT abuse ? [ 728.819155][ C0] TC_ACT_REPEAT abuse ? [ 728.819226][ C0] TC_ACT_REPEAT abuse ? [ 728.819297][ C0] TC_ACT_REPEAT abuse ? [ 728.819367][ C0] TC_ACT_REPEAT abuse ? [ 728.876522][T25685] netlink: 'syz.4.4632': attribute type 10 has an invalid length. [ 729.020649][ C0] TC_ACT_REPEAT abuse ? [ 729.021116][ C0] TC_ACT_REPEAT abuse ? [ 729.218436][T25701] vlan0: entered promiscuous mode [ 729.297145][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'. [ 729.362310][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4639'. [ 729.367158][T25702] veth1_to_hsr: entered promiscuous mode [ 729.423903][T25700] veth1_to_hsr: left promiscuous mode [ 730.008929][T25735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4645'. [ 730.126660][T25741] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4646'. [ 730.145029][T25744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4647'. [ 730.282483][T25741] netlink: 'syz.3.4646': attribute type 58 has an invalid length. [ 730.462693][T25751] syzkaller0: entered promiscuous mode [ 730.462722][T25751] syzkaller0: entered allmulticast mode [ 730.874093][T25766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.240758][T25766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.420560][T25785] netlink: 'syz.2.4653': attribute type 1 has an invalid length. [ 731.868760][T25785] bond4: (slave gretap1): making interface the new active one [ 731.951636][T25785] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 732.099142][T25806] __nla_validate_parse: 7 callbacks suppressed [ 732.099166][T25806] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4658'. [ 732.728945][T25822] sctp: [Deprecated]: syz.0.4661 (pid 25822) Use of int in maxseg socket option. [ 732.728945][T25822] Use struct sctp_assoc_value instead [ 732.818017][T25830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4663'. [ 732.891897][T25826] netlink: 'syz.4.4662': attribute type 2 has an invalid length. [ 732.986778][T25834] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 732.986809][T25834] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 733.045855][T25830] bond5: Invalid ad_actor_system MAC address. [ 733.045878][T25830] bond5: option ad_actor_system: invalid value (1) [ 733.083217][T25830] bond5 (unregistering): Released all slaves [ 733.623423][T25858] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 734.303012][T25889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4678'. [ 734.656584][T25893] bridge8: entered promiscuous mode [ 734.656655][T25893] bridge8: entered allmulticast mode [ 734.697447][T25902] netlink: 'syz.0.4682': attribute type 11 has an invalid length. [ 734.697471][T25902] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4682'. [ 734.708328][T25898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4680'. [ 734.755168][T25897] netlink: 'syz.4.4681': attribute type 10 has an invalid length. [ 735.206301][T25921] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4687'. [ 735.398477][T25929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4685'. [ 737.865579][T25911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.014837][T25976] lo: entered promiscuous mode [ 739.015791][T25976] net_ratelimit: 6 callbacks suppressed [ 739.015809][T25976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.568307][ T5625] Bluetooth: hci1: ISO packet for unknown connection handle 2723 [ 740.041002][T25983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4702'. [ 740.311013][ C0] TC_ACT_REPEAT abuse ? [ 740.394400][T26027] netlink: 'syz.0.4713': attribute type 3 has an invalid length. [ 740.394425][T26027] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4713'. [ 740.449789][T26029] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4711'. [ 740.462830][T26029] netlink: 'syz.2.4711': attribute type 7 has an invalid length. [ 740.463089][T26029] netlink: 'syz.2.4711': attribute type 7 has an invalid length. [ 740.465997][T26029] netlink: 13311 bytes leftover after parsing attributes in process `syz.2.4711'. [ 740.679944][ T5625] Bluetooth: hci1: unexpected event 0x0e length: 1 < 3 [ 740.868697][T26045] syzkaller0: entered promiscuous mode [ 740.868723][T26045] syzkaller0: entered allmulticast mode [ 741.328772][T26070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4725'. [ 741.347159][T26067] bridge5: entered allmulticast mode [ 741.369503][T26067] bridge6: entered allmulticast mode [ 741.378357][T26073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4726'. [ 741.398049][T26073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4726'. [ 741.412680][T26073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4726'. [ 741.741936][T26088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4728'. [ 742.537146][T26125] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 742.662909][T26129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4739'. [ 742.681939][T26129] bridge_slave_1 (unregistering): left allmulticast mode [ 742.681966][T26129] bridge_slave_1 (unregistering): left promiscuous mode [ 742.682067][T26129] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.773898][T26135] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 742.926287][T26138] bridge0: port 3(veth1_to_bridge) entered blocking state [ 742.926473][T26138] bridge0: port 3(veth1_to_bridge) entered disabled state [ 742.926658][T26138] veth1_to_bridge: entered allmulticast mode [ 742.928651][T26138] veth1_to_bridge: entered promiscuous mode [ 742.928813][T26138] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 742.974582][T26138] bridge0: port 3(veth1_to_bridge) entered blocking state [ 742.974703][T26138] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 743.940330][T26176] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 744.041116][T26180] netlink: 'syz.2.4749': attribute type 2 has an invalid length. [ 744.148788][T26182] macsec1: entered promiscuous mode [ 744.415529][T26195] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 744.555737][T26180] : entered promiscuous mode [ 744.558660][T26193] veth1_to_team: entered promiscuous mode [ 744.623259][T26192] veth1_to_team: left promiscuous mode [ 744.965217][T26222] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 744.968013][T26219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.968032][T26219] IPv6: NLM_F_CREATE should be set when creating new route [ 744.968079][T26219] IPv6: NLM_F_CREATE should be set when creating new route [ 744.968106][T26219] IPv6: NLM_F_CREATE should be set when creating new route [ 744.974376][T26219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 745.762300][T26255] __nla_validate_parse: 5 callbacks suppressed [ 745.762323][T26255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4767'. [ 745.764836][T26255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4767'. [ 745.863483][T26259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4768'. [ 745.865068][T26260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4768'. [ 746.317121][T26269] openvswitch: netlink: Missing valid actions attribute. [ 746.339390][T26269] netlink: 'syz.4.4771': attribute type 4 has an invalid length. [ 746.339425][T26269] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4771'. [ 746.710436][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 747.371350][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.563151][T26301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.564898][T26302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.567083][T26301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4779'. [ 747.681346][T26301] macvlan2: entered promiscuous mode [ 747.681620][T26301] macvlan2: entered allmulticast mode [ 747.847603][T26292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.848825][T26302] macvlan2: entered promiscuous mode [ 747.849095][T26302] macvlan2: entered allmulticast mode [ 747.914252][T26313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.948747][T26306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.007168][T26305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.496705][T26323] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 748.709028][T26330] netlink: 'syz.3.4787': attribute type 11 has an invalid length. [ 750.672689][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.672721][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.685730][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.685755][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.767263][T26389] ipt_REJECT: TCP_RESET invalid for non-tcp [ 750.852720][T26393] __nla_validate_parse: 10 callbacks suppressed [ 750.852744][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.852763][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.852978][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.852996][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.853192][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.853210][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.853401][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.853419][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 750.912670][T26399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.917082][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 751.035332][T26393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4800'. [ 751.367527][T26417] netlink: 'syz.4.4803': attribute type 24 has an invalid length. [ 752.171410][T26435] raw_sendmsg: syz.3.4810 forgot to set AF_INET. Fix it! [ 752.663441][T26454] geneve0: entered allmulticast mode [ 752.774478][T26466] netlink: 'syz.0.4819': attribute type 10 has an invalid length. [ 752.830780][T26457] block nbd0: not configured, cannot reconfigure [ 755.490721][T26546] ip_tables: iptables: counters copy to user failed while replacing table [ 755.913286][T26555] batman_adv: batadv0: Adding interface: macvtap1 [ 755.913305][T26555] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.913331][T26555] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 755.988841][T26557] batman_adv: batadv0: Adding interface: macvtap2 [ 755.988861][T26557] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.988886][T26557] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 756.236255][T26572] __nla_validate_parse: 48 callbacks suppressed [ 756.236280][T26572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4848'. [ 756.607183][T26577] netlink: 'syz.4.4846': attribute type 1 has an invalid length. [ 756.685663][T26580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4846'. [ 756.827924][T26577] 8021q: adding VLAN 0 to HW filter on device bond5 [ 757.047099][T26588] bond5: (slave bridge7): making interface the new active one [ 757.073955][T26599] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 757.102482][T26588] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 758.294040][T26616] xt_TCPMSS: Only works on TCP SYN packets [ 758.449618][T26622] netlink: 'syz.0.4856': attribute type 1 has an invalid length. [ 758.475422][T26614] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4853'. [ 759.009847][T26633] netlink: 'syz.3.4858': attribute type 1 has an invalid length. [ 759.009876][T26633] netlink: 