last executing test programs: 33.611489535s ago: executing program 4 (id=12427): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x12, 0xa, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="85"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="d4"]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x2f, 0x57, 0x3, 0x9, 0x28, @loopback, @remote, 0x700, 0x8000, 0x6, 0xffffffa9}}) listen(r1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a1010b001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090088000e89fdffe809000000ff0000f03ac7100003ffffffffff7aea2734ffffe7ec00000000020000180200000000", 0x58}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x12, 0xa, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffe}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="85"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="d4"]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x2f, 0x57, 0x3, 0x9, 0x28, @loopback, @remote, 0x700, 0x8000, 0x6, 0xffffffa9}}) (async) listen(r1, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a1010b001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090088000e89fdffe809000000ff0000f03ac7100003ffffffffff7aea2734ffffe7ec00000000020000180200000000", 0x58}], 0x1) (async) 33.379438379s ago: executing program 4 (id=12430): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 33.286504064s ago: executing program 4 (id=12433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x2c, 0x40, 0x1, 0xfffffffe, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008005e00000000020c0001800800014000000004080008400000005c050005000200000005000100"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x8000000}}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) 33.098010812s ago: executing program 4 (id=12434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xffff0147}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000290000003900"], 0x18}, 0xc4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xd, 0xc}, {0xa6, 0xfff1}, {0x1, 0x700}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) 32.99540507s ago: executing program 4 (id=12436): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x8], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x81000000}, 0x20000000) socket(0x400000000010, 0x3, 0x0) 32.555601536s ago: executing program 4 (id=12439): syz_emit_ethernet(0x19, &(0x7f0000000040)={@random="b82fd699f8f7", @multicast, @void, {@generic={0x177907a305e2f1ed, "7c19a40ae500e5408df610"}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) writev(r0, &(0x7f0000001a80)=[{&(0x7f00000000c0)="acb013d2a0241b36240602554a9004d996d52274fcb7b28230bd34a5474fbca3fc75117855ec77c4efa541883ade1b80956dbc60d6fe8e2abcfa8b22d404e3fcff73f19e3245ae2ed766e9f6aa59436b1f15a2b32137364a0c5c2959b082ed2f03516f060ac0d9d83590eecb2fa82509fae2135581f49395a2834788fa0e49e1bfb8c6cc0f942bb28e91ad9df15b0281ebd8046a5f66978684972a0b58f40b4e6f5e6740836d754b1e522c4e6ec9b100acc35e38dfd1412cd7078ca1223372ddf5e4", 0xc2}, {&(0x7f00000002c0)="ea0d3be7421afafa08ac096d47add0394a61c8a8a31fca6957e9d17b214f6608a095514c0bda9c47887b017c086461cdbb22214e5afb92aa62e5422a523e762e51a5dcbfba5cd68a15e87e98cb615a4c8a75deb47644379971d0ca62cd78922b32d908958e05d3b50363eb51761934804fe4157a82a70e60c10f26a1037874f3b80c5d4621f4d46c5bee89afc3c8c16fc2683824f0460d7247e851953701674d0003f367f25fd23dfe6fd12ca6e3d5c22963ee6ca123374827cfe226031c654c0d4acf96c19873", 0xc7}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="6021936634b72f6bc33555979ea205a5c0f388a0ccf1154020111d3bd7d60a858ea4c6e5eaaff794273b8969bbbd1ef55bb4377cedb90154a21bb2348bab8e9d64641ba35b75dc89de2fc5e6556454067bd22aeff86210ea95b6ed0bdda6e6206d650049c1356622a5198a5eedf4fb1479fe53f36dcac18e9b47af3575cc515b3344a2316b43bb8f92d397599a4ad2c5d541184234c156d1364d074c11dab6d8884c2a281776c2a458d92bdecace03a9f8c244fc085bbdda28d391b7f1d1e360ce2f14db8f861f6fd629592f22112a8225c16135ad2a90c7d14099a84a9363f78b26feb536cc9f71b6db9c9da130", 0xee}, {&(0x7f00000018c0)="c529d82323ebf40897854016a5b69075f53993130bc20a28fe9640f9d24623afb7015ce27a53a8e375fdde3deb76d35effa141c9dcea40c28a20055352819baf20060b60ce8059a0b0bc0fba7f518845ec0e81cda5bfebe03e268b51402c7b61b4b140e96d694f2ebc81bc7a443b671a1b447cfb28f7f28e889aba754569d4aaebd9eb0f19ec6e719176827fa554d3a15aa0fa7addaca101c0255b8d3ec4ee5fc10605372ce142f9561c0d6d1cb2004481a2dcdea788b8d4dc997e9e3abc7852ada942c1753558f937ec34cdc6394f116d94cf9ea59adfcff503e36651648c971d3cb4524f7a1a", 0xe7}, {&(0x7f00000019c0)="96cf1bbe61d71c9c605a230cdc55be729d04126228cecd93db4d5aead5290fc8f08eb35b62e8aa82320fd7796adc464e6784a3b312d16ad8fae6b6b5a34a9004819dc3cad852d1f9e1ea35a33a74cf990e3b211b18121acb25e2273568011b6b4efb53bbc4cdfa0b50d856aeb4193aaf078f4e247beb665c1b25735e51f478595db12a2f", 0x84}], 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x8, 0x7fff, 0x3, 0xf43, 0x7}) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x88, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e25, 0x0, 'sed\x00', 0x3e, 0x3, 0x1e}, 0x2c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000280)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @remote}, {0x6, @remote}, 0x10, {0x2, 0x4e24, @rand_addr=0x64010100}, 'ip6_vti0\x00'}) 24.736744153s ago: executing program 1 (id=12496): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x20000000) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x7}, 0x8) 24.478989637s ago: executing program 1 (id=12497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 24.478448649s ago: executing program 2 (id=12498): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000002000000310a000008"], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x20, 0x9, 0x8, {{0x2d, 0x4, 0x1, 0x28, 0xb4, 0x68, 0x0, 0xf, 0x2d, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x10, 0xd6, 0x0, 0x8, [0xffffff7f, 0xc2c, 0x5]}, @ssrr={0x89, 0xf, 0xb7, [@multicast1, @multicast2, @broadcast]}, @rr={0x7, 0xf, 0x6, [@dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0x39, [@loopback, @private=0xa010100, @remote, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @loopback]}, @cipso={0x86, 0x3f, 0x0, [{0x0, 0xc, "dfc30c392ed3e6d759a1"}, {0x1, 0x2}, {0x1, 0xb, "d1af32522fc2cb80db"}, {0x7, 0xd, "201495c5e2b8950635a41d"}, {0x2, 0x5, "979ab7"}, {0x1, 0x2}, {0x2, 0x3, 'J'}, {0x7, 0x9, "e77886962b9f86"}]}, @timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xf}]}]}}}}}) r2 = bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x1ffffffffffffff6, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[@ANYBLOB="580100002c00040025bd7000fedbdf25150000008c142d2c0473f770f3953436610c15d0be6da86a96ff47323c3c04a9bc2c2a0e31e76e974b8b0f3ac73a9b17f8fa0cb5226c698b35abe8a9e779b6bdc12f51711d489460091585ec6ab5cc5a6c50c1ade1902d565a89dd3f41cd79e203e7a1625df08ed80b194627d4e12d6f8e06afb707b25ec85f8d86e4af4ee03987076afa2e9921f0e3ca2188a1c9c7bcef5fc460fff181e59ea42b28f9ff01fadc60870e003e8094f60800ce0082e8744774a91b37e74c21f15c8fd0022fdd8c09ec5071d92f8b290700339519cef95335457724cf27e9c1dc18860bc3b145", @ANYRES32=r3, @ANYBLOB='\x00\x00\b\x00p\x00', @ANYRES32=r2, @ANYBLOB="800042800400b28008004a00", @ANYRES32=0x0, @ANYBLOB="640010008047d6ae1a396e1cd8c6ead714bdbd6af3fcd7b91918abb0abcdef98935659b3f834cb24362ad5980175e9ecc95674025dad529573ed296686393fe4d8cfdf2727eab6028cd3bdef2a10dda12ba7250cab95ffc0e7c553de0ff7437ecb62476304002580c1fc10800400ff801200208089d84e6461e418bc1cc89f07b2ea00000000"], 0x158}, 0x1, 0x0, 0x0, 0x4084}, 0x4004) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@delchain={0x4dc, 0x65, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0xa}, {0xa}, {0x17, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_u32={{0x8}, {0x4a0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x72}, @TCA_U32_SEL={0x484, 0x5, {0x1, 0x4, 0xf7, 0xe, 0xc, 0xd3a1, 0xffff, 0xfffff66e, [{0x5, 0x1, 0x4, 0x9}, {0x7, 0x9, 0x2, 0xffffffff}, {0x2, 0xfffffffb, 0xafe, 0x80000000}, {0x4, 0xe4000000, 0x2a088745, 0x6}, {0x7, 0x3, 0x4, 0x2}, {0x10000, 0x80000000, 0x0, 0x7}, {0x3, 0x400, 0x0, 0x3}, {0x5, 0x6, 0x20000, 0x40}, {0xfffffbff, 0x4, 0x4, 0x8000}, {0x0, 0x81, 0x7, 0x7f}, {0x3, 0x6, 0x2, 0x5}, {0x2, 0xf, 0x7, 0xe}, {0x9, 0xffff485c, 0x2, 0x2}, {0x1, 0x8000, 0x80000000, 0x9}, {0xc2b, 0xf0, 0x80000001, 0x7ff}, {0x9, 0x9404, 0x80, 0x91}, {0xd5, 0x0, 0x0, 0xe0}, {0x6, 0x7f, 0x5, 0x4}, {0x4, 0xfc0, 0x5, 0x1}, {0x3c54, 0x1cf9d277, 0x77ec, 0x9}, {0x5, 0x1, 0xdc, 0x1000}, {0x5, 0x3, 0xfffffff4, 0x9}, {0x4, 0x204b, 0xc98e, 0x6}, {0x6, 0x5, 0x80, 0x1000}, {0x1, 0x3c4, 0x2000, 0x791}, {0x3, 0x85f, 0x9, 0x2}, {0x0, 0x8, 0x10000000, 0xffffffff}, {0x3, 0x7, 0x1, 0x6}, {0x1, 0x1, 0x1ff, 0xa}, {0xbb54, 0x8, 0x2, 0x6}, {0x200, 0x0, 0x7, 0x18}, {0x7f, 0x4, 0x7, 0x2}, {0x3, 0x5, 0x6}, {0x9, 0x4, 0x2, 0x9}, {0x0, 0xd, 0x1, 0x9}, {0x9, 0x81, 0x1, 0x329}, {0x101, 0x100, 0x9, 0xc}, {0x80, 0x4, 0x4, 0x2}, {0xd86, 0xffffb585, 0x819, 0x80}, {0x9, 0xd, 0x41a, 0xf7600000}, {0x4, 0xef, 0x65, 0x7f}, {0x3, 0xf6, 0x5, 0x7}, {0x1ff, 0x101, 0xf, 0xfffffff7}, {0x5, 0x4e1, 0x101, 0x4}, {0x3, 0x7e8, 0x60, 0x9}, {0xffffff7f, 0x1, 0xfffffffe, 0x7}, {0xe7, 0x1, 0x1}, {0x8, 0x2d3c, 0x1}, {0x6, 0x3, 0x4, 0xfffffff1}, {0x1, 0x6, 0x100, 0xfffffffc}, {0x1, 0x8, 0xfff, 0x5bd1}, {0x101, 0x8, 0xe, 0x8}, {0x7fff, 0x1, 0x6, 0x3}, {0x5bccdaf3, 0xd5c, 0x5, 0xfff}, {0x7, 0x6, 0x5, 0x10000}, {0x8, 0x1, 0x1, 0x82}, {0x4, 0x8, 0x80, 0xc}, {0xa8a, 0x5e, 0x8, 0x7}, {0x1ff, 0x7fffffff, 0x101, 0x4}, {0x6, 0x7, 0x100, 0x7}, {0xa, 0x87d, 0x8, 0x5}, {0x7fffffff, 0xab2, 0x5, 0x5}, {0x1ff, 0x8000, 0x5, 0xfffffeff}, {0x1, 0x1000, 0x1, 0xe4e}, {0x0, 0x9, 0x3, 0x7fffffff}, {0x0, 0x5, 0x4, 0xfffffffc}, {0x2, 0x5, 0x9, 0x7fffffff}, {0x1fa78db5, 0x800, 0x3, 0x400}, {0x2, 0x1, 0x7, 0x7}, {0x53, 0xce, 0x9fbf, 0x9}, {0xcd, 0x0, 0x8, 0x5}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x30}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r10}, 0xc) 24.043266147s ago: executing program 2 (id=12500): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200), 0x20) pipe(&(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115100000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) 23.778089496s ago: executing program 2 (id=12501): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001e9ba"], 0x30}, 0x1, 0x0, 0x0, 0x44008000}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x5, 0x1}]}, {0x0, [0x2e, 0x5f, 0x30, 0x61, 0x0, 0x30]}}, 0x0, 0x30, 0x0, 0x1, 0x7}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x4800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000]}}}, @common=@set={{0x40}, {{0x0, [0x218]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r7 = socket$inet6(0xa, 0x5, 0x0) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000300), &(0x7f0000000480)=0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000000a00)={{r0, &(0x7f0000000040)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x8000, &(0x7f0000000080)={@align, {0x4, 0xfa76, 0xfffffff9, 0x1486}}, 0x7, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)}, 0x5, &(0x7f0000000940)=[{0x3, 0x5935, &(0x7f0000000200)='bridge0\x00', &(0x7f0000000380)="35ed1b1055e32c0cd84a4766ad2c3168bcbeec6e902f56eca35913aacfc96341e8a86b03dd55e6a6d8293206b976085a8557b49d44d9278fc7cfdde7786ceac135158fc6d0a87b8071f6b6f595e5e2836272cc41a8a115e598eae78f11c8f7514a69a189b0dde10cef3e5e5d238b9fccb808023a06dac4bfe6c4d5809c39ff595579a845d823c20858ee5ff5886d2c899ad126042b21414f9e4d2259ff5352d59afddd4776df", 0xa6, 0x18}, {0x3, 0x401, &(0x7f0000000440)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000580)="33976ab9127b39ee2b29fd9093c99d08c670fd012215f6dacd8d0969d1aabe1b84a3fa9f6a75df6453fcc034ef72e9a6d44c6555dff6b4687df76f61e6bf0f0261ac05d1e65c52836db6e33a3ec01a70d7363563ddcfd5250439277bbd28b4fd6ceb8e68908ea342d0a115fd3b97802fdfcf3c37173f664960849cbeacb9f5af2a7f3f39aaf0bfbcb18e27a5f7140077bb0410d76ea8df9a5b7a1b373577b6857f9a4e6ba36f99ba64577904036ff92f016a8b033e9bb76ac487c499b97e6c953a2a41945bf99f497d1fd8", 0xcb, 0x38}, {0x1, 0x3, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="99619606386dc3388e8898209cd4ed4f0fad45c311ac7db2a45ba3047d33f79443484bf72363d878f14b67f7cdbbdfc269ec358961df50d2e7242502caf8027ffe6b4f9a2bf5d5e49e007b628ad76b36a4d72ae71cf378b16427367405383bca1f7b8b3a513b2209aa3cb15c6ff097b0281337386c1004c623b8600f9faf2425721a16a59f9b1a2739d72cb4eade6f6d2d07a31353c591bdeae955d807f66717baf0918653b955c7ca8e33a3c51c", 0xae, 0x12}, {0x2, 0x8001, &(0x7f0000000780)='\'\x00', &(0x7f00000007c0)="6a17cee55842256834ceeaa94823610823010b98200e1e61cb9ec049463c7322a3ad7f1d2eb4d944ef", 0x29, 0x8}, {0x3, 0x1, &(0x7f0000000800)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000840)="f674167095885efb3211dbaf7afdcb13e7848c691b89c953b394cd42a2a071cca8b19bb353bfe52cb1672f9576d05b87e47cf32873c44fec5101d25040e997083c4bc4c5ba5e17a1ad9087d74c106ce7de1b1f633230119a170ee9d121d824ca2ffed88a3f7c90065b51c2a44c2563960d9459ed5568d510ad26488810f1732da484f8e49648398dd90fd7a3e607665086c6ac5dd3fbac545cbdf6b1a5fa044a29b7ae8a9d350572215f8542f9d59363bbfc23caeb74c481f4848f0cddfc69d7ae45c872421f87fb2892fba6722729e33b656f666bd927f29d", 0xd9, 0xc}]}) read$alg(r8, &(0x7f0000000a80)=""/233, 0xe9) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040880) ioctl$sock_qrtr_TIOCOUTQ(r9, 0x5411, &(0x7f00000003c0)) 23.704700083s ago: executing program 3 (id=12502): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffff9d, &(0x7f00000014c0)}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}}, 0x802) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="b74cf38da93cb16c61ab64139811c9080dd29c29e9605d0f6fa7da0402603d6a638f91737c6c0faee06e534af1429fbc9f94cfd95a1ad614c674bf9f0b01cee4a92290748acaf653b52da437c59aad75c1bfd4aa42c42ebe3919b08e43be0ff34fe3e23ba477e085c81bedb47b12ad7091db0126802e2478a2db229561c355722865aa9f4d7683f563d00016f9e05bec0a3cffe95b80de53e8691acf84264a01664e2fe522e97d6f20bdf5e2d5854436244af43c9ec3c8854b7e63dd85e1bbeba6d930c856aeffd5eb334f9e27f5c22a9594fc1f76a49e602f044ca5215f0570fc72fc1148cbf1ef6415467ab1", 0xed}, {&(0x7f0000000540)="b63871a4a8d85e6c8d9ca17cd840", 0xe}], 0x2}, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRES32=r8], 0x20, 0x6044}, 0x6) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f00000001c0)=@generic={0x1, 0x8000000000000001}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@delchain={0x2c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0xc}, {0x10, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) socket$igmp6(0xa, 0x3, 0x2) 23.467567908s ago: executing program 0 (id=12504): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x8000001, @local, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$inet(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000006c0)="3b000000010006", 0x7) sendto$inet6(r0, &(0x7f00000000c0)="b3", 0x1, 0x24000084, 0x0, 0x0) 23.444495823s ago: executing program 1 (id=12505): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, 0x5c0e}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000004c0)=""/4080, 0x1000}, {&(0x7f0000003ec0)=""/128, 0x80}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f00000002c0)=""/145, 0x87}, {&(0x7f00000014c0)=""/200, 0xc8}], 0x38}, 0x7fff}], 0x4000000000001da, 0x12, 0x0) 23.294574871s ago: executing program 0 (id=12506): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x7}, 0x8) 23.239130774s ago: executing program 1 (id=12507): bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000}, 0x48) 23.211777971s ago: executing program 0 (id=12508): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r2], 0x44}}, 0x0) 23.091182648s ago: executing program 1 (id=12509): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000002000000310a000008"], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x20, 0x9, 0x8, {{0x2d, 0x4, 0x1, 0x28, 0xb4, 0x68, 0x0, 0xf, 0x2d, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x10, 0xd6, 0x0, 0x8, [0xffffff7f, 0xc2c, 0x5]}, @ssrr={0x89, 0xf, 0xb7, [@multicast1, @multicast2, @broadcast]}, @rr={0x7, 0xf, 0x6, [@dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0x39, [@loopback, @private=0xa010100, @remote, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @loopback]}, @cipso={0x86, 0x3f, 0x0, [{0x0, 0xc, "dfc30c392ed3e6d759a1"}, {0x1, 0x2}, {0x1, 0xb, "d1af32522fc2cb80db"}, {0x7, 0xd, "201495c5e2b8950635a41d"}, {0x2, 0x5, "979ab7"}, {0x1, 0x2}, {0x2, 0x3, 'J'}, {0x7, 0x9, "e77886962b9f86"}]}, @timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xf}]}]}}}}}) r2 = bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x1ffffffffffffff6, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[@ANYBLOB="580100002c00040025bd7000fedbdf25150000008c142d2c0473f770f3953436610c15d0be6da86a96ff47323c3c04a9bc2c2a0e31e76e974b8b0f3ac73a9b17f8fa0cb5226c698b35abe8a9e779b6bdc12f51711d489460091585ec6ab5cc5a6c50c1ade1902d565a89dd3f41cd79e203e7a1625df08ed80b194627d4e12d6f8e06afb707b25ec85f8d86e4af4ee03987076afa2e9921f0e3ca2188a1c9c7bcef5fc460fff181e59ea42b28f9ff01fadc60870e003e8094f60800ce0082e8744774a91b37e74c21f15c8fd0022fdd8c09ec5071d92f8b290700339519cef95335457724cf27e9c1dc18860bc3b145", @ANYRES32=r3, @ANYBLOB='\x00\x00\b\x00p\x00', @ANYRES32=r2, @ANYBLOB="800042800400b28008004a00", @ANYRES32=0x0, @ANYBLOB="640010008047d6ae1a396e1cd8c6ead714bdbd6af3fcd7b91918abb0abcdef98935659b3f834cb24362ad5980175e9ecc95674025dad529573ed296686393fe4d8cfdf2727eab6028cd3bdef2a10dda12ba7250cab95ffc0e7c553de0ff7437ecb62476304002580c1fc10800400ff801200208089d84e6461e418bc1cc89f07b2ea00000000"], 0x158}, 0x1, 0x0, 0x0, 0x4084}, 0x4004) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@delchain={0x4dc, 0x65, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0xa}, {0xa}, {0x17, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_u32={{0x8}, {0x4a0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x72}, @TCA_U32_SEL={0x484, 0x5, {0x1, 0x4, 0xf7, 0xe, 0xc, 0xd3a1, 0xffff, 0xfffff66e, [{0x5, 0x1, 0x4, 0x9}, {0x7, 0x9, 0x2, 0xffffffff}, {0x2, 0xfffffffb, 0xafe, 0x80000000}, {0x4, 0xe4000000, 0x2a088745, 0x6}, {0x7, 0x3, 0x4, 0x2}, {0x10000, 0x80000000, 0x0, 0x7}, {0x3, 0x400, 0x0, 0x3}, {0x5, 0x6, 0x20000, 0x40}, {0xfffffbff, 0x4, 0x4, 0x8000}, {0x0, 0x81, 0x7, 0x7f}, {0x3, 0x6, 0x2, 0x5}, {0x2, 0xf, 0x7, 0xe}, {0x9, 0xffff485c, 0x2, 0x2}, {0x1, 0x8000, 0x80000000, 0x9}, {0xc2b, 0xf0, 0x80000001, 0x7ff}, {0x9, 0x9404, 0x80, 0x91}, {0xd5, 0x0, 0x0, 0xe0}, {0x6, 0x7f, 0x5, 0x4}, {0x4, 0xfc0, 0x5, 0x1}, {0x3c54, 0x1cf9d277, 0x77ec, 0x9}, {0x5, 0x1, 0xdc, 0x1000}, {0x5, 0x3, 0xfffffff4, 0x9}, {0x4, 0x204b, 0xc98e, 0x6}, {0x6, 0x5, 0x80, 0x1000}, {0x1, 0x3c4, 0x2000, 0x791}, {0x3, 0x85f, 0x9, 0x2}, {0x0, 0x8, 0x10000000, 0xffffffff}, {0x3, 0x7, 0x1, 0x6}, {0x1, 0x1, 0x1ff, 0xa}, {0xbb54, 0x8, 0x2, 0x6}, {0x200, 0x0, 0x7, 0x18}, {0x7f, 0x4, 0x7, 0x2}, {0x3, 0x5, 0x6}, {0x9, 0x4, 0x2, 0x9}, {0x0, 0xd, 0x1, 0x9}, {0x9, 0x81, 0x1, 0x329}, {0x101, 0x100, 0x9, 0xc}, {0x80, 