last executing test programs: 1m25.913220243s ago: executing program 2 (id=455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x10, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100), 0x0, 0x8c00) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000"], 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0xf, 0x6, 0xfffffffc) sendto$inet6(r9, &(0x7f0000000180)="9000000018001f2fb9269b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000b7000000000000000010000000000000004cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf82f26b2e00080027"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000400)={0xfeff, 0x7, 0x0, 0x5}, 0x8) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x2400c804}, 0x20000041) recvmsg(r3, &(0x7f00000001c0)={&(0x7f0000000500)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)=""/143, 0x8f}, {}, {&(0x7f0000000800)=""/104, 0x68}, {&(0x7f0000000880)=""/117, 0x75}], 0x4, &(0x7f0000000900)=""/208, 0xd0}, 0x2100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="30fb0000fd3b10dd98ca787257a5733a8044a0b12db5785a1618f88255a8edea8756df6a56a5c6d4b69273799a16368a5c6c2f2445ec2c75a24aebd5ac8f2e13b3ac47a7c06d88de9132c32840dd669cdec3cddbbcb7f684c610c88ba2f90549dae871b073ddfda399c5e9781ed8487218a3108a82ede6", @ANYRES16=r4, @ANYBLOB="0100000000000000000039098c0008000300", @ANYRESDEC=r1, @ANYBLOB="14005a8010000180040001000500020056000000"], 0x30}}, 0x4000) socket$alg(0x26, 0x5, 0x0) 1m25.304396854s ago: executing program 1 (id=463): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x57) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x20008080) 1m25.067302826s ago: executing program 1 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) (async) accept4(r2, 0x0, 0x0, 0x80000) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b91f0000000000008000f0fffeffe809000000ffd9dd00000010000100000808004149004006040800", 0x58}], 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r4, 0x0, 0x9}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r9, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) 1m24.916581215s ago: executing program 0 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x68, r2, 0x41b, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_b, @from_mac=@broadcast, {0x1, 0x7}, @device_b, @value={0x4, 0x1, 0x1, 0x1, 0x3c}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8864}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x63f2}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x44810}, 0x4000000) 1m24.854985214s ago: executing program 2 (id=469): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@dellinkprop={0x20, 0x6d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0xc06, 0x41}}, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e0000000c000000e0ff000005000000000000004f090976c801293b27c9596e47e72a026375b12e5b7cc4a87bb9dc142c8d143ff1b3c2223cd452d5a58d04275e13abb808b4e257ee93a964a713dc56115b30c5a76f66a96e22d71af12b11637972d857c3b79961", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0000000000000000010000000700"/28], 0x50) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xb7, &(0x7f0000000600)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xb, 0x55d0d95e, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x2, 0x2, 0x1, 0xc}, {0x1, 0x3, 0x10, 0xb}, {0x1, 0x4, 0xf, 0x1}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='io_uring_poll_arm\x00', r10, 0x0, 0x4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1m24.766650699s ago: executing program 1 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000601180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m24.722969596s ago: executing program 0 (id=471): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000005800000121f", 0x2e}], 0x1}, 0x404c080) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000007cc0)=ANY=[@ANYBLOB="140000006a0015ff"], 0x14}], 0x1}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0038e000dc177b93d24681d73fbd3efa56", @ANYRES16=r5, @ANYBLOB="000828bd7000fcdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b0005000000060011006c0800000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000200000006001100010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b00010000000600110005000000"], 0xbc}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r6, &(0x7f00000001c0), 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="8f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)="e1", 0x1}], 0x1}}], 0x2, 0x4000005) (async) close(r0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='highspeed\x00', 0x0) setsockopt(0xffffffffffffffff, 0xff, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001300)=@newtfilter={0x910, 0x2c, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {0xb, 0x4}, {0x10, 0xfff8}}, [@TCA_CHAIN={0x8, 0xb, 0x10001}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x4}]}}, @filter_kind_options=@f_fw={{0x7}, {0x8bc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7fff}, @TCA_FW_POLICE={0x860, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x23, 0x20000000, 0x0, 0x7, 0xf355, {0x3, 0x0, 0x4, 0x1, 0x9, 0x2}, {0x14, 0x0, 0x3, 0xfffb, 0x3, 0x5}, 0xfffff50c, 0x4f0d, 0x95ba}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x6, 0x5d, 0x2, 0x6c69, 0x1, 0x11adb662, 0x3ff, 0xc, 0x8, 0x1, 0x6, 0x9, 0x8, 0xa22, 0x100, 0x1, 0x1, 0x1, 0xa, 0x100, 0x2, 0x1ff, 0x9, 0x7, 0x6, 0x40, 0x6, 0x80000000, 0xfffffffe, 0x400, 0x7, 0x8, 0x5, 0xffff8000, 0xca9e, 0x3, 0x800, 0xfff, 0x8, 0x2, 0x5, 0xf, 0x4, 0x2, 0x2, 0x5, 0x3, 0xa35f, 0x4d, 0x8, 0x8bc4, 0xab, 0xfffffffd, 0x9, 0x3, 0x80000001, 0xa57e, 0x9, 0x2, 0x48b, 0x3, 0x1, 0xfffffff1, 0x6, 0x28, 0xfff, 0xfffffb80, 0xffff, 0x0, 0x80, 0x839, 0x9, 0x1, 0xad7, 0x6, 0x0, 0x0, 0x5, 0x6, 0x4, 0x0, 0x4, 0x3, 0xb, 0x7, 0x1, 0x60777dbb, 0x1b, 0x3, 0xffff, 0x8, 0x6, 0x0, 0x7, 0x3, 0xfffffffd, 0x2, 0x10, 0x4, 0x4, 0xffffff00, 0x3, 0x2, 0x2, 0xff, 0x400, 0x100, 0x0, 0x6, 0x8, 0x7, 0x3739, 0x9, 0x200, 0xfff, 0x8, 0x6c, 0x7, 0x2, 0xfb788a9, 0x400, 0x2, 0x1, 0x3, 0x4, 0x8000, 0x8, 0x0, 0xffff, 0x2, 0x7, 0x3, 0x401, 0xfff, 0xc, 0x420, 0x2, 0x67a6bb7d, 0x8a, 0x101, 0xfff, 0x7ff, 0x9, 0x5, 0xf, 0x7, 0xfb2, 0x7, 0x9, 0x8976, 0x8000, 0x2, 0x5, 0x80000001, 0x8, 0x9, 0xcd6c9da, 0x1, 0x6, 0x2, 0x9, 0x9, 0xffffffff, 0x3, 0x7fba, 0x3da, 0x9, 0x9, 0x8, 0x5, 0xfffffffc, 0x200, 0xffffdc19, 0x3, 0xffff, 0x8, 0x1, 0x127d286e, 0x7fffffff, 0xa, 0x9, 0x6, 0xc11d, 0x89b, 0x7, 0xd94, 0x8, 0x9, 0x3, 0xffffff7f, 0x5, 0x1, 0x800, 0x1, 0x5, 0x984, 0x7, 0x8, 0x4, 0x1, 0x2, 0x7, 0xb, 0x8, 0x76ca, 0x5, 0x7, 0x4, 0x9, 0x8, 0x0, 0x2, 0x5, 0x3, 0x80, 0x192, 0x1, 0x5, 0x3ff, 0x1800000, 0x8001, 0xee, 0x8001, 0x0, 0x2, 0x3, 0x4ea7, 0x6c, 0xc5, 0x905f, 0x40, 0x10100002, 0xfffffc00, 0xffffffff, 0x8, 0x81, 0xffffffff, 0x799, 0x7, 0x97, 0x0, 0x10, 0xfffffffe, 0xfffffffd, 0xfff, 0x9, 0x0, 0x25, 0x3, 0x7ff0000, 0x0, 0x9, 0x5e4, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xdfd, 0x6, 0x5, 0x7, 0x0, 0x7, 0x6, 0x7f, 0x40, 0xfffffffe, 0x3, 0x7fff, 0xfff, 0x9, 0x46, 0x6, 0x400, 0xfffff179, 0x4, 0x7, 0x2, 0x9, 0x3, 0x7fffffff, 0xa9, 0x9, 0x7, 0x6, 0x1, 0x0, 0x2, 0x7fffffff, 0x8, 0x47, 0x200, 0x3, 0x4, 0x3, 0xf7, 0x0, 0x6, 0x2c, 0x200, 0x5, 0xe3f, 0x4, 0x1, 0x0, 0x200, 0x5, 0x5, 0x1, 0xe, 0x9, 0x1, 0x7, 0x7, 0x7, 0xdb860851, 0x3, 0x80000001, 0x2, 0x9, 0x1000, 0x6599ec07, 0x1000, 0x5, 0x77, 0x3ff, 0x36, 0x81, 0xea, 0x3, 0x6, 0x3, 0xfffffffa, 0x5, 0x0, 0x802000, 0x1, 0x7, 0x80, 0xc, 0x4a187bf0, 0x100, 0x2, 0x2, 0x2, 0x5329115a, 0x1, 0x1ff, 0x6, 0x7ff, 0x6, 0x3, 0xf, 0x6, 0x8, 0x7, 0x4, 0x1, 0x101, 0x3, 0x2, 0x6, 0x200, 0x7, 0x1, 0xdac0000, 0x3, 0x2, 0xd0, 0x7, 0xa, 0x10000, 0x2, 0x80000000, 0xc, 0x5, 0x0, 0x8, 0x200, 0xf1, 0x401, 0x8, 0x1, 0x6, 0x6, 0xc66095f, 0x3, 0x3, 0x8, 0x6, 0x6, 0x1000, 0x1, 0x5, 0x8, 0x7ff, 0x80000001, 0x7, 0xbf0a, 0x9, 0x7f, 0x6, 0xffff7fff, 0x8, 0x609, 0xc571, 0x6e1, 0x1, 0x6, 0x2, 0xedd, 0x4, 0x7, 0x7, 0x7, 0x1, 0x2, 0x3, 0x0, 0x5, 0x8, 0x5, 0x80000d, 0x800, 0x0, 0xd, 0x7, 0x57877241, 0x4, 0x5, 0x0, 0xa59c, 0x8, 0x81, 0x400, 0x1, 0x6, 0x1bb2d968, 0xe9, 0x5, 0x57e, 0x10000, 0x3, 0x6, 0xfffffff9, 0x97, 0x6, 0x4, 0x7, 0x0, 0x7, 0xa, 0x9, 0xbca, 0x5c, 0x81, 0x1, 0x0, 0x1, 0xffff0001, 0x7f, 0x97e, 0x4, 0x6, 0x1, 0x80000000, 0x73, 0x4, 0x0, 0x9, 0x8, 0x5, 0xffffffff, 0x0, 0x3, 0x3, 0x3, 0x80000001, 0x1, 0x44b0, 0x1, 0x5, 0x7, 0x2, 0x5, 0x2c72, 0x2, 0x4, 0x8, 0x9, 0xf82c, 0x0, 0x9, 0x4, 0x4, 0x6, 0x6, 0x4, 0x2, 0x9c067995, 0x1, 0xc4f8, 0x1ff, 0x4, 0x2, 0x80006d, 0x6, 0x3b, 0x2, 0x1c000000, 0x2, 0x1, 0x5]}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip6erspan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_team\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_macvtap\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x1}}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x97}]}]}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x910}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f0000000040)=0x9, 0x4) r8 = socket(0x10, 0x803, 0x0) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="94a50e464aa3e7ff9449d8f89a5c4eeb75c28bdd23c729de2c3bc7b136b2ac4a27101c9869f8fecaa38ee848a581633a1551927607c256aaa99db1ed65ab9963f72adba1c79de7c679e838b347fd2ec2bff06dafafb3ba65ec7992f6d6cc0320666df610b14cb46642d714ed587a1be149ae1320", 0x74}], 0x1) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 1m24.536406856s ago: executing program 1 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000003f00000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m24.413331293s ago: executing program 1 (id=473): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000080)=0x80) bind$802154_raw(r0, &(0x7f00000000c0)={0x24, @short={0x2, 0x2}}, 0x14) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x802d, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0x32, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf6c, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x5, 0x5, 0xb, 0x2, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0xb, 0x1, 0x1, 0x50, 0xfffffffffffffff5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x4, 0x4, 0x2, 0xffffffffffffffff, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0xa7df, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @flow_dissector, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xe, 0x5cf, 0x7ff}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r7, 0x1, r8, r9], 0x0, 0x10, 0x800, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000ac0)={0x0, 0x84, "3eadec6cfba6f0096dd03d7b36748911ab8dd1c1115fbedec7891b3046f070dedabfe9b418df425d020a6fb906c36878ba78a6e20ea9ac9d13a1695155d7625bf45324316208dc8b8433e28fe7d0e0f5719d2a127346defee269faeaeddc6b2e949c33f1cd0aa4a3e0c2c87e64f225ec860b493d13d0a5898c2ea97572bb5e03464ad5b1"}, &(0x7f0000000b80)=0x8c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000bc0)={r10, 0x8}, &(0x7f0000000c00)=0x8) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x8000}) recvmsg(r7, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000dc0)=""/49, 0x31}, {&(0x7f0000000e00)=""/117, 0x75}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/68, 0x44}], 0x5, &(0x7f0000002f80)=""/101, 0x65}, 0x3) recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000003040)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003140)=[{&(0x7f00000030c0)=""/68, 0x44}], 0x1}, 0xfffffffb}, {{&(0x7f0000003180)=@generic, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003200)}, {&(0x7f0000003240)=""/185, 0xb9}, {&(0x7f0000003300)=""/160, 0xa0}], 0x3, &(0x7f0000003400)=""/4096, 0x1000}, 0x3}], 0x2, 0x40, 0x0) r11 = socket$inet6(0xa, 0x800, 0x8) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000004480)=r4, 0x4) unshare(0x10000000) accept$alg(r11, 0x0, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r12, 0xf501, 0x0) bind$802154_dgram(r5, &(0x7f00000044c0), 0x14) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000004500)={0x1, {{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x1, 0x9, [{{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e24, @broadcast}}]}, 0x510) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000005c80)={&(0x7f0000004a40)="85fef75fd509d04b0fc84776b70eecbffc346840bee5a89497c47a99a6566a019828ac2c1a356585938b06a6c1efc5518b1c08b9a2c788265c3bf262f5e5a991ad6187050f14429ddf48f92a854af8f5200a01051e97153fc247c18d5d77d6cb94e03590f91cbc986dffe55b072176b01aae84e44c3e47b75f02a30d111efab5b57b35dfa75a2496cd71f62f91685374cd7f4bbb24", &(0x7f0000004b00)=""/85, &(0x7f0000004b80)="6c685b921325b4972fd06c4da0a581fa647a9532b1c18b3f47ccf34edef6a998d32d60d33991bb448c990bbef1dd1bbfe6ab02a8091d2f035de98e723c03a863b5e889244e742d8d74a42677ce61b3d39e7934564aa6f1fdb0377c4bb012bce660177e05498a3044ed434bbcaba9c2ef2c7afa0917c33374f2baff7827cfd2f38b76f71551e9d10648fdd74e4376ee80ea3a9799d10ee2f3eb40ac6d15a6d5b128dd4e6f6fc676f969eb8b5fcca7bc11e98622f1ee106653832bae86f643ecafb23fe2ea38093c9884a6d6a355867a5d30277e1b8cdb97e8f7afa0b1663519d5e743ed7efe1ba05f7e61cef8a1e8f97924c47cdfd531714c36519fb1e1614f80ce6c2885172bfdec4cc9063309118cf5347095ba39d41ea78219095f8267a49eced2ea1b0aa351adbc1a402b463d9b432d9bc9a03a16e37843d87a8ab7ddf97e595181dd785c34faa4482e1ca5d6cdb6ad22088b554807b1b67ff28e2184b4f630650215e63e376fb7e26c1ea5e02d6bb59b8906bc4ed99916d7499b89d10dc0b27f002e6a73a0657ff77d4187508ee29544e14e9ff5c092452261dfc14c2983b8915011eee4a9fe803cb4fd848d51320891044ccef3fa4a8ce3fcb55413338aa0e66cb777ec08c6298cfbfa96be8b6366c12ca1e66c727c576a4e6a3a1a00130387927fb3b487c3022d152645f13bbf97d7093f091a23590245e9f554dcdb5c6e0a6e0d8d36b9765c4a943d902a5b7a0518641da5222c020be4df46f651d31a53ac46604e1a09afa09ed6a1cc814dffa6ef499a35b82836fafa61f88b48e1a9554c957e56b54bc31f9efd115828d32910c1a5f5aaf7a8f01ea8d483c42a57391e09b51cb009df368122cc9234a27f1970c698b4d7727d7e3bab304b154e780199156fc2987892663221953b78a491f36bb5270a4b9a77fd4f0d69b9442fb343ca1e6930c2cd8335376b9a2f41741fc7fcece89ab7dfe15a36fc88640f4173b14986964dd7ff37e88ed79fa75f160260059af0847baa60fa80290423ca68b216d95ed67e8ab773ba7a2eb892e1289beb4e9b20648e95a77304ae9b2acd1aa3649ce646780580148d448da4b69c10edc4e291fb5c1ef48a3ca20bd08a817dd90dbae7029d27e1bbb1a9e18835cc71af0341d2c7d23be602015e404f3cd7e6563543946e47b6d517a797c8f203e085c2056dd12c6bb0c7028114bf50de73a8a9a1953946bd21a7e4f5b925dcdd9551208ca9b3c3eef0ceb062508a814ffad8414eec5ae1a257291f3a997cd77689b092a69d63b5a9d87bf0d63fadac4d187123ea45ec92a0667f941b467d2a0f9012e56066d3a9be78ca7e39b429fabcb4f66b502dff02ced9ef4e993ca21b2d453dac294dd28d529cb1984ebfd77328796cd6b5df06c85bf81c10e0f2fd6a8c73584a475bbaac76734b4ab8dddb0e79de0aac537d9eac0f48379427b0b8ac1fb71e4cabf5a132156b00caa0704042f9cad09b8eab4f48734826bab3c89e0567490ce03fcfe689e9099a5d121bf84bc24fcd84b28ad4517b87c3a9052e7367952e13a5ee0c4dd37861da2f1aec81bd47e0bbe2310fdbdfb9a1693e5ecba9fde108ce22afb9fa56ebdf4daaefd9996bd22f686b7439f0141209fa7d5000272c4ed048d8e73e35f5175a805f1935fb7462bf6a5ae7f232e20c5f233e0f753dbf0475ec9b33aceae23d970e6fb2c41a01ef3ae84c046a1bef5ac85800ff5c81bc2e5f330fdb16c5b3d940576e8a446cee307bbd3f463fbc9425ca2f18cb6f5513eccd0a60426b071014f56f195fed5cb7afbc269b1465c4ea6f43f7808123770b4feefed2a83f653964ee2a92ca24391dbc612bd096328cee0a14a3e858780fe8a210cc31a0289cd4c41ea9213bddcdc1cfd0fb23ba9da56413a17d54d841d48b2debebb8d34dab39df112e37aeb4ca9e34afd17742d453c5d8f8766773a791375a58ce7fc5c20b38fdae2ca6e0699c337e5ee2dcdc97bc977ecd9afe53d062ce3743de6cad4601c250f80bfcdc9150630434277e1b7cac7caced7227f6e228fe54e78270c7b91f9d92d361a553cec51b32ac1f8d316cf3a703e57b0429d7a0f896405b75f6b82d0adf2978ba518aded0b707a082fc36f8670a02609107071ce377e10e64dca9f4656da1ba0657781ba22b5df0f5a52ffea77694898b60dc186b47c1a28702e80f836339c13135ab1e33bf45594e00a7413413543dc3ce6d406662f90d541e68c0de8bbbadf1a830eb38610fe78210a6f1f7cce02e891338475934281a437f754a1cd85eec3532b34f4e6a37973e3572faba8217a556e86660ea5653fc7c6ce3076831d9c216d7b4ea8b012bf35c2b150b7f802468e06f7e6f047d8b3f21abc220a6a1192aad1a4c1c241e04c891f682987d4a14a2102a50f8e59217da158a694f24de861c8c1478a06fdf10c9b37fa398d83ffc12c071fccba62400cfce472bc3df8750906bdec2437327feabd0aee6cc4013daa6c9ba79b72ca0ffdf88c0312c10c28b6279c6037b7ea3e13bf5570f8b00c491dfca7b9438201817f823a190113b3f85033c4f7add07a62f0da6f11dd76a4bbb3ac18db6674c92f3553565c55a1b756ac2c8083a5b70e220395393dafde6a9bbd47861fd43d7056b6f29ed18b605ed3cfa8e7770eff6155bc42fa94460b95fcfdf6e59aabf9e3d680a407d9bac5fa9aca9707b21841c4b812492aef8d2117cd5c11b8fe79c8c9bce5c9485c7e9cf9d2a46a3bd3c3f3fd478aff9bf512734481f6e02eeeed7491009bd9cdfa2bb788e784b50c4f5ee2d94638e1ce9dd2f281c55ed9034a6b0fbc7ad908e768bdb96866ca3f22a0e304a0506dcab6604c342ac224fe43b40917ab7056a5917b0a91d381fd6835b0bddbb61c77efb046caed8fe35b2595cee02d066255203ae76ad1ed42636339941b06acd37a5299094381521bb8a2d14ef72744702a4035e1f28b693c4758c4c6b871f543375516c5e2d651ed5fbcacf241ed351f08416fd883f6b8764c12bf17da06e35f6601558ebbf2d9976c75a6a8fdc37b8b7e2c617b9c7c3f22000141978de7ee497b60ae7bfd0bfb3e67077debb87e61658d542fb6fd75ecd29c6694b7b20fe9b82516d3a76bfb6b0cbb35adc05967467eebb2e6e096dff933455a0b63e3c4181a847f30ed95d3d8f34cf34b725df448091dffa00f0456