'syz.3.4858': attribute type 3 has an invalid length. [ 759.009889][T26633] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4858'. [ 759.009905][T26633] NCSI netlink: No device for ifindex 813332851 [ 759.145892][T26637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4860'. [ 759.149400][T26637] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.4860'. [ 759.379813][T26637] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 759.544708][T26645] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4861'. [ 759.771036][T26653] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4864'. [ 759.776694][T26654] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4863'. [ 759.797847][T26650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4862'. [ 760.282350][T26669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.342734][T26676] netlink: 'syz.1.4870': attribute type 4 has an invalid length. [ 760.349202][T26676] netlink: 'syz.1.4870': attribute type 4 has an invalid length. [ 760.391411][T26677] netlink: 'syz.1.4870': attribute type 4 has an invalid length. [ 760.408338][T23186] lo speed is unknown, defaulting to 1000 [ 760.408396][T23186] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 760.853445][T26692] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 761.614009][T26710] ip_tables: iptables: counters copy to user failed while replacing table [ 761.777098][T26717] __nla_validate_parse: 10 callbacks suppressed [ 761.777125][T26717] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4881'. [ 761.796493][T26712] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 762.012621][T26720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4882'. [ 762.365600][T26727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4884'. [ 762.467846][T26737] FAULT_INJECTION: forcing a failure. [ 762.467846][T26737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.467883][T26737] CPU: 1 UID: 0 PID: 26737 Comm: syz.1.4885 Not tainted syzkaller #0 PREEMPT(full) [ 762.467905][T26737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 762.467917][T26737] Call Trace: [ 762.467948][T26737] [ 762.468024][T26737] dump_stack_lvl+0xe8/0x150 [ 762.468159][T26737] should_fail_ex+0x410/0x560 [ 762.468265][T26737] _copy_to_user+0x31/0xb0 [ 762.468370][T26737] simple_read_from_buffer+0xe1/0x170 [ 762.468444][T26737] proc_fail_nth_read+0x1bb/0x230 [ 762.468500][T26737] ? common_file_perm+0x20e/0x2b0 [ 762.468591][T26737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 762.468624][T26737] ? rw_verify_area+0x24a/0x4c0 [ 762.468661][T26737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 762.468688][T26737] vfs_read+0x213/0xa80 [ 762.468720][T26737] ? __pfx___mutex_lock+0x10/0x10 [ 762.468817][T26737] ? __pfx_vfs_read+0x10/0x10 [ 762.468846][T26737] ? __fget_files+0x2a/0x420 [ 762.468877][T26737] ? __fget_files+0x3a2/0x420 [ 762.468900][T26737] ? __fget_files+0x2a/0x420 [ 762.468935][T26737] ksys_read+0x150/0x270 [ 762.468965][T26737] ? __pfx_ksys_read+0x10/0x10 [ 762.469003][T26737] do_syscall_64+0x166/0x520 [ 762.469078][T26737] ? trace_irq_disable+0x3b/0x140 [ 762.469120][T26737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.469152][T26737] ? clear_bhb_loop+0x70/0xc0 [ 762.469171][T26737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.469186][T26737] RIP: 0033:0x7f1e6ff5e98e [ 762.469207][T26737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 762.469247][T26737] RSP: 002b:00007f1e6e1d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 762.469282][T26737] RAX: ffffffffffffffda RBX: 00007f1e6e1d56c0 RCX: 00007f1e6ff5e98e [ 762.469294][T26737] RDX: 000000000000000f RSI: 00007f1e6e1d50a0 RDI: 0000000000000005 [ 762.469304][T26737] RBP: 00007f1e6e1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 762.469316][T26737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.469326][T26737] R13: 00007f1e70226128 R14: 00007f1e70226090 R15: 00007ffc70372638 [ 762.469352][T26737] [ 762.855871][T26744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4889'. [ 762.976897][T26747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4889'. [ 763.026692][T26741] bond0: entered promiscuous mode [ 763.216988][T26749] bond5: entered promiscuous mode [ 763.258605][T26767] rdma_op ffff88803287da38 conn xmit_rdma 0000000000000000 [ 763.326217][T26750] netlink: 'syz.2.4890': attribute type 1 has an invalid length. [ 764.105250][T26797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4898'. [ 764.384394][T26810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4902'. [ 764.523542][T26821] ip6t_srh: unknown srh match flags 5F28 [ 764.552995][T26821] ip_tables: iptables: counters copy to user failed while replacing table [ 764.629789][T26823] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4907'. [ 764.692368][T26826] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 764.717909][T26827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4907'. [ 764.785302][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4906'. [ 765.443340][T26852] Cannot find set identified by id 65534 to match [ 765.642824][T26852] bond2: (slave bond_slave_0): Device is not our slave [ 765.642849][T26852] bond2: option active_slave: invalid value (bond_slave_0) [ 765.656529][T26852] bond2 (unregistering): Released all slaves [ 766.286302][T26854] sit2: entered promiscuous mode [ 766.286326][T26854] sit2: entered allmulticast mode [ 766.479723][T26924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.479747][T26924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.603200][T26945] ip_tables: iptables: counters copy to user failed while replacing table [ 766.695748][T26943] wg1 speed is unknown, defaulting to 1000 [ 766.699331][T26943] wg1 speed is unknown, defaulting to 1000 [ 766.729751][T26943] wg1 speed is unknown, defaulting to 1000 [ 766.829609][T26951] __nla_validate_parse: 3 callbacks suppressed [ 766.829631][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4919'. [ 766.852757][T26955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4923'. [ 766.947907][T26959] netlink: 'syz.4.4925': attribute type 30 has an invalid length. [ 767.091607][T26964] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4926'. [ 767.198681][T26966] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.4926'. [ 767.572123][T26943] infiniband syz2: set active [ 767.572185][ T8358] wg1 speed is unknown, defaulting to 1000 [ 767.572749][T26943] infiniband syz2: added wg1 [ 767.578237][T26943] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 767.597346][T26943] infiniband syz2: Couldn't open port 1 [ 767.597619][T26943] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 767.597649][T26943] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 767.597685][T26943] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 767.712606][T26943] RDS/IB: syz2: added [ 767.712668][T26943] smc: adding ib device syz2 with port count 1 [ 767.712936][T26943] smc: ib device syz2 port 1 has pnetid S (user defined) [ 767.713033][ T8358] wg1 speed is unknown, defaulting to 1000 [ 767.805897][T26943] wg1 speed is unknown, defaulting to 1000 [ 767.852520][T26976] xt_recent: Unsupported userspace flags (000000b1) [ 768.089410][T26981] netlink: 'syz.3.4930': attribute type 3 has an invalid length. [ 768.089434][T26981] netlink: 'syz.3.4930': attribute type 2 has an invalid length. [ 768.187577][T26982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4931'. [ 768.276102][T26982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4931'. [ 768.674619][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4934'. [ 768.674646][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4934'. [ 768.813945][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4934'. [ 768.829548][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4934'. [ 768.966938][T27005] Unsupported ieee802154 address type: 0 [ 769.306089][T26943] wg1 speed is unknown, defaulting to 1000 [ 769.567643][T27018] openvswitch: netlink: Message has 8 unknown bytes. [ 770.661901][T27059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.785602][T27069] netlink: 'syz.4.4950': attribute type 8 has an invalid length. [ 770.921571][T26943] wg1 speed is unknown, defaulting to 1000 [ 771.926750][T27098] netlink: 'syz.2.4959': attribute type 21 has an invalid length. [ 771.926775][T27098] netlink: 'syz.2.4959': attribute type 22 has an invalid length. [ 771.926788][T27098] netlink: 'syz.2.4959': attribute type 23 has an invalid length. [ 771.926800][T27098] netlink: 'syz.2.4959': attribute type 25 has an invalid length. [ 771.926811][T27098] netlink: 'syz.2.4959': attribute type 26 has an invalid length. [ 771.926825][T27098] __nla_validate_parse: 6 callbacks suppressed [ 771.926836][T27098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4959'. [ 772.587087][T26943] wg1 speed is unknown, defaulting to 1000 [ 772.896868][T27121] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4964'. [ 772.896898][T27121] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4964'. [ 773.152064][T27129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4967'. [ 773.189960][T27130] netlink: ct family unspecified [ 773.199143][T27130] netlink: 'syz.1.4966': attribute type 2 has an invalid length. [ 773.208567][T27130] netlink: 'syz.1.4966': attribute type 10 has an invalid length. [ 773.358227][T27130] bridge0: port 3(veth1_to_bridge) entered disabled state [ 773.358444][T27130] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.359012][T27130] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.561747][T26943] wg1 speed is unknown, defaulting to 1000 [ 774.759308][T27183] veth0: entered promiscuous mode [ 774.770981][T27182] veth0: left promiscuous mode [ 774.779658][T26943] wg1 speed is unknown, defaulting to 1000 [ 775.313997][T27195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4982'. [ 775.314037][T27195] netlink: 'syz.4.4982': attribute type 7 has an invalid length. [ 775.314052][T27195] netlink: 'syz.4.4982': attribute type 8 has an invalid length. [ 775.314065][T27195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4982'. [ 775.849728][T27225] netlink: 'syz.2.4989': attribute type 4 has an invalid length. [ 776.224907][T27237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4993'. [ 776.658505][T27255] netlink: 'syz.4.4998': attribute type 4 has an invalid length. [ 776.659898][T27255] netlink: 'syz.4.4998': attribute type 4 has an invalid length. [ 776.832972][T27263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4999'. [ 777.281532][T27278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5003'. [ 777.384475][T27285] bridge9: entered allmulticast mode [ 777.491757][T27285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5006'. [ 777.734416][T27305] openvswitch: netlink: VLAN attribute unexpected. [ 777.833132][T27301] openvswitch: netlink: Unknown key attributes 20 [ 778.063064][T27315] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5012'. [ 778.063936][T27315] xt_NETMAP: bad MAP_IPS. [ 778.188187][T27320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5013'. [ 778.714631][T27336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5019'. [ 