last executing test programs: 27.440811805s ago: executing program 3 (id=7717): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}], 0x1, 0x4000) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000080)=0x9, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x5, 0x7, 0x6}}}}]}, 0x48}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000007000000000000000000008018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181b0000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000d959bf1127f8ccc2ce"], &(0x7f0000000480)='syzkaller\x00', 0x10000, 0x5, &(0x7f00000004c0)=""/5, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, 0x1]}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x9, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000006c0)='syzkaller\x00', 0x7fffffff, 0x0, &(0x7f0000000700), 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x5, 0x3, 0xb83b, 0x4000000}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000007c0)=[0x1], &(0x7f0000000800)=[{0x4, 0x5, 0xe, 0x7}, {0x4, 0x2, 0x5, 0x7}, {0x3, 0x2, 0xf, 0x2}, {0x2, 0x2, 0x8, 0xb}, {0x1, 0x3, 0x1, 0x5}, {0x5, 0x5, 0x3, 0x3}, {0x1, 0x3, 0x7, 0x6}, {0x3, 0x1, 0x4, 0x2}, {0x5, 0x5, 0x1, 0xc}, {0x3, 0x1, 0xa, 0x5}]}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001340)={&(0x7f0000000980)=@delchain={0x8ec, 0x65, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x2, 0x8}, {0x5, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x2c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0x17}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x8}}, @filter_kind_options=@f_flow={{0x9}, {0x320, 0x2, [@TCA_FLOW_EMATCHES={0x2fc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0x0, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x1ff}, "55f5f12ceb55c0a60009295a8f86c5e1b22f3e8b50e067a7465d4d04c761b95f58bf94a15891bfb669ad0d143b42e3c105e4b86e815874e3438aae2120b3ac7931ba84605fa6c22114b7b99e1d60b5666ecdd9a3bbfc208229da6755ff3581d70d45372529cc1dee9c6d7556e2e3e65cf5046ede1049ded3ca8ea726ec73b77871661eb982696aa369ba7b57"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x4}, {0x0, 0x7, 0x9, 0x3, 0xf, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x4c, 0x3, 0x0, 0x0, {{0xa157}, "6a987a3b67505d7b8c2eae6649d79172ff5d5d23cc816811af990cfd9f7aa754d39476679eaa21a3d848106a5a56c4d3ff4772f81a551768301524f1795da9"}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3479, 0x3, 0xec65}, {0x40, 0x3, 0xfffffffd, 0x2}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x1ff}, {0x0, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x48, 0x3, 0x0, 0x0, {{0x8000, 0x0, 0x3}, "c024b321630c4ca9f5c562c98cb0a8befac78382a8e06321e8edb5d307aac85e5e12b88d381459b909edbccf715f4bfe9605a310d878b9a9baef"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0xd}, {0x4, 0x3, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x56d, 0x7, 0x2}, {{0x4, 0x0, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xa, 0x7, 0xbffb}, {{0x3, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x5}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xfffa}, "588b298431004333c415e1d8a9e6d588b6cad98ddc4922ed1eb36fb7ab56ca31353fa232653823ed5ab42059c3e2c2bbfe618ec470e05bef416229199eae238020c7d49e8a15cc2ba9edea0f2979403b6d3a33f6516ba41b9ee0e3cb63ba952c380bb9f792ba686449b9a94623aff473df5c17cb8e6454f7e6fd4d5339e2bebeca5ad0099bc1d201bee561a87ed434b2b8bf0243cb23c878069265b43cba592d19df6d4c77e02b7946fd19f6a169d80c234c69e529292f1be80f700139cade5975424c6ee3e6a0"}}, @TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0x800, 0x9, 0xd}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x19, 0x5, "ae1a12376b3c34acdac43570fedc0d5fe06ebea7ba"}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x4}, {{0x4, 0x0, 0x1}, {0x4}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x2b}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1195e}]}}, @TCA_RATE={0x6, 0x5, {0xd2, 0x7c}}, @TCA_CHAIN={0x8, 0xb, 0x3e180}, @TCA_CHAIN={0x8, 0xb, 0xb58}, @filter_kind_options=@f_fw={{0x7}, {0x530, 0x2, [@TCA_FW_POLICE={0x480, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x4114, 0x6, 0x6, {0xf9, 0x1, 0x42c6, 0x4, 0x1, 0xfffffe01}, {0x5, 0x2, 0x6d2, 0x1, 0x2, 0xffffffc0}, 0x7ff, 0x0, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xab}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x401, 0x8, 0x7, 0xa3d3d7b6, 0xfc000000, 0x9, 0x3, 0x2, 0x3, 0xd27, 0x5, 0xc28, 0x4, 0x7, 0xcd, 0x6, 0xee1, 0xffff, 0x0, 0x7, 0x6, 0x1, 0x0, 0x1000, 0xc2, 0x4, 0x7, 0xfffffffc, 0x1f, 0xb79, 0x1, 0x0, 0x6, 0xc75, 0x3, 0xd, 0xfffffffe, 0xed, 0x4, 0x4, 0x4, 0xa, 0x10001, 0x3, 0x0, 0x5, 0x9294, 0x42c, 0x5, 0x883, 0x3, 0x4, 0x5, 0x401, 0x9, 0x5ef, 0x3, 0xffffffff, 0xff, 0x3, 0x9, 0xf, 0x807, 0x0, 0x3, 0xbb, 0x18000000, 0x9, 0x2, 0x4, 0x9, 0x1, 0x5, 0xbe4a, 0x10000, 0x8c6e, 0x200, 0x5, 0x8, 0x6, 0x7ff, 0x1, 0x7, 0x8, 0x8, 0x401, 0x6, 0x1, 0x16, 0xfffffffc, 0x1, 0x7, 0x0, 0x4, 0x6, 0xd553, 0x0, 0x7f, 0x6, 0x2, 0x101, 0x8, 0xe, 0xe18f, 0x9, 0x7, 0x9, 0x0, 0x1, 0x3, 0x7, 0xffffff37, 0x0, 0x0, 0x5, 0x4, 0x1, 0x10001, 0x2, 0x101, 0xc0f, 0x4, 0x6, 0x0, 0x0, 0x80, 0x493, 0x9, 0x6, 0x1, 0x5, 0x6, 0x2, 0x81, 0x1, 0x4, 0xf, 0x3, 0x1, 0x5f, 0x1, 0x6, 0x4, 0x0, 0x2, 0x9, 0x9, 0x8, 0xe96a, 0xff, 0x9, 0x101, 0x100, 0x6, 0x3, 0x1, 0x9, 0x3, 0x7, 0x5, 0x3, 0x9, 0x7, 0x9, 0xc05, 0x8, 0xfffffffe, 0x1b44, 0xfffffffb, 0x80000000, 0x7, 0x7e, 0xe, 0x2ab0, 0x2994, 0x1, 0xffffffff, 0x3ff, 0x6, 0x3, 0xfffffffd, 0x1b, 0x8, 0x1, 0x8, 0x9, 0x516, 0x80000000, 0x6, 0x5, 0x401, 0x64, 0x7, 0x30, 0x0, 0x4, 0x1, 0x8, 0x9, 0x200, 0x7, 0x64, 0x1, 0xffffc5b9, 0x200, 0x7, 0x8, 0x0, 0xffff, 0x4, 0x101, 0x6, 0x4b8, 0x401, 0x9, 0x4, 0x0, 0x9, 0x572, 0x8, 0x4, 0x9, 0x80000001, 0x6, 0x38000, 0x3, 0x1ff, 0x6, 0x4, 0x80000000, 0x4, 0x8, 0x7, 0x6, 0x9a9, 0x7, 0x0, 0xc6, 0x7, 0x6, 0x100, 0x8, 0x3, 0x401, 0x8, 0x10000, 0x100, 0x7fff, 0x9, 0x10b3, 0xfff, 0x8000, 0x9, 0x2]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_FW_INDEV={0x14, 0x3, 'ip_vti0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xffff}, @TCA_FW_POLICE={0x88, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0xe59, 0x1000, 0x10001, {0x5c, 0x2, 0x59d, 0x0, 0x2, 0xd}, {0xff, 0x0, 0x1, 0x7ff, 0x4, 0xffffffff}, 0x7, 0x8, 0x5}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0xba}]}, 0x8ec}, 0x1, 0x0, 0x0, 0x24000004}, 0x40000091) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500070000002020207b1af8ff00000000bfa17971bb730c73d495adbb47b6459000000000000200000000f8ffd1ffffb702000008000000b7030000000000008500000072000000950000000000002ca1eca835b4d645a0ba6996fe6624999879c26c55ac7f3e9bf2e7b6c6d662705453831b974fd55d1a947ce36b954f968574039815490844224842ba0c639db54a00c6ca1cb2828af9027082e553fee7478416ae9d4a5b5e2b797319e8800f6d017ac9f4976bd32372142a364a4e130a1579009cc10db8d1da6f509a1a82396dc79af312ba2ac6af2e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$xdp(r9, &(0x7f0000000080)={0x2d, 0x0, r11, 0x3e}, 0x10) ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f0000001740)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x80110, r6, 0x3) r13 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x31, 0xffffffffffffffff, &(0x7f0000000e00)) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002c00ed002bbd7000ffdbdf25077c0000100001800c00dd800800f400", @ANYRES32=r15, @ANYBLOB="080003"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc090) 27.168907635s ago: executing program 3 (id=7719): unshare(0x6a040000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) unshare(0x24020400) r1 = socket(0x1d, 0x2, 0x6) unshare(0x24020400) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefd", 0xfdef}], 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYRESOCT=r3, @ANYRESDEC=r6], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 24.31542887s ago: executing program 2 (id=7750): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x64, 0x5}]}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f00000005c0)="afc356bf9b09ff372dada82178d12dd14c1ac86260912511083eff5eb15dbc742feb6d168c4e1469275b63d26b7275c1e17da52aa7074b02fba314002d2d", 0x3e}], 0x1, 0x2) socket$inet6(0xa, 0x1, 0x100) close(0x3) r4 = socket$inet(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f0000000580)={0x2, 0x4e21, @remote}, 0x10) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x440d4) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$nl_route(r6, 0x0, 0x40040) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x4008094) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0) recvmmsg(r9, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) socket$nl_generic(0x10, 0x3, 0x10) 23.932580185s ago: executing program 2 (id=7753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000940)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x4}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000440)="848ee45daffccb941a1562ff556661b8d70cfde446ebaaf92e0b84439c317e4fd51137814c92eae492b118d6a000db8605adaaca027c4df1f2326a10c161405a664fd46f9835dd8e5c1928515b7b19c3023c0c102942acab8f620ed98888a72cb2505ba33fc9e74439a9c4bafdea0e79d4323d82a92031f6a89cd21b09ddfa9729308a0388afb39278144d897353cebb42f8158912e8f3ba792bafad85141c7581c905c8e402a73b8454761601c6f2db4ea93fabc68aaa2107ee085b876446a8612628f63c0f3d8cc54c3186aec7c30b62095382ec8bd10b9f8cc99fb63f", 0xde}, {&(0x7f0000000740)="ffcdf10418208a2b5b6a924ae67f4d29771369f064950f7ddf9c85e5a62a393ce78b1a7c027f65b3f51ffd9757c0f2a64af6fabd764f71a9203483c8152c8522fa54b9fac8dbf162abef997d79854f8ff9e81d2a57af491947da0b258c9ce741bdf484347c9b75aeb771bf6b1eaf256f1ff1046b3f8eede155dc250e2ca9c4f095bdc11a0416dc804dd2c7a3c71db90bc365ff22653bf29ea1d6e949d827c5a75759aaa4d0a7b743634d8aafb6d671b6766ecf32c49205bcc925ea784fe85db748444b35132027b698d0c9588bb562023965dbac54c7e81f", 0xd8}], 0x2, &(0x7f0000000880)="606c4ddd8dd5f26ee8cccf478bec11fe9a2c7df7945cc2f6357577a7b4d3ba7ab897e6a5b306f8631ec1c4528f8c77f47589324e2bc5deb21323f824d3048e45a66a0cb5e39d0f9e0bfe6b65929075eeedd814f57990e1124e47887dde379264ec8205daa01c141db489f76a7e788b44971bb004a25d336cc6666911f8d97049498751c854eedb3c65485c67f9c5910fba3b5bc395400a6ea0e45dc5e7a8cf31b2fd33b3547da00136d3a9024454328b6fe581d0ed7904acc5fe44e805916ef9", 0xc0, 0x4011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f47a3b6e947d8444ef8a51116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffebb, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040)="25b4bfcb8b2d97", &(0x7f0000000080)=""/88, &(0x7f0000000100)="cadf7181bd1e6d6f709947206c3347b71b3150e494308eb6c40ecc20e306a5cb75082bffad3879dc90fc7ce8c6e663b61b7eca658ac4f1524c183de4504d54b6adc8a37b", &(0x7f0000000180)="fe0097c7a7979e8d6e11b7c8115b43463e1c75caa422c335a2d8003e0839895931e45302426cc2c2241a23fc", 0x5, r2, 0x4}, 0x38) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) recvmsg$unix(r3, &(0x7f0000002e00)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/8, 0x8}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/84, 0x54}, {&(0x7f0000002c00)=""/232, 0xe8}, {&(0x7f0000002d00)=""/29, 0x1d}], 0x7, &(0x7f0000002dc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x1) 23.756450486s ago: executing program 0 (id=7755): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x2b, 0x80801, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a704000055c0da3f740200001d00000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$netlink(0x10, 0x3, 0x14) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a704000055c0da3f740200001d00000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) 23.7491967s ago: executing program 3 (id=7756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xce, '\x00', @loopback}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) 23.748602553s ago: executing program 1 (id=7757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000ef8697fb483f8f6c00000000000000ffffac1414aa00000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0800000000000000700300000000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000020bf0ad7df66d3bee94e3ab30000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000030000000200"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 23.72928975s ago: executing program 4 (id=7758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231b05002400128008000101677265002803001200"/44], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) 23.64789245s ago: executing program 3 (id=7759): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r2) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000c80)={&(0x7f0000000780)=ANY=[@ANYBLOB="01000080", @ANYRES16=r4, @ANYBLOB="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"], 0x4d0}}, 0x1) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0xffffffff) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x300, 0x0, 0x10001, 0x5}, &(0x7f0000000780)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa0000000000007910bd000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 23.600988294s ago: executing program 0 (id=7760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000000000000b0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 23.574814839s ago: executing program 1 (id=7761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, 0x1, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x51, 0x6, "d7e1c5cad6a162e8b42a63f1119ef9f532f3ccd1da1d5451bc1013bc0eac2e492658be8f9273f12522b90f357d027122393cc620b0dbda3a69f215d393c0007babaa887a17aee5863dbb53e8e3"}, @NFTA_TABLE_USERDATA={0x27, 0x6, "63477d3132129ee25e6825321df63ba0e80c3aed68ea57c5b08018c091ab331c02f286"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x600, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00'], 0x38}, 0x1, 0x300}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r2, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000240)=0x12, 0xc0000) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @local, 0x8001}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000400)=0x3, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 23.479968203s ago: executing program 2 (id=7762): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000604000000000000000100000505000000000000000300000000000000000000000000000901000000000018aa35c780dd4442d782eb30000356b9a596513dbd2c95352cb31bb0c134ae9cd0b5a3f3b78273a4e6af05d415d6780b98965f70b2a104fe3144816de19ae0b9579b303a7a85cf92011fb63c7c3fa6cd6d24f13064e2788c743e6653a65b01632b4e72316f38a0179d1a7b93b373f9170dcc6751421c260c0cb32c19492a2b2f6ba830ee57b69da732b7b92e3e86460f1598f2abbca829ddaf6b5286bf80e7f83a40e02c45dd9a523cd9079bb649dd55c159072008231d35219a1a126b5103b81ed71ba0141cfcb6ecd3484433cbd6c2a65a36cd0f8fc87a61972dec38a8a44f5bc2d5ce317ec6ad3c1a7e3f93cd8abf3a13a1fda7c20d0cfe946a843712d01c9cc2d8d4902005290331c94b7dd97fb22827e1ce95f6eae01e9e386b1aa159631676e52a536254414c1a413cc4df043d8c6def73540334354662d0de470ddcb9809cef8687d86adc0d9edc26054b5bcc5f2608ea22435cd0d9969dca5152682a1e837c7624cd6ff8d296bad2405b1b340a64c1667eeb6f5eba8ca62d18d5bd9353a46420fb5fbe82dcf2f31ac22100a76731c0692b1dbe6fdff7978b"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8, 0xffff}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x5, 0xcf1e}) 23.479391829s ago: executing program 4 (id=7763): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r3, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) socket$nl_netfilter(0x10, 0x3, 0xc) 23.404911987s ago: executing program 3 (id=7764): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r3, 0x401, 0x70bd2b, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4021200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 23.394108102s ago: executing program 1 (id=7765): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 23.33597486s ago: executing program 0 (id=7766): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002002c0013"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) 23.332949915s ago: executing program 2 (id=7767): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=@delqdisc={0x24, 0x26, 0x1f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xc, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c000) 23.268387742s ago: executing program 0 (id=7768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x20) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffff0, &(0x7f0000000600), 0x30, 0x40010844}, 0x88f0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000340)=""/58, 0x3a}], 0x2}, 0x101}], 0x1, 0x60, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x13, 0xfd}, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xf, &(0x7f0000001040)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 23.040547366s ago: executing program 3 (id=7769): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 22.992718848s ago: executing program 2 (id=7770): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf250100000000000000014100000008001700"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8932, &(0x7f0000000900)={'batadv_slave_1\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r8, &(0x7f0000000300)="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", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 22.991805174s ago: executing program 1 (id=7771): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000ef8697fb483f8f6c00000000000000ffffac1414aa00000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0800000000000000700300000000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000020bf0ad7df66d3bee94e3ab30000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000040000000200"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 22.951296738s ago: executing program 1 (id=7772): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x20000001, 0x6, 0x8, 0x8, {0x1, 0x1, 0x0, 0x101, 0x45}, {0xf, 0x2, 0x8, 0x5, 0xff81, 0xfffff3e5}, 0xfffffff7, 0xfffffffa, 0x92}}]}]}}]}, 0x74}}, 0x8080) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r11, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x8040, 0x0, 0x2f) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 22.38997385s ago: executing program 4 (id=7773): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) r2 = socket$pptp(0x18, 0x1, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) socket$packet(0x11, 0xa, 