001df6bc5441e31b226bb0abba3810a5cbbef4c12719912add54428886e86ab655bd6cf69305865af7f809661dbaf2df331da2f01d354f06fd23bdd086454918d5f1bc2c6d1fc5ee1e030d9d1a6474fed1ae6e7a83064e7d56b9c06ed555473bf65b12668f057639a73f3d253ea2b5f3c913a8e30050398271e33bb3682986eeff0804fc2cd4aa3c2b58de6dc26888904fc672f3dc0299db9862e1a02a66a27ffb39db316d548968266c55ed4e4ee23137e2de18dca81c4717239cc1bd042db452a76af79b23a2b6a0750ac691cf8558119a1a228678f53266a0bac3e85f17cacf2aa592acacbfcaccf2c1e6572cfc3cccf72a2af4a75dd7aa98be8c58eba3906ea39a44b553b412ac6a4238ef2d202c235c3fbfbade1abcc81834f8f838d51a78601930a4fb1d9e626853ee8d996baf385c9d9be5807a175b93c1c75049627bb6c7d2bf4f6c28185d26058c6e6937caee24dacf66c82f7268f71bf4f5d82ded559bdd911b660afecdb48486cf119961fe1b59662a881d11a9fde4de9039348985b67bde93be2bef9ef9c2fc0a231716d25a3d9abb0d01b0ae807909552d3a75e2b329ac87e71946bf12c58aa97de7f49ba3dcbc70648bdde840bc9bcf30ca5b7d7f4b92df952a018a4e88a3879fda8f91b26407e9ed10e7d5b8c66aaf15c63dce5dacd93a508fe881cca21052a441f1623b904c4b9a602b464b2f2361e3a92b6edcf86bb2728f4c1115f96d0855f7aeded5ab18306dd2258839ce71efdca31cfecfc2c4776cddf474fd2f08a0643440173395c6f0fe62640d5e2b3adf146954d27da6a90fd9549231e002f2b4f62d4b7ef3bb1e219d5070216b25a59b72cf47e8d4e12f0159e341ee1992d63d168df99c5a6d04babc90e843104d0b6f39d7ff2f6b11fc6ba0d31519b36402899318679728b68913d2c519135cca5941434bed088e76aaba70eb1fc3ac1d937dca1c1c14412dbca2c6646ff07f819aefe0a9ee5fae1a5bc1e69e230d2575fb3e8534836f16524be31917abf4c601e0dd1e8ed997a6ae80ec94293c30b41688c337b61604315188dbd42c184b736cdc76f5244d3b4d6d0d90d5029697ac287d625414d10e3cf5d513cec9967fadd7b661360a5a4639cd463bd324729a82f050317524b4a708e2494d6c9f44953fb11757c83f036accd64263a0c92f56cf447267cb51365c0ca89b406da0ff2af06c6bee68868bef09486061e5b00cda73a404d2cb9ef2a418949c0d2c06bb5a13128b0f0230f659b58b11ffc84b0340a6fecaa4dae9004bcd07077ce5c83ea8db7ac44bfc0edf2f69e7f5f53bfb223f18d938b2891e2a01d34ddd62d9f34406dfa1137babb771b7f1e23912bdc53224750640ac8952a7f9a91434e3ef084820e1f40634730eba39eaf4f60a0f08b695c7c20c13f4255123c531599dee44c7bcb9cd7ba60dad98c92dedd96ff51adb3b010e164a6ee9bfe10809ed622cb2fad75447f7ae3caf924049cfd56a3dc043d4f8516f464bc59c0caa31b7235cbb0a2b50fdaf75f7b2f31253d22c99cd452101474003cba9b9913f0b1921dcc3dc0f6a85f2a65600e6b00344686b0dcfb9b205245d74b1d60755619a1188de340b483698e583e175d88db276ed0bf8eb108ba8891bb2ff43525839ff7c7c10522c58616bd1cdef1e3fbb8df26616d0c1780a1ebbde3fba69478dd2ea78199355ac2c8d54ce74ab81d1070ee3025f27562bd16d99a5de39f99543cc14f69ce5b39618426180757a747872131ba58fe5c6f4120b84f48d994cdaa5e2f07408d8cf281c036011035f5fd13defaa7ffbda88fe0873da4d4b45c229b1e9e6ea90afd4651b5abcabfe06f44d396e0b63cbd4004fb0105d4f767ce2c01ea8a295a2ee81d9c519e6e93e8dd5255d32ab2b1e4b4c88fbbe41e9c0d72c1db72463dcbdf0c5e590a47e13c708efe6e4eeac08b9f6ef5a73bb82f3650a7ad1f4ed09298c39c766296fecdacebabc205d9f3ed05d6bf2b6a5cb36f92709163a7f86a4b02a68882fa5bb6990637b2e46cd150031d02cd9718327a5de498930448bc8268da67481b0a2fa8b17bc9840f536872b5ae9ff535276a02169a1304a74751f937f0f7b3e0175e47024b4e06affeef95736f66530b6d6bf413c25405384c43f2a231265bdf5acfd86593089a81c0a0fcae67944d3e16734eca8d39c7d79e3012d77e2c5cddd04d814fdb8e6fd33d1a3cc100d4e6506899050fd4877599c46e2723057aadc5860a2146373f97b9d0a09ad989fb1e7387f8cdbf2fd22a32659227404c8fc800445a57bcd8fde74c4d6e5023d3ca31ba110a1a2846e25e29fd7fce8997ad6a9da31c7f37aa191ba0d224eacde83c9fa1b4b21c14c211a70583cf7c0e603ba16fce1f6c8d67f2ebc094cc368d159f7bdb930fcfb7d6c1d24bf85c82e321ea408e8ec191a5c345a7fe057c020919b763e33c5c7580fd9929fa666c0a8a4391dfa9b991f85b54b2708c836fbfc9f77fa8bb9aa0ef02313f832b329de65c3474891891832910f1b33701f12b6a530f3e3edb80458cbb603a9c125eef487d489cee0f07ebbf35154556d7478c6037caf38e19f3aae8de327a27", &(0x7f0000005b80)="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", 0xc, r5}, 0x38) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005d00), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000005e40)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x1224}, 0xc, &(0x7f0000005e00)={&(0x7f0000005d40)={0xb0, r14, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0xa}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bdc0686cb5baee2d8404487e9be1100bc5eb38a3f7d76c58"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "aedffe5068bb4b02728b6972f9697db7a6a9e4bb7bd062ec"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000080}, 0x8081) 1m24.240410579s ago: executing program 0 (id=475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x33, 0x107, 0x0, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x7, 0x18, 0x0, 0x0, @binary='\vv2'}]}]}, 0x30}}, 0x4010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="22017e3f", @ANYRES16=r4, @ANYBLOB="080026bd7000fedbdf250200000028000180080009002a000004060002003a00000007000600727200000c000700290000002300000008000600f00000004800038014000600fe88000000000000000000000000010108000500ac1414bb0600040000000000060007004e23000008000500ffffffff0800010001000000060007004e240000200003801400060020010000000000000000000000000000060007004e23000008000400d2350000"], 0xb4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a05000000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100ac000000080001400000080908000240000000010900010073797a30"], 0xcc}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=r8, @ANYBLOB="40007a800c000300a0d4e01051d6ff63140001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x64, r11, 0x1, 0x4, 0x0, {{0xa}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x5}}}}, [@NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "7bb3c3f5de707a4865ba89172f"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "10ef7c53d84fadfb2b7b4aaa4d"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48881}, 0x40) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4840}, 0x24008010) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r14 = socket(0x11, 0x3, 0x0) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) bind$packet(r14, &(0x7f0000000100)={0x11, 0xf8, r17, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m23.925231265s ago: executing program 1 (id=477): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004441) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) (async) socket(0x2b, 0x6, 0x8000) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1m23.554785688s ago: executing program 0 (id=480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x1, 0x8, 0x407, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40894) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x20000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6f0, 0x3f8, 0x278, 0x538, 0x538, 0x538, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, &(0x7f00000008c0), {[{{@ipv6={@local, @empty, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0x1a480d7bfc3527bb, 0x0, 0x60c111682c136c, 0xffffff00], 'geneve0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0xfb, 0x0, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@state={{0x28}, {0xb30d}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0x0, 0xff, 0xffffff00], 0x4e21, 0x4e22, 0x4e24, 0x4e22, 0x4, 0xaa, 0x2, 0x101, 0x8dbc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x87, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x25, 0x2dec}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x0, 0x9, 0x0, 0x4, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, [0xff, 0xff, 0xff, 0xffffffff], [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], 0x0, 0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @private=0xc}, @ipv6=@mcast1, 0x6, 0xe, 0xa6a9}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, [0xffffff00, 0x0, 0xff, 0xff000000], [0x0, 0xffffffff, 0x0, 0xff], 'batadv_slave_1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x1, 0x5, 0x5, 0x1a}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast1, 0x2e, 0x10, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0xfff, @ipv6=@remote, 0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0xffff0000, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000020000000800", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="548d82145434f10b27009d04", @ANYRES16=r4, @ANYBLOB="7eddb70d57b165e3cbc9c9d13fd6435b0e4c09d6ba73ba640dfac3549c5bdd0b3487fbc6ca916c4a9c3dab1779d05e25458fabee0dc4712594f3943fabf6ae701e9c828bdf1dc14e93a2f5b9acbad0155f77cdcef9e7e4ec99e7d122145b30db25c6df41e3d6419c8c8f8ef7983ed284be188e52a6b6260a06bfc13172743e5104eec71aca7fbcb3508ad9729e0d1551fcb53aecb109c82989e01dd93ca689b51ad9cabcfe7db7bdb950ce0b0dfc92590baf58c7a0a3d9683e53ee7d1e40fc5fa3"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000000a000900000000000000000100000a0c00044000000000000000030c00044000000000000000043c000000090a010100000000000000000200000708000a4000000002140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) mmap(&(0x7f00004a6000/0x1000)=nil, 0x1000, 0x1000003, 0x110, r3, 0x3e331000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033060000000000000000e0000002000000000000000000000000fe8000000000000000000000000000ff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001fff2fffd32000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000002000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007061c52304ab99b5d9fc000c00"/252], 0x144}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3801"], 0x138}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r11, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) 1m23.440209741s ago: executing program 2 (id=481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, 0x0, 0x4000000) 1m23.233770051s ago: executing program 2 (id=483): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, @bcast, @bpq0, 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1m23.036360526s ago: executing program 0 (id=485): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(r1, &(0x7f0000001580)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x12, r3, 0x3000) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x3f, &(0x7f0000000040), 0x4) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r2, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000340)}, 0x80000000}, {{&(0x7f0000000080)=@tipc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000001dc0)=""/235, 0xeb}], 0x3, &(0x7f00000001c0)=""/32, 0x20}, 0xb2f3}, {{&(0x7f00000015c0)=@ax25={{}, [@netrom, @rose, @netrom, @rose, @null, @bcast, @remote, @default]}, 0x80, &(0x7f0000001700)=[{&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000001640)=""/120, 0x78}, {&(0x7f00000016c0)=""/17, 0x11}, {&(0x7f00000018c0)=""/243, 0xf3}], 0x4, &(0x7f0000001cc0)=""/240, 0xf0}, 0x3c40}], 0x6, 0x1002, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) accept4$ax25(0xffffffffffffffff, &(0x7f0000001740)={{0x3, @default}, [@netrom, @default, @netrom, @null, @default, @rose, @netrom]}, &(0x7f0000001c40)=0x48, 0x180800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r7, &(0x7f0000000080)=""/186, 0xba) unshare(0x26020480) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m23.02860707s ago: executing program 2 (id=486): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312c", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, &(0x7f0000000100)={{0x0}, 0x0, 0x40}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="6690fd262a398b5cb20db2270063a666d5f11d40c8b02d2ffde3769a6039914a35d64ddf20c9647eec0f64983dc44abcac625db118eafd90cacc68186c95177bc8121ef48995a27d1bda55c9cb4e173c733b9ed18fb11928922660639f0821f03581d1b378a33e0ce3f4009f8f277589b67c10ba58085e78aebde6e38b8f97568ec20a24978ae6dd2eeae7706c0476bc2ad691c666b933d2a426600f3e3633ebb570ed137fa02085f753c4f988588071bc2ccbfd0000c71e1f9c447943df211422e7ca2bc87e048320ed1585c02a9e48d73ddef5e6358a4eba4688069a812871b94983153896effa"], 0x44}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="03000060010000000400002008000000e985"], 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x20044041) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x10}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x86, r1}, 0x38) 1m22.85322129s ago: executing program 0 (id=489): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x10, 0x3, 0xc) write(r7, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) 1m22.276628668s ago: executing program 4 (id=490): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x40, 0x700, 0xa37, 0x8, {{0x6, 0x4, 0x2, 0x14, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x164, 0x24, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0x1}, {0xffe0, 0x3}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x134, 0x2, {{0x8, [0x9, 0xe, 0xc, 0xa, 0x1, 0x6, 0x7, 0xf, 0x6, 0x4, 0xd, 0x8, 0xc, 0x4, 0xd], 0x0, [0x8, 0x2, 0xff, 0x9, 0x4, 0x6, 0xfff8, 0x8, 0x5, 0x1, 0x6, 0x8, 0x83e9, 0x7fe, 0x2, 0x8], [0x8000, 0x9, 0x1, 0x8001, 0x7, 0xffff, 0x5, 0x3, 0x3, 0x2, 0x3, 0x1, 0xacf, 0xe, 0x8001, 0xf800]}, [@TCA_MQPRIO_MAX_RATE64={0x64, 0x4, 0x0, 0x1, [{0xc}, {0xc, 0x4, 0xfffffffffffffff8}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x10001}, {0xc, 0x4, 0x280000000000000}, {0xc}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xbcc5}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x70, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x2}, {0xc, 0x3, 0x7fffffffffffffff}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x1ff}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x7fff}, {0xc, 0x3, 0x401}, {0xc, 0x3, 0x340000000}, {0xc, 0x3, 0x1e8}]}]}}}]}, 0x164}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000140)={r4, 0x3, 0x6}, 0x8) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x0, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) 1m22.23488377s ago: executing program 2 (id=491): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000019c0)={@val={0x2000, 0x6000}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x5fd, 0x0, 0x28, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb"}}}}}}}, 0x52) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="dbeb5a02c82eb6e813ad57289a4d904cec88ac5fb338", 0x16}, {&(0x7f00000009c0)}], 0x2}}], 0x1, 0xc0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "1f8659015689c946", "c8e5637472c7b7f1907668bcbe8e812a", "15e4cd5a", "9dc598dc3d7a3955"}, 0x28) 1m21.8752884s ago: executing program 4 (id=492): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x34, "4d26768012e32aebcfd04983e65be50f7cee2e9a0197afd2fa0eafdcbac24ecfe110c450e683049cf6204ac6116cfd48e8263646"}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket(0x2b, 0x801, 0x1) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x16, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @alu={0x4, 0x1, 0x2, 0xb, 0x4, 0xfffffffffffffff8, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x8, 0x0, 0x3, 0xfffffffffffffff0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0xc1, &(0x7f0000000200)=""/193, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002e000100000000000000000001"], 0x114}], 0x1}, 0x0) 1m21.8087646s ago: executing program 3 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, 0x0, 0x4000000) 1m21.565819211s ago: executing program 4 (id=494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000901180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m21.413331093s ago: executing program 3 (id=495): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @accept_conn_req={{0x409, 0x7}, {@none, 0x7f}}}, 0xb) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m21.094336046s ago: executing program 4 (id=496): r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x8) poll(&(0x7f0000000140)=[{r0, 0x68}], 0x1, 0x200) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r1, &(0x7f0000001040)="89", 0x1, 0x6000c804, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000140000000000000000000000070000008802000000000000"], 0x38}, 0x20002880) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)="26eafcc6c43274fa4781f988d9f280fdeb4f873ba1147e4713ac73853842cfd19ce62468ebfea564992cc54e6083f164d7ae27c04fa92bca1c2cb62d7ff98c711c82f1a9e7873150ef20d5be95cc54b11894e8e712481e152043b93cc2b56b0f711147b503d193a82b3501063b59b0d0af095182a60860", 0x77}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000000380)="f818149ee27a0e00b2cd959f076eb5176b2431e23c2bee4a7d85c1d0813457b42310c5c8be2bc294ea994ec331d1d44d3f70d5cb748569151ac4c28007a0c730abce6e2ce6efac4d4c1f102baf7d410aa58deec9e5c565f222d2f6635cb3bfbd16d18403583e308392fee3a36cfd899fa808dc1338a2265f8020f257bb68bd3b2c4f257549e7c41f59a82ca3c892d0100a67ffab3f28c33d3c9edaa9fd84", 0x9e}, {&(0x7f0000000540)="8b1310e264920ff532a22984cc95f0ad3ac323d39d5fbc8b535c495d3360e5c002efc040d12576bbf71239bc414bd7372ac6b0e71793b0e9158f9ae3923c029299d37110b3d603bccbf2fd71ebd5cf3a89e3530aab1bba4dc27f7bda6be17bc150327862664cfc966fa01690b87711e418cac8450a45cc212c8dd7f5787c182c4f65a48ef8bb08676746210c28e8779ad850d69fd09b55c221315e5b520297b5e0ee04e3780de804a2fa8e73fdfeeac7b1b7aab06d40f5bd2806a2e19f27d64b89a134c3e347dcf193e53901bb1b81e3", 0xd0}, {&(0x7f0000000440)="a3d2ba4ee7bfeeba37b0df", 0xb}], 0x5, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa0}}], 