0x4, 0x4, 0x2}, {0xd86, 0xffffb585, 0x819, 0x80}, {0x9, 0xd, 0x41a, 0xf7600000}, {0x4, 0xef, 0x65, 0x7f}, {0x3, 0xf6, 0x5, 0x7}, {0x1ff, 0x101, 0xf, 0xfffffff7}, {0x5, 0x4e1, 0x101, 0x4}, {0x3, 0x7e8, 0x60, 0x9}, {0xffffff7f, 0x1, 0xfffffffe, 0x7}, {0xe7, 0x1, 0x1}, {0x8, 0x2d3c, 0x1}, {0x6, 0x3, 0x4, 0xfffffff1}, {0x1, 0x6, 0x100, 0xfffffffc}, {0x1, 0x8, 0xfff, 0x5bd1}, {0x101, 0x8, 0xe, 0x8}, {0x7fff, 0x1, 0x6, 0x3}, {0x5bccdaf3, 0xd5c, 0x5, 0xfff}, {0x7, 0x6, 0x5, 0x10000}, {0x8, 0x1, 0x1, 0x82}, {0x4, 0x8, 0x80, 0xc}, {0xa8a, 0x5e, 0x8, 0x7}, {0x1ff, 0x7fffffff, 0x101, 0x4}, {0x6, 0x7, 0x100, 0x7}, {0xa, 0x87d, 0x8, 0x5}, {0x7fffffff, 0xab2, 0x5, 0x5}, {0x1ff, 0x8000, 0x5, 0xfffffeff}, {0x1, 0x1000, 0x1, 0xe4e}, {0x0, 0x9, 0x3, 0x7fffffff}, {0x0, 0x5, 0x4, 0xfffffffc}, {0x2, 0x5, 0x9, 0x7fffffff}, {0x1fa78db5, 0x800, 0x3, 0x400}, {0x2, 0x1, 0x7, 0x7}, {0x53, 0xce, 0x9fbf, 0x9}, {0xcd, 0x0, 0x8, 0x5}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x30}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r10}, 0xc) 22.743708404s ago: executing program 1 (id=12510): syz_emit_ethernet(0x4a, 0x0, 0x0) socket(0x2c, 0x80000, 0x8001) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/110, 0x6e}], 0x1, 0xa, 0x6c8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYRES64=r6, @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0x8, 0x2, 0xfffffffe) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0x0, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x80fc}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040850}, 0x20084084) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 22.74170213s ago: executing program 3 (id=12511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000007000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 22.607176466s ago: executing program 3 (id=12512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8201000000420000140003006272696467655f736c6176655f30000008000400d4000000600016805c0001"], 0x9c}}, 0x0) 22.497155208s ago: executing program 0 (id=12513): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000004140)}, 0x7fff}], 0x2, 0x12, 0x0) 22.431387447s ago: executing program 3 (id=12514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 22.37066837s ago: executing program 0 (id=12515): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f07000000030000000100000005530000004f0030"], &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000100001082dbd70000000020000000000", @ANYRES32=0x0, @ANYBLOB="31200000000000005c0019800800010004000000090002002d5b262f000000003c0002007b2700a131be0300c1d976ab7343a210a5ef0c25bf2527e885ad4aa9c4e72bba3c8230a69fe4ffdbd624a00e3ca895e66ff4ff81fff964cd050002000000000008001b00"], 0x84}, 0x1, 0x0, 0x0, 0x4058805}, 0x4840) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r4, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r5, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3d}}}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x80, 0xc}}, @ibss={0x6, 0x2, 0x7}, @channel_switch={0x25, 0x3, {0x0, 0x9, 0x2}}, @perr={0x84, 0xf, {0xe, 0x1, [{{}, @device_b, 0x80000001, @void, 0x35}]}}, @supported_rates={0x1, 0x3, [{0xc, 0x1}, {0xb}, {0x4, 0x1}]}, @erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40003}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x22, 0x4, 0x3ff, &(0x7f00000001c0)) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x20, r1, 0x607, 0x0, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x20040800) 21.764693429s ago: executing program 0 (id=12516): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000005c0)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="dc9e0000", @ANYRES16, @ANYBLOB="00012dbd7000ffdbdf254d0000000800030000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002900a800cdb955fa4b78a0bcf636858359a2e7c2aede40bd8ac653c8754731e0708a5f2f04ea816f3d000000"], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x44, 0x43, 0x107, 0xfdfffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x146}, @nested={0x2c, 0x1, 0x0, 0x1, [@nested={0x28, 0xdd, 0x0, 0x1, [@nested={0x22, 0x113, 0x0, 0x1, [@generic="425218858a7d0381acf6cc2f465ef16459730ff8bd0aa566c6307cbe70ac"]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017d0000040042800c292d8674db4edcf5355bf4846c001f8006000600801c00007c"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r9 = accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r9, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) 20.566406336s ago: executing program 2 (id=12517): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x7}, 0x8) 20.453245824s ago: executing program 2 (id=12518): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x52, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x2c, r1, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 20.403143264s ago: executing program 3 (id=12519): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000002000000310a000008"], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x20, 0x9, 0x8, {{0x2d, 0x4, 0x1, 0x28, 0xb4, 0x68, 0x0, 0xf, 0x2d, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x10, 0xd6, 0x0, 0x8, [0xffffff7f, 0xc2c, 0x5]}, @ssrr={0x89, 0xf, 0xb7, [@multicast1, @multicast2, @broadcast]}, @rr={0x7, 0xf, 0x6, [@dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0x39, [@loopback, @private=0xa010100, @remote, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @loopback]}, @cipso={0x86, 0x3f, 0x0, [{0x0, 0xc, "dfc30c392ed3e6d759a1"}, {0x1, 0x2}, {0x1, 0xb, "d1af32522fc2cb80db"}, {0x7, 0xd, "201495c5e2b8950635a41d"}, {0x2, 0x5, "979ab7"}, {0x1, 0x2}, {0x2, 0x3, 'J'}, {0x7, 0x9, "e77886962b9f86"}]}, @timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xf}]}]}}}}}) r2 = bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x1ffffffffffffff6, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[@ANYBLOB="580100002c00040025bd7000fedbdf25150000008c142d2c0473f770f3953436610c15d0be6da86a96ff47323c3c04a9bc2c2a0e31e76e974b8b0f3ac73a9b17f8fa0cb5226c698b35abe8a9e779b6bdc12f51711d489460091585ec6ab5cc5a6c50c1ade1902d565a89dd3f41cd79e203e7a1625df08ed80b194627d4e12d6f8e06afb707b25ec85f8d86e4af4ee03987076afa2e9921f0e3ca2188a1c9c7bcef5fc460fff181e59ea42b28f9ff01fadc60870e003e8094f60800ce0082e8744774a91b37e74c21f15c8fd0022fdd8c09ec5071d92f8b290700339519cef95335457724cf27e9c1dc18860bc3b145", @ANYRES32=r3, @ANYBLOB='\x00\x00\b\x00p\x00', @ANYRES32=r2, @ANYBLOB="800042800400b28008004a00", @ANYRES32=0x0, @ANYBLOB="640010008047d6ae1a396e1cd8c6ead714bdbd6af3fcd7b91918abb0abcdef98935659b3f834cb24362ad5980175e9ecc95674025dad529573ed296686393fe4d8cfdf2727eab6028cd3bdef2a10dda12ba7250cab95ffc0e7c553de0ff7437ecb62476304002580c1fc10800400ff801200208089d84e6461e418bc1cc89f07b2ea00000000"], 0x158}, 0x1, 0x0, 0x0, 0x4084}, 0x4004) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@delchain={0x4dc, 0x65, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0xa}, {0xa}, {0x17, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_u32={{0x8}, {0x4a0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x72}, @TCA_U32_SEL={0x484, 0x5, {0x1, 0x4, 0xf7, 0xe, 0xc, 0xd3a1, 0xffff, 0xfffff66e, [{0x5, 0x1, 0x4, 0x9}, {0x7, 0x9, 0x2, 0xffffffff}, {0x2, 0xfffffffb, 0xafe, 0x80000000}, {0x4, 0xe4000000, 0x2a088745, 0x6}, {0x7, 0x3, 0x4, 0x2}, {0x10000, 0x80000000, 0x0, 0x7}, {0x3, 0x400, 0x0, 0x3}, {0x5, 0x6, 0x20000, 0x40}, {0xfffffbff, 0x4, 0x4, 0x8000}, {0x0, 0x81, 0x7, 0x7f}, {0x3, 0x6, 0x2, 0x5}, {0x2, 0xf, 0x7, 0xe}, {0x9, 0xffff485c, 0x2, 0x2}, {0x1, 0x8000, 0x80000000, 0x9}, {0xc2b, 0xf0, 0x80000001, 0x7ff}, {0x9, 0x9404, 0x80, 0x91}, {0xd5, 0x0, 0x0, 0xe0}, {0x6, 0x7f, 0x5, 0x4}, {0x4, 0xfc0, 0x5, 0x1}, {0x3c54, 0x1cf9d277, 0x77ec, 0x9}, {0x5, 0x1, 0xdc, 0x1000}, {0x5, 0x3, 0xfffffff4, 0x9}, {0x4, 0x204b, 0xc98e, 0x6}, {0x6, 0x5, 0x80, 0x1000}, {0x1, 0x3c4, 0x2000, 0x791}, {0x3, 0x85f, 0x9, 0x2}, {0x0, 0x8, 0x10000000, 0xffffffff}, {0x3, 0x7, 0x1, 0x6}, {0x1, 0x1, 0x1ff, 0xa}, {0xbb54, 0x8, 0x2, 0x6}, {0x200, 0x0, 0x7, 0x18}, {0x7f, 0x4, 0x7, 0x2}, {0x3, 0x5, 0x6}, {0x9, 0x4, 0x2, 0x9}, {0x0, 0xd, 0x1, 0x9}, {0x9, 0x81, 0x1, 0x329}, {0x101, 0x100, 0x9, 0xc}, {0x80, 0x4, 0x4, 0x2}, {0xd86, 0xffffb585, 0x819, 0x80}, {0x9, 0xd, 0x41a, 0xf7600000}, {0x4, 0xef, 0x65, 0x7f}, {0x3, 0xf6, 0x5, 0x7}, {0x1ff, 0x101, 0xf, 0xfffffff7}, {0x5, 0x4e1, 0x101, 0x4}, {0x3, 0x7e8, 0x60, 0x9}, {0xffffff7f, 0x1, 0xfffffffe, 0x7}, {0xe7, 0x1, 0x1}, {0x8, 0x2d3c, 0x1}, {0x6, 0x3, 0x4, 0xfffffff1}, {0x1, 0x6, 0x100, 0xfffffffc}, {0x1, 0x8, 0xfff, 0x5bd1}, {0x101, 0x8, 0xe, 0x8}, {0x7fff, 0x1, 0x6, 0x3}, {0x5bccdaf3, 0xd5c, 0x5, 0xfff}, {0x7, 0x6, 0x5, 0x10000}, {0x8, 0x1, 0x1, 0x82}, {0x4, 0x8, 0x80, 0xc}, {0xa8a, 0x5e, 0x8, 0x7}, {0x1ff, 0x7fffffff, 0x101, 0x4}, {0x6, 0x7, 0x100, 0x7}, {0xa, 0x87d, 0x8, 0x5}, {0x7fffffff, 0xab2, 0x5, 0x5}, {0x1ff, 0x8000, 0x5, 0xfffffeff}, {0x1, 0x1000, 0x1, 0xe4e}, {0x0, 0x9, 0x3, 0x7fffffff}, {0x0, 0x5, 0x4, 0xfffffffc}, {0x2, 0x5, 0x9, 0x7fffffff}, {0x1fa78db5, 0x800, 0x3, 0x400}, {0x2, 0x1, 0x7, 0x7}, {0x53, 0xce, 0x9fbf, 0x9}, {0xcd, 0x0, 0x8, 0x5}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x30}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r10}, 0xc) 15.740619829s ago: executing program 2 (id=12520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 15.727034901s ago: executing program 3 (id=12521): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r1, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x8) write$cgroup_devices(r5, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070003004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x4, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe0}}, 0x0) r10 = socket(0x10, 0x803, 0x2) vmsplice(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="b06e47e82f7452b0c67724a15245799413a4a3ae68ca2f3faabaf3cee66eb39f90dc4e54d7cf0046bcb038785eea3ee52acf995709e90efb83e04eb4ea55d6529c5f48e553f753c4b93e7152bb1b541a32e1ea2b0531f69cd7e5d94099ccf7246e51c635f3189d7f3dfcfc088e26368b090aa79eef1210f96175db90391a5e6d97123f5b438add5f8b28d8de5a5273ea0a3ff44a5263ac9efb6702d4a4d23f181d1223080fc53e27e45550c2ada5273ac9507d5acf45c2ec908893caa56453f03565d45e7b11df3e812df2e790410bb7a4ee827545f477d88f8485dd3dc3ba30190ed1d63e46d0d9afafdb2f699d4643", 0xf0}, {&(0x7f0000000600)="42c140a635", 0x5}, {&(0x7f0000000640)="b26566b4c0e97e0d2ac0e840ddf62f5587d6b6dee166fe5b2330b91e47cb2bbc823fa898078276f27851e4eb96d8eabfbd74c743e0aecb61f89a68a10f0d4421cbc0c6c58ab93458b138d334cab21ae8a5629ffe1ed316991347e955d83d23c084f8256d6e8786a9d7b1d621464c016f9b79a0c5e73c92", 0x77}, {&(0x7f00000006c0)="eedbdb24ec32acd4ec4728d93d62c3bf9548176440fde6f7730b24f68eec298705d0871cb830e30092d0baa3b7c7387fa0cd23b8ffeff1bd6f109025fbbc21a73d5a", 0x42}, {&(0x7f0000000740)="e926f744746a937ea59efe367a306e2142691f34aeafc31b2dd5522221e28169600e73bbeee45260c758bcbbb84947a2f8e5969d6e5355e5a672c42a72203c096229d3695493d1ea29995a0460de654d95ddeaac67f520e3f3b943209b009d571b63ac498778b66153c4a3c951021eca0d34ed80e59949bbef3d50fe3fe276efdc517909c9306fb9d984319b1a9acb15c838841533ff4c4fbbb98b6cd913ccb83f9ca252506d65bb450e65f8b0cd", 0xae}, {&(0x7f0000000800)="05fd8d38111136ef7307f081db391be8de4e1930a235906af2a688aa8b149d4b1deaba1716c131474bd1bb192866192a52bd490f6a6cdce2e47d4cbf0ef96e744b381bc5b1a4cebdf82e1c78b3fdf999bce8e2de62575aeed5bf267b576c013c105c824d7f11326db7aff897f00bfe5b5cc88ccbc1", 0x75}, {&(0x7f0000000900)="b7b3b2ae49ba60c3b3825dc62ed99db32a045bb6204b1b47cb25afbb80765ef56bb1ec0ec771ffb607500e32a4112cba6f5b4695e97130f3f931dbe1ccc97f5f049881a2c8f385e85d6f64ed75fa2ca6483c7c58d687fb08d1ee1e9af46a20", 0x5f}], 0x7, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 7.621074936s ago: executing program 32 (id=12510): syz_emit_ethernet(0x4a, 0x0, 0x0) socket(0x2c, 0x80000, 0x8001) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/110, 0x6e}], 0x1, 0xa, 0x6c8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a400fe00000000b7060000080000002d6400000000000045040300010000001704000001000a00b7040000ff010000720af2fe000000008500000049000000b700000070b2000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d761ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a8321e056acf27c34bed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb93ce1c0983cdcb48477b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e44c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6bc7c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000000000000000000000000007a4604baa70bda5d5f18f54e9638350a6dd81a55ab5528efd1ef5a564908db7cce99e5c569c2947763b90e03b6d1a53b590e4ff4867f0d86b9af58244866b9df33634c8d85ce1b3bfa3e5bec6989c907c2f46b9a837676e07d87bb7dba3f34694ceb5b9faf10eece00bcfd503ed3f3048782665a848d79e443de4ba97db3a9bde69be7612cb1441c61eadd5bb4494ff2eb189c2ab3a241c12f764c0719650c1b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYRES64=r6, @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0x8, 0x2, 0xfffffffe) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0x0, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x80fc}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040850}, 0x20084084) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 6.522670513s ago: executing program 33 (id=12516): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000005c0)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="dc9e0000", @ANYRES16, @ANYBLOB="00012dbd7000ffdbdf254d0000000800030000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002900a800cdb955fa4b78a0bcf636858359a2e7c2aede40bd8ac653c8754731e0708a5f2f04ea816f3d000000"], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x44, 0x43, 0x107, 0xfdfffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x146}, @nested={0x2c, 0x1, 0x0, 0x1, [@nested={0x28, 0xdd, 0x0, 0x1, [@nested={0x22, 0x113, 0x0, 0x1, [@generic="425218858a7d0381acf6cc2f465ef16459730ff8bd0aa566c6307cbe70ac"]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017d0000040042800c292d8674db4edcf5355bf4846c001f8006000600801c00007c"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r9 = accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r9, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) 110.762373ms ago: executing program 34 (id=12520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 0s ago: executing program 35 (id=12521): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r1, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x8) write$cgroup_devices(r5, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffffff, 0xff, 0xffffff01, 0xff0000ff], [0xffffffff, 0x0, 0xff000000, 0xff], 'ipvlan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x31}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}, {0x2b, 0x42, 0xc, 0xc, 0x4, 0x75a0ce973f3a179e}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070003004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x4, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe0}}, 0x0) r10 = socket(0x10, 0x803, 0x2) vmsplice(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="b06e47e82f7452b0c67724a15245799413a4a3ae68ca2f3faabaf3cee66eb39f90dc4e54d7cf0046bcb038785eea3ee52acf995709e90efb83e04eb4ea55d6529c5f48e553f753c4b93e7152bb1b541a32e1ea2b0531f69cd7e5d94099ccf7246e51c635f3189d7f3dfcfc088e26368b090aa79eef1210f96175db90391a5e6d97123f5b438add5f8b28d8de5a5273ea0a3ff44a5263ac9efb6702d4a4d23f181d1223080fc53e27e45550c2ada5273ac9507d5acf45c2ec908893caa56453f03565d45e7b11df3e812df2e790410bb7a4ee827545f477d88f8485dd3dc3ba30190ed1d63e46d0d9afafdb2f699d4643", 0xf0}, {&(0x7f0000000600)="42c140a635", 0x5}, {&(0x7f0000000640)="b26566b4c0e97e0d2ac0e840ddf62f5587d6b6dee166fe5b2330b91e47cb2bbc823fa898078276f27851e4eb96d8eabfbd74c743e0aecb61f89a68a10f0d4421cbc0c6c58ab93458b138d334cab21ae8a5629ffe1ed316991347e955d83d23c084f8256d6e8786a9d7b1d621464c016f9b79a0c5e73c92", 0x77}, {&(0x7f00000006c0)="eedbdb24ec32acd4ec4728d93d62c3bf9548176440fde6f7730b24f68eec298705d0871cb830e30092d0baa3b7c7387fa0cd23b8ffeff1bd6f109025fbbc21a73d5a", 0x42}, {&(0x7f0000000740)="e926f744746a937ea59efe367a306e2142691f34aeafc31b2dd5522221e28169600e73bbeee45260c758bcbbb84947a2f8e5969d6e5355e5a672c42a72203c096229d3695493d1ea29995a0460de654d95ddeaac67f520e3f3b943209b009d571b63ac498778b66153c4a3c951021eca0d34ed80e59949bbef3d50fe3fe276efdc517909c9306fb9d984319b1a9acb15c838841533ff4c4fbbb98b6cd913ccb83f9ca252506d65bb450e65f8b0cd", 0xae}, {&(0x7f0000000800)="05fd8d38111136ef7307f081db391be8de4e1930a235906af2a688aa8b149d4b1deaba1716c131474bd1bb192866192a52bd490f6a6cdce2e47d4cbf0ef96e744b381bc5b1a4cebdf82e1c78b3fdf999bce8e2de62575aeed5bf267b576c013c105c824d7f11326db7aff897f00bfe5b5cc88ccbc1", 0x75}, {&(0x7f0000000900)="b7b3b2ae49ba60c3b3825dc62ed99db32a045bb6204b1b47cb25afbb80765ef56bb1ec0ec771ffb607500e32a4112cba6f5b4695e97130f3f931dbe1ccc97f5f049881a2c8f385e85d6f64ed75fa2ca6483c7c58d687fb08d1ee1e9af46a20", 0x5f}], 0x7, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) kernel console output (not intermixed with test programs): aximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1755.056144][T28494] Bluetooth: hci4: command tx timeout [ 1755.136111][T14575] SET target dimension over the limit! [ 1755.323705][T22215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1755.341998][T22215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.353035][ T156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1755.384855][ T156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1755.470594][T14578] syzkaller1: entered promiscuous mode [ 1755.476576][T14578] syzkaller1: entered allmulticast mode [ 1755.644896][T14592] vlan3: entered promiscuous mode [ 1755.656574][T14592] bridge0: entered promiscuous mode [ 1755.767306][T14517] lo speed is unknown, defaulting to 1000 [ 1755.894395][T14605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12206'. [ 1755.955261][T14611] netlink: 260 bytes leftover after parsing attributes in process `syz.0.12206'. [ 1755.982993][T22215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.011734][T22215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.072290][ T156] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1756.170191][T14602] 8021q: VLANs not supported on ip6gre0 [ 1756.837976][T22215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.848407][T22215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.136828][T28494] Bluetooth: hci4: command tx timeout [ 1757.294466][T14517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.301672][T14517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.309531][T14517] bridge_slave_0: entered allmulticast mode [ 1757.317633][T14517] bridge_slave_0: entered promiscuous mode [ 1757.326362][T14517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.333546][T14517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.340875][T14517] bridge_slave_1: entered allmulticast mode [ 