779.076734][T27354] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5025'. [ 779.122700][T27357] netlink: 'syz.1.5026': attribute type 16 has an invalid length. [ 779.122729][T27357] netlink: 'syz.1.5026': attribute type 17 has an invalid length. [ 779.211277][T27357] bridge0: port 3(veth1_to_bridge) entered blocking state [ 779.211523][T27357] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 779.211894][T27357] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.212006][T27357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.212238][T27357] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.212393][T27357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.299442][T27357] veth0_vlan: left allmulticast mode [ 779.307285][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 779.308057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 779.308575][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 779.309090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 779.309639][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 779.310193][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 779.310687][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 779.311178][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 779.483926][T27357] vlan0: left promiscuous mode [ 779.483954][T27357] veth0_vlan: left promiscuous mode [ 779.877217][T27357] veth0_vlan: entered promiscuous mode [ 780.529618][T27357] macvlan1: left allmulticast mode [ 781.386412][T27357] veth1_macvtap: entered promiscuous mode [ 781.644096][T27369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5028'. [ 781.764071][T27357] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 781.974803][T27357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 782.188430][T27357] mac80211_hwsim hwsim73 wlan0: left promiscuous mode [ 782.489812][T27357] gretap1: left promiscuous mode [ 782.499809][T27357] gretap1: left allmulticast mode [ 782.657893][T27357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 782.740845][ C0] net_ratelimit: 4112 callbacks suppressed [ 782.740870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 782.741332][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 782.742898][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 782.743395][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 782.744847][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 782.745293][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 782.746728][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 782.747170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 782.748719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 782.749168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 783.913356][T27357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.970089][T27357] syzkaller0: left promiscuous mode [ 783.970410][T27357] syzkaller0: left allmulticast mode [ 787.750801][ C0] net_ratelimit: 4693 callbacks suppressed [ 787.750828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 787.751431][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 787.753390][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 787.753975][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 787.758082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 787.758730][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 787.762957][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 787.763561][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 787.766404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 787.767029][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 788.075620][ C0] sched: DL replenish lagged too much [ 792.760817][ C0] net_ratelimit: 3866 callbacks suppressed [ 792.760843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 792.761472][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 792.764122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 792.764702][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 792.765949][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 792.766535][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 792.769214][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 792.769859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 792.771195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 792.771827][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 797.770430][ C0] net_ratelimit: 3921 callbacks suppressed [ 797.770458][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 797.771926][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 797.772529][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 797.775220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 797.775816][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 797.777155][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 797.777757][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 797.780514][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 797.781493][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 797.782645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 802.556746][T27386] pim6reg: entered allmulticast mode [ 802.780435][ C0] net_ratelimit: 3824 callbacks suppressed [ 802.780463][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 802.782988][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 802.783554][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 802.784751][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 802.785313][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 802.788923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 802.789492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 802.790793][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 802.791301][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 802.793542][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 805.481510][ T4937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 805.527873][ T4937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 805.544568][ T4937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 805.733075][ T4937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 805.734859][ T4937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 807.792908][ C0] net_ratelimit: 4223 callbacks suppressed [ 807.792934][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 807.793399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 807.794407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 807.794863][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 807.796995][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 807.797497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 807.798492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 807.798948][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 807.801097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 807.801567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 807.850298][ T4937] Bluetooth: hci2: command tx timeout [ 808.694828][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 808.699532][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 808.721625][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 808.759932][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 808.772572][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 809.910733][ T4937] Bluetooth: hci2: command tx timeout [ 810.588582][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 810.615015][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 810.646563][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 810.664224][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 810.700733][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 811.192334][ T4937] Bluetooth: hci6: command tx timeout [ 811.991580][ T4937] Bluetooth: hci2: command tx timeout [ 812.238481][ T5625] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 812.344997][ T5625] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 812.790482][ T5625] Bluetooth: hci7: command tx timeout [ 812.801291][ C0] net_ratelimit: 5166 callbacks suppressed [ 812.801311][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 812.801736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 812.802638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 812.803740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 812.805656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 812.806135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 812.807157][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 812.808097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 812.810427][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 812.810901][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 813.507956][T19524] Bluetooth: hci6: command tx timeout [ 813.810169][T27424] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 813.842536][T27424] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 813.844298][T27424] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 813.879278][T27424] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 814.053219][T27424] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 814.080838][T27424] Bluetooth: hci2: command tx timeout [ 814.081949][T27424] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 814.111594][T27424] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 814.115393][T27424] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 814.870240][T27424] Bluetooth: hci7: command tx timeout [ 815.510620][T27424] Bluetooth: hci6: command tx timeout [ 816.070824][T27424] Bluetooth: hci8: command tx timeout [ 816.230729][T27424] Bluetooth: hci9: command tx timeout [ 816.950827][T27424] Bluetooth: hci7: command tx timeout [ 817.610690][T27424] Bluetooth: hci6: command tx timeout [ 817.810727][ C0] net_ratelimit: 5180 callbacks suppressed [ 817.810753][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 817.811211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 817.813149][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 817.813566][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 817.814492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 817.814917][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 817.816869][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 817.817307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 817.818224][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 817.818649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 818.150534][T27424] Bluetooth: hci8: command tx timeout [ 818.425772][T27424] Bluetooth: hci9: command tx timeout [ 819.070918][T27424] Bluetooth: hci7: command tx timeout [ 820.440112][T27424] Bluetooth: hci8: command tx timeout [ 820.479950][T27424] Bluetooth: hci9: command tx timeout [ 822.470630][T27424] Bluetooth: hci8: command tx timeout [ 822.670618][T27424] Bluetooth: hci9: command tx timeout [ 822.820773][ C0] net_ratelimit: 4982 callbacks suppressed [ 822.820798][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 822.821261][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 822.826159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 