0x18}, 0x4000010) socket$inet(0x2, 0x2, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000000180021f4ad29edf78d9182283a0abbb01a929a", @ANYRES16=r6, @ANYBLOB="5a008f060c0016800800a8b3ff53bbb0ee35746af56510ba373e", @ANYRES64=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000013}, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, 0x0, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r11, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004084}, 0x800) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x28, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '+#\':z'}]}, 0x28}}, 0x0) getsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f0000000940)={@private1, 0x0}, &(0x7f0000000980)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x0, 0xa2, 0x2, 0xfff, 0x8000, 0xffffffffffffffff, 0x4, '\x00', r12, 0xffffffffffffffff, 0x5, 0x3, 0xeb57, 0x0, @value=r4, @void, @void, @value}, 0x50) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x1c, r13, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) 1m20.703338128s ago: executing program 3 (id=497): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000101401002cbd7000fedbdf25080003000100000008004a0001000000080001000000000008"], 0x38}}, 0xc814) (async, rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x140b, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b477f0132356201af411423fe6f20000000000851000c302000000b70000000000950000120000110000000000000000000000d56abd36a036462191821183dcfeadf6001109dca9dd5db38dcbd4d186849e9327ebacd1b2b5f3d856a95efdfda2ca5fd40536211ce3049e68414587ef31fba846b61dc1f1a43dd5d90d2a1e71d15c25a9f04fe8d0596c6d694759e1c1e7e428f830b69247cd8fd106849c2a5fe3"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1m19.775389065s ago: executing program 3 (id=498): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f4001000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m19.736458698s ago: executing program 4 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m18.950118705s ago: executing program 4 (id=500): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r0, 0x3841b273) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="20010000", @ANYRESOCT=0x0, @ANYBLOB="010004000000ffffffff0b0000000c0005800800010075647000"], 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={0x14, r6, 0x1, 0xfffffffd, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c00028008000140fa00001008000240000000000800044000000014080003400000000008000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000fedbdf2500"/20, @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0xffffffff00000003}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r11 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1, 0x0, @void, @value}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890c, &(0x7f0000000000)) 1m18.931546904s ago: executing program 3 (id=501): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x12d8, 0xffffffff, 0x98, 0x11a8, 0x98, 0xffffffff, 0xffffffff, 0x1240, 0x1240, 0x1240, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @REJECT={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1338) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000019c0)={{0x32, @private=0xa010102, 0x4e24, 0x3, 'ovf\x00', 0x0, 0x7, 0x62}, {@broadcast, 0x4e20, 0x1, 0xa8fd, 0x8, 0x100}}, 0x44) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) unshare(0x8000400) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001940)={0x81}, 0x8) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000580)={{r4}, r5, 0x4, @inherit={0x48, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x1, {0x3a, 0x100000000, 0x6, 0xbc, 0xf0f}}}, @subvolid=0x4}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001ac0)={{}, r5, 0x0, @unused=[0x74d2f749, 0x2, 0x10000, 0x7], @subvolid=0x2597}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) (async) shutdown(r1, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000000a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000a08000240000000030900010073797a3000000000090002007379"], 0x7c}}, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001980), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r11, 0x1, 0xffffffff, 0x20000, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20000001) 1m18.54250955s ago: executing program 3 (id=502): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000280)='ns/cgroup\x00') r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c000280080002400000010108000140e3ff000008000340000000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r6, 0x9}, &(0x7f0000000180)=0x8) sendmsg$nl_generic(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) 0s ago: executing program 32 (id=489): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x10, 0x3, 0xc) write(r7, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 83.302425][ T5826] cgroup: Unknown subsys name 'net' [ 83.440983][ T5826] cgroup: Unknown subsys name 'cpuset' [ 83.450255][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.203077][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.837166][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.845761][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.857184][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.886912][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.897728][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.015553][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.023794][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.032231][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.061826][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.098704][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.107196][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.137651][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.162393][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.170928][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.174626][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.179302][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.186254][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.255507][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.264779][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.275092][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.296036][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.319281][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.327016][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.335416][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.344122][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.572452][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.876504][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.884940][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.892538][ T5837] bridge_slave_0: entered allmulticast mode [ 88.900774][ T5837] bridge_slave_0: entered promiscuous mode [ 88.962778][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.970312][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.977709][ T5837] bridge_slave_1: entered allmulticast mode [ 88.985008][ T5837] bridge_slave_1: entered promiscuous mode [ 89.024532][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.155471][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.184373][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.194377][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 89.230492][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.403175][ T5837] team0: Port device team_slave_0 added [ 89.445105][ T5837] team0: Port device team_slave_1 added [ 89.550834][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 89.576984][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.584720][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.592063][ T5844] bridge_slave_0: entered allmulticast mode [ 89.599949][ T5844] bridge_slave_0: entered promiscuous mode [ 89.608480][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.615670][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.623037][ T5844] bridge_slave_1: entered allmulticast mode [ 89.631496][ T5844] bridge_slave_1: entered promiscuous mode [ 89.638722][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.645978][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.653280][ T5842] bridge_slave_0: entered allmulticast mode [ 89.660876][ T5842] bridge_slave_0: entered promiscuous mode [ 89.669603][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.676593][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.703073][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.722711][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.730323][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.738465][ T5849] bridge_slave_0: entered allmulticast mode [ 89.745786][ T5849] bridge_slave_0: entered promiscuous mode [ 89.768255][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.775424][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.786134][ T5842] bridge_slave_1: entered allmulticast mode [ 89.793842][ T5842] bridge_slave_1: entered promiscuous mode [ 89.817462][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.824463][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.850553][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.878912][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.886229][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.893951][ T5849] bridge_slave_1: entered allmulticast mode [ 89.903037][ T5849] bridge_slave_1: entered promiscuous mode [ 89.989981][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.002333][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.014350][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.017807][ T51] Bluetooth: hci0: command tx timeout [ 90.029018][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.137439][ T5837] hsr_slave_0: entered promiscuous mode [ 90.144209][ T5837] hsr_slave_1: entered promiscuous mode [ 90.154850][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.168493][ T5844] team0: Port device team_slave_0 added [ 90.178366][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.190555][ T5842] team0: Port device team_slave_0 added [ 90.228897][ T5844] team0: Port device team_slave_1 added [ 90.251725][ T5842] team0: Port device team_slave_1 added [ 90.267484][ T51] Bluetooth: hci2: command tx timeout [ 90.275692][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.283262][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.291208][ T5848] bridge_slave_0: entered allmulticast mode [ 90.299812][ T5848] bridge_slave_0: entered promiscuous mode [ 90.337115][ T51] Bluetooth: hci3: command tx timeout [ 90.337122][ T5852] Bluetooth: hci1: command tx timeout [ 90.365484][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.375772][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.383640][ T5848] bridge_slave_1: entered allmulticast mode [ 90.392507][ T5848] bridge_slave_1: entered promiscuous mode [ 90.415305][ T5849] team0: Port device team_slave_0 added [ 90.421154][ T51] Bluetooth: hci4: command tx timeout [ 90.426083][ T5849] team0: Port device team_slave_1 added [ 90.433529][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.440656][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.467780][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.502646][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.509701][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.535746][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.561632][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.569008][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.595080][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.642454][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.649688][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.676715][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.728522][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.742269][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.760527][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.768059][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.794305][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.807300][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.814292][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.845047][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.993284][ T5848] team0: Port device team_slave_0 added [ 91.019996][ T5842] hsr_slave_0: entered promiscuous mode [ 91.026461][ T5842] hsr_slave_1: entered promiscuous mode [ 91.033540][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.041650][ T5842] Cannot create hsr debugfs directory [ 91.078438][ T5849] hsr_slave_0: entered promiscuous mode [ 91.084869][ T5849] hsr_slave_1: entered promiscuous mode [ 91.092021][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.099650][ T5849] Cannot create hsr debugfs directory [ 91.107734][ T5848] team0: Port device team_slave_1 added [ 91.119325][ T5844] hsr_slave_0: entered promiscuous mode [ 91.126172][ T5844] hsr_slave_1: entered promiscuous mode [ 91.132795][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.140615][ T5844] Cannot create hsr debugfs directory [ 91.291663][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.299602][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.325842][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.339310][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.346292][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.373506][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.590520][ T5848] hsr_slave_0: entered promiscuous mode [ 91.597174][ T5848] hsr_slave_1: entered promiscuous mode [ 91.603473][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.611885][ T5848] Cannot create hsr debugfs directory [ 91.823422][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.853922][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.887280][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.898499][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.993938][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.008702][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.038180][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.057311][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.096904][ T51] Bluetooth: hci0: command tx timeout [ 92.113007][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.124794][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.136225][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.164386][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.281767][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.330498][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.337234][ T51] Bluetooth: hci2: command tx timeout [ 92.351626][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.380684][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.417468][ T51] Bluetooth: hci3: command tx timeout [ 92.427697][ T51] Bluetooth: hci1: command tx timeout [ 92.463408][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.482528][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.497040][ T51] Bluetooth: hci4: command tx timeout [ 92.517569][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.533541][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.562375][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.653260][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.698755][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.706010][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.718933][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.726095][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.766323][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.861995][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.881984][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.930781][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.938005][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.949884][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.957126][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.002265][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.021811][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.029133][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.064120][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.071351][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.133094][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.179636][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.262798][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.319937][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.336214][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.343552][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.403917][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.411617][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.436826][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.444016][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.488431][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.495631][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.538570][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.803179][ T5837] veth0_vlan: entered promiscuous mode [ 93.832602][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.871036][ T5837] veth1_vlan: entered promiscuous mode [ 93.990209][ T5837] veth0_macvtap: entered promiscuous mode [ 94.040090][ T5837] veth1_macvtap: entered promiscuous mode [ 94.076333][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.178199][ T51] Bluetooth: hci0: command tx timeout [ 94.205352][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.236165][ T5842] veth0_vlan: entered promiscuous mode [ 94.262702][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.309779][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.332057][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.355655][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.379979][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.408762][ T5842] veth1_vlan: entered promiscuous mode [ 94.417624][ T51] Bluetooth: hci2: command tx timeout [ 94.440421][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.497971][ T51] Bluetooth: hci1: command tx timeout [ 94.498606][ T5852] Bluetooth: hci3: command tx timeout [ 94.551390][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.579165][ T5852] Bluetooth: hci4: command tx timeout [ 94.625156][ T5842] veth0_macvtap: entered promiscuous mode [ 94.637919][ T5842] veth1_macvtap: entered promiscuous mode [ 94.639830][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.662040][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.675275][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.738901][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.761863][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.771963][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.795628][ T2950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.804765][ T2950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.840419][ T5849] veth0_vlan: entered promiscuous mode [ 94.848923][ T2950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.861513][ T2950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.894851][ T5844] veth0_vlan: entered promiscuous mode [ 94.925706][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.953342][ T5844] veth1_vlan: entered promiscuous mode [ 94.962595][ T5848] veth0_vlan: entered promiscuous mode [ 94.979711][ T5849] veth1_vlan: entered promiscuous mode [ 95.040499][ T5848] veth1_vlan: entered promiscuous mode [ 95.138046][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.161625][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.199190][ T5849] veth0_macvtap: entered promiscuous mode [ 95.242680][ T5844] veth0_macvtap: entered promiscuous mode [ 95.293904][ T5849] veth1_macvtap: entered promiscuous mode [ 95.312250][ T5844] veth1_macvtap: entered promiscuous mode [ 95.324808][ T5848] veth0_macvtap: entered promiscuous mode [ 95.340182][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.357621][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.368180][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.420062][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.439340][ T5848] veth1_macvtap: entered promiscuous mode [ 95.455975][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.471033][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499943][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.524534][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.569049][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.601497][ T5958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.609677][ T5958] bridge0: port 3(bond1) entered blocking state [ 95.616222][ T5958] bridge0: port 3(bond1) entered disabled state [ 95.623425][ T5958] bond1: entered allmulticast mode [ 95.632088][ T5958] bond1: entered promiscuous mode [ 95.638163][ T5958] bridge0: port 3(bond1) entered blocking state [ 95.644683][ T5958] bridge0: port 3(bond1) entered forwarding state [ 95.662394][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.678059][ T49] bridge0: port 3(bond1) entered disabled state [ 95.745765][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.764231][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.787394][ T5962] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 95.831411][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.840949][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.849517][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.869325][ T5964] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.875982][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.888450][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.896404][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.903636][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.919394][ T5962] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.929140][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.940952][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.963693][ T5964] ÿ: renamed from dummy0 (while UP) [ 95.975430][ T5966] bridge_slave_1: left allmulticast mode [ 95.982473][ T5966] bridge_slave_1: left promiscuous mode [ 95.988873][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.000212][ T5966] bridge_slave_0: left allmulticast mode [ 96.005931][ T5966] bridge_slave_0: left promiscuous mode [ 96.012421][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.013657][ T5964] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 96.060470][ T5966] bond0: (slave bridge0): Releasing backup interface [ 96.141211][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.150670][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.169135][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.181174][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.229731][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.257112][ T5852] Bluetooth: hci0: command tx timeout [ 96.344090][ T5972] veth1_macvtap: left promiscuous mode [ 96.376911][ T5972] macsec0: entered promiscuous mode [ 96.384260][ T5972] macsec0: entered allmulticast mode [ 96.456184][ T5974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.493553][ T5898] IPVS: starting estimator thread 0... [ 96.499865][ T5852] Bluetooth: hci2: command tx timeout [ 96.505465][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.505591][ T5972] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 96.532365][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.549583][ T5975] veth1_macvtap: entered promiscuous mode [ 96.561031][ T5975] veth1_macvtap: entered allmulticast mode [ 96.571360][ T5975] macsec0: left promiscuous mode [ 96.576533][ T5975] macsec0: left allmulticast mode [ 96.577911][ T5852] Bluetooth: hci1: command tx timeout [ 96.588331][ T51] Bluetooth: hci3: command tx timeout [ 96.598937][ T5975] veth1_macvtap: left allmulticast mode [ 96.607020][ T5977] IPVS: using max 28 ests per chain, 67200 per kthread [ 96.630796][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.650299][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.666982][ T5852] Bluetooth: hci4: command tx timeout [ 96.792967][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.805673][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.883814][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.913603][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.987474][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 97.030455][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.042989][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.152257][ T1218] cfg80211: failed to load regulatory.db [ 97.188426][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.291501][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.327468][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.594903][ T5995] Cannot find add_set index 3 as target [ 99.476123][ T6021] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.551431][ T6023] Zero length message leads to an empty skb [ 99.921048][ T6039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.095849][ T6031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.173178][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.26'. [ 100.207990][ T6031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.715692][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 100.964605][ T6019] syz.2.18 (6019) used greatest stack depth: 18488 bytes left [ 101.021762][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 101.888874][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 102.718668][ T6100] can: request_module (can-proto-3) failed. [ 103.041201][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.41'. [ 103.077442][ T6115] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 103.085771][ T6115] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.108935][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 103.116130][ T6119] netlink: 52 bytes leftover after parsing attributes in process `syz.0.43'. [ 103.165161][ T6122] netlink: 'syz.4.44': attribute type 3 has an invalid length. [ 103.195617][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 103.215950][ T6127] nbd: socks must be embedded in a SOCK_ITEM attr [ 103.469269][ T6132] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 103.521061][ T6132] netlink: 132 bytes leftover after parsing attributes in process `syz.0.47'. [ 103.622910][ T6139] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 103.659871][ T6139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.790592][ T6144] xt_time: unknown flags 0x4 [ 104.182011][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 104.335368][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.46'. [ 104.371532][ T6167] netlink: 52 bytes leftover after parsing attributes in process `syz.2.57'. [ 104.425998][ T6171] FAULT_INJECTION: forcing a failure. [ 104.425998][ T6171] name failslab, interval 1, probability 0, space 0, times 1 [ 104.452270][ T6171] CPU: 1 UID: 0 PID: 6171 Comm: syz.0.55 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 104.452301][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.452322][ T6171] Call Trace: [ 104.452332][ T6171] [ 104.452341][ T6171] dump_stack_lvl+0x189/0x250 [ 104.452388][ T6171] ? __pfx____ratelimit+0x10/0x10 [ 104.452422][ T6171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.452455][ T6171] ? __pfx__printk+0x10/0x10 [ 104.452485][ T6171] ? __pfx___might_resched+0x10/0x10 [ 104.452517][ T6171] ? fs_reclaim_acquire+0x7d/0x100 [ 104.452548][ T6171] should_fail_ex+0x414/0x560 [ 104.452581][ T6171] should_failslab+0xa8/0x100 [ 104.452606][ T6171] __kmalloc_noprof+0xcb/0x4f0 [ 104.452624][ T6171] ? kfree+0x4d/0x440 [ 104.452652][ T6171] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 104.452690][ T6171] tomoyo_realpath_from_path+0xe3/0x5d0 [ 104.452723][ T6171] ? tomoyo_domain+0xd9/0x130 [ 104.452761][ T6171] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 104.452786][ T6171] tomoyo_path_number_perm+0x1e8/0x5a0 [ 104.452815][ T6171] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.452860][ T6171] ? __lock_acquire+0xab9/0xd20 [ 104.452913][ T6171] ? __fget_files+0x2a/0x420 [ 104.452940][ T6171] ? __fget_files+0x2a/0x420 [ 104.452962][ T6171] ? __fget_files+0x3a0/0x420 [ 104.452983][ T6171] ? __fget_files+0x2a/0x420 [ 104.453012][ T6171] security_file_ioctl+0xcb/0x2d0 [ 104.453044][ T6171] __se_sys_ioctl+0x47/0x170 [ 104.453079][ T6171] do_syscall_64+0xfa/0x3b0 [ 104.453098][ T6171] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.453131][ T6171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.453152][ T6171] ? clear_bhb_loop+0x60/0xb0 [ 104.453177][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.453198][ T6171] RIP: 0033:0x7f6ec5f8e929 [ 104.453222][ T6171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.453240][ T6171] RSP: 002b:00007f6ec3df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.453263][ T6171] RAX: ffffffffffffffda RBX: 00007f6ec61b6160 RCX: 00007f6ec5f8e929 [ 104.453278][ T6171] RDX: 0000200000000000 RSI: 00000000400448e0 RDI: 000000000000000b [ 104.453292][ T6171] RBP: 00007f6ec3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.453305][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.453317][ T6171] R13: 0000000000000000 R14: 00007f6ec61b6160 R15: 00007ffd9842f3b8 [ 104.453350][ T6171] [ 104.453359][ T6171] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.765299][ T6172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.54'. [ 104.877163][ T6169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.54'. [ 105.044056][ T6188] netlink: 56 bytes leftover after parsing attributes in process `syz.1.60'. [ 105.403374][ T6198] netlink: 'syz.1.62': attribute type 6 has an invalid length. [ 105.843179][ T6214] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 106.277254][ T6222] nbd4: detected capacity change from 0 to 63 [ 106.321206][ T6228] block nbd4: NBD_DISCONNECT [ 106.354477][ T6228] block nbd4: Disconnected due to user request. [ 106.362110][ T6228] block nbd4: shutting down sockets [ 106.369324][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.378777][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.386652][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.395765][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.403741][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.412887][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 106.420770][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.430320][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 106.446921][ T5855] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.466822][ T5855] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.477452][ T5855] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.486647][ T5855] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.495088][ T5855] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.516919][ T5855] Buffer I/O error on dev nbd4, logical block 2, async page read [ 106.549595][ T5855] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.578832][ T5855] Buffer I/O error on dev nbd4, logical block 3, async page read [ 106.607015][ T5855] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.649297][ T5855] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.674117][ T5855] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.715709][ T5855] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.797774][ T5855] ldm_validate_partition_table(): Disk read failed. [ 106.843755][ T5855] Dev nbd4: unable to read RDB block 0 [ 106.875261][ T5855] nbd4: unable to read partition table [ 106.957781][ T5855] ldm_validate_partition_table(): Disk read failed. [ 106.972218][ T6244] vlan2: entered promiscuous mode [ 106.983958][ T5855] Dev nbd4: unable to read RDB block 0 [ 106.993305][ T6244] bond0: entered promiscuous mode [ 107.018306][ T6244] bond_slave_0: entered promiscuous mode [ 107.025552][ T5855] nbd4: unable to read partition table [ 107.059216][ T6244] bond_slave_1: entered promiscuous mode [ 107.559679][ T6263] FAULT_INJECTION: forcing a failure. [ 107.559679][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 107.590359][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz.1.81 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 107.590390][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.590403][ T6263] Call Trace: [ 107.590417][ T6263] [ 107.590426][ T6263] dump_stack_lvl+0x189/0x250 [ 107.590465][ T6263] ? __pfx____ratelimit+0x10/0x10 [ 107.590499][ T6263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.590542][ T6263] ? __pfx__printk+0x10/0x10 [ 107.590569][ T6263] ? __pfx___might_resched+0x10/0x10 [ 107.590601][ T6263] ? fs_reclaim_acquire+0x7d/0x100 [ 107.590632][ T6263] should_fail_ex+0x414/0x560 [ 107.590666][ T6263] should_failslab+0xa8/0x100 [ 107.590690][ T6263] __kmalloc_noprof+0xcb/0x4f0 [ 107.590710][ T6263] ? tomoyo_encode+0x28b/0x550 [ 107.590746][ T6263] tomoyo_encode+0x28b/0x550 [ 107.590783][ T6263] tomoyo_realpath_from_path+0x58d/0x5d0 [ 107.590817][ T6263] ? tomoyo_domain+0xd9/0x130 [ 107.590861][ T6263] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 107.590886][ T6263] tomoyo_path_number_perm+0x1e8/0x5a0 [ 107.590915][ T6263] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.590961][ T6263] ? __lock_acquire+0xab9/0xd20 [ 107.591015][ T6263] ? __fget_files+0x2a/0x420 [ 107.591044][ T6263] ? __fget_files+0x2a/0x420 [ 107.591065][ T6263] ? __fget_files+0x3a0/0x420 [ 107.591088][ T6263] ? __fget_files+0x2a/0x420 [ 107.591116][ T6263] security_file_ioctl+0xcb/0x2d0 [ 107.591143][ T6263] __se_sys_ioctl+0x47/0x170 [ 107.591178][ T6263] do_syscall_64+0xfa/0x3b0 [ 107.591197][ T6263] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.591229][ T6263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.591250][ T6263] ? clear_bhb_loop+0x60/0xb0 [ 107.591277][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.591297][ T6263] RIP: 0033:0x7f786d18e929 [ 107.591316][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.591334][ T6263] RSP: 002b:00007f786aff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.591357][ T6263] RAX: ffffffffffffffda RBX: 00007f786d3b6160 RCX: 00007f786d18e929 [ 107.591372][ T6263] RDX: 0000200000000000 RSI: 00000000400448e0 RDI: 000000000000000b [ 107.591385][ T6263] RBP: 00007f786aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.591397][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.591409][ T6263] R13: 0000000000000000 R14: 00007f786d3b6160 R15: 00007fffc8721d48 [ 107.591443][ T6263] [ 107.594893][ T6263] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.065643][ T6277] FAULT_INJECTION: forcing a failure. [ 108.065643][ T6277] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.110054][ T6277] CPU: 1 UID: 0 PID: 6277 Comm: syz.0.86 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 108.110086][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.110099][ T6277] Call Trace: [ 108.110108][ T6277] [ 108.110117][ T6277] dump_stack_lvl+0x189/0x250 [ 108.110157][ T6277] ? __pfx____ratelimit+0x10/0x10 [ 108.110192][ T6277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.110226][ T6277] ? __pfx__printk+0x10/0x10 [ 108.110250][ T6277] ? __might_fault+0xb0/0x130 [ 108.110284][ T6277] should_fail_ex+0x414/0x560 [ 108.110317][ T6277] _copy_from_iter+0x1db/0x16f0 [ 108.110355][ T6277] ? rcu_is_watching+0x15/0xb0 [ 108.110390][ T6277] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 108.110414][ T6277] ? __pfx__copy_from_iter+0x10/0x10 [ 108.110448][ T6277] ? __build_skb_around+0x257/0x3e0 [ 108.110480][ T6277] ? netlink_sendmsg+0x642/0xb30 [ 108.110504][ T6277] ? skb_put+0x11b/0x210 [ 108.110537][ T6277] netlink_sendmsg+0x6b2/0xb30 [ 108.110574][ T6277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.110605][ T6277] ? aa_sock_msg_perm+0x94/0x160 [ 108.110635][ T6277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.110663][ T6277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.110696][ T6277] __sock_sendmsg+0x219/0x270 [ 108.110721][ T6277] ____sys_sendmsg+0x505/0x830 [ 108.110765][ T6277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.110805][ T6277] ? import_iovec+0x74/0xa0 [ 108.110829][ T6277] ___sys_sendmsg+0x21f/0x2a0 [ 108.110863][ T6277] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.110933][ T6277] ? __fget_files+0x2a/0x420 [ 108.110957][ T6277] ? __fget_files+0x3a0/0x420 [ 108.110992][ T6277] __x64_sys_sendmsg+0x19b/0x260 [ 108.111028][ T6277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.111071][ T6277] ? __pfx_ksys_write+0x10/0x10 [ 108.111089][ T6277] ? rcu_is_watching+0x15/0xb0 [ 108.111128][ T6277] ? do_syscall_64+0xbe/0x3b0 [ 108.111153][ T6277] do_syscall_64+0xfa/0x3b0 [ 108.111173][ T6277] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.111206][ T6277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.111229][ T6277] ? clear_bhb_loop+0x60/0xb0 [ 108.111255][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.111276][ T6277] RIP: 0033:0x7f6ec5f8e929 [ 108.111296][ T6277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.111314][ T6277] RSP: 002b:00007f6ec6d35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.111337][ T6277] RAX: ffffffffffffffda RBX: 00007f6ec61b5fa0 RCX: 00007f6ec5f8e929 [ 108.111352][ T6277] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000005 [ 108.111366][ T6277] RBP: 00007f6ec6d35090 R08: 0000000000000000 R09: 0000000000000000 [ 108.111379][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.111391][ T6277] R13: 0000000000000000 R14: 00007f6ec61b5fa0 R15: 00007ffd9842f3b8 [ 108.111424][ T6277] [ 108.409323][ T6280] x_tables: unsorted entry at hook 1 [ 108.415903][ T6275] bridge_slave_0: left allmulticast mode [ 108.421696][ T6275] bridge_slave_0: left promiscuous mode [ 108.427569][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.576497][ T6288] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 108.601796][ T6275] bridge_slave_1: left allmulticast mode [ 108.649023][ T6289] __nla_validate_parse: 3 callbacks suppressed [ 108.649044][ T6289] netlink: 56 bytes leftover after parsing attributes in process `syz.3.88'. [ 108.689822][ T6275] bridge_slave_1: left promiscuous mode [ 108.695722][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.746650][ T6275] bond0: (slave bond_slave_0): Releasing backup interface [ 108.782541][ T6275] bond0: (slave bond_slave_1): Releasing backup interface [ 108.828611][ T6275] team0: Port device team_slave_0 removed [ 108.857851][ T6275] team0: Port device team_slave_1 removed [ 108.865107][ T6298] netlink: 'syz.0.92': attribute type 3 has an invalid length. [ 108.880193][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.881874][ T6298] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.92'. [ 108.901562][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.964549][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.000170][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.501691][ T6310] netlink: 56 bytes leftover after parsing attributes in process `syz.4.93'. [ 109.975694][ T6330] FAULT_INJECTION: forcing a failure. [ 109.975694][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 109.990455][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.1.100 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 109.990485][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.990498][ T6330] Call Trace: [ 109.990506][ T6330] [ 109.990515][ T6330] dump_stack_lvl+0x189/0x250 [ 109.990562][ T6330] ? __pfx____ratelimit+0x10/0x10 [ 109.990595][ T6330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.990628][ T6330] ? __pfx__printk+0x10/0x10 [ 109.990659][ T6330] ? ref_tracker_alloc+0x318/0x460 [ 109.990690][ T6330] should_fail_ex+0x414/0x560 [ 109.990723][ T6330] should_failslab+0xa8/0x100 [ 109.990747][ T6330] kmem_cache_alloc_noprof+0x73/0x3c0 [ 109.990780][ T6330] ? skb_clone+0x212/0x3a0 [ 109.990817][ T6330] skb_clone+0x212/0x3a0 [ 109.990852][ T6330] __netlink_deliver_tap+0x404/0x850 [ 109.990892][ T6330] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.990919][ T6330] netlink_deliver_tap+0x19c/0x1b0 [ 109.990946][ T6330] netlink_unicast+0x72f/0x8d0 [ 109.990981][ T6330] netlink_sendmsg+0x805/0xb30 [ 109.991017][ T6330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.991047][ T6330] ? aa_sock_msg_perm+0x94/0x160 [ 109.991076][ T6330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.991103][ T6330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.991130][ T6330] __sock_sendmsg+0x219/0x270 [ 109.991155][ T6330] ____sys_sendmsg+0x505/0x830 [ 109.991192][ T6330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.991233][ T6330] ? import_iovec+0x74/0xa0 [ 109.991258][ T6330] ___sys_sendmsg+0x21f/0x2a0 [ 109.991291][ T6330] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.991361][ T6330] ? __fget_files+0x2a/0x420 [ 109.991383][ T6330] ? __fget_files+0x3a0/0x420 [ 109.991416][ T6330] __x64_sys_sendmsg+0x19b/0x260 [ 109.991448][ T6330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.991488][ T6330] ? __pfx_ksys_write+0x10/0x10 [ 109.991505][ T6330] ? rcu_is_watching+0x15/0xb0 [ 109.991550][ T6330] ? do_syscall_64+0xbe/0x3b0 [ 109.991574][ T6330] do_syscall_64+0xfa/0x3b0 [ 109.991593][ T6330] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.991625][ T6330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.991645][ T6330] ? clear_bhb_loop+0x60/0xb0 [ 109.991671][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.991691][ T6330] RIP: 0033:0x7f786d18e929 [ 109.991711][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.991728][ T6330] RSP: 002b:00007f786df35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.991750][ T6330] RAX: ffffffffffffffda RBX: 00007f786d3b5fa0 RCX: 00007f786d18e929 [ 109.991765][ T6330] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000005 [ 109.991778][ T6330] RBP: 00007f786df35090 R08: 0000000000000000 R09: 0000000000000000 [ 109.991790][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.991802][ T6330] R13: 0000000000000000 R14: 00007f786d3b5fa0 R15: 00007fffc8721d48 [ 109.991835][ T6330] [ 109.991883][ T6330] netlink: 56 bytes leftover after parsing attributes in process `syz.1.100'. [ 110.603702][ T6338] FAULT_INJECTION: forcing a failure. [ 110.603702][ T6338] name failslab, interval 1, probability 0, space 0, times 0 [ 110.730457][ T6338] CPU: 0 UID: 0 PID: 6338 Comm: syz.3.101 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 110.730488][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.730500][ T6338] Call Trace: [ 110.730508][ T6338] [ 110.730517][ T6338] dump_stack_lvl+0x189/0x250 [ 110.730564][ T6338] ? __pfx____ratelimit+0x10/0x10 [ 110.730597][ T6338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.730629][ T6338] ? __pfx__printk+0x10/0x10 [ 110.730655][ T6338] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 110.730686][ T6338] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.730724][ T6338] should_fail_ex+0x414/0x560 [ 110.730820][ T6338] should_failslab+0xa8/0x100 [ 110.730846][ T6338] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 110.730868][ T6338] ? __alloc_skb+0x112/0x2d0 [ 110.730900][ T6338] __alloc_skb+0x112/0x2d0 [ 110.730932][ T6338] create_monitor_ctrl_open+0x156/0x880 [ 110.730963][ T6338] ? rcu_is_watching+0x15/0xb0 [ 110.731001][ T6338] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 110.731032][ T6338] ? bpf_lsm_capable+0x9/0x20 [ 110.731063][ T6338] hci_sock_ioctl+0x2f2/0x910 [ 110.731097][ T6338] sock_do_ioctl+0xd9/0x300 [ 110.731122][ T6338] ? __pfx_sock_do_ioctl+0x10/0x10 [ 110.731140][ T6338] ? __lock_acquire+0xab9/0xd20 [ 110.731188][ T6338] sock_ioctl+0x576/0x790 [ 110.731212][ T6338] ? __pfx_sock_ioctl+0x10/0x10 [ 110.731231][ T6338] ? __fget_files+0x2a/0x420 [ 110.731253][ T6338] ? __fget_files+0x3a0/0x420 [ 110.731274][ T6338] ? __fget_files+0x2a/0x420 [ 110.731301][ T6338] ? bpf_lsm_file_ioctl+0x9/0x20 [ 110.731332][ T6338] ? __pfx_sock_ioctl+0x10/0x10 [ 110.731352][ T6338] __se_sys_ioctl+0xf9/0x170 [ 110.731388][ T6338] do_syscall_64+0xfa/0x3b0 [ 110.731407][ T6338] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.731439][ T6338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.731460][ T6338] ? clear_bhb_loop+0x60/0xb0 [ 110.731487][ T6338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.731507][ T6338] RIP: 0033:0x7fe15db8e929 [ 110.731527][ T6338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.731551][ T6338] RSP: 002b:00007fe15e91d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.731574][ T6338] RAX: ffffffffffffffda RBX: 00007fe15ddb6160 RCX: 00007fe15db8e929 [ 110.731589][ T6338] RDX: 0000200000000000 RSI: 00000000400448e0 RDI: 000000000000000b [ 110.731603][ T6338] RBP: 00007fe15e91d090 R08: 0000000000000000 R09: 0000000000000000 [ 110.731616][ T6338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.731628][ T6338] R13: 0000000000000000 R14: 00007fe15ddb6160 R15: 00007ffdc408ce58 [ 110.731661][ T6338] [ 111.064099][ T6347] netlink: 56 bytes leftover after parsing attributes in process `syz.1.104'. [ 111.108249][ T6350] IPv6: Can't replace route, no match found [ 111.117391][ T6351] IPv6: Can't replace route, no match found [ 111.419222][ T6359] netlink: 296 bytes leftover after parsing attributes in process `syz.2.107'. [ 111.492167][ T6362] netlink: 56 bytes leftover after parsing attributes in process `syz.1.109'. [ 111.506502][ T6365] sctp: failed to load transform for md5: -2 [ 111.894986][ T6380] netlink: 'syz.3.112': attribute type 10 has an invalid length. [ 112.001422][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 112.750433][ T6407] IPVS: set_ctl: invalid protocol: 92 172.20.20.49:20002 [ 113.015807][ T6420] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 113.064633][ T6420] netlink: 44 bytes leftover after parsing attributes in process `syz.4.123'. [ 113.158654][ T6420] netlink: 'syz.4.123': attribute type 1 has an invalid length. [ 113.227309][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 113.411314][ T6427] netlink: 56 bytes leftover after parsing attributes in process `syz.1.124'. [ 114.075937][ T6449] __nla_validate_parse: 1 callbacks suppressed [ 114.075957][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 114.173143][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 114.237261][ T6458] FAULT_INJECTION: forcing a failure. [ 114.237261][ T6458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.286475][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.1.132 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 114.286505][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.286518][ T6458] Call Trace: [ 114.286526][ T6458] [ 114.286535][ T6458] dump_stack_lvl+0x189/0x250 [ 114.286573][ T6458] ? __pfx____ratelimit+0x10/0x10 [ 114.286606][ T6458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.286637][ T6458] ? __pfx__printk+0x10/0x10 [ 114.286660][ T6458] ? __might_fault+0xb0/0x130 [ 114.286692][ T6458] should_fail_ex+0x414/0x560 [ 114.286728][ T6458] _copy_from_user+0x2d/0xb0 [ 114.286748][ T6458] ___sys_sendmsg+0x158/0x2a0 [ 114.286781][ T6458] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.286851][ T6458] ? __fget_files+0x2a/0x420 [ 114.286873][ T6458] ? __fget_files+0x3a0/0x420 [ 114.286908][ T6458] __sys_sendmmsg+0x227/0x430 [ 114.286945][ T6458] ? __pfx___sys_sendmmsg+0x10/0x10 [ 114.286971][ T6458] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 114.287022][ T6458] ? ksys_write+0x22a/0x250 [ 114.287045][ T6458] ? __pfx_ksys_write+0x10/0x10 [ 114.287061][ T6458] ? rcu_is_watching+0x15/0xb0 [ 114.287101][ T6458] __x64_sys_sendmmsg+0xa0/0xc0 [ 114.287134][ T6458] do_syscall_64+0xfa/0x3b0 [ 114.287153][ T6458] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.287184][ T6458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.287205][ T6458] ? clear_bhb_loop+0x60/0xb0 [ 114.287232][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.287252][ T6458] RIP: 0033:0x7f786d18e929 [ 114.287280][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.287298][ T6458] RSP: 002b:00007f786df35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 114.287320][ T6458] RAX: ffffffffffffffda RBX: 00007f786d3b5fa0 RCX: 00007f786d18e929 [ 114.287342][ T6458] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000004 [ 114.287354][ T6458] RBP: 00007f786df35090 R08: 0000000000000000 R09: 0000000000000000 [ 114.287367][ T6458] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 114.287379][ T6458] R13: 0000000000000000 R14: 00007f786d3b5fa0 R15: 00007fffc8721d48 [ 114.287412][ T6458] [ 114.312801][ T6462] x_tables: duplicate underflow at hook 3 [ 114.934256][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 115.242805][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 115.478673][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 116.368622][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.146'. [ 116.563286][ T6521] netlink: 56 bytes leftover after parsing attributes in process `syz.2.148'. [ 116.610293][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 116.838924][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.925233][ T6542] xt_bpf: check failed: parse error [ 117.238015][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.422975][ T6554] netlink: 56 bytes leftover after parsing attributes in process `syz.3.158'. [ 118.264571][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.375198][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.407421][ T6577] tipc: Started in network mode [ 118.413534][ T6577] tipc: Node identity 3e5432f1bcdf, cluster identity 4711 [ 118.427223][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.441334][ T6577] tipc: Enabled bearer , priority 0 [ 118.493285][ T6577] netlink: 'syz.2.165': attribute type 11 has an invalid length. [ 118.703057][ T6585] ip6t_REJECT: ECHOREPLY is not supported [ 118.751861][ T6590] IPVS: length: 250 != 8 [ 118.778150][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 118.809404][ T6591] x_tables: duplicate underflow at hook 3 [ 118.998360][ T3004] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.191559][ T6571] tipc: Disabling bearer [ 119.209702][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.231166][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 119.335165][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.386322][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.191383][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.181'. [ 120.300418][ T6642] netlink: 'syz.0.182': attribute type 5 has an invalid length. [ 120.940892][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.189'. [ 121.539681][ T6679] vlan2: entered promiscuous mode [ 121.549117][ T6679] bridge0: entered promiscuous mode [ 121.571162][ T6679] vlan2: entered allmulticast mode [ 121.591283][ T6679] bridge0: entered allmulticast mode [ 121.800110][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 121.824860][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 121.923384][ T6695] x_tables: duplicate underflow at hook 1 [ 122.228771][ T6698] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 122.646071][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.206'. [ 122.696383][ T24] IPVS: starting estimator thread 0... [ 122.794816][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.206'. [ 122.817402][ T6715] IPVS: using max 23 ests per chain, 55200 per kthread [ 122.848674][ T6721] SET target dimension over the limit! [ 122.866242][ T6714] warning: `syz.2.