1757.348887][T14517] bridge_slave_1: entered promiscuous mode [ 1757.521600][T14517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1757.538646][T14517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.683444][T22215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.725792][T22215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.945442][T14517] team0: Port device team_slave_0 added [ 1757.955133][T14517] team0: Port device team_slave_1 added [ 1757.990262][ T156] wlan1: Trigger new scan to find an IBSS to join [ 1758.007314][T14517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.014337][T14517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.063651][T14517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.076498][T14517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.083664][T14517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.109585][T14517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.237412][T14517] hsr_slave_0: entered promiscuous mode [ 1758.244524][T14517] hsr_slave_1: entered promiscuous mode [ 1758.251846][T14517] debugfs: 'hsr0' already exists in 'hsr' [ 1758.257633][T14517] Cannot create hsr debugfs directory [ 1758.487799][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12220'. [ 1758.637154][T14682] FAULT_INJECTION: forcing a failure. [ 1758.637154][T14682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.650277][T14682] CPU: 0 UID: 0 PID: 14682 Comm: syz.4.12222 Not tainted syzkaller #0 PREEMPT(full) [ 1758.650306][T14682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1758.650320][T14682] Call Trace: [ 1758.650329][T14682] [ 1758.650339][T14682] dump_stack_lvl+0xe8/0x150 [ 1758.650369][T14682] should_fail_ex+0x412/0x560 [ 1758.650403][T14682] strncpy_from_user+0x36/0x2b0 [ 1758.650433][T14682] strncpy_from_user_nofault+0x71/0x150 [ 1758.650469][T14682] bpf_probe_read_user_str+0x2a/0x70 [ 1758.650498][T14682] bpf_prog_2b9d543235bb144e+0x62/0x68 [ 1758.650522][T14682] bpf_flow_dissect+0x224/0x730 [ 1758.650555][T14682] bpf_prog_test_run_flow_dissector+0x3a4/0x610 [ 1758.650594][T14682] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1758.650623][T14682] ? __fget_files+0x2a/0x420 [ 1758.650656][T14682] ? __fget_files+0x2a/0x420 [ 1758.650686][T14682] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1758.650720][T14682] bpf_prog_test_run+0x2c7/0x340 [ 1758.650746][T14682] __sys_bpf+0x643/0x950 [ 1758.650779][T14682] ? __pfx___sys_bpf+0x10/0x10 [ 1758.650828][T14682] ? ksys_write+0x242/0x270 [ 1758.650858][T14682] ? __pfx_ksys_write+0x10/0x10 [ 1758.650893][T14682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.650917][T14682] __x64_sys_bpf+0x7c/0x90 [ 1758.650953][T14682] do_syscall_64+0x15f/0xf80 [ 1758.650981][T14682] ? trace_irq_disable+0x3b/0x140 [ 1758.651007][T14682] ? clear_bhb_loop+0x40/0x90 [ 1758.651031][T14682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.651049][T14682] RIP: 0033:0x7fec53b9ce59 [ 1758.651067][T14682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.651083][T14682] RSP: 002b:00007fec54a71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1758.651103][T14682] RAX: ffffffffffffffda RBX: 00007fec53e15fa0 RCX: 00007fec53b9ce59 [ 1758.651117][T14682] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1758.651129][T14682] RBP: 00007fec54a71090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.651140][T14682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.651151][T14682] R13: 00007fec53e16038 R14: 00007fec53e15fa0 R15: 00007ffe7d592a68 [ 1758.651182][T14682] [ 1759.188516][ T1171] net_ratelimit: 1037 callbacks suppressed [ 1759.188538][ T1171] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1759.208911][ T1171] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1759.226869][T13277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.236538][T28494] Bluetooth: hci4: command tx timeout [ 1759.555249][T14694] openvswitch: netlink: Missing valid actions attribute. [ 1759.562925][T14694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1759.905606][ T5363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.919160][ T6339] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1759.933331][ T6339] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1760.330225][T22215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.342061][T22215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.359475][T22215] bond0 (unregistering): Released all slaves [ 1760.373606][T22215] bond1 (unregistering): Released all slaves [ 1760.394149][T22215] bond2 (unregistering): Released all slaves [ 1760.414955][T22215] bond3 (unregistering): Released all slaves [ 1760.549015][ T6339] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1760.563499][ T6339] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1760.764812][T14703] bridge6: entered promiscuous mode [ 1760.778917][T14703] bridge6: entered allmulticast mode [ 1760.809945][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12229'. [ 1760.848070][T14703] team0: Port device bridge6 added [ 1760.890451][T14703] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1760.944032][T22215] tipc: Left network mode [ 1761.116491][ T30] audit: type=1107 audit(1779281248.702:12): pid=14708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ööµt,›=3¹EÙ¸1—Xë‹£’D9¨Y(]PPDÁ"@è_I$lc~ðëN)!ß” lèX˜™€ÎRý½€u€A+ †‹Æ\©¶BîÙeÔÜŒ{”زÃß«{2Mæ°Ï鈾Êz%~¾G( ' [ 1761.142010][T14709] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12230'. [ 1761.295834][T28494] Bluetooth: hci4: command tx timeout [ 1762.006014][ T6339] wlan1: Trigger new scan to find an IBSS to join [ 1762.304886][T14740] sctp: [Deprecated]: syz.0.12234 (pid 14740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1762.304886][T14740] Use struct sctp_sack_info instead [ 1763.509921][T14723] vlan3: left promiscuous mode [ 1763.514747][T14723] bridge0: left promiscuous mode [ 1763.560033][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1763.806923][ T3320] wlan1: Creating new IBSS network, BSSID fe:23:e0:ae:30:c9 [ 1764.263824][T13277] net_ratelimit: 13 callbacks suppressed [ 1764.263845][T13277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.279811][T13277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.298801][T14762] mac80211_hwsim hwsim98 wlan0: entered promiscuous mode [ 1764.324253][T14762] mac80211_hwsim hwsim98 wlan0: entered allmulticast mode [ 1764.350389][T14762] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1764.624035][ T3320] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1764.638290][ T3320] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1764.728383][T14779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12243'. [ 1764.745319][T22215] hsr_slave_0: left promiscuous mode [ 1764.755086][T22215] hsr_slave_1: left promiscuous mode [ 1764.763380][T22215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1764.825922][T20033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.843310][T22215] batadv0: mtu less than device minimum [ 1764.850601][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1764.863495][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1764.874880][T22215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 1764.969536][T22215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1764.981166][T22215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1765.080190][T22215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1765.090870][T22215] batman_adv: batadv0: Interface deactivated: dummy0 [ 1765.098182][T22215] batman_adv: batadv0: Removing interface: dummy0 [ 1765.127135][T22215] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1765.151594][T22215] batman_adv: batadv0: Removing interface: ipvlan2 [ 1765.208579][T22215] veth1_to_batadv: left promiscuous mode [ 1765.228676][T22215] batadv0: left allmulticast mode [ 1765.234201][T22215] batadv0: left promiscuous mode [ 1765.242330][T22215] veth1_macvtap: left promiscuous mode [ 1765.267551][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12247'. [ 1765.278425][T22215] veth0_macvtap: left promiscuous mode [ 1765.284500][T22215] veth1_vlan: left promiscuous mode [ 1765.290575][T22215] veth0_vlan: left promiscuous mode [ 1766.268299][T14802] bridge0: port 4(vlan2) entered blocking state [ 1766.274795][T14802] bridge0: port 4(vlan2) entered forwarding state [ 1766.752539][T14517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1766.764847][T14517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1766.797205][T14517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1766.822099][T14517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1766.887532][T14517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1766.927051][T14517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1766.935309][T14517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1766.965067][T14517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1766.972712][T14831] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12255'. [ 1766.989840][T14831] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12255'. [ 1767.197969][T14517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.227696][T14517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.261890][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.269194][ T3320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.350527][T14848] syzkaller0: entered promiscuous mode [ 1767.374619][T14848] syzkaller0: entered allmulticast mode [ 1767.408679][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.415882][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.233459][T14885] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1768.247347][T22215] IPVS: stop unused estimator thread 0... [ 1768.344168][T14890] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12273'. [ 1768.553633][T14517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1768.725121][T14517] veth0_vlan: entered promiscuous mode [ 1768.773652][T14517] veth1_vlan: entered promiscuous mode [ 1768.883517][T14517] veth0_macvtap: entered promiscuous mode [ 1768.894685][T14517] veth1_macvtap: entered promiscuous mode [ 1768.929477][T14517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1769.022035][T14517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1769.181811][T13277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.275985][T13277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.284800][T13277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.293557][T13277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.440157][T13996] net_ratelimit: 48 callbacks suppressed [ 1769.440177][T13996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.610497][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.652466][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.720548][T14728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1769.737749][T14728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.943228][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12286'. [ 1769.952259][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12286'. [ 1770.016758][ T6339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.104414][T14730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.111499][T14963] gretap0: entered promiscuous mode [ 1770.148391][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12192'. [ 1770.230642][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12290'. [ 1770.526032][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12293'. [ 1770.550139][T14983] FAULT_INJECTION: forcing a failure. [ 1770.550139][T14983] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.562992][T14983] CPU: 0 UID: 0 PID: 14983 Comm: syz.0.12292 Not tainted syzkaller #0 PREEMPT(full) [ 1770.563020][T14983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1770.563033][T14983] Call Trace: [ 1770.563044][T14983] [ 1770.563054][T14983] dump_stack_lvl+0xe8/0x150 [ 1770.563080][T14983] should_fail_ex+0x412/0x560 [ 1770.563108][T14983] should_failslab+0xa8/0x100 [ 1770.563136][T14983] __kmalloc_cache_noprof+0x88/0x660 [ 1770.563159][T14983] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1770.563183][T14983] ? sctp_add_bind_addr+0x8c/0x370 [ 1770.563211][T14983] sctp_add_bind_addr+0x8c/0x370 [ 1770.563238][T14983] sctp_copy_local_addr_list+0x314/0x4f0 [ 1770.563265][T14983] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1770.563289][T14983] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1770.563314][T14983] ? sctp_v6_is_any+0x64/0x80 [ 1770.563339][T14983] ? sctp_copy_one_addr+0x93/0x360 [ 1770.563365][T14983] sctp_bind_addr_copy+0xb3/0x3c0 [ 1770.563389][T14983] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1770.563413][T14983] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1770.563434][T14983] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1770.563457][T14983] ? __local_bh_enable_ip+0xd0/0x130 [ 1770.563474][T14983] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1770.563498][T14983] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1770.563521][T14983] sctp_sendmsg+0x1576/0x2c50 [ 1770.563550][T14983] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1770.563570][T14983] ? aa_sk_perm+0x6d5/0x900 [ 1770.563589][T14983] ? __might_fault+0xaf/0x130 [ 1770.563617][T14983] ? __pfx_aa_sk_perm+0x10/0x10 [ 1770.563640][T14983] ? sock_rps_record_flow+0x19/0x350 [ 1770.563663][T14983] ? __pfx_inet_sendmsg+0x10/0x10 [ 1770.563695][T14983] ? inet_sendmsg+0x2f4/0x370 [ 1770.563719][T14983] ? __pfx_inet_sendmsg+0x10/0x10 [ 1770.563743][T14983] __sys_sendto+0x5de/0x710 [ 1770.563772][T14983] ? __pfx___sys_sendto+0x10/0x10 [ 1770.563795][T14983] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1770.563823][T14983] ? __fget_files+0x3a0/0x420 [ 1770.563853][T14983] ? ksys_write+0x242/0x270 [ 1770.563879][T14983] ? __pfx_ksys_write+0x10/0x10 [ 1770.563908][T14983] __x64_sys_sendto+0xde/0x100 [ 1770.563936][T14983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.563954][T14983] do_syscall_64+0x15f/0xf80 [ 1770.563979][T14983] ? trace_irq_disable+0x3b/0x140 [ 1770.564004][T14983] ? clear_bhb_loop+0x40/0x90 [ 1770.564025][T14983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.564042][T14983] RIP: 0033:0x7f763c99ce59 [ 1770.564059][T14983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.564073][T14983] RSP: 002b:00007f763d7b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1770.564091][T14983] RAX: ffffffffffffffda RBX: 00007f763cc16090 RCX: 00007f763c99ce59 [ 1770.564104][T14983] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: 0000000000000005 [ 1770.564114][T14983] RBP: 00007f763d7b0090 R08: 0000200000000140 R09: 000000000000001c [ 1770.564125][T14983] R10: 0000000084ffffff R11: 0000000000000246 R12: 0000000000000002 [ 1770.564136][T14983] R13: 00007f763cc16128 R14: 00007f763cc16090 R15: 00007ffce9e80b08 [ 1770.564163][T14983] [ 1771.046331][T14975] mac80211_hwsim hwsim97 syzkaller0: left promiscuous mode [ 1771.064575][T14975] ip6gre1: left promiscuous mode [ 1771.070744][T14975] vlan0: left promiscuous mode [ 1771.079152][T14975] bond_slave_1: left promiscuous mode [ 1771.097783][T29616] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1771.166927][T29616] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1771.242528][ T7381] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1771.261187][ T7381] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1771.270357][ T7381] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1771.279883][ T7381] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1771.290795][ T7381] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1771.505102][T14975] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1771.704141][T14975] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1771.739957][T14975] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1771.798898][T14975] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1771.822728][T14975] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1771.837008][T14985] erspan0: entered promiscuous mode [ 1771.842290][T14985] erspan0: entered allmulticast mode [ 1771.945545][T22215] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1772.448350][T15030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12305'. [ 1772.472366][T15032] sctp: [Deprecated]: syz.3.12303 (pid 15032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1772.472366][T15032] Use struct sctp_sack_info instead [ 1772.496313][T20033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.555379][T15024] IPVS: set_ctl: invalid protocol: 136 172.30.0.5:20005 [ 1772.840820][ T6339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1772.855651][ T6339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.912461][T14988] lo speed is unknown, defaulting to 1000 [ 1773.279218][T15062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12315'. [ 1773.352119][ T6339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1773.362469][ T6339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.376750][ T5636] Bluetooth: hci2: command tx timeout [ 1773.541177][T15068] FAULT_INJECTION: forcing a failure. [ 1773.541177][T15068] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.592142][T15068] CPU: 1 UID: 0 PID: 15068 Comm: syz.3.12316 Not tainted syzkaller #0 PREEMPT(full) [ 1773.592173][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1773.592187][T15068] Call Trace: [ 1773.592196][T15068] [ 1773.592205][T15068] dump_stack_lvl+0xe8/0x150 [ 1773.592236][T15068] should_fail_ex+0x412/0x560 [ 1773.592269][T15068] should_failslab+0xa8/0x100 [ 1773.592302][T15068] __kvmalloc_node_noprof+0x178/0x8a0 [ 1773.592334][T15068] ? xt_alloc_table_info+0x40/0xb0 [ 1773.592371][T15068] xt_alloc_table_info+0x40/0xb0 [ 1773.592399][T15068] do_ip6t_set_ctl+0x90c/0xe10 [ 1773.592425][T15068] ? rcu_is_watching+0x15/0xb0 [ 1773.592451][T15068] ? trace_contention_end+0x3d/0x140 [ 1773.592481][T15068] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1773.592526][T15068] ? __pfx___mutex_lock+0x10/0x10 [ 1773.592548][T15068] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1773.592576][T15068] ? __pfx_aa_sk_perm+0x10/0x10 [ 1773.592610][T15068] nf_setsockopt+0x26f/0x290 [ 1773.592641][T15068] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1773.592678][T15068] do_sock_setsockopt+0x17c/0x1b0 [ 1773.592724][T15068] __x64_sys_setsockopt+0x13d/0x1b0 [ 1773.592748][T15068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.592772][T15068] do_syscall_64+0x15f/0xf80 [ 1773.592802][T15068] ? trace_irq_disable+0x3b/0x140 [ 1773.592833][T15068] ? clear_bhb_loop+0x40/0x90 [ 1773.592859][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.592888][T15068] RIP: 0033:0x7f11d479ce59 [ 