822.826720][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 822.827984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 822.828543][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 822.831118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 822.831616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 822.832744][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 822.833250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 824.150750][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 827.830142][ C0] net_ratelimit: 5319 callbacks suppressed [ 827.830168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 827.832153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 827.832583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 827.833572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 827.833987][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 827.835928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 827.836386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 827.837275][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 827.837696][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 827.839576][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 832.841713][ C0] net_ratelimit: 5451 callbacks suppressed [ 832.841740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 832.842162][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.843084][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.843510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 832.845387][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 832.845781][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.846722][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 832.847188][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 832.849062][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 832.849479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 837.850270][ C0] net_ratelimit: 5276 callbacks suppressed [ 837.850295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 837.850743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 837.852739][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 837.853165][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 837.854248][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 837.854687][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 837.856652][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 837.857125][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 837.858048][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 837.858474][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 840.445025][T27331] bond0: (slave syz_tun): Releasing backup interface [ 842.860487][ C0] net_ratelimit: 4906 callbacks suppressed [ 842.860512][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 842.860987][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 842.863157][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 842.863650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 842.864684][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 842.865150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 842.867376][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 842.867863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 842.868938][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 842.869404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 847.870508][ C0] net_ratelimit: 4900 callbacks suppressed [ 847.870534][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 847.871017][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 847.871970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 847.872405][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 847.874356][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 847.874827][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 847.875814][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 847.876253][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 847.878202][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 847.878616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 852.880088][ C0] net_ratelimit: 5073 callbacks suppressed [ 852.880115][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 852.882089][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 852.882569][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 852.883558][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 852.883991][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 852.889083][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 852.889588][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 852.890720][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 852.891166][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 852.893191][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 856.039002][T26924] pimreg3: left allmulticast mode [ 857.891020][ C0] net_ratelimit: 4807 callbacks suppressed [ 857.891048][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 857.891490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 857.892436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 857.892871][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 857.894868][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 857.895309][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 857.896251][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 857.896682][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 857.898854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 857.899386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 862.900324][ C0] net_ratelimit: 5235 callbacks suppressed [ 862.900349][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 862.901380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 862.901854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 862.903873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 862.904308][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 862.905275][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 862.905723][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 862.907835][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 862.908269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 862.909240][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 865.587620][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 865.610891][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 865.648627][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 865.663958][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 865.711486][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 867.850164][T27424] Bluetooth: hci0: command tx timeout [ 867.910683][ C0] net_ratelimit: 5189 callbacks suppressed [ 867.910709][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 867.911181][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 867.912102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 867.912518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 867.914451][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 867.914861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 867.916382][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 867.916827][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 867.918738][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 867.919156][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 869.938189][T27424] Bluetooth: hci0: command tx timeout [ 870.751277][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 870.920302][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 870.925391][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 871.004013][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 871.025303][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 871.829426][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 871.871340][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 871.898586][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 871.915770][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 871.917534][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 871.991978][ T4937] Bluetooth: hci0: command tx timeout [ 872.921180][ C0] net_ratelimit: 5386 callbacks suppressed [ 872.921206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 872.921647][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 872.922590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 872.923030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 872.924989][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 872.925450][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 872.926395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 872.927773][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 872.929733][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 872.930253][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 873.011885][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 873.091318][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 873.093402][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 873.110830][ T5625] Bluetooth: hci1: command tx timeout [ 873.112243][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 873.114114][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 874.110649][T27424] Bluetooth: hci3: command tx timeout [ 874.111450][T27424] Bluetooth: hci0: command tx timeout [ 875.371172][ T5625] Bluetooth: hci1: command tx timeout [ 876.073097][ T5625] Bluetooth: hci4: command tx timeout [ 876.152465][ T5625] Bluetooth: hci3: command tx timeout [ 876.278111][T27424] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 876.310241][T27424] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 876.327720][T27424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 876.341144][T27424] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 876.342908][T27424] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 877.490063][T27424] Bluetooth: hci1: command tx timeout [ 877.930848][ C0] net_ratelimit: 5144 callbacks suppressed [ 877.930873][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 877.931394][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 877.933545][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 877.933996][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 877.934995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 877.935464][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 877.937639][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 877.938136][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 877.939145][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 877.939615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 878.153073][T27424] Bluetooth: hci4: command tx timeout [ 878.244816][T27424] Bluetooth: hci3: command tx timeout [ 879.030268][T27424] Bluetooth: hci5: command tx timeout [ 879.520236][T27424] Bluetooth: hci1: command tx timeout [ 880.240139][T27424] Bluetooth: hci4: command tx timeout [ 880.590487][T27424] Bluetooth: hci3: command tx timeout [ 881.110633][T27424] Bluetooth: hci5: command tx timeout [ 882.320723][T27424] Bluetooth: hci4: command tx timeout [ 882.940833][ C0] net_ratelimit: 5088 callbacks suppressed [ 882.940862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 882.941287][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 882.942231][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 882.942664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 882.944776][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 882.945307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 882.946276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 882.946738][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 882.948688][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 882.949122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 883.202335][T27424] Bluetooth: hci5: command tx timeout [ 885.280572][T27424] Bluetooth: hci5: command tx timeout [ 887.950138][ C0] net_ratelimit: 5069 callbacks suppressed [ 887.950163][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 887.952287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 887.952725][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 887.953683][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 887.954128][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 887.956137][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 887.956578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 887.957525][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 887.957964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 887.959933][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 892.961489][ C0] net_ratelimit: 5112 callbacks suppressed [ 892.961514][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 892.961940][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 892.962968][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 892.963395][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 892.965321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 892.965813][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 892.966854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 892.967287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 892.969284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 892.969722][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 897.970859][ C0] net_ratelimit: 5120 callbacks suppressed [ 897.970888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 897.971643][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 897.973612][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 897.974092][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 897.975031][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 897.975472][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 897.977450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 897.977874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 897.978835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 897.979272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 902.980124][ C0] net_ratelimit: 5037 callbacks suppressed [ 902.980151][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 902.981244][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 902.981712][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 902.983845][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 902.984306][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 902.985313][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 902.985778][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 902.987971][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 902.988436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 902.989529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 903.500762][T26924] batman_adv: batadv0: Removing interface: gretap0 [ 907.990073][ C0] net_ratelimit: 5346 callbacks suppressed [ 907.990099][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 907.990517][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 907.990934][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 907.993273][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 907.993687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 907.994592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 907.995005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 907.995430][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 907.997420][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 907.997830][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 913.000551][ C0] net_ratelimit: 6088 callbacks suppressed [ 913.000577][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 913.000990][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 913.001950][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 913.002364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 913.002793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 913.004681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 913.005096][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 913.006065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 913.006476][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 913.006904][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 917.342125][T26924] bond12 (unregistering): (slave geneve3): Releasing active interface [ 918.011811][ C0] net_ratelimit: 5905 callbacks suppressed [ 918.011839][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 918.012313][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 918.013353][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 918.013778][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 918.014196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 918.016170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 918.016600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 918.017586][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 918.018009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 918.018450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 920.077543][ T5625] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 920.116058][ T5625] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 920.117989][ T5625] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 920.190975][ T5625] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 920.195800][ T5625] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 922.320580][T27424] Bluetooth: hci10: command tx timeout [ 923.020027][ C0] net_ratelimit: 5938 callbacks suppressed [ 923.020053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 923.020519][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 923.022544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 923.022964][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 923.023887][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 923.024310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 923.024734][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 923.026708][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 923.027138][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 923.028063][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 924.397833][T27424] Bluetooth: hci10: command tx timeout [ 924.825640][ T5625] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 924.907282][ T5625] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 924.919517][ T5625] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 924.932197][ T5625] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 924.935580][ T5625] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 926.470712][ T5625] Bluetooth: hci10: command tx timeout [ 927.033433][ T5625] Bluetooth: hci11: command tx timeout [ 927.948837][ T4937] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 927.962630][ T4937] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 927.964528][ T4937] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 927.968791][ T4937] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 927.997841][ T4937] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 928.030737][ C0] net_ratelimit: 6039 callbacks suppressed [ 928.030760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 928.031135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 928.031563][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 928.033316][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 928.033744][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 928.034727][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 928.035114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 928.035536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 928.037322][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 928.037709][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 928.560953][ T4937] Bluetooth: hci10: command tx timeout [ 928.652577][ T4937] Bluetooth: hci2: command 0x0406 tx timeout [ 929.133893][ T4937] Bluetooth: hci11: command tx timeout [ 929.274116][ T5625] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 929.293046][ T5625] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 929.308780][ T5625] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 929.332020][ T5625] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 929.378525][ T5625] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 930.164981][ T5625] Bluetooth: hci12: command tx timeout [ 930.319758][T27526] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 930.338972][T27526] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 930.354531][T27526] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 930.357416][T27526] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 930.359205][T27526] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 931.190846][ T5625] Bluetooth: hci11: command tx timeout [ 932.230535][T27531] Bluetooth: hci12: command tx timeout [ 933.040306][ C0] net_ratelimit: 5730 callbacks suppressed [ 933.040333][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 933.041752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 933.042193][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 933.044167][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 933.044600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 933.045532][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 933.047053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 933.047491][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 933.049428][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 933.049841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 933.280257][T27531] Bluetooth: hci11: command tx timeout [ 933.830571][T27531] Bluetooth: hci6: command 0x0406 tx timeout [ 933.830616][T27531] Bluetooth: hci7: command 0x0406 tx timeout [ 934.320562][T27532] Bluetooth: hci12: command tx timeout [ 936.400952][T27532] Bluetooth: hci12: command tx timeout [ 938.051875][ C0] net_ratelimit: 4883 callbacks suppressed [ 938.051901][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 938.052376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 938.053302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 938.054669][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 