0x300) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20044054}, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) write(r3, 0x0, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000280)=0xffff) socket$netlink(0x10, 0x3, 0x7) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000080014000100fc0000000000000000000000000000fc140009", @ANYRES8=r1, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x20000814) 22.267099989s ago: executing program 0 (id=7774): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000f501a00000240012800b000100627269646765000014000280060027"], 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x18, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) 22.239627145s ago: executing program 4 (id=7775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x1c}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xe}}, @func_proto]}}, 0x0, 0x62, 0x0, 0x1}, 0x28) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(r4, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', 0x0, 0x2f, 0x9a, 0x6, 0x557b, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x8, 0x1, 0x0, 0xe}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000001040)={0x204, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x2000c000}, 0x200448c2) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c20000003edf5c0fb0fa86dd6003000000002cfffe8000000000000000000000000000bb069c55d8f9ce406f4d6cfe8000000000000000000000000000aa"], 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000427bd700049794d79d6366688ce4d7581345b93fbdbdf020100000015000d000000050008001700", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r13, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r11}, 0x38) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x6, 0x1, &(0x7f0000000240)='>', 0x9, 0x2, 0x10cf, 0x7fff, 0x43, 0x0, 0x7, 'syz0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'xfrm0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1f, 0x0, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0xff, 0x401, 0x5, 0x5, 0x8, [0x5, 0x9]}}) 21.409688799s ago: executing program 2 (id=7776): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3, 0x365}]}) write$ppp(r0, &(0x7f0000000400)='k\'', 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r2, 0x1, 0x1f, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) getpeername(r5, &(0x7f0000000440)=@l2={0x1f, 0x0, @none}, &(0x7f00000004c0)=0x80) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x20000000000000e3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffde, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x1019, &(0x7f0000002240)=""/4137, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0xfffc}}]}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x20008004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000002500010329bd5e00fddbdf25150000000c00318008002a00780a00002b9737c009c8436bd3"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x3e59cdaa2f3e420c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000001080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e21, 0x4, @local, 0x7}, @in6={0xa, 0x4e21, 0xfffffffb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}], 0x58) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 21.251905393s ago: executing program 0 (id=7777): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt(r0, 0x401, 0x2, 0x0, &(0x7f0000000ac0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000003f500000000070000040900010073797a300000001288000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008210001800e000100636f6e6e6c696d69740000000c000280080001400000000008000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x40011}, 0x20050800) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x11c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x5b}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "75a69abc23"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "09e510e4ef"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x12, 0x4, "10959804b589c8cc0540414fb2a9"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x70, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0xf, 0x4, "b0c9dad3d2e24cea0e291c"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "57091c8b8a215c324f923fbb76"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x6, 0x4, "92a6"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040014}, 0x80) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) 15.659998021s ago: executing program 4 (id=7778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], 0xfffffffffffffffc, 0x4, 0x20000000000000ff}}, 0x40) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000240)='GPL\x00', 0x80000, &(0x7f0000000280)={@_ha_fsid={[0x3]}, {0x6, 0x5, 0x5, 0x200}}, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 15.588789027s ago: executing program 4 (id=7779): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x2) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffff7a, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x0, 0x8}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x4, 0x1, 0x4, 0x1, 0x4], 0x2, 0x6}, {0x3, [0x7, 0x0, 0x5, 0x0, 0x1, 0x4], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xf, 0xfff2}, {0x7, 0xf}, {0x3, 0xa}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15.452429789s ago: executing program 1 (id=7780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x0, 0x29, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f0000000100)="8506d7d2d73b0710b1930c1de30ccf1a2473f0197c2d30e01e066148944739a2825f32a812940a96c9dabee78332ed6384866469b3b1aadebfc69679b82ce039c88fd38b72b9f9d2ee01f99e4549cc5d44423710dff615f71a062aef7bb3e96bac4ea61a66db9b251420111e04b5535f1674989b89cdd9fdfd87baca4607") bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000480), &(0x7f00000004c0)=0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x42, 0x1, 0x7fffa, 0x25dfdbff, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x58, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x66}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000001}, 0x4008000) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.078676729s ago: executing program 32 (id=7769): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 6.042585241s ago: executing program 33 (id=7777): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt(r0, 0x401, 0x2, 0x0, &(0x7f0000000ac0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000003f500000000070000040900010073797a300000001288000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008210001800e000100636f6e6e6c696d69740000000c000280080001400000000008000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x40011}, 0x20050800) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x11c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x5b}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "75a69abc23"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "09e510e4ef"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x12, 0x4, "10959804b589c8cc0540414fb2a9"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x70, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0xf, 0x4, "b0c9dad3d2e24cea0e291c"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "57091c8b8a215c324f923fbb76"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x6, 0x4, "92a6"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040014}, 0x80) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) 5.928385828s ago: executing program 34 (id=7776): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3, 0x365}]}) write$ppp(r0, &(0x7f0000000400)='k\'', 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r2, 0x1, 0x1f, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) getpeername(r5, &(0x7f0000000440)=@l2={0x1f, 0x0, @none}, &(0x7f00000004c0)=0x80) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x20000000000000e3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffde, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x1019, &(0x7f0000002240)=""/4137, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0xfffc}}]}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x20008004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000002500010329bd5e00fddbdf25150000000c00318008002a00780a00002b9737c009c8436bd3"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x3e59cdaa2f3e420c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000001080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e21, 0x4, @local, 0x7}, @in6={0xa, 0x4e21, 0xfffffffb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}], 0x58) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 61.750613ms ago: executing program 35 (id=7780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x0, 0x29, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f0000000100)="8506d7d2d73b0710b1930c1de30ccf1a2473f0197c2d30e01e066148944739a2825f32a812940a96c9dabee78332ed6384866469b3b1aadebfc69679b82ce039c88fd38b72b9f9d2ee01f99e4549cc5d44423710dff615f71a062aef7bb3e96bac4ea61a66db9b251420111e04b5535f1674989b89cdd9fdfd87baca4607") bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000480), &(0x7f00000004c0)=0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x42, 0x1, 0x7fffa, 0x25dfdbff, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x58, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x66}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000001}, 0x4008000) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 36 (id=7779): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x2) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffff7a, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x0, 0x8}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x4, 0x1, 0x4, 0x1, 0x4], 0x2, 0x6}, {0x3, [0x7, 0x0, 0x5, 0x0, 0x1, 0x4], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xf, 0xfff2}, {0x7, 0xf}, {0x3, 0xa}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) kernel console output (not intermixed with test programs): bute type 13 has an invalid length. [ 821.071459][ T935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6952'. [ 821.095073][ T941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6954'. [ 821.113028][ T941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6954'. [ 821.145856][ T934] vlan3: entered promiscuous mode [ 821.220033][ T934] gretap0: entered promiscuous mode [ 821.470243][ T965] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 821.477750][ T5727] team_slave_0: entered promiscuous mode [ 821.494651][ T5727] team_slave_1: entered promiscuous mode [ 821.506934][ T964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6955'. [ 821.639492][T28283] net_ratelimit: 14 callbacks suppressed [ 821.639511][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 821.729525][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 821.792985][ T915] lo speed is unknown, defaulting to 1000 [ 821.876437][ T982] netlink: 'syz.3.6963': attribute type 1 has an invalid length. [ 821.954450][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 822.026181][ T982] bond2: (slave gretap1): making interface the new active one [ 822.034240][ T982] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 822.116733][T28283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.124576][T28283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.342015][ T998] IPVS: set_ctl: invalid protocol: 136 172.20.20.34:20002 [ 822.461562][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.518249][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 822.532397][ T5823] IPVS: starting estimator thread 0... [ 822.638840][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 822.646829][ T1009] hsr0: entered promiscuous mode [ 822.677671][ T1009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 822.682642][ T1005] IPVS: using max 31 ests per chain, 74400 per kthread [ 822.745998][ T9330] bond1: (slave bridge1): failed to get link speed/duplex [ 822.945627][ T9330] bond1: (slave bridge1): failed to get link speed/duplex [ 822.969416][ T1018] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 822.985819][ T1008] hsr0: left promiscuous mode [ 823.069433][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 823.242250][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 823.646127][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.653788][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.718024][ T1028] team_slave_0: left promiscuous mode [ 823.733212][ T1028] team_slave_1: left promiscuous mode [ 823.882930][ T1051] __nla_validate_parse: 8 callbacks suppressed [ 823.882947][ T1051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6979'. [ 824.220779][ T1066] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 824.221414][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.311882][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.553438][ T1080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6984'. [ 824.563657][ T1080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6984'. [ 824.865599][T28285] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.874515][T28285] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.893392][T28285] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 824.925236][T28285] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.934308][T28285] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.949376][T28285] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 824.951884][ T1088] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6987'. [ 824.961348][T28285] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.981591][T28285] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.992791][T28285] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 825.028046][T28285] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.047071][T28285] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.071613][T28285] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 825.123955][ T1101] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.148632][ T1101] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.254028][ T1107] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.6991'. [ 825.336920][ T1111] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6992'. [ 825.349595][ T1086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6986'. [ 825.450310][ T1114] netlink: 'syz.4.6993': attribute type 1 has an invalid length. [ 825.573207][ T1101] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.582984][ T1101] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.699198][ T1132] tipc: Resetting bearer [ 825.845686][ T1135] lo speed is unknown, defaulting to 1000 [ 826.053559][ T1151] mac80211_hwsim hwsim102 syzkaller0: Caught tx_queue_len zero misconfig [ 826.068322][ T1153] netlink: 'syz.2.7001': attribute type 11 has an invalid length. [ 826.145536][ T1101] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.155530][ T1101] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.374238][ T1135] lo speed is unknown, defaulting to 1000 [ 826.445612][ T1101] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.455374][ T1101] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.527624][ T1178] netlink: 'syz.0.7007': attribute type 1 has an invalid length. [ 826.537240][ T1179] netlink: 'syz.0.7007': attribute type 1 has an invalid length. [ 826.656136][T28285] net_ratelimit: 21 callbacks suppressed [ 826.656155][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 826.801263][ T1193] netlink: 'syz.2.7011': attribute type 12 has an invalid length. [ 826.825223][ T1193] netlink: 'syz.2.7011': attribute type 29 has an invalid length. [ 826.842713][ T1193] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7011'. [ 826.852252][ T1193] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7011'. [ 826.864492][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 826.872928][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.992141][ T138] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.000729][ T138] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.141606][T28285] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.149812][T28285] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.224394][T28283] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.246019][T28283] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.313373][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 827.328624][T28283] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.350479][T28283] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.415827][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 827.534402][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 827.799044][ T1235] netlink: 'syz.4.7018': attribute type 1 has an invalid length. [ 827.850658][ T1238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7021'. [ 827.863834][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 827.872445][ T1236] syzkaller0: entered promiscuous mode [ 827.877980][ T1236] syzkaller0: entered allmulticast mode [ 827.942411][ T1246] netlink: 'syz.2.7023': attribute type 29 has an invalid length. [ 827.962402][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 828.002532][ T1246] netlink: 'syz.2.7023': attribute type 29 has an invalid length. [ 828.036464][ T1250] veth0_macvtap: Caught tx_queue_len zero misconfig [ 828.082092][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 828.298241][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 828.379007][ T1273] --map-set only usable from mangle table [ 829.045798][ T1304] __nla_validate_parse: 8 callbacks suppressed [ 829.045815][ T1304] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7040'. [ 829.136818][ T1297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.145010][ T1297] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.233349][ T1297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.241402][ T1312] netlink: 'syz.2.7041': attribute type 3 has an invalid length. [ 829.249148][ T1312] netlink: 666 bytes leftover after parsing attributes in process `syz.2.7041'. [ 829.289425][ T1321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7042'. [ 829.318729][ T1297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.328480][ T1297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.342215][ T1297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 829.352587][ T1297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 829.366110][ T1297] veth1_macvtap: left promiscuous mode [ 829.372586][ T1297] veth0_macvtap: left promiscuous mode [ 829.378877][ T1297] veth0_macvtap: entered promiscuous mode [ 829.386644][ T1297] veth1_macvtap: entered promiscuous mode [ 829.410516][ T1297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 829.424665][ T1297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 829.434955][ T1297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 829.449195][ T1297] 8021q: adding VLAN 0 to HW filter on device eth0 [ 829.457490][ T1297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 829.465627][ T1297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 829.476903][ T1297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 829.484915][ T1297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 829.497383][ T1297] 8021q: adding VLAN 0 to HW filter on device bond6 [ 829.526015][ T5727] lo speed is unknown, defaulting to 1000 [ 829.532602][ T5727] syz2: Port: 1 Link ACTIVE [ 829.564330][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.571481][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.639222][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.646416][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.753585][ T9321] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.767189][ T9321] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.801063][ T9321] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.938158][ T9321] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.975065][T28283] ip6_tunnel: D xmit: Local address not yet configured! [ 829.983728][T28283] ip6_tunnel: D xmit: Local address not yet configured! [ 830.003094][T18570] ip6_tunnel: D xmit: Local address not yet configured! [ 830.016784][ T1337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7047'. [ 830.027421][ T1337] netlink: 'syz.4.7047': attribute type 7 has an invalid length. [ 830.036361][ T1337] netlink: 'syz.4.7047': attribute type 8 has an invalid length. [ 830.046510][ T1337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7047'. [ 830.084575][ T1337] ip6gretap0: entered promiscuous mode [ 830.095222][ T1337] syz_tun: entered promiscuous mode [ 830.123151][ T1337] ip6gretap0: left promiscuous mode [ 830.168594][ T1337] syz_tun: left promiscuous mode [ 830.274160][ T1346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7049'. [ 830.335904][ T1346] block nbd0: Unsupported socket: should be TCP or UNIX. [ 830.454256][T18570] ip6_tunnel: D xmit: Local address not yet configured! [ 830.626450][ T1363] netlink: 'syz.0.7053': attribute type 9 has an invalid length. [ 830.663293][ T1363] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.7053'. [ 830.848208][ T1377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7054'. [ 830.944176][T18573] ip6_tunnel: D xmit: Local address not yet configured! [ 831.418338][ T1389] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7057'. [ 831.447012][ T1389] xfrm0: Caught tx_queue_len zero misconfig [ 831.668126][ T1399] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7059'. [ 831.678268][ T9322] net_ratelimit: 21 callbacks suppressed [ 831.678300][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 832.364487][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 832.503031][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 832.635482][ T1425] lo speed is unknown, defaulting to 1000 [ 833.926416][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.381827][ C1] ip6_tunnel: D xmit: Local address not yet configured! [ 834.704872][T18573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.655598][ T1433] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 835.691159][ T1433] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 835.709368][ T1433] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 835.833126][ T1429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.847155][ T1429] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.858929][ T1429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.984053][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.010861][ T1429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.082481][ T1429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 836.112430][ T1429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.131648][ T1458] nftables ruleset with unbound set [ 836.153365][ T1429] veth1_macvtap: left promiscuous mode [ 836.166758][ T1458] __nla_validate_parse: 1 callbacks suppressed [ 836.166772][ T1458] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7074'. [ 836.184234][ T1429] veth0_macvtap: left promiscuous mode [ 836.193210][ T1429] veth0_macvtap: entered promiscuous mode [ 836.201993][ T1429] veth1_macvtap: entered promiscuous mode [ 836.227394][ T1429] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 836.249958][ T1464] netlink: 320 bytes leftover after parsing attributes in process `syz.2.7074'. [ 836.266920][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.274063][ T9322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.314936][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.322100][ T9322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.378982][ T1459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7075'. [ 836.381808][ T1452] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 836.396810][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.405063][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.420573][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.430111][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.444800][ T1452] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 836.475559][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 836.481749][ T1452] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 836.587447][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 836.635782][ T1469] netlink: 'syz.1.7076': attribute type 2 has an invalid length. [ 836.677045][ T1469] netlink: 'syz.1.7076': attribute type 8 has an invalid length. [ 836.686170][T18570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.746364][ T1494] bond1: (slave bridge1): failed to get link speed/duplex [ 836.765213][ T1469] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7076'. [ 836.816646][ T1490] block nbd0: server does not support multiple connections per device. [ 836.941470][ T9315] bond1: (slave bridge1): failed to get link speed/duplex [ 836.964490][ T1490] block nbd0: shutting down sockets [ 837.017030][T28284] bond1: (slave bridge1): failed to get link speed/duplex [ 837.142354][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 837.167142][ T1425] lo speed is unknown, defaulting to 1000 [ 837.174025][ T1510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7079'. [ 837.176615][ T1512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7083'. [ 837.372495][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 837.389037][ T1516] netlink: 540 bytes leftover after parsing attributes in process `syz.2.7084'. [ 837.430727][ T1516] netlink: 540 bytes leftover after parsing attributes in process `syz.2.7084'. [ 837.467719][ T138] bond1: (slave bridge1): failed to get link speed/duplex [ 837.482739][ T1519] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7084'. [ 837.571879][ T138] bond1: (slave bridge1): failed to get link speed/duplex [ 837.658868][ T1526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7087'. [ 837.695393][ T1526] netlink: 'syz.2.7087': attribute type 7 has an invalid length. [ 837.708841][ T1528] netlink: 'syz.0.7088': attribute type 1 has an invalid length. [ 837.742851][ T1526] netlink: 'syz.2.7087': attribute type 7 has an invalid length. [ 837.839340][ T1497] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.848096][ T1497] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.875308][ T1528] macvlan2: entered promiscuous mode [ 837.880621][ T1528] macvlan2: entered allmulticast mode [ 837.887086][ T1528] bond0: entered promiscuous mode [ 837.892853][ T1528] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 837.919831][T18571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.940612][ T1528] bond0: left promiscuous mode [ 837.966349][ T1533] xt_TCPMSS: Only works on TCP SYN packets [ 837.972268][ T1497] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.980994][ T1497] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.096494][ T1537] ip6gre1: entered promiscuous mode [ 838.101741][ T1537] ip6gre1: entered allmulticast mode [ 838.109786][T28284] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 838.119009][T18570] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 838.139864][T28284] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 838.173030][T28284] bond1: (slave bridge1): failed to get link speed/duplex [ 838.197142][ T1539] lo speed is unknown, defaulting to 1000 [ 838.571101][ T1555] wg2: entered allmulticast mode [ 838.585260][ T1557] netlink: 'syz.0.7097': attribute type 10 has an invalid length. [ 838.714252][ T1539] lo speed is unknown, defaulting to 1000 [ 839.062844][T18571] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.073086][T18571] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.238437][ T1577] lo speed is unknown, defaulting to 1000 [ 839.484447][ T1582] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 840.578196][ T1577] lo speed is unknown, defaulting to 1000 [ 840.585686][ T1600] rdma_rxe: rxe_newlink: failed to add bond0 [ 840.829707][ T1615] block nbd0: Unsupported socket: should be TCP or UNIX. [ 841.342297][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 841.356167][ T1633] __nla_validate_parse: 12 callbacks suppressed [ 841.356200][ T1633] netlink: 758 bytes leftover after parsing attributes in process `syz.3.7111'. [ 841.612797][ T1643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7116'. [ 841.721769][ T1643] ipip0: entered promiscuous mode [ 841.773909][ T9326] net_ratelimit: 25 callbacks suppressed [ 841.773927][ T9326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.830155][ T1648] tipc: Enabled bearer , priority 0 [ 841.896647][ T1648] syzkaller0: entered promiscuous mode [ 841.902149][ T1648] syzkaller0: entered allmulticast mode [ 841.908350][ T1648] tipc: Resetting bearer [ 841.923380][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 841.955135][ T156] tipc: Resetting bearer [ 841.972554][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 841.985307][ T1650] syzkaller1: entered promiscuous mode [ 841.996250][ T1650] syzkaller1: entered allmulticast mode [ 842.009795][ T1647] tipc: Resetting bearer [ 843.669954][ C1] ip6_tunnel: D xmit: Local address not yet configured! [ 844.020687][T29914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.307953][T18570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.323293][ T1497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.344161][T29914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.387085][T18573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.649638][ T1647] tipc: Disabling bearer [ 844.662103][ T5823] tipc: Node number set to 2173291958 [ 844.763914][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 844.812145][ T1669] pimreg9: entered allmulticast mode [ 844.841730][ T1671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7124'. [ 844.889067][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 844.889665][ T1671] netlink: 'syz.3.7124': attribute type 1 has an invalid length. [ 844.941479][ T1676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7127'. [ 844.950472][T18570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.977969][ T1674] netlink: 758 bytes leftover after parsing attributes in process `syz.4.7126'. [ 845.051044][ T1686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7129'. [ 845.304658][ T1690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7131'. [ 845.349872][ T1690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7131'. [ 845.497256][ T1710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7138'. [ 845.508932][ T1717] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7139'. [ 845.597173][ T1722] netlink: 'syz.1.7140': attribute type 1 has an invalid length. [ 846.167775][ T1753] netlink: 'syz.4.7146': attribute type 1 has an invalid length. [ 846.392255][ T5632] Bluetooth: hci0: command 0x0401 tx timeout [ 846.590403][ T1765] __nla_validate_parse: 3 callbacks suppressed [ 846.590420][ T1765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7149'. [ 846.626343][ T1774] netlink: 'syz.2.7150': attribute type 1 has an invalid length. [ 846.637007][ T1742] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 846.658147][ T1774] netlink: 'syz.2.7150': attribute type 2 has an invalid length. [ 846.782589][ T1783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7153'. [ 846.806134][ T1783] netlink: 'syz.0.7153': attribute type 15 has an invalid length. [ 846.814312][ T1783] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7153'. [ 846.835491][ T156] net_ratelimit: 12 callbacks suppressed [ 846.835508][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 846.867366][ T1783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7153'. [ 846.909727][ T1789] netlink: 'syz.1.7154': attribute type 2 has an invalid length. [ 846.928971][ T1788] netlink: 'syz.2.7155': attribute type 3 has an invalid length. [ 846.949604][ T1788] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7155'. [ 846.958646][ T1788] NCSI netlink: No device for ifindex 83886080 [ 846.996533][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 847.044828][ T1800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7159'. [ 847.079715][ T1803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 847.113859][ T9326] bond1: (slave bridge1): failed to get link speed/duplex [ 847.273375][T28284] bond1: (slave bridge1): failed to get link speed/duplex [ 847.359713][ T1826] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7165'. [ 847.383090][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 847.415610][ T1830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7167'. [ 847.480348][ T1835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7168'. [ 847.548025][ T156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.582830][ T1835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7168'. [ 847.602471][ T9326] bond1: (slave bridge1): failed to get link speed/duplex [ 847.732358][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 847.942506][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 847.982018][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.261900][ T1887] mac80211_hwsim hwsim102 syzkaller0: left promiscuous mode [ 848.309799][ T1887] mac80211_hwsim hwsim102 syzkaller0: left allmulticast mode [ 848.405081][ T1895] Cannot find set identified by id 0 to match [ 849.565707][ T1956] syzkaller0: entered promiscuous mode [ 849.571206][ T1956] syzkaller0: entered allmulticast mode [ 849.706977][ T1955] lo speed is unknown, defaulting to 1000 [ 850.072358][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 850.123483][ T1983] lo speed is unknown, defaulting to 1000 [ 850.341663][ T1998] nlmon0: Caught tx_queue_len zero misconfig [ 850.382482][ T1955] lo speed is unknown, defaulting to 1000 [ 850.644721][ T1999] lo speed is unknown, defaulting to 1000 [ 851.141849][ T1983] lo speed is unknown, defaulting to 1000 [ 851.539642][ T2040] nbd: socks must be embedded in a SOCK_ITEM attr [ 851.577079][ T2042] netlink: 'syz.4.7224': attribute type 1 has an invalid length. [ 851.648255][ T2043] __nla_validate_parse: 11 callbacks suppressed [ 851.648273][ T2043] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7224'. [ 851.762404][ T2042] 8021q: adding VLAN 0 to HW filter on device bond7 [ 851.832403][ T2047] bond7 (unregistering): Released all slaves [ 851.962998][ T1999] lo speed is unknown, defaulting to 1000 [ 852.050056][ T9326] net_ratelimit: 24 callbacks suppressed [ 852.050071][ T9326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.172210][ T2060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7229'. [ 852.210330][ T5627] block nbd0: Receive control failed (result -32) [ 852.212282][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 852.234536][ T2057] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 852.579902][ T2075] wg2: left allmulticast mode [ 852.618619][ T2075] bond1: left allmulticast mode [ 852.640049][ T2075] bond2: left promiscuous mode [ 852.668977][ T2075] bridge1: left promiscuous mode [ 852.692767][ T2075] geneve3: left promiscuous mode [ 852.704718][ T2075] geneve3: left allmulticast mode [ 852.722158][ T2075] vlan3: left promiscuous mode [ 852.737580][ T2075] bridge0: left promiscuous mode [ 852.744601][ T2075] ip6gre1: left promiscuous mode [ 852.848768][ T9326] bond1: (slave bridge1): failed to get link speed/duplex [ 852.869712][ T156] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.878743][ T9326] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.183582][ T9326] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.211587][ T9326] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.255276][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 853.317476][ T2085] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7234'. [ 853.344921][T28284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.802325][T28284] bond1: (slave bridge1): failed to get link speed/duplex [ 853.812986][T29914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.925573][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 854.037451][T28284] bond1: (slave bridge1): failed to get link speed/duplex [ 854.145899][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 854.300968][ T2119] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7244'. [ 854.524155][ T2132] syzkaller1: entered promiscuous mode [ 854.550468][ T2132] syzkaller1: entered allmulticast mode [ 854.644463][ T2135] lo speed is unknown, defaulting to 1000 [ 854.658261][ T2133] Bluetooth: MGMT ver 1.23 [ 855.159307][ T2146] lo speed is unknown, defaulting to 1000 [ 855.428735][ T2135] lo speed is unknown, defaulting to 1000 [ 855.618378][ T2145] lo speed is unknown, defaulting to 1000 [ 855.701388][ T2163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7252'. [ 856.042658][ T2146] lo speed is unknown, defaulting to 1000 [ 856.063180][ T2174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7255'. [ 856.249297][ T2173] tipc: Started in network mode [ 856.254179][ T2173] tipc: Node identity 52cc56f947ff, cluster identity 4711 [ 856.261389][ T2173] tipc: Enabled bearer , priority 0 [ 856.288274][ T2177] netlink: 758 bytes leftover after parsing attributes in process `syz.3.7258'. [ 856.345412][ T2173] syzkaller0: entered promiscuous mode [ 856.351577][ T2173] syzkaller0: entered allmulticast mode [ 856.436280][ T2173] tipc: Resetting bearer [ 856.458153][ T2172] tipc: Resetting bearer [ 856.494238][ T2172] tipc: Disabling bearer [ 856.566445][ T2145] lo speed is unknown, defaulting to 1000 [ 856.569322][ T2183] tipc: Enabling of bearer rejected, failed to enable media [ 856.642456][ T2141] Bluetooth: hci4: command 0x0405 tx timeout [ 856.702993][ T5632] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 856.713124][ T5632] Bluetooth: hci2: command 0x0405 tx timeout [ 857.322241][ T9318] net_ratelimit: 14 callbacks suppressed [ 857.322296][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 857.559206][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 857.669926][ T2206] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7269'. [ 857.722898][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 857.774648][ T9318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.832833][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 857.841864][ T2208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7268'. [ 857.867831][ T2214] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7270'. [ 857.964612][ T2214] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 858.032805][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 858.119798][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 858.150108][ T2208] lo speed is unknown, defaulting to 1000 [ 858.199550][ T2220] ip6gre1: entered allmulticast mode [ 858.233338][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 858.245782][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.759449][ T2240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7276'. [ 858.792809][ T2238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7275'. [ 859.030228][ T2249] syzkaller0: entered promiscuous mode [ 859.035951][ T2249] syzkaller0: entered allmulticast mode [ 859.200804][ T2208] lo speed is unknown, defaulting to 1000 [ 859.315664][ T2253] netlink: 758 bytes leftover after parsing attributes in process `syz.1.7280'. [ 859.710880][ T2264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7282'. [ 859.759586][ T2269] netlink: 'syz.4.7283': attribute type 1 has an invalid length. [ 860.012476][ T2277] netlink: 'syz.4.7285': attribute type 21 has an invalid length. [ 860.066436][ T2277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7285'. [ 860.220769][ T2284] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7289'. [ 860.229994][ T2284] netlink: 35 bytes leftover after parsing attributes in process `syz.1.7289'. [ 860.447077][ T2294] lo speed is unknown, defaulting to 1000 [ 860.606188][ T2301] IPv6: NLM_F_CREATE should be specified when creating new route [ 860.974430][ T2294] lo speed is unknown, defaulting to 1000 [ 861.592282][ C1] ip6_tunnel: D xmit: Local address not yet configured! [ 861.611823][ T2342] lo speed is unknown, defaulting to 1000 [ 862.352998][T28284] net_ratelimit: 26 callbacks suppressed [ 862.353016][T28284] bond1: (slave bridge1): failed to get link speed/duplex [ 862.468737][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 862.504982][ T2342] lo speed is unknown, defaulting to 1000 [ 862.679619][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 862.795982][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 862.925371][ T9326] bond1: (slave bridge1): failed to get link speed/duplex [ 863.056696][ T9326] bond1: (slave bridge1): failed to get link speed/duplex [ 863.153073][ T9329] bond1: (slave bridge1): failed to get link speed/duplex [ 863.274060][ T9326] bond1: (slave bridge1): failed to get link speed/duplex [ 863.394589][ T9326] bond1: (slave bridge1): failed to get link speed/duplex [ 863.504272][T18573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.469899][ T2385] __nla_validate_parse: 6 callbacks suppressed [ 864.469915][ T2385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7316'. [ 864.516999][ T2386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7316'. [ 864.543767][ T2383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7315'. [ 864.603057][ T2383] pim6reg1: entered promiscuous mode [ 864.620562][ T2394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7320'. [ 864.635616][ T2383] pim6reg1: entered allmulticast mode [ 864.649889][ T2396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7321'. [ 864.659925][ T2396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7321'. [ 864.670417][ T2396] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7321'. [ 864.686559][ T2396] netlink: 'syz.2.7321': attribute type 3 has an invalid length. [ 864.696364][ T2398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7322'. [ 864.700523][ T2396] netlink: 'syz.2.7321': attribute type 2 has an invalid length. [ 864.715510][ T2396] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7321'. [ 864.725513][ T2396] netlink: 'syz.2.7321': attribute type 2 has an invalid length. [ 864.757319][ T2398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7322'. [ 864.785177][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 865.689999][ T2437] netlink: 'syz.0.7332': attribute type 39 has an invalid length. [ 865.722448][ T2437] hsr_slave_0 (unregistering): left promiscuous mode [ 865.887347][ T2443] bond6: entered promiscuous mode [ 865.893151][ T2443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 865.910581][ T2447] mac80211_hwsim hwsim102 syzkaller0: entered promiscuous mode [ 865.925901][ T2447] mac80211_hwsim hwsim102 syzkaller0: entered allmulticast mode [ 865.960046][ T2443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 865.981960][ T2443] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 865.998196][ T2459] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001 [ 866.006435][ T2443] bond6: (slave ip6gre2): Error -95 calling set_mac_address [ 866.072195][ T2456] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 866.149161][ T2467] : entered promiscuous mode [ 866.202744][ T2467] openvswitch: : Dropping previously announced user features [ 866.285875][ T2471] netlink: 'syz.2.7340': attribute type 1 has an invalid length. [ 866.323242][ T2471] 8021q: adding VLAN 0 to HW filter on device bond5 [ 866.391858][ T2486] ±ÿ: Caught tx_queue_len zero misconfig [ 866.573644][ T2509] xt_l2tp: missing protocol rule (udp|l2tpip) [ 866.789389][ T2522] lo speed is unknown, defaulting to 1000 [ 866.870578][ T2514] IPVS: set_ctl: invalid protocol: 12 172.30.0.3:20002 [ 866.939151][ T2531] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 866.950749][ T2531] bond3 (unregistering): Released all slaves [ 867.236589][ T2522] lo speed is unknown, defaulting to 1000 [ 867.423373][ T156] net_ratelimit: 34 callbacks suppressed [ 867.423391][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 867.605856][ T2553] syzkaller1: entered promiscuous mode [ 867.611367][ T2553] syzkaller1: entered allmulticast mode [ 867.699111][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 867.915479][T29914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.965825][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 868.075034][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 868.183956][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 868.347504][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 868.610098][ T2605] ipvlan0: entered promiscuous mode [ 868.659356][ T2611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 868.703618][ T2611] ipt_rpfilter: unknown options [ 868.882091][ T138] bond1: (slave bridge1): failed to get link speed/duplex [ 868.948323][ T2626] sctp: [Deprecated]: syz.1.7375 (pid 2626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 868.948323][ T2626] Use struct sctp_sack_info instead [ 868.966293][ T2626] syzkaller1: entered promiscuous mode [ 868.979676][ T2626] syzkaller1: entered allmulticast mode [ 869.120777][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 869.681906][ T2642] tipc: Resetting bearer [ 869.790109][ T2692] __nla_validate_parse: 21 callbacks suppressed [ 869.790126][ T2692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7387'. [ 870.179525][ T2700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7389'. [ 870.216267][ T2700] bond7: option miimon: invalid value (18446744073709551607) [ 870.224376][ T2700] bond7: option miimon: allowed values 0 - 2147483647 [ 870.233876][ T2700] bond7 (unregistering): Released all slaves [ 871.208808][ T2712] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 872.289093][ T2727] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7396'. [ 872.300169][ T2727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7396'. [ 872.433250][ T2669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 872.512042][ T9322] net_ratelimit: 30 callbacks suppressed [ 872.512060][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 872.644967][ T2729] lo speed is unknown, defaulting to 1000 [ 872.664280][ T138] bond1: (slave bridge1): failed to get link speed/duplex [ 872.691628][ T2743] netlink: 'syz.2.7398': attribute type 12 has an invalid length. [ 872.699463][ T2743] netlink: 'syz.2.7398': attribute type 29 has an invalid length. [ 872.724750][ T2743] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7398'. [ 872.733800][ T2743] netlink: 'syz.2.7398': attribute type 1 has an invalid length. [ 872.773172][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 872.828446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.838521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.893125][ T2755] syzkaller1: entered promiscuous mode [ 872.924482][ T2755] syzkaller1: entered allmulticast mode [ 872.948158][ T2759] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7400'. [ 872.958617][ T2759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7400'. [ 872.996168][ T138] bond1: (slave bridge1): failed to get link speed/duplex [ 873.104502][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 873.104684][T18571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.514042][ T2735] lo speed is unknown, defaulting to 1000 [ 873.602455][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 873.700444][ T2775] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 873.722295][ T2775] syzkaller0: entered promiscuous mode [ 873.729458][ T2775] syzkaller0: entered allmulticast mode [ 873.837149][ T2729] lo speed is unknown, defaulting to 1000 [ 873.982251][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 874.112490][ T2790] netlink: 'syz.2.7408': attribute type 21 has an invalid length. [ 874.117361][ T2735] lo speed is unknown, defaulting to 1000 [ 874.120383][ T2790] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7408'. [ 875.647861][ T2810] ip6erspan0: entered allmulticast mode [ 877.100272][ T2790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 877.349651][ T2835] geneve2: entered promiscuous mode [ 877.375554][ T2835] geneve2: entered allmulticast mode [ 877.902601][ T5823] net_ratelimit: 32 callbacks suppressed [ 877.902633][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.955979][ T2880] veth1_macvtap: renamed from vlan0 [ 877.974056][ T2866] syzkaller1: entered promiscuous mode [ 877.999028][ T2866] syzkaller1: entered allmulticast mode [ 878.017648][ T2893] netlink: 'syz.2.7426': attribute type 1 has an invalid length. [ 878.093115][ T2896] x_tables: duplicate underflow at hook 1 [ 878.136351][ T2897] x_tables: duplicate underflow at hook 1 [ 878.172406][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 878.299506][ T2903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.315724][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 878.442096][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 878.479762][ T2909] netlink: 'syz.1.7430': attribute type 1 has an invalid length. [ 878.577420][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 878.618363][ T2921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7433'. [ 878.627348][ T2921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7433'. [ 878.704850][T28285] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 878.786075][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 878.907332][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 878.917508][T18571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.963018][ T2952] netlink: 11 bytes leftover after parsing attributes in process `syz.2.7438'. [ 878.971984][ T2952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7438'. [ 879.003709][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 879.036946][ T2960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7440'. [ 879.091297][ T2963] netlink: 'syz.0.7441': attribute type 2 has an invalid length. [ 879.375444][ T2923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 879.617664][ T2985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7447'. [ 879.650310][ T2989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7446'. [ 880.134208][ T3009] syzkaller0: entered promiscuous mode [ 880.155553][ T3009] syzkaller0: entered allmulticast mode [ 880.209107][ T3014] syzkaller1: entered promiscuous mode [ 880.216551][ T3014] syzkaller1: entered allmulticast mode [ 880.305814][ T5627] Bluetooth: hci2: command 0x0405 tx timeout [ 880.888901][ T3030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7457'. [ 881.284350][ T3046] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 881.748977][ T3058] lo speed is unknown, defaulting to 1000 [ 881.939755][ T3063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7468'. [ 882.047057][ T3068] sock: sock_timestamping_bind_phc: sock not bind to device [ 882.167777][ T3071] netlink: 'syz.4.7469': attribute type 8 has an invalid length. [ 882.226639][ T3071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7469'. [ 882.657998][ T3058] lo speed is unknown, defaulting to 1000 [ 882.735227][ T3086] netlink: 'syz.4.7473': attribute type 1 has an invalid length. [ 882.814391][ T3086] 8021q: adding VLAN 0 to HW filter on device bond7 [ 882.873754][ T3090] veth3: entered allmulticast mode [ 882.921369][ T3090] bond7: (slave veth3): Enslaving as an active interface with an up link [ 882.955788][ T1497] net_ratelimit: 25 callbacks suppressed [ 882.955805][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 883.014630][ T3092] mac80211_hwsim hwsim92 wlan0: entered promiscuous mode [ 883.021916][ T3092] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 883.067880][ T9329] bond1: (slave bridge1): failed to get link speed/duplex [ 883.188020][ T9329] bond1: (slave bridge1): failed to get link speed/duplex [ 883.293581][ T3104] sctp: [Deprecated]: syz.0.7477 (pid 3104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 883.293581][ T3104] Use struct sctp_sack_info instead [ 883.404483][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 883.644246][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 883.707204][ T3113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.717261][ T3113] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 883.751996][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 883.873516][T28283] bond1: (slave bridge1): failed to get link speed/duplex [ 884.014565][ T9329] bond1: (slave bridge1): failed to get link speed/duplex [ 884.066543][ T3124] FAULT_INJECTION: forcing a failure. [ 884.066543][ T3124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.123522][ T3124] CPU: 1 UID: 0 PID: 3124 Comm: syz.1.7485 Not tainted syzkaller #0 PREEMPT(full) [ 884.123543][ T3124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.123553][ T3124] Call Trace: [ 884.123559][ T3124] [ 884.123566][ T3124] dump_stack_lvl+0xe8/0x150 [ 884.123590][ T3124] should_fail_ex+0x412/0x560 [ 884.123616][ T3124] _copy_from_user+0x2d/0xb0 [ 884.123640][ T3124] ___sys_sendmsg+0x1c6/0x360 [ 884.123657][ T3124] ? __lock_acquire+0x6b5/0x2cf0 [ 884.123680][ T3124] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.123700][ T3124] ? kstrtouint+0x6e/0xe0 [ 884.123751][ T3124] ? __fget_files+0x2a/0x420 [ 884.123770][ T3124] ? __fget_files+0x3a0/0x420 [ 884.123797][ T3124] __sys_sendmmsg+0x27c/0x4e0 [ 884.123818][ T3124] ? __pfx___sys_sendmmsg+0x10/0x10 [ 884.123832][ T3124] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 884.123879][ T3124] ? ksys_write+0x242/0x270 [ 884.123903][ T3124] ? __pfx_ksys_write+0x10/0x10 [ 884.123931][ T3124] __x64_sys_sendmmsg+0xa0/0xc0 [ 884.123947][ T3124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.123963][ T3124] do_syscall_64+0x15f/0xf80 [ 884.123987][ T3124] ? clear_bhb_loop+0x40/0x90 [ 884.124007][ T3124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.124023][ T3124] RIP: 0033:0x7f70c999ce59 [ 884.124040][ T3124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.124053][ T3124] RSP: 002b:00007f70ca7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 884.124083][ T3124] RAX: ffffffffffffffda RBX: 00007f70c9c15fa0 RCX: 00007f70c999ce59 [ 884.124094][ T3124] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 884.124105][ T3124] RBP: 