1773.592912][T15068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1773.592930][T15068] RSP: 002b:00007f11d5720028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1773.592953][T15068] RAX: ffffffffffffffda RBX: 00007f11d4a15fa0 RCX: 00007f11d479ce59 [ 1773.592968][T15068] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1773.592980][T15068] RBP: 00007f11d5720090 R08: 0000000000000430 R09: 0000000000000000 [ 1773.592992][T15068] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1773.593005][T15068] R13: 00007f11d4a16038 R14: 00007f11d4a15fa0 R15: 00007fff132008d8 [ 1773.593039][T15068] [ 1774.009541][T15075] syzkaller1: entered promiscuous mode [ 1774.015328][T15075] syzkaller1: entered allmulticast mode [ 1774.167594][ T6339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1774.193407][ T6339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.646201][ T5363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.687309][ T6339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1774.704975][ T6339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.788291][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12326'. [ 1775.342893][T15139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12332'. [ 1775.387817][T14988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.408630][T14988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.416132][T14988] bridge_slave_0: entered allmulticast mode [ 1775.424310][T14988] bridge_slave_0: entered promiscuous mode [ 1775.433316][T14988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.441092][T14988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.448426][T14988] bridge_slave_1: entered allmulticast mode [ 1775.457656][ T5636] Bluetooth: hci2: command tx timeout [ 1775.482721][T14988] bridge_slave_1: entered promiscuous mode [ 1775.686410][T14988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.794389][T14988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.821089][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.840782][ T1171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.142630][T14988] team0: Port device team_slave_0 added [ 1776.152406][T14988] team0: Port device team_slave_1 added [ 1776.234936][T15167] bond1: option ad_select: invalid value (34) [ 1776.312104][T15167] bond1 (unregistering): Released all slaves [ 1776.468093][T14988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.485805][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.522181][T14988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.535864][T14988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.542968][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.569132][T14988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.701231][T14988] hsr_slave_0: entered promiscuous mode [ 1776.708273][T14988] hsr_slave_1: entered promiscuous mode [ 1776.780865][T14988] debugfs: 'hsr0' already exists in 'hsr' [ 1776.787189][T14988] Cannot create hsr debugfs directory [ 1776.987963][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12346'. [ 1777.011855][ T6339] team0: left allmulticast mode [ 1777.016880][ T6339] team_slave_0: left allmulticast mode [ 1777.022381][ T6339] team_slave_1: left allmulticast mode [ 1777.038024][ T6339] bridge3: left allmulticast mode [ 1777.043523][ T6339] bridge4: left allmulticast mode [ 1777.056493][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1777.106455][ T6339] bridge5: left allmulticast mode [ 1777.111725][ T6339] bridge6: left allmulticast mode [ 1777.116863][ T6339] bridge7: left allmulticast mode [ 1777.121993][ T6339] bridge8: left allmulticast mode [ 1777.127129][ T6339] bridge9: left allmulticast mode [ 1777.132241][ T6339] bridge10: left allmulticast mode [ 1777.137799][ T6339] team0: left promiscuous mode [ 1777.142607][ T6339] team_slave_0: left promiscuous mode [ 1777.148223][ T6339] team_slave_1: left promiscuous mode [ 1777.153850][ T6339] bridge3: left promiscuous mode [ 1777.159014][ T6339] bridge4: left promiscuous mode [ 1777.180289][ T6339] bridge5: left promiscuous mode [ 1777.186079][ T6339] bridge6: left promiscuous mode [ 1777.191397][ T6339] bridge7: left promiscuous mode [ 1777.197525][ T6339] bridge8: left promiscuous mode [ 1777.203242][ T6339] bridge9: left promiscuous mode [ 1777.209015][ T6339] bridge10: left promiscuous mode [ 1777.214924][ T6339] bridge0: port 3(team0) entered disabled state [ 1777.240694][ T6339] bridge_slave_1: left allmulticast mode [ 1777.249039][ T6339] bridge_slave_1: left promiscuous mode [ 1777.255030][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.270649][ T6339] bridge_slave_0: left allmulticast mode [ 1777.279135][ T6339] bridge_slave_0: left promiscuous mode [ 1777.285315][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.394902][ T6339] tipc: Resetting bearer [ 1777.436920][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12351'. [ 1777.535793][ T5636] Bluetooth: hci2: command tx timeout [ 1777.823233][ T6339] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1778.260873][ T6339] team0: Port device bridge3 removed [ 1778.334902][ T6339] tipc: Disabling bearer [ 1778.361747][ T6339] team0: Port device bridge4 removed [ 1778.532428][ T6339] team0: Port device bridge5 removed [ 1778.750302][ T6339] team0: Port device bridge6 removed [ 1778.858884][ T6339] team0: Port device bridge7 removed [ 1779.081146][ T6339] team0: Port device bridge8 removed [ 1779.181061][ T6339] team0: Port device bridge9 removed [ 1779.289309][ T6339] team0: Port device bridge10 removed [ 1779.504563][ T6339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.515189][ T6339] bond0 (unregistering): Released all slaves [ 1779.527225][ T6339] bond1 (unregistering): Released all slaves [ 1779.545509][ T6339] bond2 (unregistering): Released all slaves [ 1779.564116][ T6339] bond3 (unregistering): Released all slaves [ 1779.594047][T15194] bridge0: port 3(team0) entered disabled state [ 1779.613335][T15194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.620650][T15194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.634119][T15204] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12349'. [ 1779.668615][ T5636] Bluetooth: hci2: command tx timeout [ 1779.679941][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1779.996990][ T6339] tipc: Left network mode [ 1780.034672][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12356'. [ 1780.292771][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12354'. [ 1781.407214][T15260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12359'. [ 1781.634170][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1782.441675][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12361'. [ 1784.200285][T14988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1784.239524][T14988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1784.259238][T14988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1784.390195][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12368'. [ 1784.585041][T14988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1784.936355][T14988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1785.032448][T14988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1785.144881][T14988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1785.173443][T14988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1785.383435][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12369'. [ 1785.928371][T14988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.016245][T14988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.071270][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.078483][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.160380][ T6339] hsr_slave_0: left promiscuous mode [ 1786.176493][ T6339] hsr_slave_1: left promiscuous mode [ 1786.182877][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1786.190314][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1786.210714][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1786.274776][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1786.283937][ T6339] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1786.293307][ T6339] batman_adv: batadv0: Removing interface: ipvlan2 [ 1786.364095][ T6339] veth1_macvtap: left promiscuous mode [ 1786.369659][ T6339] veth0_macvtap: left promiscuous mode [ 1786.375390][ T6339] veth1_vlan: left promiscuous mode [ 1786.380800][ T6339] veth0_vlan: left promiscuous mode [ 1787.010269][T15377] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12378'. [ 1790.833856][ T6339] team0 (unregistering): Port device team_slave_1 removed [ 1790.853056][ T6339] team0 (unregistering): Port device team_slave_0 removed [ 1791.107967][T14728] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.171388][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.178586][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.502856][T15400] tipc: Started in network mode [ 1791.511585][T15400] tipc: Node identity , cluster identity 4711 [ 1791.523023][T15400] tipc: Failed to set node id, please configure manually [ 1791.547417][T15400] tipc: Enabling of bearer rejected, failed to enable media [ 1791.728909][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12387'. [ 1792.307442][T15427] Cannot find set identified by id 0 to match [ 1792.465871][T14988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1792.606463][T14988] veth0_vlan: entered promiscuous mode [ 1792.630684][T14988] veth1_vlan: entered promiscuous mode [ 1792.720847][T15438] syzkaller1: entered promiscuous mode [ 1792.743263][T15438] syzkaller1: entered allmulticast mode [ 1792.834313][T15443] bridge0: port 3(vlan2) entered blocking state [ 1792.840841][T15443] bridge0: port 3(vlan2) entered disabled state [ 1792.847438][T15443] vlan2: entered allmulticast mode [ 1792.854791][T15443] vlan2: entered promiscuous mode [ 1792.892412][T14988] veth0_macvtap: entered promiscuous mode [ 1792.898260][T15445] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12399'. [ 1792.968410][T14988] veth1_macvtap: entered promiscuous mode [ 1792.981405][T15449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12399'. [ 1792.994272][T14988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1793.014402][T14988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1793.056953][T14728] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.065970][T14728] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.074738][T14728] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.083492][T14728] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.207358][T15454] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1793.230257][T15454] bond1: (slave lo): Enslaving as an active interface with an up link [ 1793.275526][T15454] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1793.433775][T13277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.459777][T13277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.544664][ T3320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.552590][ T3320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.655661][T15468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12404'. [ 1793.682690][T15466] Bluetooth: MGMT ver 1.23 [ 1793.718624][T15466] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12405'. [ 1793.729734][T15466] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12405'. [ 1793.992876][T15475] Cannot find set identified by id 0 to match [ 1794.007922][ T6339] IPVS: stop unused estimator thread 0... [ 1794.562019][T15493] IPVS: set_ctl: invalid protocol: 136 172.30.0.2:20005 [ 1794.899089][T15508] mac80211_hwsim hwsim97 syzkaller0: entered promiscuous mode [ 1795.003541][T15510] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12418'. [ 1795.228544][T15512] syzkaller0: entered promiscuous mode [ 1795.234084][T15512] syzkaller0: entered allmulticast mode [ 1795.240914][T15514] FAULT_INJECTION: forcing a failure. [ 1795.240914][T15514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.253998][T15514] CPU: 0 UID: 0 PID: 15514 Comm: syz.4.12421 Not tainted syzkaller #0 PREEMPT(full) [ 1795.254026][T15514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1795.254040][T15514] Call Trace: [ 1795.254049][T15514] [ 1795.254059][T15514] dump_stack_lvl+0xe8/0x150 [ 1795.254089][T15514] should_fail_ex+0x412/0x560 [ 1795.254123][T15514] _copy_from_user+0x2d/0xb0 [ 1795.254156][T15514] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 1795.254188][T15514] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 1795.254225][T15514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1795.254262][T15514] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1795.254286][T15514] ? capable+0x88/0xe0 [ 1795.254309][T15514] ? mm_account_pinned_pages+0xa6/0x430 [ 1795.254343][T15514] ip_generic_getfrag+0x149/0x2d0 [ 1795.254377][T15514] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1795.254406][T15514] ? skb_page_frag_refill+0x119/0x460 [ 1795.254441][T15514] __ip_append_data+0x216b/0x3e40 [ 1795.254492][T15514] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1795.254546][T15514] ? __pfx___ip_append_data+0x10/0x10 [ 1795.254577][T15514] ? do_raw_spin_lock+0x12b/0x2f0 [ 1795.254610][T15514] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1795.254641][T15514] ip_append_data+0x10d/0x190 [ 1795.254675][T15514] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1795.254707][T15514] udp_sendmsg+0x4d9/0x21a0 [ 1795.254740][T15514] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1795.254776][T15514] ? __lock_acquire+0x6b5/0x2cf0 [ 1795.254804][T15514] ? __pfx_udp_sendmsg+0x10/0x10 [ 1795.254856][T15514] ? aa_sk_perm+0x6d5/0x900 [ 1795.254900][T15514] ? __pfx_aa_sk_perm+0x10/0x10 [ 1795.254923][T15514] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1795.254956][T15514] ? __fget_files+0x3a0/0x420 [ 1795.254980][T15514] ? sock_rps_record_flow+0x19/0x350 [ 1795.255008][T15514] ? __pfx_inet_sendmsg+0x10/0x10 [ 1795.255038][T15514] ? inet_sendmsg+0x29c/0x370 [ 1795.255064][T15514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1795.255093][T15514] ? __pfx_inet_sendmsg+0x10/0x10 [ 1795.255122][T15514] __sys_sendto+0x5de/0x710 [ 1795.255157][T15514] ? __pfx___sys_sendto+0x10/0x10 [ 1795.255185][T15514] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1795.255221][T15514] ? __fget_files+0x3a0/0x420 [ 1795.255263][T15514] ? ksys_write+0x242/0x270 [ 1795.255295][T15514] ? __pfx_ksys_write+0x10/0x10 [ 1795.255331][T15514] __x64_sys_sendto+0xde/0x100 [ 1795.255363][T15514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.255386][T15514] do_syscall_64+0x15f/0xf80 [ 1795.255416][T15514] ? trace_irq_disable+0x3b/0x140 [ 1795.255447][T15514] ? clear_bhb_loop+0x40/0x90 [ 1795.255473][T15514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.255494][T15514] RIP: 0033:0x7fec53b9ce59 [ 1795.255514][T15514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.255532][T15514] RSP: 002b:00007fec54a71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1795.255554][T15514] RAX: ffffffffffffffda RBX: 00007fec53e15fa0 RCX: 00007fec53b9ce59 [ 1795.255570][T15514] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000003 [ 1795.255583][T15514] RBP: 00007fec54a71090 R08: 0000000000000000 R09: 0000000011000a00 [ 1795.255596][T15514] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 1795.255608][T15514] R13: 00007fec53e16038 R14: 00007fec53e15fa0 R15: 00007ffe7d592a68 [ 1795.255643][T15514] [ 1795.774404][T28494] Bluetooth: hci2: command 0x0401 tx timeout [ 1795.780723][ T5636] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1795.792337][T15525] Cannot find set identified by id 0 to match [ 1795.977401][T15528] IPVS: set_ctl: invalid protocol: 136 172.30.0.2:20005 [ 1796.258507][T15536] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12428'. [ 1796.267932][T15536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12428'. [ 1796.281471][ T1099] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1796.338273][T15546] openvswitch: netlink: Missing valid actions attribute. [ 1796.345497][T15546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1796.564592][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12431'. [ 1796.964624][T15565] bridge1: entered promiscuous mode [ 1796.993191][T15565] bridge1: entered allmulticast mode [ 1797.002181][T15565] team0: Port device bridge1 added [ 1797.035276][T15562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12438'. [ 1797.056851][T15562] bridge0: port 4(team0) entered blocking state [ 1797.063623][T15562] bridge0: port 4(team0) entered disabled state [ 1797.113189][T15562] team0: entered allmulticast mode [ 1797.120651][T15562] team_slave_0: entered allmulticast mode [ 1797.126673][T15562] team_slave_1: entered allmulticast mode [ 1797.139494][T15562] team0: entered promiscuous mode [ 1797.144708][T15562] team_slave_0: entered promiscuous mode [ 1797.150584][T15562] team_slave_1: entered promiscuous mode [ 1797.157272][T15562] bridge0: port 4(team0) entered blocking state [ 1797.163662][T15562] bridge0: port 4(team0) entered forwarding state [ 1797.175624][T15570] IPVS: set_ctl: invalid protocol: 136 172.30.0.5:20005 [ 1797.348955][T15575] FAULT_INJECTION: forcing a failure. [ 1797.348955][T15575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1797.364599][T15575] CPU: 0 UID: 0 PID: 15575 Comm: syz.1.12441 Not tainted syzkaller #0 PREEMPT(full) [ 1797.364628][T15575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1797.364641][T15575] Call Trace: [ 1797.364651][T15575] [ 1797.364661][T15575] dump_stack_lvl+0xe8/0x150 [ 1797.364691][T15575] should_fail_ex+0x412/0x560 [ 1797.364724][T15575] _copy_to_user+0x31/0xb0 [ 1797.364757][T15575] simple_read_from_buffer+0xe1/0x170 [ 1797.364790][T15575] proc_fail_nth_read+0x1bb/0x230 [ 1797.364821][T15575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1797.364852][T15575] ? rw_verify_area+0x2a6/0x4d0 [ 1797.364881][T15575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1797.364910][T15575] vfs_read+0x20c/0xa70 [ 1797.364945][T15575] ? __pfx___mutex_lock+0x10/0x10 [ 1797.364966][T15575] ? __pfx_vfs_read+0x10/0x10 [ 1797.364996][T15575] ? __fget_files+0x2a/0x420 [ 1797.365026][T15575] ? __fget_files+0x3a0/0x420 [ 1797.365048][T15575] ? __fget_files+0x2a/0x420 [ 1797.365083][T15575] ksys_read+0x150/0x270 [ 1797.365115][T15575] ? __pfx_ksys_read+0x10/0x10 [ 1797.365155][T15575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.365178][T15575] do_syscall_64+0x15f/0xf80 [ 1797.365209][T15575] ? trace_irq_disable+0x3b/0x140 [ 1797.365240][T15575] ? clear_bhb_loop+0x40/0x90 [ 1797.365267][T15575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.365288][T15575] RIP: 0033:0x7f8952b5d68e [ 