938.055101][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 938.057044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 938.057498][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 938.058395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 938.060269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 938.060656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 938.879113][T27531] Bluetooth: hci8: command 0x0406 tx timeout [ 938.879220][T27531] Bluetooth: hci9: command 0x0406 tx timeout [ 940.375276][T26924] bond3 (unregistering): (slave geneve2): Releasing active interface [ 941.133481][ T4937] Bluetooth: hci13: command tx timeout [ 943.060498][ C0] net_ratelimit: 4720 callbacks suppressed [ 943.060525][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 943.060989][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 943.061912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 943.063330][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 943.063762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 943.065679][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 943.066137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 943.067055][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 943.068457][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 943.069772][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 943.195361][T27526] Bluetooth: hci13: command tx timeout [ 943.280267][T19524] Bluetooth: hci14: command tx timeout [ 945.300497][T27532] Bluetooth: hci13: command tx timeout [ 945.350202][T27532] Bluetooth: hci14: command tx timeout [ 946.693780][T26924] bond1 (unregistering): (slave bridge2): Releasing active interface [ 947.351043][T27532] Bluetooth: hci13: command tx timeout [ 947.446849][T27532] Bluetooth: hci14: command tx timeout [ 948.070852][ C0] net_ratelimit: 4635 callbacks suppressed [ 948.070879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 948.071349][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 948.072285][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 948.073667][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 948.074102][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 948.076143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 948.076563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 948.077495][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 948.078888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 948.080112][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 949.510511][T27532] Bluetooth: hci14: command tx timeout [ 953.081676][ C0] net_ratelimit: 4570 callbacks suppressed [ 953.081701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 953.082148][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 953.083148][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 953.084613][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 953.085076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 953.087165][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 953.087606][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 953.088564][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 953.090088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 953.090557][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 955.934247][T26924] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 955.934276][T26924] bond2 (unregistering): (slave bridge4): the permanent HWaddr of slave - 66:db:24:b4:fe:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 955.934304][T26924] bridge4 (unregistering): left promiscuous mode [ 955.934851][T26924] bond2 (unregistering): (slave bridge5): making interface the new active one [ 955.934869][T26924] bridge5 (unregistering): entered promiscuous mode [ 958.038710][T26924] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 958.038740][T26924] bridge5 (unregistering): left promiscuous mode [ 958.039285][T26924] bond2 (unregistering): (slave bridge6): making interface the new active one [ 958.039301][T26924] bridge6 (unregistering): entered promiscuous mode [ 958.090972][ C0] net_ratelimit: 4643 callbacks suppressed [ 958.090991][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 958.091400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 958.093150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 958.093542][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 958.094401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 958.095738][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 958.096222][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 958.097981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 958.098373][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 958.099252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 961.805360][T26924] bond2 (unregistering): (slave bridge6): Releasing backup interface [ 961.805394][T26924] bridge6 (unregistering): left promiscuous mode [ 963.100590][ C0] net_ratelimit: 4689 callbacks suppressed [ 963.100618][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 963.102015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 963.102444][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 963.104461][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 963.104890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 963.105885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 963.107272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 963.107704][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 963.109733][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 963.110230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 968.110733][ C0] net_ratelimit: 4850 callbacks suppressed [ 968.110759][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 968.112244][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 968.112660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 968.114536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 968.114953][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 968.115850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 968.117248][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 968.117663][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 968.119533][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 968.119952][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.120682][ C0] net_ratelimit: 4940 callbacks suppressed [ 973.120710][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.122162][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.122625][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 973.124492][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 973.124922][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.125820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.127229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.127653][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 973.129506][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 973.129915][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.130107][ C0] net_ratelimit: 4949 callbacks suppressed [ 978.130134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.131095][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.132560][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.132979][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 978.134893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 978.135312][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.136297][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.137675][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.138090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 978.139952][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 980.209877][T27530] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 980.232893][T27530] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 980.247776][T27530] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 980.279659][T27530] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 980.289390][T27530] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 982.390610][T27532] Bluetooth: hci15: command tx timeout [ 982.870224][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 983.140755][ C0] net_ratelimit: 4939 callbacks suppressed [ 983.140781][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 983.141206][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 983.142116][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 983.143530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 983.143945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 983.145826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 983.146244][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 983.147147][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 983.148504][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 983.148920][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 984.470772][T27532] Bluetooth: hci15: command tx timeout [ 985.286225][T27530] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 985.289285][T27530] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 985.311092][T27530] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 985.317393][T27530] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 985.319120][T27530] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 986.550987][T27532] Bluetooth: hci15: command tx timeout [ 987.437496][T27532] Bluetooth: hci16: command tx timeout [ 988.150659][ C0] net_ratelimit: 4932 callbacks suppressed [ 988.150685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 988.151065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 988.153128][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 988.154447][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 988.154881][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 988.155328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 988.157368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 988.157854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 988.158824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 988.160355][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 988.523772][ T5625] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 988.529528][ T5625] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 988.588585][ T5625] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 988.616221][ T5625] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 988.617980][ T5625] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 988.631566][T19524] Bluetooth: hci15: command tx timeout [ 989.520611][ T5625] Bluetooth: hci16: command tx timeout [ 990.070186][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 990.791297][T27532] Bluetooth: hci17: command tx timeout [ 991.790129][T27532] Bluetooth: hci16: command tx timeout [ 992.470369][ T32] INFO: task syz-executor:19520 blocked for more than 143 seconds. [ 992.470402][ T32] Not tainted syzkaller #0 [ 992.470412][ T32] Blocked by coredump. [ 992.470418][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 992.470437][ T32] task:syz-executor state:D stack:21576 pid:19520 