00007f70ca7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 884.124115][ T3124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.124125][ T3124] R13: 00007f70c9c16038 R14: 00007f70c9c15fa0 R15: 00007fff04698348 [ 884.124150][ T3124] [ 884.762918][ T3157] netlink: 'syz.3.7492': attribute type 10 has an invalid length. [ 884.790494][ T3157] __nla_validate_parse: 1 callbacks suppressed [ 884.790510][ T3157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7492'. [ 884.838303][ T3157] dummy0: entered promiscuous mode [ 884.899525][ T3157] dummy0: entered allmulticast mode [ 884.936995][ T3157] bridge0: port 3(dummy0) entered blocking state [ 884.960819][ T3157] bridge0: port 3(dummy0) entered disabled state [ 885.182583][ T3173] netlink: 'syz.0.7499': attribute type 1 has an invalid length. [ 885.200527][ T3173] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7499'. [ 885.316276][ T3179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7501'. [ 885.339352][ T3179] ipvlan2: entered allmulticast mode [ 885.345922][ T3179] gretap0: entered allmulticast mode [ 885.371362][ T3167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7497'. [ 885.397242][ T3182] netlink: 'syz.4.7502': attribute type 2 has an invalid length. [ 885.405788][ T3182] nbd: nbd4 already in use [ 885.424638][ T3185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7503'. [ 885.434342][ T3185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7503'. [ 885.573430][ T3202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7503'. [ 885.865826][ T3233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7510'. [ 885.964769][ T3236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7509'. [ 885.994375][ T3238] FAULT_INJECTION: forcing a failure. [ 885.994375][ T3238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.039593][ T138] tipc: Subscription rejected, illegal request [ 886.040984][ T3241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7509'. [ 886.058275][ T3239] netlink: 'syz.2.7511': attribute type 2 has an invalid length. [ 886.074483][ T3238] CPU: 1 UID: 0 PID: 3238 Comm: syz.3.7512 Not tainted syzkaller #0 PREEMPT(full) [ 886.074511][ T3238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 886.074521][ T3238] Call Trace: [ 886.074528][ T3238] [ 886.074535][ T3238] dump_stack_lvl+0xe8/0x150 [ 886.074560][ T3238] should_fail_ex+0x412/0x560 [ 886.074586][ T3238] _copy_from_user+0x2d/0xb0 [ 886.074610][ T3238] ___sys_sendmsg+0x1c6/0x360 [ 886.074626][ T3238] ? __lock_acquire+0x6b5/0x2cf0 [ 886.074648][ T3238] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.074663][ T3238] ? __lock_acquire+0x6b5/0x2cf0 [ 886.074684][ T3238] ? kstrtouint+0x6e/0xe0 [ 886.074741][ T3238] __sys_sendmmsg+0x27c/0x4e0 [ 886.074764][ T3238] ? __pfx___sys_sendmmsg+0x10/0x10 [ 886.074778][ T3238] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 886.074828][ T3238] ? ksys_write+0x242/0x270 [ 886.074853][ T3238] ? __pfx_ksys_write+0x10/0x10 [ 886.074881][ T3238] __x64_sys_sendmmsg+0xa0/0xc0 [ 886.074898][ T3238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.074915][ T3238] do_syscall_64+0x15f/0xf80 [ 886.074936][ T3238] ? trace_irq_disable+0x3b/0x140 [ 886.074958][ T3238] ? clear_bhb_loop+0x40/0x90 [ 886.074979][ T3238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.074994][ T3238] RIP: 0033:0x7f152899ce59 [ 886.075010][ T3238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.075023][ T3238] RSP: 002b:00007f15298fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 886.075040][ T3238] RAX: ffffffffffffffda RBX: 00007f1528c15fa0 RCX: 00007f152899ce59 [ 886.075052][ T3238] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 886.075062][ T3238] RBP: 00007f15298fc090 R08: 0000000000000000 R09: 0000000000000000 [ 886.075072][ T3238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.075081][ T3238] R13: 00007f1528c16038 R14: 00007f1528c15fa0 R15: 00007ffce7b8c8c8 [ 886.075110][ T3238] [ 886.078833][ T3239] netlink: 'syz.2.7511': attribute type 2 has an invalid length. [ 886.189216][ T3233] netlink: 'syz.0.7510': attribute type 4 has an invalid length. [ 888.850513][ T3227] syzkaller1: tun_chr_ioctl cmd 35108 [ 888.902072][ T1497] net_ratelimit: 23 callbacks suppressed [ 888.902119][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 888.942881][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.963879][ T3250] bond0: (slave wlan0): Opening slave failed [ 889.064288][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 889.126971][ T3261] x_tables: duplicate underflow at hook 3 [ 889.141587][ T3268] netlink: 'syz.0.7518': attribute type 10 has an invalid length. [ 889.168923][ T3268] team0: Port device geneve1 added [ 889.180528][ T1497] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.200278][ T1497] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.208985][ T1497] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.232573][ T1497] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.338308][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 889.401380][ T3284] tc_dump_action: action bad kind [ 889.425175][ T3284] netlink: 'syz.0.7522': attribute type 39 has an invalid length. [ 889.444497][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 889.555903][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 889.568097][ T3300] sctp: [Deprecated]: syz.4.7528 (pid 3300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 889.568097][ T3300] Use struct sctp_sack_info instead [ 889.796569][ T3317] netlink: 'syz.1.7532': attribute type 2 has an invalid length. [ 889.803684][ T3302] bond8: entered promiscuous mode [ 889.809707][ T3302] 8021q: adding VLAN 0 to HW filter on device bond8 [ 889.816441][ T3317] netlink: 'syz.1.7532': attribute type 1 has an invalid length. [ 889.825933][ T156] bond1: (slave bridge1): failed to get link speed/duplex [ 889.858201][ T3317] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 889.888675][ T3317] syzkaller0: entered promiscuous mode [ 889.897752][ T3317] syzkaller0: entered allmulticast mode [ 889.992551][ T9318] bond1: (slave bridge1): failed to get link speed/duplex [ 890.013185][ T3326] tipc: Enabling of bearer rejected, already enabled [ 890.033704][ T3326] syzkaller0: mtu less than device minimum [ 890.166084][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 890.324649][ T3336] lo speed is unknown, defaulting to 1000 [ 890.805692][ T3365] __nla_validate_parse: 6 callbacks suppressed [ 890.805709][ T3365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7544'. [ 891.237613][ T3381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7549'. [ 891.240852][ T3336] lo speed is unknown, defaulting to 1000 [ 891.255502][ T3382] netlink: 'syz.3.7549': attribute type 13 has an invalid length. [ 891.255521][ T3382] netlink: 'syz.3.7549': attribute type 17 has an invalid length. [ 891.273465][ T3382] veth1_virt_wifi: left promiscuous mode [ 891.285270][ T3382] veth1_virt_wifi: left allmulticast mode [ 891.307100][ T3360] siw: device registration error -23 [ 891.403758][ T3389] netlink: 'syz.4.7552': attribute type 1 has an invalid length. [ 891.440825][ T3389] bond9: entered promiscuous mode [ 891.446501][ T3389] 8021q: adding VLAN 0 to HW filter on device bond9 [ 891.453678][ T3383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7550'. [ 891.463228][ T3394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7551'. [ 891.495618][ T3387] lo speed is unknown, defaulting to 1000 [ 891.505554][ T3383] tipc: Started in network mode [ 891.510441][ T3383] tipc: Node identity 9a7081476383, cluster identity 4711 [ 891.517685][ T3383] tipc: Enabled bearer , priority 0 [ 891.544744][ T3394] gtp1: entered promiscuous mode [ 891.549735][ T3394] gtp1: entered allmulticast mode [ 891.600994][ T3383] syzkaller0: entered promiscuous mode [ 891.618178][ T3383] syzkaller0: entered allmulticast mode [ 891.626241][ T3383] tipc: Resetting bearer [ 891.633005][ T3400] tipc: Enabled bearer , priority 0 [ 891.659843][ T3396] syzkaller0: entered promiscuous mode [ 891.665531][ T3396] syzkaller0: entered allmulticast mode [ 891.696947][ T3396] tipc: Resetting bearer [ 891.736377][ T3395] tipc: Resetting bearer [ 891.773806][ T3395] tipc: Disabling bearer [ 891.798114][ T3379] tipc: Resetting bearer [ 892.595367][ T3421] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7558'. [ 892.699473][ T3416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7558'. [ 894.411251][ T3425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7559'. [ 894.904411][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 895.378617][ T3379] tipc: Disabling bearer [ 895.405069][T29914] tipc: Node number set to 4193485127 [ 895.442304][T28285] net_ratelimit: 14 callbacks suppressed [ 895.442326][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 895.592369][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 895.712391][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 895.738642][ T3437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7562'. [ 895.822895][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 895.831261][ T3387] lo speed is unknown, defaulting to 1000 [ 895.832276][ T3427] lo speed is unknown, defaulting to 1000 [ 895.982884][T29914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.132681][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 896.182720][T28285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.183017][ C1] ip6_tunnel: D xmit: Local address not yet configured! [ 896.402676][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 896.522830][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 896.633912][ T3427] lo speed is unknown, defaulting to 1000 [ 897.125958][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 897.691187][ T3468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7570'. [ 897.879142][ T3471] bridge3: port 1(gretap1) entered blocking state [ 897.895618][ T3471] bridge3: port 1(gretap1) entered disabled state [ 897.910728][ T3471] gretap1: entered allmulticast mode [ 897.934358][ T3471] gretap1: entered promiscuous mode [ 897.954376][ T3475] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7573'. [ 898.277430][ T3486] sctp: [Deprecated]: syz.3.7577 (pid 3486) Use of int in maxseg socket option. [ 898.277430][ T3486] Use struct sctp_assoc_value instead [ 898.480605][ T3484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7577'. [ 898.496512][ T3486] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7577'. [ 898.521926][ T3500] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 898.534559][ T3500] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.7581'. [ 898.545788][ T3500] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.7581'. [ 898.588022][ T3502] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7582'. [ 898.875454][ T3524] netlink: 'syz.2.7588': attribute type 5 has an invalid length. [ 898.904613][ T3524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7588'. [ 898.925012][ T3524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7588'. [ 898.925911][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7586'. [ 898.961161][ T3524] team0 (unregistering): Port device team_slave_0 removed [ 898.971414][ T3524] team0 (unregistering): Port device team_slave_1 removed [ 899.318875][ T3545] lo speed is unknown, defaulting to 1000 [ 899.429503][ T3559] bridge0: port 4(veth1_to_bridge) entered blocking state [ 899.436664][ T3559] bridge0: port 4(veth1_to_bridge) entered disabled state [ 899.479764][ T3559] veth1_to_bridge: entered allmulticast mode [ 899.503670][ T3559] veth1_to_bridge: entered promiscuous mode [ 899.509754][ T3559] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 899.526614][ T3559] bridge0: port 4(veth1_to_bridge) entered blocking state [ 899.533874][ T3559] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 899.550630][ T3560] ipvlan0: entered allmulticast mode [ 899.555941][ T3560] gretap0: entered allmulticast mode [ 899.657477][ T3571] netlink: 'syz.2.7599': attribute type 1 has an invalid length. [ 900.078785][ T3545] lo speed is unknown, defaulting to 1000 [ 900.563361][ T9321] net_ratelimit: 23 callbacks suppressed [ 900.563379][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 900.674985][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 900.691152][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 900.701251][ T3624] lo speed is unknown, defaulting to 1000 [ 900.786041][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 900.846973][ T3633] sctp: [Deprecated]: syz.0.7615 (pid 3633) Use of int in max_burst socket option. [ 900.846973][ T3633] Use struct sctp_assoc_value instead [ 900.877312][ T3629] sctp: [Deprecated]: syz.0.7615 (pid 3629) Use of int in max_burst socket option. [ 900.877312][ T3629] Use struct sctp_assoc_value instead [ 900.911743][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 901.012546][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 901.123202][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 901.189945][ T3656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.216055][ T3656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.230792][T28285] bond1: (slave bridge1): failed to get link speed/duplex [ 901.247261][ T3656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.261112][ T3624] lo speed is unknown, defaulting to 1000 [ 901.981490][ T3669] sctp: [Deprecated]: syz.3.7624 (pid 3669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 901.981490][ T3669] Use struct sctp_sack_info instead [ 902.179630][ T3689] vlan0: entered promiscuous mode [ 902.314783][ T3698] IPv6: syztnl2: Disabled Multicast RS [ 903.588907][ T3759] ip6tnl2: entered promiscuous mode [ 903.911373][ T3779] lo speed is unknown, defaulting to 1000 [ 904.128619][ T3796] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 904.245922][ T3801] __nla_validate_parse: 14 callbacks suppressed [ 904.245940][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7657'. [ 904.261057][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7657'. [ 904.273885][ T3801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7657'. [ 904.441136][ T3804] ip6tnl3: entered allmulticast mode [ 904.548062][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7658'. [ 904.577205][ T3809] netlink: 'syz.1.7660': attribute type 4 has an invalid length. [ 904.585085][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7658'. [ 904.629927][ T3815] netlink: 'syz.1.7660': attribute type 4 has an invalid length. [ 904.660362][T29914] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 904.669095][ T9322] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 904.676837][ T9322] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 904.688099][ T3779] lo speed is unknown, defaulting to 1000 [ 904.729427][ T3809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7660'. [ 904.742441][ T3818] xt_TCPMSS: Only works on TCP SYN packets [ 904.876192][ T3827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7665'. [ 904.935678][ T3828] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7664'. [ 904.961453][ T3828] 0ªX¹¦À: renamed from batadv0 [ 905.006581][ T3828] 0ªX¹¦À: entered allmulticast mode [ 905.010734][ T5823] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 905.022638][ T3828] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 905.378254][ T3835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 905.390279][ T3834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 905.502271][T29914] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 905.562986][ T3848] bridge_slave_1: Caught tx_queue_len zero misconfig [ 905.622432][ T9329] net_ratelimit: 44 callbacks suppressed [ 905.622450][ T9329] bond1: (slave bridge1): failed to get link speed/duplex [ 905.705929][ T3850] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7671'. [ 905.732008][ T3853] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7672'. [ 905.751473][ T3850] bond0 (unregistering): Released all slaves [ 905.935725][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 906.102383][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 906.204546][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.227996][ T138] bond1: (slave bridge1): failed to get link speed/duplex [ 906.369549][ T3893] bond8: entered promiscuous mode [ 906.408021][ T3893] 8021q: adding VLAN 0 to HW filter on device bond8 [ 906.433990][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 906.556976][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 906.662858][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 906.893074][ T3915] lo speed is unknown, defaulting to 1000 [ 906.913994][ T1497] bond1: (slave bridge1): failed to get link speed/duplex [ 907.043893][T18571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.057554][ T3921] bond1 (unregistering): Released all slaves [ 907.155528][ T3923] syzkaller0: entered promiscuous mode [ 907.161022][ T3923] syzkaller0: entered allmulticast mode [ 907.730859][ T3915] lo speed is unknown, defaulting to 1000 [ 908.004732][ T3968] lo speed is unknown, defaulting to 1000 [ 908.824358][ T3989] netlink: 'syz.0.7707': attribute type 1 has an invalid length. [ 908.962941][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 909.017712][ T3994] netlink: 'syz.1.7708': attribute type 1 has an invalid length. [ 909.026199][ T3989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 909.085560][ T3994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.151077][ T3995] bond0: (slave gretap2): making interface the new active one [ 909.184671][ T3995] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 909.541218][ T3968] lo speed is unknown, defaulting to 1000 [ 910.151711][ T4031] __nla_validate_parse: 5 callbacks suppressed [ 910.151727][ T4031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7716'. [ 910.184040][ T4031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7716'. [ 910.193552][ T4031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7716'. [ 910.202746][ T4031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7716'. [ 