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.922144][ T6720] IPVS: length: 250 != 8 [ 122.948606][ T6714] netlink: 27 bytes leftover after parsing attributes in process `syz.2.207'. [ 123.098018][ T6712] delete_channel: no stack [ 124.902965][ T6793] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 124.936449][ T6793] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 125.426226][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 125.473655][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 125.488707][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 125.504676][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 125.514280][ T6826] ip6t_srh: unknown srh invflags 4449 [ 125.514947][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 125.543302][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 125.556554][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 125.568106][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 125.578256][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 125.588088][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 125.751775][ T6821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.766127][ T6821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.962346][ T6821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.985828][ T6821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.344763][ T6821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.384798][ T6821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.553089][ T6821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.571970][ T6821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.897341][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 126.986893][ T33] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.995148][ T33] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.018304][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.038096][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.074911][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.083703][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.116921][ T6857] trusted_key: syz.2.246 sent an empty control message without MSG_MORE. [ 127.293643][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.319186][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.903706][ T6873] netlink: 'syz.1.253': attribute type 4 has an invalid length. [ 128.826437][ T5923] hid-generic 0005:0C45:000B.0001: item fetching failed at offset 0/1 [ 128.840617][ T5923] hid-generic 0005:0C45:000B.0001: probe with driver hid-generic failed with error -22 [ 129.466045][ T6944] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 129.801683][ T6956] veth1_to_bond: entered promiscuous mode [ 129.814098][ T6956] macvtap1: entered allmulticast mode [ 129.833886][ T6956] veth1_to_bond: entered allmulticast mode [ 129.854699][ T6956] veth1_to_bond: left allmulticast mode [ 129.892440][ T6956] veth1_to_bond: left promiscuous mode [ 130.144714][ T6972] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 130.164087][ T6974] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 130.206484][ T6979] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 130.266407][ T6972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.277382][ T6965] veth0_to_bond: entered allmulticast mode [ 131.204929][ T7013] __nla_validate_parse: 52 callbacks suppressed [ 131.204947][ T7013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.294'. [ 131.709558][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 132.204472][ T7034] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 132.336536][ T7034] bond2: entered promiscuous mode [ 132.344536][ T7034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.389223][ T7040] bond2: (slave bridge0): making interface the new active one [ 132.397240][ T7040] bridge0: entered promiscuous mode [ 132.435612][ T7040] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 132.517294][ T7047] netlink: 'syz.2.304': attribute type 10 has an invalid length. [ 132.576222][ T7047] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 132.642309][ T7052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.306'. [ 132.662435][ T7047] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 132.694825][ T7052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.306'. [ 132.856075][ T7060] netlink: 56 bytes leftover after parsing attributes in process `syz.3.309'. [ 132.863052][ T7052] erspan0: entered promiscuous mode [ 132.881908][ T7052] batadv_slave_1: entered promiscuous mode [ 132.990877][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.000058][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.160503][ T7062] IPVS: length: 78 != 8 [ 133.390714][ T7072] x_tables: duplicate underflow at hook 2 [ 133.737722][ T30] audit: type=1800 audit(1750375347.677:2): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.319" name="memory.swap.current" dev="tmpfs" ino=354 res=0 errno=0 [ 133.893050][ T7089] tipc: Started in network mode [ 133.900995][ T7089] tipc: Node identity ac14140f, cluster identity 4711 [ 133.927999][ T7089] tipc: New replicast peer: 255.255.255.255 [ 133.934833][ T7089] tipc: Enabled bearer , priority 10 [ 133.948194][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 133.974320][ T7089] tipc: Disabling bearer [ 134.000211][ T7089] netlink: 'syz.1.321': attribute type 39 has an invalid length. [ 134.078241][ T7091] netlink: 56 bytes leftover after parsing attributes in process `syz.2.322'. [ 134.537830][ T7107] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 134.565000][ T7107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'. [ 134.666067][ T7111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 134.694420][ T7107] batman_adv: batadv0: Adding interface: virt_wifi0 [ 134.764806][ T7107] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.822088][ T7107] batman_adv: batadv0: Interface activated: virt_wifi0 [ 134.964962][ T7123] netlink: 48 bytes leftover after parsing attributes in process `syz.4.334'. [ 135.165369][ T7128] Cannot find del_set index 4 as target [ 135.257439][ T7128] Illegal XDP return value 4294967294 on prog (id 148) dev N/A, expect packet loss! [ 135.898818][ T7139] bond0 (unregistering): Released all slaves [ 136.491412][ T7160] netlink: 'syz.2.349': attribute type 21 has an invalid length. [ 136.517219][ T7169] IPVS: length: 250 != 8 [ 136.548202][ T7160] __nla_validate_parse: 1 callbacks suppressed [ 136.548222][ T7160] netlink: 128 bytes leftover after parsing attributes in process `syz.2.349'. [ 136.630545][ T7160] netlink: 3 bytes leftover after parsing attributes in process `syz.2.349'. [ 137.344112][ T7208] netlink: 48 bytes leftover after parsing attributes in process `syz.2.365'. [ 137.354980][ T7208] IPVS: length: 89 != 8 [ 137.522294][ T7196] xt_CT: No such helper "snmp" [ 137.941034][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 138.132586][ T7223] macsec0: entered promiscuous mode [ 138.219296][ T7224] veth1_macvtap: left promiscuous mode [ 138.300031][ T7224] macsec0 (unregistering): left promiscuous mode [ 138.463950][ T7234] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 138.566374][ T7239] netlink: 'syz.4.373': attribute type 3 has an invalid length. [ 138.582603][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.371'. [ 138.592223][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 140.198237][ T7268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'. [ 141.180556][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 141.205628][ T7280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.384'. [ 141.412183][ T7287] nbd: must specify an index to disconnect [ 141.509798][ T7292] netlink: 56 bytes leftover after parsing attributes in process `syz.1.387'. [ 141.898984][ T7306] syz_tun: entered allmulticast mode [ 141.910672][ T7306] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 141.954500][ T7305] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 142.332850][ T7312] netlink: 'syz.3.396': attribute type 10 has an invalid length. [ 142.369432][ T7312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.396'. [ 142.394969][ T7312] dummy0: entered promiscuous mode [ 142.420335][ T7312] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 142.707269][ T7329] bridge0: port 3(veth0_to_bridge) entered blocking state [ 142.714558][ T7329] bridge0: port 3(veth0_to_bridge) entered disabled state [ 142.754717][ T7329] veth0_to_bridge: entered allmulticast mode [ 142.790267][ T7329] veth0_to_bridge: entered promiscuous mode [ 142.812605][ T7329] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.833904][ T7329] bridge0: port 3(veth0_to_bridge) entered blocking state [ 142.841268][ T7329] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 142.902693][ T7338] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 143.040547][ T7351] netlink: 56 bytes leftover after parsing attributes in process `syz.0.404'. [ 143.129879][ T7358] netlink: 36 bytes leftover after parsing attributes in process `syz.4.403'. [ 143.164493][ T7340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.242562][ T7345] lo speed is unknown, defaulting to 1000 [ 143.309042][ T7345] lo speed is unknown, defaulting to 1000 [ 143.340051][ T7365] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'. [ 143.384853][ T7345] lo speed is unknown, defaulting to 1000 [ 143.480760][ T7370] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 143.529721][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 143.551913][ T7345] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.631356][ T7345] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.875312][ T7345] lo speed is unknown, defaulting to 1000 [ 143.905250][ T7380] lo speed is unknown, defaulting to 1000 [ 143.954198][ T7345] lo speed is unknown, defaulting to 1000 [ 144.024975][ T7392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.066879][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.137132][ T7392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.144617][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.250431][ T7345] lo speed is unknown, defaulting to 1000 [ 144.314255][ T7397] geneve2: entered promiscuous mode [ 144.380042][ T7345] lo speed is unknown, defaulting to 1000 [ 144.414526][ T7345] lo speed is unknown, defaulting to 1000 [ 144.678321][ T7408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.420'. [ 144.694822][ T7408] netlink: 56 bytes leftover after parsing attributes in process `syz.3.420'. [ 144.757196][ T7380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.791522][ T7406] lo speed is unknown, defaulting to 1000 [ 144.848646][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 144.905605][ T7418] netlink: 72 bytes leftover after parsing attributes in process `syz.4.421'. [ 144.936617][ T7409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.967152][ T7414] hsr_slave_0: left promiscuous mode [ 144.999253][ T7414] hsr_slave_1: left promiscuous mode [ 145.719140][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.429'. [ 146.030626][ T7446] netlink: 'syz.3.430': attribute type 11 has an invalid length. [ 146.852218][ T7464] lo speed is unknown, defaulting to 1000 [ 147.173404][ T7477] raw_sendmsg: syz.0.440 forgot to set AF_INET. Fix it! [ 147.196450][ T7478] netlink: 'syz.3.441': attribute type 5 has an invalid length. [ 147.430750][ T7478] geneve2: entered promiscuous mode [ 147.449992][ T7478] geneve2: entered allmulticast mode [ 147.995414][ T7479] syz_tun: left allmulticast mode [ 148.039033][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.047062][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.707262][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.776430][ T7479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.979769][ T7479] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 149.306788][ T49] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 149.339314][ T49] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 149.363028][ T7474] lo speed is unknown, defaulting to 1000 [ 149.386309][ T49] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 149.428068][ T33] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 149.482519][ T33] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.513815][ T33] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.545773][ T33] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.575731][ T33] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.600925][ T7508] __nla_validate_parse: 4 callbacks suppressed [ 149.601005][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 149.695340][ T33] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.704431][ T33] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.763800][ T33] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.786883][ T33] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.996494][ T7526] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.028384][ T7526] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.491129][ T7547] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 150.543402][ T7549] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.545560][ T7547] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 151.815569][ T7602] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 151.830213][ T7602] netlink: 'syz.0.475': attribute type 2 has an invalid length. [ 151.933823][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.475'. [ 151.962893][ T30] audit: type=1800 audit(1750375365.907:3): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.469" name="memory.events" dev="tmpfs" ino=497 res=0 errno=0 [ 152.003654][ T7602] tipc: Started in network mode [ 152.008955][ T7602] tipc: Node identity 9e72c7cf01ce, cluster identity 4711 [ 152.016348][ T7602] tipc: Enabled bearer , priority 0 [ 152.095273][ T7601] tipc: Disabling bearer [ 152.449066][ T7621] x_tables: duplicate underflow at hook 1 [ 152.467911][ T7621] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 152.479224][ T7621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.480'. [ 152.563932][ T7621] netlink: 84 bytes leftover after parsing attributes in process `syz.0.480'. [ 152.581718][ T7621] netlink: 72 bytes leftover after parsing attributes in process `syz.0.480'. [ 152.917441][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 152.962152][ T7634] hsr0: entered promiscuous mode [ 152.979863][ T7634] macvtap1: entered promiscuous mode [ 153.013064][ T7634] macvtap1: entered allmulticast mode [ 153.026945][ T7634] hsr0: entered allmulticast mode [ 153.072200][ T7634] hsr_slave_0: entered allmulticast mode [ 153.102917][ T7634] hsr_slave_1: entered allmulticast mode [ 153.202134][ T7634] hsr0: left allmulticast mode [ 153.213804][ T7634] hsr_slave_0: left allmulticast mode [ 153.231765][ T7634] hsr_slave_1: left allmulticast mode [ 153.245283][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.487'. [ 153.552830][ T7650] lo speed is unknown, defaulting to 1000 [ 153.994004][ T7666] netlink: 256 bytes leftover after parsing attributes in process `syz.4.492'. [ 154.101362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.114265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.126890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.139501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.152073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.164691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.177375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.189924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.203311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.216038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.631503][ T7676] netlink: 'syz.3.495': attribute type 2 has an invalid length. [ 154.954838][ T7676] k›*·]‘: entered promiscuous mode [ 