1797.365308][T15575] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1797.365326][T15575] RSP: 002b:00007f89539c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1797.365349][T15575] RAX: ffffffffffffffda RBX: 00007f89539c66c0 RCX: 00007f8952b5d68e [ 1797.365365][T15575] RDX: 000000000000000f RSI: 00007f89539c60a0 RDI: 0000000000000004 [ 1797.365378][T15575] RBP: 00007f89539c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.365390][T15575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.365402][T15575] R13: 00007f8952e16038 R14: 00007f8952e15fa0 R15: 00007ffdf4f5eb68 [ 1797.365437][T15575] [ 1797.694285][T15582] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1797.727326][T15582] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1797.807190][T15582] veth0_to_bridge: entered allmulticast mode [ 1797.875715][T15582] veth0_to_bridge: entered promiscuous mode [ 1797.909012][T15582] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1797.968469][T15582] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1797.975758][T15582] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1798.163531][T15592] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12453'. [ 1798.229654][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12452'. [ 1798.267374][T28494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1798.284060][T28494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1798.295147][T15597] netlink: 'syz.1.12449': attribute type 10 has an invalid length. [ 1798.298626][T28494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1798.315886][T28494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1798.333902][T28494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1798.347766][T15597] syz_tun: entered promiscuous mode [ 1798.364184][T15597] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1798.621851][ T1171] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1798.634734][ T1171] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.769708][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12457'. [ 1798.840747][ T1171] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1798.852162][ T1171] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.185405][T15632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12461'. [ 1799.186232][ T1171] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1799.256148][ T1171] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.356146][T15596] lo speed is unknown, defaulting to 1000 [ 1799.691298][ T1171] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1799.702946][ T1171] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.725212][T15654] sctp: [Deprecated]: syz.2.12467 (pid 15654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1799.725212][T15654] Use struct sctp_sack_info instead [ 1799.754767][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12468'. [ 1799.824680][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12469'. [ 1799.926660][T15657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12470'. [ 1800.165508][T15663] Cannot find set identified by id 0 to match [ 1800.201247][T15668] batman_adv: batadv0: Adding interface: ipvlan2 [ 1800.210420][T15668] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1800.240136][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.250615][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.260461][T15668] batman_adv: batadv0: Interface activated: ipvlan2 [ 1800.463438][ T5636] Bluetooth: hci0: command tx timeout [ 1800.597918][T15676] bond2: (slave bond_slave_1): Device is not our slave [ 1800.604851][T15676] bond2: option active_slave: invalid value (bond_slave_1) [ 1800.618192][T15676] bond2 (unregistering): Released all slaves [ 1800.772931][ T1171] team0: left allmulticast mode [ 1800.783883][ T1171] team_slave_0: left allmulticast mode [ 1800.836783][ T1171] team_slave_1: left allmulticast mode [ 1800.855016][ T1171] bridge2: left allmulticast mode [ 1800.866637][ T1171] bridge3: left allmulticast mode [ 1800.880730][ T1171] team0: left promiscuous mode [ 1800.888929][ T1171] team_slave_0: left promiscuous mode [ 1800.899741][ T1171] team_slave_1: left promiscuous mode [ 1800.910534][ T1171] bridge2: left promiscuous mode [ 1800.930333][ T1171] bridge3: left promiscuous mode [ 1800.941593][ T1171] bridge4: left promiscuous mode [ 1800.953000][ T1171] bridge5: left promiscuous mode [ 1800.966496][ T1171] bridge6: left promiscuous mode [ 1800.973439][ T1171] bridge0: port 3(team0) entered disabled state [ 1801.003936][ T1171] bridge_slave_1: left allmulticast mode [ 1801.017751][ T1171] bridge_slave_1: left promiscuous mode [ 1801.032044][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.089365][ T1171] bridge_slave_0: left allmulticast mode [ 1801.096741][ T1171] bridge_slave_0: left promiscuous mode [ 1801.102716][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.519473][ T1171] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1801.766471][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12483'. [ 1802.288765][ T1171] team0: Port device bridge2 removed [ 1802.391495][ T1171] team0: Port device bridge3 removed [ 1802.545749][ T5636] Bluetooth: hci0: command tx timeout [ 1802.613132][ T1171] team0: Port device bridge4 removed [ 1802.942571][ T1171] team0: Port device bridge5 removed [ 1803.383731][ T1171] team0: Port device bridge6 removed [ 1803.729220][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1803.740521][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1803.751855][ T1171] bond0 (unregistering): Released all slaves [ 1803.763541][ T1171] bond1 (unregistering): Released all slaves [ 1803.779772][ T1171] bond2 (unregistering): Released all slaves [ 1803.812036][ T1171] bond3 (unregistering): Released all slaves [ 1803.828933][ T1171] bond4 (unregistering): Released all slaves [ 1803.849497][ T1171] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1803.858670][ T1171] bond5 (unregistering): Released all slaves [ 1803.878196][ T1171] bond6 (unregistering): Released all slaves [ 1803.929591][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1804.457378][ T1171] tipc: Left network mode [ 1804.525554][T15596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.537699][T15596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.545090][T15596] bridge_slave_0: entered allmulticast mode [ 1804.610291][ T5636] Bluetooth: hci0: command tx timeout [ 1804.640049][T15596] bridge_slave_0: entered promiscuous mode [ 1804.653454][T15596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.661787][T15596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.667598][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12491'. [ 1804.669705][T15596] bridge_slave_1: entered allmulticast mode [ 1804.707202][T15596] bridge_slave_1: entered promiscuous mode [ 1804.818908][T15596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.831485][T15596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.943014][T15759] bond2: (slave bond_slave_1): Device is not our slave [ 1804.953027][T15759] bond2: option active_slave: invalid value (bond_slave_1) [ 1804.970287][T15759] bond2 (unregistering): Released all slaves [ 1805.132016][T15596] team0: Port device team_slave_0 added [ 1805.142240][T15596] team0: Port device team_slave_1 added [ 1805.156918][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12498'. [ 1805.477642][T15596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1805.484663][T15596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.545498][T15596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.558801][T15596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1805.581484][T15596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.607435][T15596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1806.080688][T15596] hsr_slave_0: entered promiscuous mode [ 1806.087856][T15596] hsr_slave_1: entered promiscuous mode [ 1806.101058][T15596] debugfs: 'hsr0' already exists in 'hsr' [ 1806.106913][T15596] Cannot create hsr debugfs directory [ 1806.110029][T15793] Bluetooth: MGMT ver 1.23 [ 1806.118441][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1806.504663][T15809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12509'. [ 1806.579428][T15805] bond1: (slave bond_slave_1): Device is not our slave [ 1806.586332][T15805] bond1: option active_slave: invalid value (bond_slave_1) [ 1806.596509][T15805] bond1 (unregistering): Released all slaves [ 1806.784308][ T5636] Bluetooth: hci0: command tx timeout [ 1806.844720][T15819] netlink: 'syz.1.12510': attribute type 1 has an invalid length. [ 1806.896250][T15821] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12510'. [ 1806.941584][T15823] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12512'. [ 1806.950702][T15823] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1807.137343][T15821] lo speed is unknown, defaulting to 1000 [ 1807.167129][T15832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1807.216281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1807.228863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1807.241403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1807.254127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1807.266789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1807.279510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1807.292035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1807.304464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1808.089988][T15847] netlink: 5000 bytes leftover after parsing attributes in process `syz.0.12516'. [ 1811.388843][ C0] sched: DL replenish lagged too much [ 1811.947950][ C0] net_ratelimit: 12020 callbacks suppressed [ 1811.947972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1811.966372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1811.978772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1811.991191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.003490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1812.015812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.028572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.040939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1812.063380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.075903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.175209][T15870] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12521'. [ 1816.965623][ C0] net_ratelimit: 13846 callbacks suppressed [ 1816.965646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1816.984228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1816.996702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1817.008981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.030559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.043017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1817.055322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.067599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.079911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1817.092334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1817.417487][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1821.995753][ C0] net_ratelimit: 11182 callbacks suppressed [ 1821.995776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1822.014147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.027616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.040125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1822.062899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.077282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.089759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1822.102128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.115486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1822.127910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1827.036397][ C0] net_ratelimit: 10054 callbacks suppressed [ 1827.036421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1827.055370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.067772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1827.091565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.104242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1827.116936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.129237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1827.142090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1827.155051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1827.168070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1828.299789][T14731] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1832.055840][ C0] net_ratelimit: 9887 callbacks suppressed [ 1832.055864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.074117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1832.086455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.099054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1832.123997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.136440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1832.148854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.161591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1832.174383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1832.186828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1837.086313][ C0] net_ratelimit: 10197 callbacks suppressed [ 1837.086337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1837.105003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.117260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1837.129549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.151983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1837.165077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.177598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1837.189885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1837.202594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1837.215309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.105676][ C0] net_ratelimit: 10181 callbacks suppressed [ 1842.105699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.124279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1842.137064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.162126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1842.174635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.187637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1842.200636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.213104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1842.225656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1842.238882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1847.125766][ C0] net_ratelimit: 10142 callbacks suppressed [ 1847.125791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.144423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1847.157167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.169591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1847.192034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.204978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1847.218009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.230361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1847.242652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1847.255621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1852.146260][ C0] net_ratelimit: 10192 callbacks suppressed [ 1852.146283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.164659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1852.177110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.189986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1852.214004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.226342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1852.238843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.251565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1852.264273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1852.276994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1857.175727][ C0] net_ratelimit: 10172 callbacks suppressed [ 1857.175749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.194795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1857.207636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.232255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1857.244611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.257237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1857.269944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.282293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1857.294805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1857.307786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1860.282615][ T3320] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1860.448219][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 1862.185742][ C0] net_ratelimit: 9652 callbacks suppressed [ 1862.185764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.204280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1862.216690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.229394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1862.255669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.268010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1862.280428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.293180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1862.306076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1862.318542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1867.216334][ C0] net_ratelimit: 10154 callbacks suppressed [ 1867.216356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1867.235383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1867.247943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1867.273179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1867.286744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1867.299787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1867.312731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1867.325101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1867.337682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1867.350453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1870.666811][T28494] Bluetooth: hci1: command 0x0405 tx timeout [ 1872.255582][ C0] net_ratelimit: 10075 callbacks suppressed [ 