last executing test programs:

1m27.872452885s ago: executing program 2 (id=6161):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffffff7d, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xf, 0x2}, {0xa, 0xe}, {0x6, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x2000c8d1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x4, 0x4, 0xff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000340)=r2}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

1m22.703081456s ago: executing program 2 (id=6164):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000007c0)="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", 0x110}], 0x1}, 0x80c0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)

1m22.331053868s ago: executing program 2 (id=6168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x7, 0x0, &(0x7f00000007c0)="63eced8e460100", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m22.060566433s ago: executing program 2 (id=6169):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000000)=0x2, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000ba060a000200aaaaaaaa"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r3, 0x400, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)

1m21.933334183s ago: executing program 2 (id=6170):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0x1}], 0x1}}], 0x1, 0x24004800)
recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/247, 0xf7}], 0x1}, 0x4}], 0x1, 0x40012000, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000740)={'erspan0\x00', r1, 0x10, 0x7800, 0x80000001, 0xfe000000, {{0x1d, 0x4, 0x2, 0x7, 0x74, 0x66, 0x0, 0xb, 0x2f, 0x0, @empty, @remote, {[@ssrr={0x89, 0xf, 0x11, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0xf}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xdf, [@local, @loopback, @dev={0xac, 0x14, 0x14, 0x3d}]}, @ssrr={0x89, 0x3, 0x40}, @ssrr={0x89, 0xb, 0x68, [@dev={0xac, 0x14, 0x14, 0x1a}, @empty]}, @ssrr={0x89, 0x23, 0x84, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @rand_addr=0x64010100, @loopback, @empty, @loopback, @rand_addr=0x64010100]}, @generic={0x44, 0xb, "fda62d3c9f35bcde28"}]}}}}})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x840)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x10)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000280), 0x4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010)

1m21.681173293s ago: executing program 2 (id=6172):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x14, &(0x7f0000000100)={0xa, 0x4e23, 0x3f89, @loopback}, 0x1c) (fail_nth: 13)

1m14.320947774s ago: executing program 1 (id=6209):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
unshare(0x22020400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, 0x0, 0xa635c4ca7f0a3408}, 0x20)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000100000005000000fbff000000000000000000002e"], 0x0, 0x3a}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd2a, 0x0, {0x7}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x5}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24004000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r6], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6122c30820699471faa123fc574414033583562bef03c5b01b30ecffcdb110bd751d861d1fe850e7c16a1"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x20004000)
socket$inet(0x2, 0x2, 0x0)

1m13.857892557s ago: executing program 1 (id=6211):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x9fff, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

1m13.421816925s ago: executing program 1 (id=6214):
r0 = socket$kcm(0x21, 0x2, 0xa)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010117}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r3, 0x26, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, '.\x00'}, 0x6e)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000100)={0x11, @multicast1, 0x4e23, 0x0, 'lblc\x00', 0x30, 0x6, 0x112}, 0x2c)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r3, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x18, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000000000510a6108a81855d1"], 0x18}, 0x40)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x23a3}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}, 0x20000000)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r5, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/13, 0xd}, {&(0x7f0000000040)="37a0a6c682b23cba92fffffff3080000008c190001000000000000000000000088be", 0x22}, {&(0x7f0000000380)="d422b8440c607d46a140ebfce60a67610dd2493961afc1684af41b1820085a974c353f2ff3843617008d627082460020ee4bcac2e32f815419b5d5ddc3cb756fd9", 0x41}], 0x19)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$cgroup_int(r8, &(0x7f0000001480)=0x80000000003, 0x12)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6)
sendmsg$nl_generic(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000251d00000004000100"], 0x18}, 0x1, 0x0, 0x0, 0x94}, 0x20044080)
r9 = socket$inet6(0xa, 0x800, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000640)={'syztnl1\x00', <r10=>0x0, 0x7800, 0x7, 0x3, 0x8, {{0x3f, 0x4, 0x3, 0x2c, 0xfc, 0x68, 0x0, 0x1, 0x29, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x24, 0x5c, 0x0, 0x8, [0xd, 0x6, 0x1, 0x6, 0x9, 0x3, 0x0, 0x4]}, @rr={0x7, 0x13, 0x1d, [@local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @rr={0x7, 0x13, 0xf, [@remote, @rand_addr=0x64010101, @multicast2, @loopback]}, @rr={0x7, 0xb, 0x29, [@loopback, @private=0xa010101]}, @timestamp={0x44, 0x28, 0xf6, 0x0, 0x9, [0x4, 0x3, 0x140, 0x2, 0x10, 0x3301, 0x9, 0xed, 0x80000000]}, @timestamp_addr={0x44, 0x1c, 0xfe, 0x1, 0x3, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x8}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0x4c, 0x58, 0x1, 0xa, [{@remote, 0x4}, {@multicast2, 0x8}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@local}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x9}, {@broadcast, 0xf33}]}, @noop]}}}}})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000020601080000070000000900020073797a30000000000c000780080b1240fffffffe050004000000000010000300686173683a69702c6d616300050005000a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000400)={@mcast2, 0x42, r10})
socket$kcm(0xa, 0x3, 0x3a)