155.078282][ T7683] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.519104][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.499'. [ 156.664635][ T5852] Bluetooth: hci2: command tx timeout [ 157.098370][ T7718] xt_cgroup: path and classid specified [ 159.107163][ C0] net_ratelimit: 8243 callbacks suppressed [ 159.107194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.125606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.138139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.150733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.163273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.175821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.188406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.200946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.213536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.226122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.116899][ C0] net_ratelimit: 8070 callbacks suppressed [ 164.116922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.135432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.148061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 164.160652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.173223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.185845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.198479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 164.211068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.223637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.236280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.245649][ C1] sched: DL replenish lagged too much [ 169.127284][ C0] net_ratelimit: 8114 callbacks suppressed [ 169.127307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.145870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.158558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 169.171142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.183692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.196341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.208975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 169.221581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.234156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.246823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.136933][ C0] net_ratelimit: 7750 callbacks suppressed [ 174.136956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.155465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.168190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 174.180777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.193380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.206159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.218827][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 174.231531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.244417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.257120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.146778][ C0] net_ratelimit: 7904 callbacks suppressed [ 179.146800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 179.165429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.178460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.191150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.203876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 179.216516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.229103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.241830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.254733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 179.267343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.157163][ C0] net_ratelimit: 7786 callbacks suppressed [ 184.157218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 184.175616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.188179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.200777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.213404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 184.226024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.238597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.251216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.263868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 184.276423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.167388][ C0] net_ratelimit: 8149 callbacks suppressed [ 189.167411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.185959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 189.198555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.211169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.223874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.236932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 189.249547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.262243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.275025][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.287755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 194.177211][ C0] net_ratelimit: 7753 callbacks suppressed [ 194.177234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.195723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.208348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 194.220908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.233942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.246574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.259227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 194.271857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.284507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.297238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.588514][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.616346][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.187140][ C0] net_ratelimit: 8308 callbacks suppressed [ 199.187162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 199.205565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.218122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.231214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.243856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 199.256441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.269521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.282187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.294981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 199.307547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.197176][ C0] net_ratelimit: 8314 callbacks suppressed [ 204.197198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 204.215637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.228211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.240826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.253510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 204.266094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.278666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.291342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.303958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 204.316599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.206887][ C0] net_ratelimit: 8165 callbacks suppressed [ 209.206910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.225414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 209.237991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.250611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.263263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.275895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 209.288443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.301026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.313669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.326306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 212.975962][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 213.006566][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 213.163869][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 213.644427][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 214.216842][ C0] net_ratelimit: 8396 callbacks suppressed [ 214.216866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.235342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.248028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.260762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 214.273378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.285978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.298666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.311363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 214.324009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.336640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.227273][ C0] net_ratelimit: 8280 callbacks suppressed [ 219.227296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 219.245912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.258770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.271486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.284269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.297014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 219.309628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.322216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.334906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.347511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.237080][ C0] net_ratelimit: 8217 callbacks suppressed [ 224.237106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.255616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.268166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.280841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 224.293445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.306014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.318634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.331250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.343888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 224.356445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.246869][ C0] net_ratelimit: 8166 callbacks suppressed [ 229.246891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.265339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.277999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 229.290596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.303222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.316742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.329290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.341905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 229.354444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.367014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.257207][ C0] net_ratelimit: 7891 callbacks suppressed [ 234.257230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.275760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 234.288361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.300954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.313606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.326364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.339006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 234.351591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.364207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.376885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.267186][ C0] net_ratelimit: 7845 callbacks suppressed [ 239.267209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.285617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.298237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.310801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.323498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 239.336070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.348624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.361352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.373957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.386573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.277145][ C0] net_ratelimit: 8525 callbacks suppressed [ 244.277168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.295644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 244.308183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.320735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.333344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 244.346003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.358559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.371155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.383698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.396305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 249.286950][ C0] net_ratelimit: 8533 callbacks suppressed [ 249.286973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.305373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.318051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 249.330616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.343145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.355760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 249.368391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.380949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.393564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.406130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.296878][ C0] net_ratelimit: 8377 callbacks suppressed [ 254.296901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.315389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.328061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 254.340790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.353387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.366036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.378601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.391247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 254.403802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.416495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.015183][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 259.306986][ C0] net_ratelimit: 8073 callbacks suppressed [ 259.307009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.325452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.338064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.350635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.363264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 259.375817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.388356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.400984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 259.413649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.426188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.317016][ C0] net_ratelimit: 8005 callbacks suppressed [ 264.317044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 264.335636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.348264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.360921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.373884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.386539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 264.399079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.411654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.424269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 264.437058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.860105][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.884190][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.327167][ C0] net_ratelimit: 8054 callbacks suppressed [ 269.327189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 269.345794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.358446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.371136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.383775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.396464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 269.409084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.421744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.434435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 269.447386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.337161][ C0] net_ratelimit: 8056 callbacks suppressed [ 274.337186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.355676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.368215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.380891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 274.393454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.406033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.418696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 274.431348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.443912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.456687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.826688][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 