tgid:19520 ppid:1 task_flags:0x40054c flags:0x00080003 [ 992.470497][ T32] Call Trace: [ 992.470506][ T32] [ 992.470522][ T32] __schedule+0x17db/0x58f0 [ 992.470576][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 992.470645][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 992.470731][ T32] ? __pfx___schedule+0x10/0x10 [ 992.471034][ T32] ? schedule+0x90/0x2b0 [ 992.471065][ T32] schedule+0x164/0x2b0 [ 992.471090][ T32] schedule_preempt_disabled+0x13/0x30 [ 992.471113][ T32] __mutex_lock+0x7c1/0x1550 [ 992.471144][ T32] ? __mutex_lock+0x5d4/0x1550 [ 992.471173][ T32] ? tun_chr_close+0x3e/0x1c0 [ 992.471261][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 992.471306][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 992.471328][ T32] tun_chr_close+0x3e/0x1c0 [ 992.471348][ T32] ? __pfx_tun_chr_close+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 992.471369][ T32] __fput+0x418/0xa50 [ 992.471406][ T32] task_work_run+0x1d9/0x270 [ 992.471461][ T32] ? __pfx_task_work_run+0x10/0x10 [ 992.471483][ T32] ? do_exit+0x735/0x2360 [ 992.471509][ T32] ? kmem_cache_free+0x182/0x650 [ 992.471547][ T32] ? put_net+0x191/0x260 [ 992.471579][ T32] do_exit+0x73a/0x2360 [ 992.471607][ T32] ? lock_acquire+0x115/0x350 [ 992.471636][ T32] ? __pfx_do_exit+0x10/0x10 [ 992.471662][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 992.471700][ T32] do_group_exit+0x22d/0x2f0 [ 992.471720][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 992.471773][ T32] get_signal+0x121b/0x12c0 [ 992.471825][ T32] arch_do_signal_or_restart+0xbb/0x860 [ 992.471880][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 992.471929][ T32] exit_to_user_mode_loop+0x10e/0x770 [ 992.471952][ T32] ? rcu_is_watching+0x16/0xb0 [ 992.471982][ T32] do_syscall_64+0x328/0x520 [ 992.472014][ T32] ? trace_irq_disable+0x3b/0x140 [ 992.472035][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.472058][ T32] ? clear_bhb_loop+0x70/0xc0 [ 992.472084][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.472106][ T32] RIP: 0033:0x7efd2159cfc7 [ 992.472127][ T32] RSP: 002b:00007fff680534d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 992.472150][ T32] RAX: 0000000000000000 RBX: 00007fff68053530 RCX: 00007efd2159cfc7 [ 992.472164][ T32] RDX: 00000000000001ff RSI: 00007fff68053530 RDI: 00000000ffffff9c [ 992.472178][ T32] RBP: 00007fff6805351c R08: 0000000000000003 R09: 00000000fffffffd [ 992.472192][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000143 [ 992.472205][ T32] R13: 000055557f4d9a00 R14: 00000000000bf9f9 R15: 00007fff68053570 [ 992.472241][ T32] [ 992.472296][ T32] INFO: task syz.4.5028:27364 blocked for more than 143 seconds. [ 992.472313][ T32] Not tainted syzkaller #0 [ 992.472324][ T32] Blocked by coredump. [ 992.472330][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 992.472339][ T32] task:syz.4.5028 state:D stack:26808 pid:27364 tgid:27358 ppid:18325 task_flags:0x40054c flags:0x00080001 [ 992.472400][ T32] Call Trace: [ 992.472407][ T32] [ 992.472430][ T32] __schedule+0x17db/0x58f0 [ 992.472469][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 992.472492][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 992.472522][ T32] ? __pfx___schedule+0x10/0x10 [ 992.472555][ T32] ? schedule+0x90/0x2b0 [ 992.472581][ T32] schedule+0x164/0x2b0 [ 992.472606][ T32] schedule_preempt_disabled+0x13/0x30 [ 992.472628][ T32] __mutex_lock+0x7c1/0x1550 [ 992.472658][ T32] ? __mutex_lock+0x5d4/0x1550 [ 992.472688][ T32] ? tun_chr_close+0x3e/0x1c0 [ 992.472712][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 992.472758][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 992.472781][ T32] tun_chr_close+0x3e/0x1c0 [ 992.472802][ T32] ? __pfx_tun_chr_close+0x10/0x10 [ 992.472823][ T32] __fput+0x418/0xa50 [ 992.472859][ T32] task_work_run+0x1d9/0x270 [ 992.472885][ T32] ? __pfx_task_work_run+0x10/0x10 [ 992.472907][ T32] ? do_exit+0x735/0x2360 [ 992.472924][ T32] ? kmem_cache_free+0x182/0x650 [ 992.472945][ T32] ? put_net+0x191/0x260 [ 992.472978][ T32] do_exit+0x73a/0x2360 [ 992.473008][ T32] ? __pfx_do_exit+0x10/0x10 [ 992.473029][ T32] ? cgroup1_freezing+0x20/0x350 [ 992.473070][ T32] ? cgroup1_freezing+0x20/0x350 [ 992.473109][ T32] do_group_exit+0x22d/0x2f0 [ 992.473129][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 992.473156][ T32] get_signal+0x121b/0x12c0 [ 992.473207][ T32] arch_do_signal_or_restart+0xbb/0x860 [ 992.473241][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 992.473293][ T32] exit_to_user_mode_loop+0x10e/0x770 [ 992.473314][ T32] ? rcu_is_watching+0x16/0xb0 [ 992.473343][ T32] do_syscall_64+0x328/0x520 [ 992.473366][ T32] ? trace_irq_disable+0x3b/0x140 [ 992.473387][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.473408][ T32] ? clear_bhb_loop+0x70/0xc0 [ 992.473441][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.473461][ T32] RIP: 0033:0x7f1ed679e159 [ 992.473479][ T32] RSP: 002b:00007f1ed766a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 992.473501][ T32] RAX: ffffffffffffffea RBX: 00007f1ed6a26180 RCX: 00007f1ed679e159 [ 992.473516][ T32] RDX: 0000000000000010 RSI: 0000200000001400 RDI: 0000000000000007 [ 992.473529][ T32] RBP: 00007f1ed683506b R08: 0000000000000000 R09: 0000000000000000 [ 992.473542][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.473555][ T32] R13: 00007f1ed6a26218 R14: 00007f1ed6a26180 R15: 00007fff4bfdaab8 [ 992.473590][ T32] [ 992.473610][ T32] [ 992.473610][ T32] Showing all locks held in the system: [ 992.473622][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 992.473713][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 992.473853][ T32] locks held by getty/5376: 2, on CPU#1: [ 992.473868][ T32] #0: ffff88807fac30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 992.474001][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 992.474064][ T32] locks held by syz-executor/19520: 1, on CPU#1: [ 992.474078][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 992.474129][ T32] locks held by kworker/0:0/22799: 3, last CPU#0: [ 992.474143][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.474200][ T32] #1: ffffc90004e07c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.474256][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 992.474388][ T32] locks held by kworker/u8:70/26902: 8, last CPU#0: [ 992.474403][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.474467][ T32] #1: ffffc9000612fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.474522][ T32] #2: ffff88807e3e1258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 992.474674][ T32] #3: ffff8880552dc4e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x19e/0xb40 [ 992.474734][ T32] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 992.474846][ T32] #5: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xbf0 [ 992.474915][ T32] #6: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 992.475016][ T32] #7: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 992.475083][ T32] locks held by kworker/u8:73/26905: 2, last CPU#1: [ 992.475097][ T32] #0: ffff888031d2c940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.475153][ T32] #1: ffffc90006167c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.475211][ T32] locks held by kworker/u8:80/26913: 3, last CPU#0: [ 992.475226][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.475281][ T32] #1: ffffc900061ffc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.475337][ T32] #2: ffff888032e15258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 992.475400][ T32] locks held by kworker/u8:81/26914: 3, on CPU#1: [ 992.475413][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.475482][ T32] #1: ffffc9000620fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.475537][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 992.475639][ T32] locks held by kworker/u8:90/26923: 3, on CPU#1: [ 992.475661][ T32] #0: ffff888031a01140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.475716][ T32] #1: ffffc900062e7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.475769][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 992.475845][ T32] locks held by kworker/u8:91/26924: 5, on CPU#1: [ 992.475859][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.475913][ T32] #1: ffffc900062f7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.475966][ T32] #2: ffffffff90244b88 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 992.476042][ T32] #3: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 992.476094][ T32] #4: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 992.476152][ T32] locks held by syz.4.5028/27364: 1, on CPU#1: [ 992.476166][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 992.476216][ T32] locks held by syz-executor/27402: 2, on CPU#1: [ 992.476230][ T32] #0: ffffffff90244b88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 992.476279][ T32] #1: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 992.476332][ T32] locks held by syz-executor/27406: 1, on CPU#1: [ 992.476346][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 992.476397][ T32] locks held by syz-executor/27413: 1, on CPU#1: [ 992.476411][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 992.476472][ T32] locks held by kworker/1:1/27414: 3, on CPU#1: [ 992.476487][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.476549][ T32] #1: ffffc9000d277c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 992.476603][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 992.476715][ T32] locks held by syz-executor/27419: 1, on CPU#1: [ 992.476730][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.476822][ T32] locks held by syz-executor/27421: 1, on CPU#1: [ 992.476836][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.476894][ T32] locks held by syz-executor/27467: 1, on CPU#1: [ 992.476908][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.476964][ T32] locks held by syz-executor/27477: 1, on CPU#1: [ 992.476978][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477036][ T32] locks held by syz-executor/27480: 1, on CPU#1: [ 992.477050][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477108][ T32] locks held by syz-executor/27483: 1, on CPU#1: [ 992.477121][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477179][ T32] locks held by syz-executor/27487: 1, on CPU#1: [ 992.477193][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477250][ T32] locks held by syz-executor/27498: 1, on CPU#1: [ 992.477264][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477320][ T32] locks held by syz-executor/27506: 1, on CPU#1: [ 992.477334][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477390][ T32] locks held by syz-executor/27515: 1, on CPU#1: [ 992.477404][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477471][ T32] locks held by syz-executor/27520: 1, on CPU#1: [ 992.477485][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477542][ T32] locks held by syz-executor/27525: 1, on CPU#1: [ 992.477555][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477613][ T32] locks held by syz-executor/27540: 1, on CPU#1: [ 992.477627][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477691][ T32] locks held by