910.212205][ T4031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7716'. [ 910.221168][ T4031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7716'. [ 910.273692][ T4034] netlink: 'syz.3.7717': attribute type 1 has an invalid length. [ 910.293002][ T4034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7717'. [ 910.327667][ T4039] netlink: 'syz.1.7718': attribute type 32 has an invalid length. [ 910.425205][ T4041] lo speed is unknown, defaulting to 1000 [ 910.503127][ T4042] gretap0: entered promiscuous mode [ 910.723070][ T9329] net_ratelimit: 15 callbacks suppressed [ 910.723088][ T9329] bond1: (slave bridge1): failed to get link speed/duplex [ 910.850535][ T4049] syzkaller1: entered promiscuous mode [ 910.856035][ T4049] syzkaller1: entered allmulticast mode [ 910.880114][ T4049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7721'. [ 911.073560][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 911.163194][ T9329] bond1: (slave bridge1): failed to get link speed/duplex [ 911.234299][ T4041] lo speed is unknown, defaulting to 1000 [ 911.432945][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 911.453490][ T4074] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20003 [ 911.675868][ T4083] netlink: 'syz.0.7731': attribute type 16 has an invalid length. [ 911.684584][ T4083] netlink: 'syz.0.7731': attribute type 17 has an invalid length. [ 911.694052][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 911.733272][T18571] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 911.812370][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 911.861377][T18571] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 911.878174][ T4088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7732'. [ 911.888356][ T4088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7732'. [ 911.952777][ T9322] bond1: (slave bridge1): failed to get link speed/duplex [ 912.111433][ T4096] bond9: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 912.127530][ T4096] bond9 (unregistering): Released all slaves [ 912.402586][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 912.430983][ T4105] syzkaller1: entered promiscuous mode [ 912.466991][ T4105] syzkaller1: entered allmulticast mode [ 912.532906][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 912.665117][ T9321] bond1: (slave bridge1): failed to get link speed/duplex [ 913.023420][ T4127] sctp: [Deprecated]: syz.1.7745 (pid 4127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 913.023420][ T4127] Use struct sctp_sack_info instead [ 913.368584][ T4135] netlink: 'syz.4.7748': attribute type 4 has an invalid length. [ 914.219707][ T4182] netlink: 'syz.4.7763': attribute type 13 has an invalid length. [ 914.234735][ T4184] netlink: 'syz.1.7765': attribute type 1 has an invalid length. [ 914.242394][ T4182] netlink: 'syz.4.7763': attribute type 17 has an invalid length. [ 914.275232][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.282796][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.354328][ T4180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.364119][ T4180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.432045][T29914] lo speed is unknown, defaulting to 1000 [ 914.437816][T29914] syz2: Port: 1 Link DOWN [ 914.655739][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.666034][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.679411][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.703346][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.710519][ T4182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.722094][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.729230][ T4182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.842387][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.865068][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.916868][ T4182] veth1_macvtap: left promiscuous mode [ 914.955409][ T4182] veth0_macvtap: left promiscuous mode [ 914.962978][ T4182] veth0_macvtap: entered promiscuous mode [ 914.977266][ T4182] veth1_macvtap: entered promiscuous mode [ 915.066044][T18570] lo speed is unknown, defaulting to 1000 [ 915.077893][T18570] syz2: Port: 1 Link ACTIVE [ 915.185343][ T4233] __nla_validate_parse: 10 callbacks suppressed [ 915.185361][ T4233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7773'. [ 915.268296][ T4237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7774'. [ 915.765898][ C0] net_ratelimit: 1673 callbacks suppressed [ 915.765920][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 915.784149][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 915.796407][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 915.808638][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 915.820858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 915.833087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 915.845321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 915.857538][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 915.877521][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 915.889905][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 916.168531][ T4217] syzkaller0: entered promiscuous mode [ 916.179906][ T4217] syzkaller0: entered allmulticast mode [ 916.897384][ T4254] netlink: 'syz.2.7776': attribute type 10 has an invalid length. [ 917.914286][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 920.771630][ C0] net_ratelimit: 12673 callbacks suppressed [ 920.771662][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 920.790941][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 920.804014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 920.824829][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 920.837050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 920.849164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 920.861339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 920.873565][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 920.885752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 920.897818][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 921.915485][ C0] sched: DL replenish lagged too much [ 921.987864][ T4258] Cannot find add_set index 2 as target [ 921.995898][ T4259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7779'. [ 922.071894][ T4262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7780'. [ 922.274498][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7780'. [ 922.289578][ T4267] netlink: 'syz.1.7780': attribute type 4 has an invalid length. [ 925.782921][ C0] net_ratelimit: 8796 callbacks suppressed [ 925.782935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 925.803308][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 925.817507][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 925.833548][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 925.847210][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 925.860304][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 925.874089][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 925.887170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 925.900640][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 925.912838][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 930.626701][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 930.644830][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 930.653674][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 930.663615][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 930.672646][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.792124][ C0] net_ratelimit: 7585 callbacks suppressed [ 930.792155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 930.812057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 930.825038][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 930.837272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 930.850024][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 930.862228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 930.875633][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 930.887884][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 930.900589][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 930.918875][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 931.746005][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 931.764227][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 931.783206][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 931.794628][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 931.803742][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 932.019901][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 932.045973][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 932.057287][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 932.066702][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 932.078451][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 932.783491][ T5627] Bluetooth: hci3: command tx timeout [ 933.902473][ T5627] Bluetooth: hci6: command tx timeout [ 934.141772][ T5627] Bluetooth: hci7: command tx timeout [ 934.863538][ T5627] Bluetooth: hci3: command tx timeout [ 935.802252][ C0] net_ratelimit: 9093 callbacks suppressed [ 935.802285][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 935.821971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 935.834467][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 935.842065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.854194][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.866587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 935.878735][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 935.891051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.903132][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.915544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 935.935806][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 935.992922][ T5627] Bluetooth: hci6: command tx timeout [ 936.252996][ T5627] Bluetooth: hci7: command tx timeout [ 936.943439][ T5627] Bluetooth: hci3: command tx timeout [ 937.780123][ T5632] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 937.797515][ T5632] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 937.808396][ T5632] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 937.827995][ T5632] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 937.841171][ T5632] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 937.928156][ T5627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 937.942755][ T5627] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 937.957425][ T5627] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 937.970209][ T5627] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 937.978785][ T5627] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 938.093111][ T5627] Bluetooth: hci6: command tx timeout [ 938.313039][ T5627] Bluetooth: hci7: command tx timeout [ 939.024533][ T5632] Bluetooth: hci3: command tx timeout [ 939.902543][ T5627] Bluetooth: hci8: command tx timeout [ 940.063713][ T5627] Bluetooth: hci9: command tx timeout [ 940.142249][ T5627] Bluetooth: hci6: command tx timeout [ 940.382273][ T5627] Bluetooth: hci7: command tx timeout [ 940.812237][ C0] net_ratelimit: 10939 callbacks suppressed [ 940.812261][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.831936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.844407][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 940.856585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 940.868876][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.880943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.893654][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 940.905863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 940.918194][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.930265][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 941.982379][ T5627] Bluetooth: hci8: command tx timeout [ 942.144447][ T5627] Bluetooth: hci9: command tx timeout [ 944.062515][ T5627] Bluetooth: hci8: command tx timeout [ 944.223598][ T5627] Bluetooth: hci9: command tx timeout [ 945.822075][ C0] net_ratelimit: 11826 callbacks suppressed [ 945.822109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.841942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.855199][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 945.868196][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 945.882406][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.895281][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.909050][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 945.922685][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 945.936180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.949021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.163151][ T5627] Bluetooth: hci8: command tx timeout [ 946.303099][ T5627] Bluetooth: hci9: command tx timeout [ 950.831817][ C0] net_ratelimit: 11820 callbacks suppressed [ 950.831861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 950.852579][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 950.865455][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 950.878646][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 950.890818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 950.903124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 950.915198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 950.927578][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 950.939925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 950.952257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 955.842425][ C0] net_ratelimit: 11073 callbacks suppressed [ 955.842446][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 955.862527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 955.875887][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 955.889657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 955.903501][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 955.916428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.929835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 955.942810][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 955.956217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 955.969070][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 960.851996][ C0] net_ratelimit: 11996 callbacks suppressed [ 960.852028][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 960.871366][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 960.886447][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 960.900530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 960.913376][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 960.926319][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 960.939303][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 960.952798][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 960.965878][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 960.979286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 965.863156][ C0] net_ratelimit: 12399 callbacks suppressed [ 965.863170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 965.882847][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 965.895646][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 965.908688][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 965.922145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 965.935319][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 965.948438][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 965.962201][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 965.975395][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 965.987837][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 970.871657][ C0] net_ratelimit: 15419 callbacks suppressed [ 970.871698][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 970.891648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 970.904235][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 970.916363][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 970.928732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 970.941162][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 970.953207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 970.965276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 970.977224][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 970.989271][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 972.310001][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 975.881672][ C0] net_ratelimit: 14563 callbacks suppressed [ 975.881703][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 975.901536][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 975.914238][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.926316][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.938676][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 975.951129][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.963187][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.975340][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.987400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 975.999533][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.892631][ C0] net_ratelimit: 14640 callbacks suppressed [ 980.892654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.912053][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.925390][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.938209][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.951158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.964131][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 980.977201][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 980.990246][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 981.003208][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 981.021530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.901541][ C0] net_ratelimit: 15148 callbacks