1872.255607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1872.274797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1872.287320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1872.300000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1872.323336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1872.336258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1872.349329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1872.361797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1872.374337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1872.386782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1874.702639][T15908] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1874.725205][T15908] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1874.748890][T15909] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1874.773892][T15909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1874.790573][T15909] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1874.819950][T15911] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1874.848629][T15913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1874.861088][T15913] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1874.869519][T15913] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1874.887071][T15911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1874.910247][T15911] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1874.923761][T15911] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1874.986891][T15908] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1874.996970][T15911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1875.031396][T15908] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1875.044781][T15908] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1875.074330][T15908] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1875.092245][T15911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1875.103870][T15908] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1875.116874][T15911] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1875.139451][T15908] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1875.177352][T15908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1875.205767][T28494] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1875.245832][T28494] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1875.258946][T28494] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1876.996190][T28494] Bluetooth: hci6: command tx timeout [ 1877.004688][ T7381] Bluetooth: hci7: command tx timeout [ 1877.230788][ T7381] Bluetooth: hci8: command tx timeout [ 1877.285630][ C0] net_ratelimit: 8948 callbacks suppressed [ 1877.285651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.304003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1877.316466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1877.328744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.337479][ T7381] Bluetooth: hci9: command tx timeout [ 1877.350115][T28494] Bluetooth: hci5: command tx timeout [ 1877.360579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1877.373059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.387620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.400519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1877.412836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1877.425310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1879.056898][ T7381] Bluetooth: hci7: command tx timeout [ 1879.064362][T28494] Bluetooth: hci6: command tx timeout [ 1879.326133][T28494] Bluetooth: hci8: command tx timeout [ 1879.386364][ T7381] Bluetooth: hci5: command tx timeout [ 1879.393209][T28494] Bluetooth: hci9: command tx timeout [ 1881.136724][T28494] Bluetooth: hci6: command tx timeout [ 1881.142239][ T7381] Bluetooth: hci7: command tx timeout [ 1881.415828][ T7381] Bluetooth: hci8: command tx timeout [ 1881.456223][ T7381] Bluetooth: hci9: command tx timeout [ 1881.464462][ T7381] Bluetooth: hci5: command tx timeout [ 1882.345666][ C0] net_ratelimit: 11198 callbacks suppressed [ 1882.345688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1882.364070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1882.376476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.389104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1882.415476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.427991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.440995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.453497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1882.466105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1882.478593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1882.659399][T28494] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1882.677989][T28494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1882.687573][T28494] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1882.705882][T28494] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1882.719627][T28494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1883.236590][ T7381] Bluetooth: hci6: command tx timeout [ 1883.242162][T28494] Bluetooth: hci7: command tx timeout [ 1883.456578][T28494] Bluetooth: hci8: command tx timeout [ 1883.569200][ T7381] Bluetooth: hci5: command tx timeout [ 1883.574698][T15908] Bluetooth: hci9: command tx timeout [ 1883.608116][ T7381] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1883.623455][ T7381] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1883.639370][ T7381] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1883.650608][ T7381] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1883.658963][ T7381] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1884.816654][ T7381] Bluetooth: hci3: command tx timeout [ 1885.706284][ T7381] Bluetooth: hci4: command tx timeout [ 1886.906085][ T7381] Bluetooth: hci3: command tx timeout [ 1887.405653][ C0] net_ratelimit: 10973 callbacks suppressed [ 1887.405674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1887.424053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1887.436335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.449042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1887.474404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.486757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.499509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.511865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1887.524261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1887.536917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1887.796629][ T7381] Bluetooth: hci4: command tx timeout [ 1889.006149][ T7381] Bluetooth: hci3: command tx timeout [ 1889.886019][ T7381] Bluetooth: hci4: command tx timeout [ 1890.223646][T28494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1890.244918][T28494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1890.256210][T28494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1890.268833][T28494] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1890.298505][T28494] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1890.390947][ T7381] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1890.419431][ T7381] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1890.429444][ T7381] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1890.440790][ T7381] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1890.448732][ T7381] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1891.056888][T28494] Bluetooth: hci3: command tx timeout [ 1891.936687][T28494] Bluetooth: hci4: command tx timeout [ 1892.366103][T28494] Bluetooth: hci1: command tx timeout [ 1892.425425][ C0] net_ratelimit: 10779 callbacks suppressed [ 1892.425442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.444147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1892.456574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.468884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.481987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.494452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1892.506853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1892.519196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1892.528902][T28494] Bluetooth: hci10: command tx timeout [ 1892.546810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1892.559215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1894.456491][T28494] Bluetooth: hci1: command tx timeout [ 1894.616087][T28494] Bluetooth: hci10: command tx timeout [ 1896.526438][T28494] Bluetooth: hci1: command tx timeout [ 1896.688575][T28494] Bluetooth: hci10: command tx timeout [ 1897.459266][ C0] net_ratelimit: 10510 callbacks suppressed [ 1897.459283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1897.477865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.491159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1897.503486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.516070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.529260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.541687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1897.553982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1897.578919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1897.593609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1898.616523][T28494] Bluetooth: hci1: command tx timeout [ 1898.776112][T28494] Bluetooth: hci10: command tx timeout [ 1899.341602][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1902.491801][ C0] net_ratelimit: 10100 callbacks suppressed [ 1902.491818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1902.510318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1902.522750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1902.535382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1902.548584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1902.561031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1902.573317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1902.586643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1902.608896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1902.621348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.502282][ C0] net_ratelimit: 10357 callbacks suppressed [ 1907.502300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1907.520680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1907.533030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.545322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.558364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.570823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1907.583244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1907.595702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1907.620187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1907.632679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1912.528420][ C0] net_ratelimit: 10419 callbacks suppressed [ 1912.528443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1912.546895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1912.559309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.572710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1912.585112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1912.597577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.610087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.622922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1912.644715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1912.657444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1917.543033][ C0] net_ratelimit: 10116 callbacks suppressed [ 1917.543051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.562220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.574698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1917.587124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1917.599677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.614333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1917.626928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1917.639429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.662442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1917.675371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1918.661968][ T7381] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1918.680309][ T7381] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1918.706820][ T7381] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1918.716947][ T7381] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1918.727865][ T7381] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1920.837012][ T7381] Bluetooth: hci11: command tx timeout [ 1921.949424][ T7381] Bluetooth: hci0: command 0x0406 tx timeout [ 1922.595602][ C0] net_ratelimit: 9456 callbacks suppressed [ 1922.595625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1922.614047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1922.626324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.639700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1922.652233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1922.664659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.677029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.689913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1922.715525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1922.728341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1922.927482][ T7381] Bluetooth: hci11: command tx timeout [ 1924.924334][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1924.976274][ T7381] Bluetooth: hci11: command tx timeout [ 1927.086222][ T7381] Bluetooth: hci11: command tx timeout [ 1927.644891][ C0] net_ratelimit: 9580 callbacks suppressed [ 1927.644913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.663903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.676233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1927.688487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1927.700885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.714877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1927.727425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1927.739765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.761883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.774945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.665330][ C0] net_ratelimit: 10296 callbacks suppressed [ 1932.665348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1932.683607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1932.696026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.709454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1932.722029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1932.734467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.746935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.759578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1932.785022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1932.797903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1937.683426][ C0] net_ratelimit: 10350 callbacks suppressed [ 1937.683443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1937.701719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1937.713973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1937.727203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1937.739635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1937.752086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1937.764589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1937.778413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1937.800543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1937.812990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1942.713384][ C0] net_ratelimit: 10364 callbacks suppressed [ 1942.713400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1942.732158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1942.744623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1942.756972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1942.769362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1942.782734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1942.795204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1942.807607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1942.832865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1942.845958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1943.131358][T15908] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1943.151434][T15908] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1943.166087][T15908] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1943.174411][T15908] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1943.191990][T15908] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1943.645359][T15911] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1943.663903][T15911] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1943.678086][T15911] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1943.686759][T15911] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1943.694638][T15911] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1947.763570][ C0] net_ratelimit: 9856 callbacks suppressed [ 1947.763588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1947.782052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1947.794417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1947.807694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1947.820776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1947.833098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1947.845392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1947.858130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1947.882890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1947.895333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1950.149150][T15909] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1950.168812][T15909] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1950.180821][T15909] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1950.198598][T15909] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1950.214586][T15909] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1950.671709][ T5636] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1950.695444][ T5636] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1950.717744][ T5636] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1950.726534][ T5636] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1950.734509][ T5636] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1952.767260][ C0] net_ratelimit: 9353 callbacks suppressed [ 1952.767286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1952.785723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1952.798115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1952.810499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1952.835096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1952.847528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1952.859842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1952.872075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1952.885933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1952.898543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1957.806307][ C0] net_ratelimit: 9514 callbacks suppressed [ 1957.806329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1957.824655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1957.837036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1957.861033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1957.874930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1957.887435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1957.899745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1957.912120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1957.925255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1957.937784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1962.825748][ C0] net_ratelimit: 9764 callbacks suppressed [ 1962.825771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.844263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.857372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.869842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1962.894832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1962.907412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.920845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1962.933397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1962.945776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1962.958405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.865650][ C0] net_ratelimit: 9594 callbacks suppressed [ 1967.865673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1967.883829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.897516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1967.909845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1967.932462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.945176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.958729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1967.971059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1967.983383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1967.995864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1972.885858][ C0] net_ratelimit: 10111 callbacks suppressed [ 1972.885881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1972.905821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1972.918146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1972.941913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1972.954253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1972.966947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1972.979273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1972.991602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1973.004079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1973.021851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1977.906290][ C0] net_ratelimit: 9587 callbacks suppressed [ 1977.906313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.924714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1977.937106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1977.949448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1977.973737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1977.986228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1977.998585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1978.010881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1978.023532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1978.035927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1978.702553][T15913] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1978.716678][T15913] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1978.728994][T15913] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1978.745311][T15913] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1978.755374][T15913] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1982.955636][ C0] net_ratelimit: 9761 callbacks suppressed [ 1982.955656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1982.974324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1982.986751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1982.999116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1983.021993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1983.035669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1983.048718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1983.061545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1983.074124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1983.086805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1987.986298][ C0] net_ratelimit: 10292 callbacks suppressed [ 1987.986321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1988.004826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1988.017263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1988.040367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1988.053376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1988.065924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1988.078346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1988.091035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1988.104395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1988.117089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1988.485026][T15909] Bluetooth: hci15: command tx timeout [ 1990.506155][T28494] Bluetooth: hci15: command tx timeout [ 1990.511790][T15909] Bluetooth: hci16: command tx timeout [ 1990.520358][T15991] Bluetooth: hci14: command tx timeout [ 1990.528394][T15911] Bluetooth: hci13: command tx timeout [ 1990.536584][ T7381] Bluetooth: hci12: command tx timeout [ 1992.576415][ T7381] Bluetooth: hci12: command tx timeout [ 1992.582067][ T7381] Bluetooth: hci13: command tx timeout [ 1992.588054][T15911] Bluetooth: hci15: command tx timeout [ 1992.593654][T28494] Bluetooth: hci14: command tx timeout [ 1992.599264][T15991] Bluetooth: hci16: command tx timeout [ 1993.025625][ C0] net_ratelimit: 7189 callbacks suppressed [ 1993.025648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1993.044196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1993.056574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1993.068925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1993.092237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1993.105295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1993.117644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1993.129881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1993.142158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1993.155565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.677741][T15991] Bluetooth: hci16: command tx timeout [ 1994.683365][T28494] Bluetooth: hci14: command tx timeout [ 1994.689024][T15911] Bluetooth: hci15: command tx timeout [ 1994.694614][ T7381] Bluetooth: hci13: command tx timeout [ 1994.700469][T15909] Bluetooth: hci12: command tx timeout [ 1996.757071][T15911] Bluetooth: hci16: command tx timeout [ 1996.762703][T15909] Bluetooth: hci12: command tx timeout [ 1996.768297][T28494] Bluetooth: hci14: command tx timeout [ 1996.774064][ T7381] Bluetooth: hci13: command tx timeout [ 1998.065686][ C0] net_ratelimit: 9746 callbacks suppressed [ 1998.065709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1998.084762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1998.097326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 1998.120999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1998.133485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1998.146265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1998.158657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1998.170910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1998.183364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1998.196860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1998.669956][ T7381] Bluetooth: hci2: command 0x0401 tx timeout [ 2003.085766][ C0] net_ratelimit: 10644 callbacks suppressed [ 2003.085789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2003.105026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2003.117501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2003.130041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2003.155878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2003.168867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2003.181426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2003.195404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2003.208445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 2003.220995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 2003.297089][T15909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2003.317181][T15909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2003.335716][T15909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2003.360587][T15909] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2003.371544][T15909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2003.727795][T28494] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2003.750318][T28494] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2003.761429][T28494] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2003.774734][T28494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2003.787540][T28494] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2008.145631][ C0] net_ratelimit: 10585 callbacks suppressed [ 2008.145653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2008.164028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2008.176456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2008.189079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2008.211415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2008.224624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2008.237371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 2008.249758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 2008.262087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2008.274931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2008.930631][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 2008.936784][T15908] Bluetooth: hci3: command 0x0406 tx timeout [ 2010.209025][ T5636] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2010.227906][ T5636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2010.242799][ T5636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2010.257851][ T5636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2010.267706][ T5636] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2011.222797][T15914] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2011.244817][T15914] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2011.254767][T15914] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2011.276554][T15914] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2011.286703][T15914] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2013.205759][ C0] net_ratelimit: 11067 callbacks suppressed [ 2013.205784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2013.224300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2013.236596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2013.249289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2013.272217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2013.285195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2013.298039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 2013.310361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 2013.322690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2013.335147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2014.025943][T16069] Bluetooth: hci1: command 0x0406 tx timeout [ 2014.049434][T16069] Bluetooth: hci10: command 0x0406 tx timeout [ 2018.245996][ C0] net_ratelimit: 11202 callbacks suppressed [ 2018.246018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2018.264943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2018.278020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2018.300724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 2018.313288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 2018.325703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2018.337990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2018.351032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2018.363635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2018.376075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2023.265568][ C0] net_ratelimit: 10647 callbacks suppressed [ 2023.265591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2023.284303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.296965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.309390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.333685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 2023.346703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 2023.359203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:6a:ba:f5:93:54, vlan:0) [ 2023.371630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.384120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2023.396935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2026.027188][ T31] INFO: task syz.3.12521:15866 blocked for more than 143 seconds. [ 2026.045549][ T31] Not tainted syzkaller #0 [ 2026.055073][ T31] Blocked by coredump. [ 2026.065547][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2026.075277][ T31] task:syz.3.12521 state:D stack:26032 pid:15866 tgid:15864 ppid:14517 task_flags:0x40054c flags:0x00080001 [ 2026.088978][ T31] Call Trace: [ 2026.092319][ T31] [ 2026.095282][ T31] __schedule+0x1821/0x5740 [ 2026.107145][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 2026.112221][ T31] ? __pfx___schedule+0x10/0x10 [ 2026.119440][ T31] ? schedule+0x90/0x360 [ 2026.128492][ T31] schedule+0x164/0x360 [ 2026.149568][ T31] schedule_preempt_disabled+0x13/0x30 [ 2026.155444][ T31] __mutex_lock+0x7f7/0x1550 [ 2026.161841][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 2026.175554][ T31] ? __mutex_lock+0x608/0x1550 [ 2026.190397][ T31] ? tun_chr_close+0x3e/0x1c0 [ 2026.239369][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2026.277913][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 2026.328712][ T31] tun_chr_close+0x3e/0x1c0 [ 2026.345880][ T31] __fput+0x44f/0xa60 [ 2026.355849][ T31] task_work_run+0x1d9/0x270 [ 2026.365567][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2026.375550][ T31] ? do_exit+0x70a/0x22c0 [ 2026.392795][ T31] ? kmem_cache_free+0x182/0x650 [ 2026.399981][ T31] ? put_net+0x191/0x260 [ 2026.404341][ T31] do_exit+0x70f/0x22c0 [ 2026.408963][ T31] ? __pfx_do_exit+0x10/0x10 [ 2026.413667][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2026.419058][ T31] do_group_exit+0x21b/0x2d0 [ 2026.424064][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2026.430990][ T31] get_signal+0x1284/0x1330 [ 2026.435933][ T31] arch_do_signal_or_restart+0xbc/0x840 [ 2026.441602][ T31] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 2026.447286][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2026.453567][ T31] exit_to_user_mode_loop+0x8c/0x4d0 [ 2026.468081][ T31] ? rcu_is_watching+0x15/0xb0 [ 2026.473357][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2026.479802][ T31] do_syscall_64+0x33e/0xf80 [ 2026.484491][ T31] ? trace_irq_disable+0x3b/0x140 [ 2026.490009][ T31] ? clear_bhb_loop+0x40/0x90 [ 2026.494969][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2026.501519][ T31] RIP: 0033:0x7f11d479ce59 [ 2026.506369][ T31] RSP: 002b:00007f11d5720028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2026.514909][ T31] RAX: 0000000000000030 RBX: 00007f11d4a15fa0 RCX: 00007f11d479ce59 [ 2026.527065][ T31] RDX: 0000000000000000 RSI: 000020000000d040 RDI: 0000000000000004 [ 2026.535147][ T31] RBP: 00007f11d4832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2026.543662][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2026.552006][ T31] R13: 00007f11d4a16038 R14: 00007f11d4a15fa0 R15: 00007fff132008d8 [ 2026.562828][ T31] [ 2026.566234][ T31] [ 2026.566234][ T31] Showing all locks held in the system: [ 2026.574028][ T31] 1 lock held by khungtaskd/31: [ 2026.579466][ T31] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2026.594563][ T31] 4 locks held by kworker/u8:10/1171: [ 2026.600388][ T31] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2026.611803][ T31] #1: ffffc90005677c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2026.622856][ T31] #2: ffffffff8fdc2d68 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 2026.632692][ T31] #3: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x26a/0xb00 [ 2026.642520][ T31] 3 locks held by kworker/u8:11/3320: [ 2026.652422][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2026.664602][ T31] #1: ffffc9000def7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2026.676067][ T31] #2: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2026.685201][ T31] 2 locks held by kworker/0:3/5363: [ 2026.690939][ T31] 2 locks held by getty/5385: [ 2026.697755][ T31] #0: ffff88803646f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2026.708147][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 2026.724301][ T31] 4 locks held by kworker/u9:4/5636: [ 2026.731579][ T31] #0: ffff88805f69d140 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2026.743031][ T31] #1: ffffc90003b0fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2026.755738][ T31] #2: ffff88809d1f00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 2026.770192][ T31] #3: ffffffff8ff56f80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 2026.781099][ T31] 2 locks held by kworker/0:8/6451: [ 2026.786766][ T31] 3 locks held by kworker/u8:15/14728: [ 2026.792483][ T31] #0: ffff88803011e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2026.804626][ T31] #1: ffffc900040c7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2026.818731][ T31] #2: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 2026.831374][ T31] 3 locks held by kworker/0:1/20026: [ 2026.837105][ T31] 3 locks held by kworker/0:6/20027: [ 2026.842467][ T31] 3 locks held by kworker/1:14/20033: [ 2026.852551][ T31] #0: ffff88813fe47140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2026.863954][ T31] #1: ffffc90006767c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2026.875391][ T31] #2: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 2026.886186][ T31] 2 locks held by