syz-executor/27548: 1, on CPU#1: [ 992.477705][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477763][ T32] locks held by syz-executor/27556: 1, on CPU#1: [ 992.477777][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 992.477832][ T32] locks held by syz-executor/27558: 4, last CPU#0: [ 992.477846][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 992.477899][ T32] #1: ffff88802a5b7678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 992.477966][ T32] #2: ffff8880121e5038 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 992.478028][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 992.478084][ T32] locks held by syz-executor/27561: 2, last CPU#0: [ 992.478098][ T32] #0: ffff88802a5b1d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 992.478159][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 992.478211][ T32] locks held by dhcpcd/27562: 1, on CPU#1: [ 992.478224][ T32] #0: ffff888055faaa80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 992.478313][ T32] [ 992.478319][ T32] ============================================= [ 992.478319][ T32] [ 992.478328][ T32] NMI backtrace for cpu 1 [ 992.478341][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 992.478362][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 992.478373][ T32] Call Trace: [ 992.478382][ T32] [ 992.478391][ T32] dump_stack_lvl+0xe8/0x150 [ 992.478430][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 992.478518][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 992.478551][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 992.478585][ T32] sys_info+0x135/0x170 [ 992.478612][ T32] watchdog+0xfd7/0x1030 [ 992.478640][ T32] ? watchdog+0x1c7/0x1030 [ 992.478667][ T32] kthread+0x38b/0x480 [ 992.478686][ T32] ? __pfx_watchdog+0x10/0x10 [ 992.478703][ T32] ? __pfx_kthread+0x10/0x10 [ 992.478725][ T32] ret_from_fork+0x514/0xb70 [ 992.478749][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 992.478768][ T32] ? __switch_to+0xc89/0x1420 [ 992.478807][ T32] ? __pfx_kthread+0x10/0x10 [ 992.478830][ T32] ret_from_fork_asm+0x1a/0x30 [ 992.478875][ T32] [ 992.478884][ T32] Sending NMI from CPU 1 to CPUs 0: [ 992.478913][ C0] NMI backtrace for cpu 0 [ 992.478937][ C0] CPU: 0 UID: 0 PID: 26902 Comm: kworker/u8:70 Not tainted syzkaller #0 PREEMPT(full) [ 992.478958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 992.478970][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 992.478998][ C0] RIP: 0010:__lock_acquire+0x529/0x2de0 [ 992.479020][ C0] Code: 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d 4b 8d 0c bf 41 8b 8c ce d0 0b 00 00 31 c1 ff cb 49 ff cc f7 c1 00 60 00 00 74 cf 18 48 c7 c7 f0 ab c2 8e 4c 89 fe e8 96 49 79 03 48 8b 45 20 eb [ 992.479036][ C0] RSP: 0018:ffffc90000006a58 EFLAGS: 00000006 [ 992.479052][ C0] RAX: bd00000000022007 RBX: 0000000000000004 RCX: 00000000000627cd [ 992.479065][ C0] RDX: 0000000000000003 RSI: 0000000000022000 RDI: bd00000000000000 [ 992.479078][ C0] RBP: ffff888072e06a60 R08: ffffffff8177f1df R09: 0000000000000000 [ 992.479090][ C0] R10: ffffc90000006d38 R11: ffffffff81b28ab0 R12: 0000000000000002 [ 992.479103][ C0] R13: 0000000000000000 R14: ffff888072e05dc0 R15: 0000000000000003 [ 992.479115][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 992.479131][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 992.479144][ C0] CR2: 0000558fa4c8d710 CR3: 000000004c39c000 CR4: 00000000003526f0 [ 992.479162][ C0] Call Trace: [ 992.479169][ C0] [ 992.479183][ C0] ? lock_acquire+0x115/0x350 [ 992.479203][ C0] lock_acquire+0x115/0x350 [ 992.479220][ C0] ? unwind_next_frame+0x8f/0x2550 [ 992.479244][ C0] ? unwind_next_frame+0x8f/0x2550 [ 992.479263][ C0] ? nf_hook_slow+0xc5/0x220 [ 992.479317][ C0] ? unwind_next_frame+0x8f/0x2550 [ 992.479337][ C0] unwind_next_frame+0xac/0x2550 [ 992.479356][ C0] ? unwind_next_frame+0x8f/0x2550 [ 992.479377][ C0] ? br_nf_forward_ip+0xc3/0xa30 [ 992.479466][ C0] ? unwind_next_frame+0x8f/0x2550 [ 992.479486][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 992.479511][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 992.479529][ C0] arch_stack_walk+0x11b/0x150 [ 992.479551][ C0] ? nf_hook_slow+0xc5/0x220 [ 992.479569][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 992.479611][ C0] stack_trace_save+0xa9/0x100 [ 992.479627][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 992.479648][ C0] kasan_save_track+0x3e/0x80 [ 992.479665][ C0] ? kasan_save_track+0x3e/0x80 [ 992.479682][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 992.479699][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 992.479724][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 992.479743][ C0] ? br_nf_forward_ip+0xc3/0xa30 [ 992.479766][ C0] ? nf_hook_slow+0xc5/0x220 [ 992.479802][ C0] __kasan_slab_alloc+0x6c/0x80 [ 992.479821][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 992.479846][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 992.479866][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 992.479890][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 992.479914][ C0] skb_ext_add+0x1b6/0x8e0 [ 992.479947][ C0] ? br_nf_forward+0x478/0x18d0 [ 992.479980][ C0] br_nf_forward_ip+0xc3/0xa30 [ 992.480005][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 992.480031][ C0] nf_hook_slow+0xc5/0x220 [ 992.480051][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 992.480107][ C0] NF_HOOK+0x23e/0x3f0 [ 992.480129][ C0] ? NF_HOOK+0xa2/0x3f0 [ 992.480149][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 992.480171][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 992.480194][ C0] ? br_handle_vlan+0x5e/0x530 [ 992.480233][ C0] __br_forward+0x397/0x540 [ 992.480254][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 992.480278][ C0] br_flood+0x3e3/0x8d0 [ 992.480304][ C0] br_handle_frame_finish+0x1119/0x1950 [ 992.480333][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 992.480358][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 992.480414][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 992.480433][ C0] ? nf_hook_slow+0x176/0x220 [ 992.480452][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 992.480476][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 992.480499][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 992.480562][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 992.480587][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 992.480612][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 992.480637][ C0] ? lock_acquire+0x115/0x350 [ 992.480655][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 992.480682][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 992.480709][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 992.480735][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 992.480760][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 992.480787][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 992.480813][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 992.480840][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 992.480864][ C0] br_handle_frame+0x1329/0x1600 [ 992.480892][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 992.480918][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 992.480948][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 992.480966][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 992.480989][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 992.481012][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 992.481038][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 992.481056][ C0] ? ip6_rcv_finish+0x265/0x280 [ 992.481081][ C0] ? NF_HOOK+0x336/0x3c0 [ 992.481110][ C0] ? process_backlog+0x3de/0x18b0 [ 992.481129][ C0] ? process_backlog+0x3de/0x18b0 [ 992.481150][ C0] process_backlog+0x727/0x18b0 [ 992.481171][ C0] ? process_backlog+0x3de/0x18b0 [ 992.481196][ C0] __napi_poll+0xaa/0x330 [ 992.481215][ C0] net_rx_action+0x61d/0xf50 [ 992.481240][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 992.481270][ C0] handle_softirqs+0x226/0x860 [ 992.481294][ C0] ? do_softirq+0x77/0xd0 [ 992.481318][ C0] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 992.481343][ C0] do_softirq+0x77/0xd0 [ 992.481364][ C0] [ 992.481370][ C0] [ 992.481378][ C0] __local_bh_enable_ip+0x100/0x140 [ 992.481401][ C0] nsim_dev_trap_report_work+0x7a4/0xb40 [ 992.481431][ C0] ? process_scheduled_works+0x97a/0x1630 [ 992.481454][ C0] process_scheduled_works+0xc3d/0x1630 [ 992.481488][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 992.481513][ C0] ? assign_work+0x3cf/0x5d0 [ 992.481536][ C0] worker_thread+0xa47/0xfb0 [ 992.481570][ C0] kthread+0x38b/0x480 [ 992.481586][ C0] ? __pfx_worker_thread+0x10/0x10 [ 992.481608][ C0] ? __pfx_kthread+0x10/0x10 [ 992.481625][ C0] ret_from_fork+0x514/0xb70 [ 992.481643][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 992.481660][ C0] ? __switch_to+0xc89/0x1420 [ 992.481684][ C0] ? __pfx_kthread+0x10/0x10 [ 992.481701][ C0] ret_from_fork_asm+0x1a/0x30 [ 992.481733][ C0] [ 992.872331][T27532] Bluetooth: hci17: command tx timeout [ 993.161128][ C0] net_ratelimit: 5330 callbacks suppressed [ 993.161155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 993.161649][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 993.162681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 993.164222][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 993.165177][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 993.165620][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 993.167646][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 993.168085][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 993.169082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 993.170510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:42:fd:8e:10:e5:31, vlan:0) [ 993.850543][T19524] Bluetooth: hci16: command tx timeout [ 994.180115][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 995.718193][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 995.727332][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 995.737427][ T32] Call Trace: [ 995.740743][ T32] [ 995.743697][ T32] vpanic+0x56d/0xa60 [ 995.747705][ T32] ? __pfx___schedule+0x10/0x10 [ 995.752595][ T32] ? __pfx_vpanic+0x10/0x10 [ 995.757146][ T32] panic+0xc5/0xd0 [ 995.760901][ T32] ? __pfx_panic+0x10/0x10 [ 995.765346][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 995.770833][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 995.776229][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 995.782597][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 995.788784][ T32] watchdog+0x1030/0x1030 [ 995.793149][ T32] ? watchdog+0x1c7/0x1030 [ 995.797599][ T32] kthread+0x38b/0x480 [ 995.801693][ T32] ? __pfx_watchdog+0x10/0x10 [ 995.806391][ T32] ? __pfx_kthread+0x10/0x10 [ 995.811009][ T32] ret_from_fork+0x514/0xb70 [ 995.815622][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 995.820752][ T32] ? __switch_to+0xc89/0x1420 [ 995.825455][ T32] ? __pfx_kthread+0x10/0x10 [ 995.830151][ T32] ret_from_fork_asm+0x1a/0x30 [ 995.834962][ T32] [ 995.838129][ T32] Kernel Offset: disabled [ 995.842448][ T32] Rebooting in 86400 seconds..