suppressed [ 985.901587][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.920721][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.933634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.947235][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.960058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.973062][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 985.986105][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 985.999569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 986.012625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 986.026509][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 990.912377][ C0] net_ratelimit: 14128 callbacks suppressed [ 990.912400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 990.931532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 990.944341][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 990.957152][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 990.970061][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 990.983009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 990.996455][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 991.009515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 991.023327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 991.036090][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.155516][ T5632] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 991.173525][ T5632] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 991.181605][ T5632] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 991.190757][ T5632] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 991.206779][ T5632] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 991.688160][ T5627] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 991.710082][ T5627] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 991.723638][ T5627] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 991.735812][ T5627] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 991.743748][ T5627] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 992.725182][ T5632] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 992.742529][ T5632] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 992.768225][ T5632] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 992.776857][ T5632] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 992.789646][ T5632] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 993.263599][ T5632] Bluetooth: hci10: command tx timeout [ 993.822328][ T5632] Bluetooth: hci11: command tx timeout [ 994.862980][ T5632] Bluetooth: hci12: command tx timeout [ 995.342864][ T5627] Bluetooth: hci10: command tx timeout [ 995.903243][ T5632] Bluetooth: hci11: command tx timeout [ 995.951562][ C0] net_ratelimit: 13821 callbacks suppressed [ 995.951581][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 995.977286][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 995.989413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 996.001566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 996.013700][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 996.026559][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.038648][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.051023][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 996.063464][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.081669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.942573][ T5632] Bluetooth: hci12: command tx timeout [ 997.422887][ T5632] Bluetooth: hci10: command tx timeout [ 997.982193][ T5632] Bluetooth: hci11: command tx timeout [ 998.349298][ T5627] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 998.378681][ T5627] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 998.390791][ T5627] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 998.398850][ T5627] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 998.409817][ T5627] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 998.516800][ T5627] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 998.535684][ T5627] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 998.545155][ T5627] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 998.557918][ T5627] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 998.566636][ T5627] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 999.062611][ T5627] Bluetooth: hci12: command tx timeout [ 999.502353][ T5627] Bluetooth: hci10: command tx timeout [ 1000.062500][ T5627] Bluetooth: hci11: command tx timeout [ 1000.462281][ T5632] Bluetooth: hci13: command tx timeout [ 1000.702156][ T5632] Bluetooth: hci14: command tx timeout [ 1000.962720][ C0] net_ratelimit: 14712 callbacks suppressed [ 1000.962742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1000.982381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1000.995190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.008318][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.021210][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.034126][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.047148][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1001.060158][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1001.073180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1001.086258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1001.144038][ T5627] Bluetooth: hci12: command tx timeout [ 1002.542348][ T5627] Bluetooth: hci13: command tx timeout [ 1002.782336][ T5627] Bluetooth: hci14: command tx timeout [ 1004.622103][ T5627] Bluetooth: hci13: command tx timeout [ 1004.862510][ T5627] Bluetooth: hci14: command tx timeout [ 1006.011357][ C0] net_ratelimit: 14584 callbacks suppressed [ 1006.011382][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1006.029467][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1006.041645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1006.053937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1006.066269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.078518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.091047][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1006.103520][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.121796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.134734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.702201][ T5627] Bluetooth: hci13: command tx timeout [ 1006.942799][ T5627] Bluetooth: hci14: command tx timeout [ 1011.011547][ C0] net_ratelimit: 13723 callbacks suppressed [ 1011.011581][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.031273][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.044373][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1011.057403][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1011.070436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1011.083706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1011.096750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.109689][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.122870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1011.135404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.021701][ C0] net_ratelimit: 14370 callbacks suppressed [ 1016.021733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.041519][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.055093][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1016.068172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1016.081214][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1016.094544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1016.107591][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.120529][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.133905][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1016.147508][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.031534][ C0] net_ratelimit: 14478 callbacks suppressed [ 1021.031578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1021.051935][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.064681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.077588][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.090408][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.103354][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1021.116336][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.129301][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1021.142923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1021.156762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1025.582585][ T5627] Bluetooth: hci2: command 0x0405 tx timeout [ 1026.041873][ C0] net_ratelimit: 13258 callbacks suppressed [ 1026.041906][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1026.061235][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1026.074578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1026.089544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1026.101732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.113796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.126178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1026.138628][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.150674][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1026.162828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.052311][ C0] net_ratelimit: 13986 callbacks suppressed [ 1031.052345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.072038][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.085116][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.097880][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.110057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1031.122190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.134242][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.146396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1031.158550][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1031.170698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1036.061739][ C0] net_ratelimit: 12808 callbacks suppressed [ 1036.061772][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.082510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1036.095462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1036.108923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1036.123578][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1036.136655][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.149649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.163117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1036.176818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.189644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.071693][ C0] net_ratelimit: 12750 callbacks suppressed [ 1041.071717][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1041.091085][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1041.105303][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1041.118417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.132106][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.145486][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1041.159170][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.172445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.184537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.196502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.081641][ C0] net_ratelimit: 12578 callbacks suppressed [ 1046.081673][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1046.101065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1046.115170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1046.128248][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.141243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.155099][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1046.168764][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.181743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.194549][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.207342][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.116402][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1051.092501][ C0] net_ratelimit: 13403 callbacks suppressed [ 1051.092516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.112147][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.125767][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.137852][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.150031][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1051.162330][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.174615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.186974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1051.199336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1051.211711][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1051.302185][ T2141] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1051.321685][ T2141] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1051.349740][ T2141] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1051.393875][ T2141] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1051.405358][ T2141] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1052.326433][ T4350] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1052.344041][ T4350] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1052.353556][ T4350] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1052.367445][ T4350] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1052.375769][ T4350] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1053.348692][ T4355] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1053.368696][ T4355] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1053.377355][ T4355] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1053.386840][ T4355] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1053.396355][ T4355] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1056.101807][ C0] net_ratelimit: 11025 callbacks suppressed [ 1056.101838][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1056.123293][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.136042][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.148949][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.162096][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.175101][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1056.188254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.201876][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.214813][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1056.227921][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1056.308554][ T4360] Bluetooth: hci3: command 0x0406 tx timeout [ 1056.317193][ T4360] Bluetooth: hci6: command 0x0406 tx timeout [ 1056.323848][ T4360] Bluetooth: hci7: command 0x0406 tx timeout [ 1058.445967][ T4362] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1058.465468][ T4362] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1058.484348][ T4362] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1058.492464][ T4362] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1058.500234][ T4362] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1058.600384][ T4360] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1058.621270][ T4360] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1058.633320][ T4360] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1058.641396][ T4360] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1058.649431][ T4360] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1059.341296][ T2141] Bluetooth: hci15: command tx timeout [ 1059.349730][ T4355] Bluetooth: hci17: command tx timeout [ 1061.022701][ T5627] Bluetooth: hci16: command tx timeout [ 1061.111470][ C0] net_ratelimit: 12259 callbacks suppressed [ 1061.111502][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1061.131619][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.144332][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.157212][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.170585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.183491][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1061.196466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.209319][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.221543][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1061.233738][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1061.373129][ T5627] Bluetooth: hci15: command tx timeout [ 1061.378672][ T4361] Bluetooth: hci17: command tx timeout [ 1061.384226][ T4359] Bluetooth: hci18: command tx timeout [ 1061.392717][ T4360] Bluetooth: hci19: command tx timeout [ 1061.436577][ T4360] Bluetooth: hci8: command 0x0406 tx timeout [ 1061.442630][ T4359] Bluetooth: hci9: command 0x0406 tx timeout [ 1063.102262][ T4355] Bluetooth: hci16: command tx timeout [ 1063.422773][ T2141] Bluetooth: hci18: command tx timeout [ 1063.428322][ T4359] Bluetooth: hci17: command tx timeout [ 1063.434352][ T4360] Bluetooth: hci15: command tx timeout [ 1063.439861][ T4355] Bluetooth: hci19: command tx timeout [ 1065.182236][ T4355] Bluetooth: hci16: command tx timeout [ 1065.502610][ T4360] Bluetooth: hci15: command tx timeout [ 1065.508165][ T4359] Bluetooth: hci17: command tx timeout [ 1065.514181][ T2141] Bluetooth: hci18: command tx timeout [ 1065.519687][ T4355] Bluetooth: hci19: command tx timeout [ 1066.121547][ C0] net_ratelimit: 12427 callbacks suppressed [ 1066.121578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.140691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.153622][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1066.167644][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.180650][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.193695][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1066.207159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1066.220160][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1066.233064][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:2a:13:60:33:aa:ed, vlan:0) [ 