kworker/0:15/20051: [ 2026.891607][ T31] 5 locks held by kworker/u9:2/28494: [ 2026.902951][ T31] #0: ffff88804a8b6140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2026.917843][ T31] #1: ffffc900051afc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2026.936041][ T31] #2: ffff8880ab370ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 2026.948572][ T31] #3: ffff8880ab3700b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 2026.958750][ T31] #4: ffffffff8ff56f80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 2026.968881][ T31] 2 locks held by kworker/0:13/29619: [ 2026.974321][ T31] 4 locks held by kworker/u9:3/7381: [ 2026.984498][ T31] #0: ffff888057417140 ((wq_completion)hci6#4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2026.995906][ T31] #1: ffffc90006077c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2027.008363][ T31] #2: ffff888061bd80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 2027.018706][ T31] #3: ffffffff8ff56f80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 2027.029603][ T31] 3 locks held by kworker/0:0/8991: [ 2027.034886][ T31] 2 locks held by kworker/0:2/8992: [ 2027.044844][ T31] 3 locks held by kworker/0:5/9018: [ 2027.050417][ T31] 3 locks held by kworker/0:7/9019: [ 2027.055960][ T31] 2 locks held by kworker/0:10/13700: [ 2027.061404][ T31] 8 locks held by kworker/0:12/13996: [ 2027.067268][ T31] 2 locks held by kworker/0:14/13997: [ 2027.072717][ T31] 1 lock held by syz-executor/15596: [ 2027.078494][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2027.090051][ T31] 2 locks held by syz.1.12510/15821: [ 2027.099400][ T31] #0: ffffffff8fdc2d68 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 2027.114055][ T31] #1: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: fib_net_exit_batch+0x22/0xf0 [ 2027.124193][ T31] 1 lock held by syz.0.12516/15842: [ 2027.129738][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2027.139201][ T31] 2 locks held by syz.2.12520/15863: [ 2027.144657][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2027.154192][ T31] #1: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 2027.170782][ T31] 1 lock held by syz.3.12521/15866: [ 2027.176361][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2027.185449][ T31] 5 locks held by syz-executor/15872: [ 2027.191297][ T31] #0: ffff888083bb4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 2027.201641][ T31] #1: ffff888083bb40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 2027.212735][ T31] #2: ffffffff8ff56f80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 2027.223147][ T31] #3: ffff88805488aaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 2027.232804][ T31] #4: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 2027.254845][ T31] 4 locks held by kworker/u9:1/15909: [ 2027.260626][ T31] #0: ffff888052c1c140 ((wq_completion)hci0#4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2027.272068][ T31] #1: ffffc900054f7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2027.284766][ T31] #2: ffff8880742500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 2027.297795][ T31] #3: ffffffff8ff56f80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 2027.308687][ T31] 5 locks held by kworker/u9:5/15911: [ 2027.314178][ T31] #0: ffff888075fd1140 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2027.325630][ T31] #1: ffffc90005217c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2027.345469][ T31] #2: ffff88807a580ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 2027.355958][ T31] #3: ffff88807a5800b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 2027.366282][ T31] #4: ffffffff8ff56f80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 2027.385872][ T31] 5 locks held by kworker/u9:6/15913: [ 2027.394800][ T31] #0: ffff888028c44140 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2027.406345][ T31] #1: ffffc900051bfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2027.419496][ T31] #2: ffff888086bb8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 2027.429923][ T31] #3: ffff888086bb80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 2027.446141][ T31] #4: ffffffff8ff56f80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 2027.456345][ T31] 4 locks held by kworker/u9:7/15914: [ 2027.461805][ T31] #0: ffff888028536140 ((wq_completion)hci8#4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2027.473340][ T31] #1: ffffc9000514fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2027.489552][ T31] #2: ffff88802589c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 2027.499965][ T31] #3: ffffffff8ff56f80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 2027.516058][ T31] 1 lock held by syz-executor/15932: [ 2027.521449][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.531448][ T31] 1 lock held by syz-executor/15938: [ 2027.537092][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.546913][ T31] 1 lock held by syz-executor/15944: [ 2027.552278][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.566035][ T31] 1 lock held by syz-executor/15947: [ 2027.571421][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.582469][ T31] 1 lock held by syz-executor/15957: [ 2027.593121][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.603000][ T31] 1 lock held by syz-executor/15965: [ 2027.610984][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.620782][ T31] 1 lock held by syz-executor/15972: [ 2027.626352][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.640893][ T31] 1 lock held by syz-executor/15977: [ 2027.646752][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.656628][ T31] 1 lock held by syz-executor/15984: [ 2027.661994][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.671935][ T31] 1 lock held by syz-executor/15989: [ 2027.677647][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.687533][ T31] 5 locks held by kworker/u9:8/15991: [ 2027.692984][ T31] #0: ffff888033b71140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2027.711866][ T31] #1: ffffc9000365fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2027.724813][ T31] #2: ffff8880624e0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 2027.735056][ T31] #3: ffff8880624e00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 2027.746362][ T31] #4: ffffffff8ff56f80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 2027.756556][ T31] 1 lock held by syz-executor/16045: [ 2027.761982][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.778775][ T31] 1 lock held by syz-executor/16052: [ 2027.784195][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.794142][ T31] 1 lock held by syz-executor/16057: [ 2027.799897][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.809720][ T31] 1 lock held by syz-executor/16064: [ 2027.815235][ T31] #0: ffffffff8fdd1a80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 2027.825188][ T31] 5 locks held by kworker/u9:9/16066: [ 2027.835810][ T31] #0: ffff88807b1a0140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2027.847223][ T31] #1: ffffc900032efc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2027.860411][ T31] #2: ffff8880483f0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 2027.870696][ T31] #3: ffff8880483f00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 2027.883010][ T31] #4: ffffffff8ff56f80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 2027.893177][ T31] [ 2027.895791][ T31] ============================================= [ 2027.895791][ T31] [ 2027.904274][ T31] NMI backtrace for cpu 1 [ 2027.904296][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2027.904338][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2027.904363][ T31] Call Trace: [ 2027.904373][ T31] [ 2027.904382][ T31] dump_stack_lvl+0xe8/0x150 [ 2027.904411][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2027.904438][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2027.904463][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2027.904493][ T31] sys_info+0x135/0x170 [ 2027.904514][ T31] watchdog+0xfd3/0x1030 [ 2027.904553][ T31] ? watchdog+0x1c9/0x1030 [ 2027.904589][ T31] kthread+0x389/0x470 [ 2027.904617][ T31] ? __pfx_watchdog+0x10/0x10 [ 2027.904644][ T31] ? __pfx_kthread+0x10/0x10 [ 2027.904672][ T31] ret_from_fork+0x514/0xb70 [ 2027.904698][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2027.904721][ T31] ? __switch_to+0xc79/0x1410 [ 2027.904754][ T31] ? __pfx_kthread+0x10/0x10 [ 2027.904783][ T31] ret_from_fork_asm+0x1a/0x30 [ 2027.904825][ T31] [ 2027.904834][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2028.017708][ C0] NMI backtrace for cpu 0 [ 2028.017728][ C0] CPU: 0 UID: 0 PID: 13996 Comm: kworker/0:12 Not tainted syzkaller #0 PREEMPT(full) [ 2028.017749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2028.017762][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 2028.017797][ C0] RIP: 0010:__this_cpu_preempt_check+0xe/0x20 [ 2028.017819][ C0] Code: aa 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 c7 c7 e0 af 28 8c fd fe ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 [ 2028.017836][ C0] RSP: 0018:ffffc90000006f48 EFLAGS: 00000046 [ 2028.017850][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000080010102 [ 2028.017862][ C0] RDX: ffff88801d741ec0 RSI: ffffffff8e2253eb RDI: ffffffff8c28afe0 [ 2028.017876][ C0] RBP: 00000000ffffffff R08: ffffffff9a733a33 R09: 1ffffffff34e6746 [ 2028.017889][ C0] R10: dffffc0000000000 R11: fffffbfff34e6747 R12: 0000000000000046 [ 2028.017902][ C0] R13: ffff88801d741ec0 R14: ffff8880b8628298 R15: 0000000000000004 [ 2028.017915][ C0] FS: 0000000000000000(0000) GS:ffff888125277000(0000) knlGS:0000000000000000 [ 2028.017930][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2028.017942][ C0] CR2: 00007f763d7b0d58 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 2028.017958][ C0] Call Trace: [ 2028.017966][ C0] [ 2028.017972][ C0] lock_is_held_type+0xdf/0x150 [ 2028.018003][ C0] __remove_hrtimer+0x82/0x3e0 [ 2028.018030][ C0] __hrtimer_run_queues+0x299/0xa20 [ 2028.018061][ C0] hrtimer_interrupt+0x44b/0x950 [ 2028.018102][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 2028.018126][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 2028.018151][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2028.018170][ C0] RIP: 0010:net_ratelimit+0x0/0x20 [ 2028.018189][ C0] Code: fe c1 38 c1 0f 8c cc fe ff ff 4c 89 f7 e8 d8 28 aa f8 e9 bf fe ff ff cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa e8 37 eb 3e f8 48 c7 c7 c0 49 dd 8f 48 c7 c6 2a f9 0a [ 2028.018204][ C0] RSP: 0018:ffffc900000072b8 EFLAGS: 00000202 [ 2028.018218][ C0] RAX: ffffffff8a7a3f03 RBX: 0000000000000001 RCX: ffff88801d741ec0 [ 2028.018230][ C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 2028.018241][ C0] RBP: ffffc90000007390 R08: ffff8880577767af R09: 1ffff1100aeeecf5 [ 2028.018255][ C0] R10: dffffc0000000000 R11: ffffed100aeeecf6 R12: ffff8880577767a8 [ 2028.018268][ C0] R13: 1ffff92000000e60 R14: ffff888050518e40 R15: dffffc0000000000 [ 2028.018286][ C0] ? br_fdb_update+0x163/0x690 [ 2028.018310][ C0] br_fdb_update+0x40a/0x690 [ 2028.018333][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 2028.018352][ C0] ? skb_ext_add+0x148/0x8f0 [ 2028.018372][ C0] br_handle_frame_finish+0x573/0x1c80 [ 2028.018396][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 2028.018415][ C0] ? ip6t_do_table+0x137d/0x1560 [ 2028.018437][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2028.018466][ C0] ? ip6t_do_table+0x1a3/0x1560 [ 2028.018485][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 2028.018502][ C0] ? nf_hook_slow+0x176/0x220 [ 2028.018524][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2028.018548][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 2028.018576][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 2028.018601][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2028.018624][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 2028.018644][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 2028.018664][ C0] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 2028.018690][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2028.018719][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 2028.018759][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 2028.018784][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 2028.018811][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 2028.018836][ C0] ? br_nf_pre_routing+0x75f/0x14c0 [ 2028.018864][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 2028.018886][ C0] br_handle_frame+0x1277/0x1510 [ 2028.018915][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 2028.018940][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 2028.018968][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 2028.018991][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 2028.019022][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 2028.019044][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 2028.019070][ C0] ? ip6_rcv_finish+0x265/0x280 [ 2028.019095][ C0] ? NF_HOOK+0x336/0x3c0 [ 2028.019121][ C0] ? process_backlog+0x3eb/0x1950 [ 2028.019148][ C0] ? process_backlog+0x3eb/0x1950 [ 2028.019171][ C0] ? process_backlog+0x3eb/0x1950 [ 2028.019194][ C0] ? process_backlog+0x3eb/0x1950 [ 2028.019217][ C0] process_backlog+0x76d/0x1950 [ 2028.019251][ C0] __napi_poll+0xae/0x340 [ 2028.019271][ C0] ? skb_defer_free_flush+0x233/0x260 [ 2028.019295][ C0] net_rx_action+0x627/0xf70 [ 2028.019327][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2028.019355][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 2028.019383][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 2028.019412][ C0] handle_softirqs+0x22a/0x840 [ 2028.019431][ C0] ? do_softirq+0x76/0xd0 [ 2028.019451][ C0] ? kernel_fpu_end+0x62/0x80 [ 2028.019473][ C0] do_softirq+0x76/0xd0 [ 2028.019490][ C0] [ 2028.019496][ C0] [ 2028.019502][ C0] __local_bh_enable_ip+0xf8/0x130 [ 2028.019520][ C0] blake2s_compress+0xf9/0x1eb0 [ 2028.019536][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2028.019557][ C0] ? lock_acquire+0x106/0x350 [ 2028.019579][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2028.019601][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2028.019621][ C0] ? unwind_next_frame+0x1bbf/0x2550 [ 2028.019643][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 2028.019658][ C0] ? kernel_fpu_begin_mask+0x2b6/0x380 [ 2028.019681][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 2028.019698][ C0] ? kernel_fpu_end+0x62/0x80 [ 2028.019722][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 2028.019739][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 2028.019763][ C0] ? kernel_fpu_end+0x62/0x80 [ 2028.019785][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 2028.019802][ C0] ? blake2s_compress+0x1e17/0x1eb0 [ 2028.019818][ C0] ? blake2s_update+0x255/0x450 [ 2028.019843][ C0] blake2s_final+0x116/0x260 [ 2028.019860][ C0] hmac+0x20c/0x3b0 [ 2028.019882][ C0] ? __pfx_hmac+0x10/0x10 [ 2028.019909][ C0] ? wakeup_preempt_fair+0x745/0xb10 [ 2028.019937][ C0] ? blake2s_update+0x255/0x450 [ 2028.019954][ C0] ? __asan_memset+0x22/0x50 [ 2028.019978][ C0] message_ephemeral+0x233/0x310 [ 2028.020001][ C0] ? __pfx_message_ephemeral+0x10/0x10 [ 2028.020021][ C0] ? __asan_memset+0x22/0x50 [ 2028.020056][ C0] ? down_read+0x270/0x2e0 [ 2028.020080][ C0] wg_noise_handshake_consume_initiation+0x21a/0x9a0 [ 2028.020105][ C0] ? lock_acquire+0x106/0x350 [ 2028.020124][ C0] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 2028.020150][ C0] ? blake2s_update+0x255/0x450 [ 2028.020166][ C0] ? __asan_memset+0x22/0x50 [ 2028.020186][ C0] ? blake2s_final+0x14c/0x260 [ 2028.020204][ C0] ? compute_mac1+0x184/0x200 [ 2028.020225][ C0] ? __pfx_compute_mac1+0x10/0x10 [ 2028.020250][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 2028.020269][ C0] ? __crypto_memneq+0x42/0x470 [ 2028.020302][ C0] ? wg_packet_handshake_receive_worker+0x2e6/0x10c0 [ 2028.020332][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 2028.020352][ C0] wg_packet_handshake_receive_worker+0x674/0x10c0 [ 2028.020380][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 2028.020397][ C0] ? look_up_lock_class+0x57/0x110 [ 2028.020429][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 2028.020461][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2028.020484][ C0] ? lock_acquire+0x106/0x350 [ 2028.020503][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2028.020528][ C0] ? process_scheduled_works+0xa70/0x1860 [ 2028.020547][ C0] ? process_scheduled_works+0xa70/0x1860 [ 2028.020569][ C0] ? process_scheduled_works+0xa70/0x1860 [ 2028.020586][ C0] ? process_scheduled_works+0xa70/0x1860 [ 2028.020604][ C0] process_scheduled_works+0xb5d/0x1860 [ 2028.020637][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2028.020658][ C0] ? assign_work+0x3d5/0x5e0 [ 2028.020677][ C0] worker_thread+0xa53/0xfc0 [ 2028.020708][ C0] kthread+0x389/0x470 [ 2028.020730][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2028.020747][ C0] ? __pfx_kthread+0x10/0x10 [ 2028.020768][ C0] ret_from_fork+0x514/0xb70 [ 2028.020787][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2028.020805][ C0] ? __switch_to+0xc79/0x1410 [ 2028.020830][ C0] ? __pfx_kthread+0x10/0x10 [ 2028.020852][ C0] ret_from_fork_asm+0x1a/0x30 [ 2028.020881][ C0] [ 2028.332703][ C0] net_ratelimit: 7515 callbacks suppressed [ 2028.332756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2028.473476][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2028.473551][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2028.473608][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2028.473649][ T31] Call Trace: [ 2028.473672][ T31] [ 2028.473703][ T31] vpanic+0x56c/0xa60 [ 2028.473782][ T31] ? __pfx___schedule+0x10/0x10 [ 2028.473867][ T31] ? __pfx_vpanic+0x10/0x10 [ 2028.473933][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 2028.474014][ T31] panic+0xc5/0xd0 [ 2028.474093][ T31] ? __pfx_panic+0x10/0x10 [ 2028.474159][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2028.474273][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2028.474356][ T31] watchdog+0x102c/0x1030 [ 2028.474474][ T31] ? watchdog+0x1c9/0x1030 [ 2028.474568][ T31] kthread+0x389/0x470 [ 2028.474643][ T31] ? __pfx_watchdog+0x10/0x10 [ 2028.474717][ T31] ? __pfx_kthread+0x10/0x10 [ 2028.474792][ T31] ret_from_fork+0x514/0xb70 [ 2028.474859][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2028.474915][ T31] ? __switch_to+0xc79/0x1410 [ 2028.475009][ T31] ? __pfx_kthread+0x10/0x10 [ 2028.475087][ T31] ret_from_fork_asm+0x1a/0x30 [ 2028.475197][ T31] [ 2029.006556][ T31] Kernel Offset: disabled [ 2029.010931][ T31] Rebooting in 86400 seconds..