274.833695][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7649/1:b..l [ 274.842045][ C0] rcu: (detected by 0, t=10503 jiffies, g=20569, q=1393 ncpus=2) [ 274.849892][ C0] task:syz.0.489 state:R running task stack:23344 pid:7649 tgid:7640 ppid:5837 task_flags:0x40054c flags:0x00004006 [ 274.864389][ C0] Call Trace: [ 274.867709][ C0] [ 274.870675][ C0] __schedule+0x16f5/0x4d00 [ 274.875255][ C0] ? do_group_exit+0x21c/0x2d0 [ 274.880054][ C0] ? preempt_schedule_common+0x83/0xd0 [ 274.885556][ C0] ? do_syscall_64+0x2bd/0x3b0 [ 274.890368][ C0] ? preempt_schedule_common+0x83/0xd0 [ 274.895906][ C0] ? __pfx___schedule+0x10/0x10 [ 274.900806][ C0] ? preempt_schedule+0xae/0xc0 [ 274.905705][ C0] ? preempt_schedule_common+0x83/0xd0 [ 274.911217][ C0] ? __pfx_do_softirq+0x10/0x10 [ 274.916117][ C0] ? preempt_schedule+0xae/0xc0 [ 274.921018][ C0] ? nl80211_netlink_notify+0x46b/0x840 [ 274.926626][ C0] preempt_schedule_common+0x83/0xd0 [ 274.931980][ C0] preempt_schedule+0xae/0xc0 [ 274.936715][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 274.942162][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 274.948286][ C0] preempt_schedule_thunk+0x16/0x30 [ 274.953552][ C0] __local_bh_enable_ip+0x13e/0x1c0 [ 274.958813][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 274.964584][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 274.969828][ C0] ? nl80211_netlink_notify+0x46b/0x840 [ 274.975441][ C0] nl80211_netlink_notify+0x46b/0x840 [ 274.980880][ C0] ? nl80211_netlink_notify+0x74/0x840 [ 274.986396][ C0] notifier_call_chain+0x1b3/0x3e0 [ 274.991574][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 274.997352][ C0] netlink_release+0x1259/0x1b10 [ 275.002352][ C0] ? netlink_release+0x108/0x1b10 [ 275.007460][ C0] ? __pfx_netlink_release+0x10/0x10 [ 275.012815][ C0] ? down_write+0x162/0x1f0 [ 275.017387][ C0] ? __pfx_down_write+0x10/0x10 [ 275.022324][ C0] sock_close+0xc0/0x240 [ 275.026606][ C0] ? __pfx_sock_close+0x10/0x10 [ 275.031505][ C0] __fput+0x44c/0xa70 [ 275.035542][ C0] task_work_run+0x1d1/0x260 [ 275.040182][ C0] ? __pfx_task_work_run+0x10/0x10 [ 275.045493][ C0] do_exit+0x6ad/0x22e0 [ 275.049709][ C0] ? do_raw_spin_lock+0x121/0x290 [ 275.054780][ C0] ? __pfx_do_exit+0x10/0x10 [ 275.059433][ C0] do_group_exit+0x21c/0x2d0 [ 275.064078][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.069334][ C0] get_signal+0x1286/0x1340 [ 275.073908][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 275.079512][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 275.085729][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 275.091239][ C0] exit_to_user_mode_loop+0x75/0x110 [ 275.096589][ C0] do_syscall_64+0x2bd/0x3b0 [ 275.101213][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.106455][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.112570][ C0] ? clear_bhb_loop+0x60/0xb0 [ 275.117394][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.123322][ C0] RIP: 0033:0x7f6ec5f8e929 [ 275.127783][ C0] RSP: 002b:00007f6ec6d14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 275.136231][ C0] RAX: 0000000000000400 RBX: 00007f6ec61b6080 RCX: 00007f6ec5f8e929 [ 275.144240][ C0] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 000000000000000a [ 275.152243][ C0] RBP: 00007f6ec6010b39 R08: 0000000000000000 R09: 0000000000000000 [ 275.160256][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.168270][ C0] R13: 0000000000000000 R14: 00007f6ec61b6080 R15: 00007ffd9842f3b8 [ 275.176297][ C0] [ 275.179345][ C0] rcu: rcu_preempt kthread starved for 2040 jiffies! g20569 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 275.190487][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 275.200491][ C0] rcu: RCU grace-period kthread stack dump: [ 275.206405][ C0] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 275.219960][ C0] Call Trace: [ 275.223295][ C0] [ 275.226272][ C0] __schedule+0x16f5/0x4d00 [ 275.230842][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 275.236099][ C0] ? schedule+0x165/0x360 [ 275.240489][ C0] ? __lock_acquire+0xab9/0xd20 [ 275.245397][ C0] ? __pfx___schedule+0x10/0x10 [ 275.250322][ C0] ? schedule+0x91/0x360 [ 275.254632][ C0] schedule+0x165/0x360 [ 275.258838][ C0] schedule_timeout+0x12b/0x270 [ 275.263735][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 275.269144][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 275.275083][ C0] ? __pfx_process_timeout+0x10/0x10 [ 275.280418][ C0] ? prepare_to_swait_event+0x341/0x380 [ 275.286019][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 275.290935][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 275.297140][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 275.302471][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 275.307737][ C0] ? finish_swait+0xcd/0x1f0 [ 275.312372][ C0] rcu_gp_kthread+0x99/0x390 [ 275.317010][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 275.322261][ C0] ? __kthread_parkme+0x7b/0x200 [ 275.327235][ C0] ? __kthread_parkme+0x1a1/0x200 [ 275.332307][ C0] kthread+0x70e/0x8a0 [ 275.336422][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 275.341670][ C0] ? __pfx_kthread+0x10/0x10 [ 275.346307][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.351561][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.356804][ C0] ? __pfx_kthread+0x10/0x10 [ 275.361434][ C0] ret_from_fork+0x3fc/0x770 [ 275.366078][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 275.371238][ C0] ? __switch_to_asm+0x39/0x70 [ 275.376038][ C0] ? __switch_to_asm+0x33/0x70 [ 275.380832][ C0] ? __pfx_kthread+0x10/0x10 [ 275.385457][ C0] ret_from_fork_asm+0x1a/0x30 [ 275.390270][ C0] [ 275.393316][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 275.399673][ C0] Sending NMI from CPU 0 to CPUs 1: [ 275.404919][ C1] NMI backtrace for cpu 1 [ 275.404941][ C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc1-syzkaller-00482-gafc783fa0aab #0 PREEMPT(full) [ 275.404962][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.404975][ C1] Workqueue: events_unbound toggle_allocation_gate [ 275.405000][ C1] RIP: 0010:fib6_table_lookup+0x16f/0xa80 [ 275.405024][ C1] Code: 5c 24 68 48 83 c3 20 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 8e be 07 f8 48 8b 03 48 89 44 24 20 e8 f1 07 4a 01 <89> c3 31 ff 89 c6 e8 46 4b a4 f7 85 db 74 1f e8 3d e0 89 f7 89 c3 [ 275.405039][ C1] RSP: 0018:ffffc90000a07680 EFLAGS: 00000246 [ 275.405053][ C1] RAX: 0000000000000001 RBX: ffff8880595a1920 RCX: ffff88801fecda00 [ 275.405066][ C1] RDX: 1ffff110066f79bb RSI: 1ffff92000140f10 RDI: 1ffff92000140f10 [ 275.405079][ C1] RBP: ffffc90000a077f0 R08: ffffc90000a075ef R09: 0000000000000000 [ 275.405091][ C1] R10: ffffc90000a075e0 R11: fffff52000140ebe R12: dffffc0000000000 [ 275.405104][ C1] R13: ffffc90000a07870 R14: ffffc90000a07878 R15: 1ffff92000140f0f [ 275.405117][ C1] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 275.405131][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.405143][ C1] CR2: 0000200000c1e030 CR3: 000000000df38000 CR4: 00000000003526f0 [ 275.405158][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.405168][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.405178][ C1] Call Trace: [ 275.405185][ C1] [ 275.405203][ C1] ? ip6_pol_route+0x162/0x1180 [ 275.405226][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 275.405257][ C1] ? ip6_pol_route+0x162/0x1180 [ 275.405275][ C1] ip6_pol_route+0x222/0x1180 [ 275.405298][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 275.405321][ C1] ? fib_rules_lookup+0x96/0xe90 [ 275.405344][ C1] ? fib_rules_lookup+0x96/0xe90 [ 275.405369][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 275.405388][ C1] fib6_rule_action+0x674/0x7d0 [ 275.405409][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 275.405430][ C1] fib_rules_lookup+0x767/0xe90 [ 275.405458][ C1] ? fib_rules_lookup+0x96/0xe90 [ 275.405480][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 275.405503][ C1] ? l3mdev_update_flow+0x29/0x640 [ 275.405523][ C1] ? l3mdev_update_flow+0x4d1/0x640 [ 275.405545][ C1] fib6_rule_lookup+0x18e/0x6f0 [ 275.405566][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 275.405586][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 275.405608][ C1] ? __lock_acquire+0xab9/0xd20 [ 275.405632][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 275.405655][ C1] ? run_filter+0x23/0x270 [ 275.405684][ C1] ip6_route_input+0x6ce/0xa50 [ 275.405708][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 275.405740][ C1] ? __lock_acquire+0xab9/0xd20 [ 275.405765][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 275.405793][ C1] ip6_rcv_finish+0x141/0x2d0 [ 275.405819][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 275.405843][ C1] ip_sabotage_in+0x1e1/0x270 [ 275.405864][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 275.405885][ C1] nf_hook_slow+0xc2/0x220 [ 275.405908][ C1] NF_HOOK+0x206/0x3a0 [ 275.405931][ C1] ? skb_orphan+0xaf/0xd0 [ 275.405957][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 275.405981][ C1] ? NF_HOOK+0x9a/0x3a0 [ 275.406005][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 275.406030][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 275.406061][ C1] __netif_receive_skb+0xd3/0x380 [ 275.406083][ C1] ? netif_receive_skb+0x115/0x790 [ 275.406100][ C1] netif_receive_skb+0x1cb/0x790 [ 275.406119][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 275.406138][ C1] ? br_netif_receive_skb+0x126/0x190 [ 275.406162][ C1] NF_HOOK+0x9d/0x390 [ 275.406180][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 275.406201][ C1] ? NF_HOOK+0x102/0x390 [ 275.406220][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 275.406249][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 275.406273][ C1] ? br_pass_frame_up+0x275/0x420 [ 275.406295][ C1] br_handle_frame_finish+0x14d1/0x19b0 [ 275.406324][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 275.406351][ C1] ? ip6t_do_table+0x1db/0x1560 [ 275.406377][ C1] ? nf_hook_slow+0x176/0x220 [ 275.406398][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 275.406418][ C1] br_nf_hook_thresh+0x3c3/0x4a0 [ 275.406443][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 275.406465][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 275.406485][ C1] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 275.406508][ C1] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 275.406530][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 275.406556][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 275.406579][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 275.406603][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 275.406627][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 275.406656][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 275.406680][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 275.406699][ C1] br_handle_frame+0x97f/0x14c0 [ 275.406725][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 275.406747][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 275.406766][ C1] ? packet_rcv+0x175/0x1590 [ 275.406792][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 275.406811][ C1] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 275.406838][ C1] __netif_receive_skb_core+0x10e1/0x4180 [ 275.406857][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 275.406881][ C1] ? ip6_mc_input+0x9c3/0xbe0 [ 275.406914][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 275.406932][ C1] ? ip6_rcv_finish+0x29a/0x2d0 [ 275.406958][ C1] ? NF_HOOK+0x30c/0x3a0 [ 275.406981][ C1] ? skb_orphan+0xaf/0xd0 [ 275.407014][ C1] ? process_backlog+0x2d5/0x14f0 [ 275.407035][ C1] ? process_backlog+0x2d5/0x14f0 [ 275.407058][ C1] __netif_receive_skb+0x72/0x380 [ 275.407078][ C1] ? process_backlog+0x2d5/0x14f0 [ 275.407099][ C1] process_backlog+0x60e/0x14f0 [ 275.407118][ C1] ? __lock_acquire+0xab9/0xd20 [ 275.407150][ C1] ? __pfx_process_backlog+0x10/0x10 [ 275.407176][ C1] __napi_poll+0xc7/0x480 [ 275.407192][ C1] ? net_rx_action+0x46d/0xe30 [ 275.407214][ C1] net_rx_action+0x707/0xe30 [ 275.407240][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.407276][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 275.407317][ C1] handle_softirqs+0x286/0x870 [ 275.407346][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 275.407375][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 275.407404][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 275.407427][ C1] __irq_exit_rcu+0xca/0x1f0 [ 275.407452][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 275.407484][ C1] irq_exit_rcu+0x9/0x30 [ 275.407508][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 275.407534][ C1] [ 275.407540][ C1] [ 275.407547][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.407566][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 275.407595][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b [ 275.407609][ C1] RSP: 0018:ffffc90000ba76a0 EFLAGS: 00000293 [ 275.407622][ C1] RAX: ffffffff81b4eb00 RBX: ffff8880b873cb40 RCX: ffff88801fecda00 [ 275.407635][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 275.407645][ C1] RBP: ffffc90000ba7800 R08: ffffffff8fa10ff7 R09: 1ffffffff1f421fe [ 275.407659][ C1] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: 1ffff110170c86b5 [ 275.407672][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b86435a8 [ 275.407690][ C1] ? smp_call_function_many_cond+0xf80/0x12d0 [ 275.407729][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 275.407757][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 275.407777][ C1] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 275.407796][ C1] ? __pfx___text_poke+0x10/0x10 [ 275.407813][ C1] ? rcu_is_watching+0x15/0xb0 [ 275.407840][ C1] ? trace_contention_end+0x39/0x120 [ 275.407862][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 275.407880][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 275.407909][ C1] smp_text_poke_batch_finish+0x5e0/0x1100 [ 275.407932][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 275.407949][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 275.407972][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 275.408001][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 275.408024][ C1] static_key_enable_cpuslocked+0x128/0x250 [ 275.408045][ C1] static_key_enable+0x1a/0x20 [ 275.408061][ C1] toggle_allocation_gate+0xad/0x240 [ 275.408079][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 275.408097][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 275.408129][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 275.408155][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 275.408182][ C1] process_scheduled_works+0xae1/0x17b0 [ 275.408224][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 275.408268][ C1] worker_thread+0x8a0/0xda0 [ 275.408311][ C1] kthread+0x70e/0x8a0 [ 275.408333][ C1] ? __pfx_worker_thread+0x10/0x10 [ 275.408359][ C1] ? __pfx_kthread+0x10/0x10 [ 275.408380][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.408404][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.408429][ C1] ? __pfx_kthread+0x10/0x10 [ 275.408449][ C1] ret_from_fork+0x3fc/0x770 [ 275.408475][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 275.408505][ C1] ? __switch_to_asm+0x39/0x70 [ 275.408523][ C1] ? __switch_to_asm+0x33/0x70 [ 275.408540][ C1] ? __pfx_kthread+0x10/0x10 [ 275.408560][ C1] ret_from_fork_asm+0x1a/0x30 [ 275.408587][ C1] [ 279.346957][ C0] net_ratelimit: 6798 callbacks suppressed [ 279.346979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.365521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.378157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.390867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 279.403499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.416117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.428800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 279.441605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.454228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.466923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.356870][ C0] net_ratelimit: 7544 callbacks suppressed [ 284.356894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.375629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 284.388254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.400881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.413577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0) [ 284.426258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.438888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.451593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.464201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.476971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1e:82:49:5d:c5, vlan:0)