1066.245252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.383666][ T30] INFO: task kworker/1:3:1223 blocked for more than 143 seconds. [ 1066.403779][ T30] Not tainted syzkaller #0 [ 1066.414571][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1066.446371][ T30] task:kworker/1:3 state:D stack:24376 pid:1223 tgid:1223 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1066.481502][ T30] Workqueue: events switchdev_deferred_process_work [ 1066.501465][ T30] Call Trace: [ 1066.506316][ T30] [ 1066.515338][ T30] __schedule+0x1821/0x5740 [ 1066.539130][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1066.591352][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1066.644426][ T30] ? __pfx___schedule+0x10/0x10 [ 1066.650492][ T30] ? schedule+0x90/0x360 [ 1066.663329][ T30] schedule+0x164/0x360 [ 1066.671354][ T30] schedule_preempt_disabled+0x13/0x30 [ 1066.677822][ T30] __mutex_lock+0x7f7/0x1550 [ 1066.682674][ T30] ? __mutex_lock+0x608/0x1550 [ 1066.687476][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 1066.693903][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1066.698976][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1066.705035][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1066.710796][ T30] switchdev_deferred_process_work+0xe/0x20 [ 1066.718574][ T30] process_scheduled_works+0xb5d/0x1860 [ 1066.728848][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1066.735085][ T30] ? assign_work+0x3d5/0x5e0 [ 1066.739790][ T30] worker_thread+0xa53/0xfc0 [ 1066.744799][ T30] kthread+0x389/0x470 [ 1066.748912][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1066.754377][ T30] ? __pfx_kthread+0x10/0x10 [ 1066.759014][ T30] ret_from_fork+0x514/0xb70 [ 1066.765116][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1066.770264][ T30] ? __switch_to+0xc79/0x1410 [ 1066.777641][ T30] ? __pfx_kthread+0x10/0x10 [ 1066.782485][ T30] ret_from_fork_asm+0x1a/0x30 [ 1066.787303][ T30] [ 1066.840311][ T30] INFO: task syz.2.7776:4251 blocked for more than 143 seconds. [ 1066.950425][ T30] Not tainted syzkaller #0 [ 1067.003352][ T30] Blocked by coredump. [ 1067.040836][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1067.083749][ T30] [ 1067.083749][ T30] Showing all locks held in the system: [ 1067.150301][ T30] 2 locks held by kworker/0:1/10: [ 1067.197587][ T30] 1 lock held by khungtaskd/30: [ 1067.263201][ T30] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1067.274622][ T2141] Bluetooth: hci16: command tx timeout [ 1067.384861][ T30] 3 locks held by kworker/1:3/1223: [ 1067.449786][ T30] #0: ffff88813fe47140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1067.573931][ T30] #1: ffffc90005a87c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1067.602953][ T2141] Bluetooth: hci18: command tx timeout [ 1067.608471][ T2141] Bluetooth: hci19: command tx timeout [ 1067.716697][ T30] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1067.832449][ T30] 2 locks held by dhcpcd/5288: [ 1067.898388][ T30] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1068.011607][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1068.114750][ T30] 2 locks held by getty/5379: [ 1068.172982][ T30] #0: ffff8880370f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1068.268194][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1068.388394][ T30] 7 locks held by kworker/0:4/5727: [ 1068.464034][ T30] 4 locks held by kworker/1:6/5762: [ 1068.554563][ T30] 3 locks held by kworker/u8:21/9321: [ 1068.683187][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1068.942059][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1069.046447][ T30] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 1069.136828][ T30] 3 locks held by kworker/1:5/18570: [ 1069.187815][ T30] #0: ffff88813fe47140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1069.276848][ T30] #1: ffffc90006307c40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1069.312642][ T30] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0 [ 1069.331472][ T30] 3 locks held by kworker/1:8/18571: [ 1069.336792][ T30] #0: ffff88813fe47140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1069.361605][ T30] #1: ffffc90006377c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1069.374124][ T30] #2: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1069.385318][ T30] 3 locks held by kworker/u8:10/1497: [ 1069.390720][ T30] #0: ffff88803253d940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1069.407652][ T30] #1: ffffc9000d817c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1069.449201][ T30] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1069.458982][ T30] 1 lock held by syz.3.7769/4220: [ 1069.464232][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1069.473455][ T30] 2 locks held by syz.2.7776/4247: [ 1069.478588][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xa6/0x140 [ 1069.489704][ T30] #1: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1069.500857][ T30] 4 locks held by syz.4.7779/4259: [ 1069.506190][ T30] #0: ffff888061250ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1069.516363][ T30] #1: ffff8880612500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1069.526277][ T30] #2: ffffffff8ff56740 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1069.542563][ T30] #3: ffff888051e2f2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 1069.558046][ T30] [ 1069.560785][ T30] ============================================= [ 1069.560785][ T30] [ 1069.740611][ T30] NMI backtrace for cpu 1 [ 1069.740630][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1069.740648][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1069.740658][ T30] Call Trace: [ 1069.740666][ T30] [ 1069.740673][ T30] dump_stack_lvl+0xe8/0x150 [ 1069.740697][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1069.740717][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1069.740737][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1069.740759][ T30] sys_info+0x135/0x170 [ 1069.740774][ T30] watchdog+0xfd3/0x1030 [ 1069.740804][ T30] ? watchdog+0x1c9/0x1030 [ 1069.740831][ T30] kthread+0x389/0x470 [ 1069.740852][ T30] ? __pfx_watchdog+0x10/0x10 [ 1069.740871][ T30] ? __pfx_kthread+0x10/0x10 [ 1069.740891][ T30] ret_from_fork+0x514/0xb70 [ 1069.740912][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1069.740929][ T30] ? __switch_to+0xc79/0x1410 [ 1069.740953][ T30] ? __pfx_kthread+0x10/0x10 [ 1069.740973][ T30] ret_from_fork_asm+0x1a/0x30 [ 1069.741007][ T30] [ 1069.741014][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1069.853739][ C0] NMI backtrace for cpu 0 [ 1069.853755][ C0] CPU: 0 UID: 0 PID: 5727 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 1069.853774][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1069.853784][ C0] Workqueue: events_long defense_work_handler [ 1069.853809][ C0] RIP: 0010:unwind_next_frame+0x52f/0x2550 [ 1069.853831][ C0] Code: 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 ef <48> 39 dd 76 a2 e9 7b fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 7c [ 1069.853851][ C0] RSP: 0000:ffffc90000006558 EFLAGS: 00000287 [ 1069.853864][ C0] RAX: ffffffff904a5214 RBX: ffffffff904a521c RCX: ffffffff904a521c [ 1069.853876][ C0] RDX: ffffffff904a520c RSI: ffffffff90c67a38 RDI: ffffffff8c28af80 [ 1069.853887][ C0] RBP: ffffffff904a521c R08: 000000000000000b R09: ffffffff8e95cda0 [ 1069.853898][ C0] R10: ffffc90000006678 R11: ffffffff81b0efc0 R12: ffffffff8187de67 [ 1069.853910][ C0] R13: ffffffff904a5218 R14: ffffc90000006628 R15: ffffffff904a5218 [ 1069.853922][ C0] FS: 0000000000000000(0000) GS:ffff88812527a000(0000) knlGS:0000000000000000 [ 1069.853935][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1069.853946][ C0] CR2: 00007fa5c23abff8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 1069.853960][ C0] Call Trace: [ 1069.853966][ C0] [ 1069.853976][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1069.853996][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 1069.854011][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 1069.854028][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1069.854052][ C0] arch_stack_walk+0x11b/0x150 [ 1069.854074][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 1069.854091][ C0] stack_trace_save+0xa9/0x100 [ 1069.854114][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1069.854135][ C0] ? ip6t_do_table+0x1df/0x1560 [ 1069.854154][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1069.854172][ C0] kasan_save_track+0x3e/0x80 [ 1069.854191][ C0] ? kasan_save_track+0x3e/0x80 [ 1069.854210][ C0] ? kasan_save_free_info+0x46/0x50 [ 1069.854225][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1069.854245][ C0] ? kmem_cache_free+0x182/0x650 [ 1069.854266][ C0] ? br_nf_dev_queue_xmit+0x4ee/0x25f0 [ 1069.854287][ C0] ? NF_HOOK+0x64e/0x6e0 [ 1069.854305][ C0] ? br_nf_post_routing+0xb66/0xfe0 [ 1069.854324][ C0] ? nf_hook_slow+0xc5/0x220 [ 1069.854341][ C0] ? NF_HOOK+0x23e/0x3f0 [ 1069.854358][ C0] ? br_forward_finish+0xd3/0x130 [ 1069.854375][ C0] ? br_nf_forward_finish+0xa5e/0xe90 [ 1069.854395][ C0] ? NF_HOOK+0x64e/0x6e0 [ 1069.854413][ C0] ? br_nf_forward_ip+0x7ef/0xa30 [ 1069.854433][ C0] ? nf_hook_slow+0xc5/0x220 [ 1069.854449][ C0] ? NF_HOOK+0x23e/0x3f0 [ 1069.854465][ C0] ? __br_forward+0x397/0x540 [ 1069.854482][ C0] ? br_flood+0x74f/0xc30 [ 1069.854499][ C0] ? br_handle_frame_finish+0x1521/0x1c80 [ 1069.854519][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 1069.854538][ C0] ? br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 1069.854559][ C0] ? br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1069.854580][ C0] ? br_handle_frame+0x1277/0x1510 [ 1069.854600][ C0] ? __netif_receive_skb_core+0x98f/0x3170 [ 1069.854619][ C0] ? process_backlog+0x76d/0x1950 [ 1069.854639][ C0] ? __napi_poll+0xae/0x340 [ 1069.854656][ C0] ? net_rx_action+0x627/0xf70 [ 1069.854675][ C0] ? handle_softirqs+0x22a/0x840 [ 1069.854690][ C0] ? do_softirq+0x76/0xd0 [ 1069.854703][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 1069.854732][ C0] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 1069.854747][ C0] ? br_nf_dev_queue_xmit+0x4ee/0x25f0 [ 1069.854767][ C0] kasan_save_free_info+0x46/0x50 [ 1069.854784][ C0] __kasan_slab_free+0x5c/0x80 [ 1069.854805][ C0] kmem_cache_free+0x182/0x650 [ 1069.854826][ C0] ? __skb_ext_put+0x221/0x2f0 [ 1069.854853][ C0] ? __skb_ext_del+0x271/0x390 [ 1069.854878][ C0] br_nf_dev_queue_xmit+0x4ee/0x25f0 [ 1069.854903][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1069.854922][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1069.854941][ C0] NF_HOOK+0x64e/0x6e0 [ 1069.854963][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1069.854984][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1069.855005][ C0] ? net_generic+0x1e/0x240 [ 1069.855024][ C0] ? net_generic+0x1e/0x240 [ 1069.855042][ C0] ? net_generic+0x1e/0x240 [ 1069.855060][ C0] ? skb_pull+0xc1/0x1d0 [ 1069.855077][ C0] br_nf_post_routing+0xb66/0xfe0 [ 1069.855097][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1069.855121][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1069.855143][ C0] nf_hook_slow+0xc5/0x220 [ 1069.855161][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1069.855180][ C0] NF_HOOK+0x23e/0x3f0 [ 1069.855199][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1069.855216][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1069.855233][ C0] ? net_generic+0x1e/0x240 [ 1069.855252][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1069.855274][ C0] ? net_generic+0x1e/0x240 [ 1069.855294][ C0] br_forward_finish+0xd3/0x130 [ 1069.855311][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1069.855331][ C0] br_nf_forward_finish+0xa5e/0xe90 [ 1069.855357][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1069.855380][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1069.855400][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1069.855420][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1069.855438][ C0] NF_HOOK+0x64e/0x6e0 [ 1069.855460][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1069.855480][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1069.855502][ C0] ? net_generic+0x1e/0x240 [ 1069.855524][ C0] br_nf_forward_ip+0x7ef/0xa30 [ 1069.855544][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1069.855566][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1069.855587][ C0] nf_hook_slow+0xc5/0x220 [ 1069.855605][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1069.855624][ C0] NF_HOOK+0x23e/0x3f0 [ 1069.855643][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1069.855660][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1069.855679][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1069.855699][ C0] ? __skb_clone+0x483/0x7a0 [ 1069.855712][ C0] ? br_handle_vlan+0x61/0x530 [ 1069.855730][ C0] __br_forward+0x397/0x540 [ 1069.855747][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1069.855767][ C0] br_flood+0x74f/0xc30 [ 1069.855793][ C0] br_handle_frame_finish+0x1521/0x1c80 [ 1069.855813][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1069.855835][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1069.855864][ C0] ? ip6t_do_table+0x113/0x1560 [ 1069.855881][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1069.855896][ C0] ? nf_hook_slow+0x176/0x220 [ 1069.855914][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1069.855935][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1069.855959][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1069.855981][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1069.856001][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1069.856017][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1069.856035][ C0] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 1069.856057][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1069.856083][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1069.856106][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1069.856128][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1069.856151][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1069.856173][ C0] ? br_nf_pre_routing+0x75f/0x14c0 [ 1069.856197][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1069.856217][ C0] br_handle_frame+0x1277/0x1510 [ 1069.856242][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1069.856264][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1069.856289][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1069.856309][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 1069.856336][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1069.856356][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1069.856375][ C0] ? ip6_rcv_finish+0x265/0x280 [ 1069.856396][ C0] ? NF_HOOK+0x336/0x3c0 [ 1069.856419][ C0] ? process_backlog+0x3eb/0x1950 [ 1069.856443][ C0] ? process_backlog+0x3eb/0x1950 [ 1069.856463][ C0] ? process_backlog+0x3eb/0x1950 [ 1069.856483][ C0] ? process_backlog+0x3eb/0x1950 [ 1069.856503][ C0] process_backlog+0x76d/0x1950 [ 1069.856532][ C0] __napi_poll+0xae/0x340 [ 1069.856550][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1069.856571][ C0] net_rx_action+0x627/0xf70 [ 1069.856599][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1069.856624][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1069.856648][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 1069.856675][ C0] handle_softirqs+0x22a/0x840 [ 1069.856692][ C0] ? do_softirq+0x76/0xd0 [ 1069.856709][ C0] ? update_defense_level+0x116/0xd70 [ 1069.856728][ C0] ? update_defense_level+0x116/0xd70 [ 1069.856747][ C0] do_softirq+0x76/0xd0 [ 1069.856761][ C0] [ 1069.856767][ C0] [ 1069.856772][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1069.856788][ C0] update_defense_level+0x91e/0xd70 [ 1069.856809][ C0] ? update_defense_level+0x116/0xd70 [ 1069.856829][ C0] ? __pfx_update_defense_level+0x10/0x10 [ 1069.856853][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1069.856880][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1069.856900][ C0] defense_work_handler+0x2d/0xd0 [ 1069.856919][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1069.856935][ C0] process_scheduled_works+0xb5d/0x1860 [ 1069.856965][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1069.856984][ C0] ? assign_work+0x3d5/0x5e0 [ 1069.857001][ C0] worker_thread+0xa53/0xfc0 [ 1069.857030][ C0] kthread+0x389/0x470 [ 1069.857050][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1069.857064][ C0] ? __pfx_kthread+0x10/0x10 [ 1069.857084][ C0] ret_from_fork+0x514/0xb70 [ 1069.857102][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1069.857117][ C0] ? __switch_to+0xc79/0x1410 [ 1069.857140][ C0] ? __pfx_kthread+0x10/0x10 [ 1069.857160][ C0] ret_from_fork_asm+0x1a/0x30 [ 1069.857186][ C0] [ 1070.824602][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1070.831480][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1070.840586][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1070.850642][ T30] Call Trace: [ 1070.853923][ T30] [ 1070.856851][ T30] vpanic+0x56c/0xa60 [ 1070.860839][ T30] ? __pfx___schedule+0x10/0x10 [ 1070.865703][ T30] ? __pfx_vpanic+0x10/0x10 [ 1070.870216][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1070.876385][ T30] panic+0xc5/0xd0 [ 1070.880114][ T30] ? __pfx_panic+0x10/0x10 [ 1070.884535][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1070.889921][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1070.896083][ T30] watchdog+0x102c/0x1030 [ 1070.900429][ T30] ? watchdog+0x1c9/0x1030 [ 1070.904860][ T30] kthread+0x389/0x470 [ 1070.908939][ T30] ? __pfx_watchdog+0x10/0x10 [ 1070.913622][ T30] ? __pfx_kthread+0x10/0x10 [ 1070.918222][ T30] ret_from_fork+0x514/0xb70 [ 1070.922818][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.927931][ T30] ? __switch_to+0xc79/0x1410 [ 1070.932620][ T30] ? __pfx_kthread+0x10/0x10 [ 1070.937218][ T30] ret_from_fork_asm+0x1a/0x30 [ 1070.941998][ T30] [ 1070.945345][ T30] Kernel Offset: disabled [ 1070.949657][ T30] Rebooting in 86400 seconds..