1m12.816750437s ago: executing program 4 (id=6216):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m12.622457842s ago: executing program 4 (id=6217):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xffffff2a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000400)=0x78, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x1ffffd, @private2, 0x4}, 0x1c)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
accept$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000180)=0x6, 0x4)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7de102ec8729aaaaaaaaaa2981000e0086dd6d0020080064110020010000000000000000000000000001ff0200000000000000000000000000014f194e20003090780200000003000000000000002aa7ba4927c51ee2f5170f2f3a0072ae8bdc7d17030e9cdab3dac3ad86d358801cc1da49ece4be1c578b9ae7174e98c7322e109dbcb3bc4e915ba6de2dab118899e2077b885aaf3c1d2e182f2863f441"], 0x9e)
socket(0x1, 0xa, 0x4)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x400448c9, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
sendto$inet6(r2, &(0x7f00000001c0)="37abfe9b9806015514a75a", 0xb, 0x24040085, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @remote, 0xc7}, 0x1c)

1m11.009664697s ago: executing program 0 (id=6221):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690040000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000000)='*\\+/(.[(+\'!}\x00', 0x8000, &(0x7f0000000080)={@align=0xe51, {0x1, 0x2, 0x0, 0x1}}, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x9}) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x28, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40001)

1m10.828534195s ago: executing program 0 (id=6222):
socket(0x2000000015, 0x80005, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r4, 0xfffffffc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

1m10.168100581s ago: executing program 1 (id=6223):
socket(0x2000000015, 0x80005, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x2, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="0002eeff", 0x4}], 0x3)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@ifindex, 0xffffffffffffffff, 0xa, 0x2015}, 0x20)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="23852800", @ANYRES16=r4, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)

1m10.00041434s ago: executing program 3 (id=6224):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
write(r1, &(0x7f00000000c0)="e0000000120005000000000000000000736861332d3235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000736861332d3235362d6c696200"/192, 0xe0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x358, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9f1}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xa}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @empty, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff29e4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbec}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c91}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6888}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf6}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000111401fffc0000000000000008004a000100000008000300feffff7f08004a000100000008004b0013000000080001"], 0x48}, 0x1, 0x0, 0x0, 0x24000844}, 0x0)

1m9.862137073s ago: executing program 0 (id=6225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001000000000000000020"], 0x60}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[], 0x80}}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001002dbd700000000000ffffffff000000000000000000000000e000000100000000000000040000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe800000000000000000000000000020000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb7f000001000000000000000000000000ac14141a000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff0000000000000000000000000000000000000000ac1414bb000000000000000000000000000000000000000000000200"], 0x138}}, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000280)=ANY=[@ANYBLOB="000001613a5b6321b318b2cec6a2b4c5ad92983cb7b4bbaa21314c5af1fb"])
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xa055}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0)

1m9.846964139s ago: executing program 4 (id=6226):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
unshare(0x2c020400)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000011000000}]}, 0xa50)

1m9.449661887s ago: executing program 3 (id=6227):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000006000000", @ANYRES32, @ANYRES32=0x0], 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x51, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
socket$inet6_sctp(0xa, 0x1, 0x84)
write$rfkill(r4, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
getsockopt(r0, 0x1, 0x3, &(0x7f0000000580)=""/193, &(0x7f00000001c0)=0xc1)

1m9.325915204s ago: executing program 4 (id=6228):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x229, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x4000)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
socket$kcm(0x23, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0)
socket$kcm(0x10, 0x2, 0x4)
syz_emit_ethernet(0x82, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa440800450000740000000000019078ac1e0001aca956aa0c019078e00000e0460000000000000000110000ac1414aaac141400830300830390443c00030a01012f00000000ac1414aa00000000ac1e000100000000ac1414bb000000007f000001fcff0000ac14142b00000800ffffffff000000000000"], 0x0)

1m8.782423189s ago: executing program 3 (id=6229):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000180)=[{0x3a, 0xb, 0x5, 0x1}, {0x400, 0x6, 0x9}]}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xa, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011000131d99ef1ae11858c39dc002f2062de4fec825f7de03bde7ab6549a2d2725df81fcffcafd07834ba52f8ece28a23caa66b00b44abae83b651b1a460eb39e80212f272d318bbbb59996c114a2346606b225b051ddc5cce4995ce94b78baf38effc0970ae8488aa2f63f6ed108c69593541f44460384f2896"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000600)={0x42, 0x4}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20048840}, 0x0)

1m8.484544921s ago: executing program 1 (id=6230):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
unshare(0x22020400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, 0x0, 0xa635c4ca7f0a3408}, 0x20)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000100000005000000fbff000000000000000000002e"], 0x0, 0x3a}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd2a, 0x0, {0x7}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x5}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24004000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r6], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6122c30820699471faa123fc574414033583562bef03c5b01b30ecffcdb110bd751d861d1fe850e7c16a1"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
socket$inet(0x2, 0x2, 0x0)

1m8.272301252s ago: executing program 3 (id=6231):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000400), 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14)

1m8.134361262s ago: executing program 0 (id=6232):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000500)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x188}, 0x1, 0x0, 0x0, 0x40007}, 0x24000880)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xac}}, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000040)="a80e7d08f2ada5f77d70b61a5f4e410000000000", 0x14}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4054)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x64041, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltclass={0xb4, 0x29, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffe0, 0xa}, {0xd, 0xf}, {0xe, 0x2}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x64, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x1, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0xfffff801, 0x6, 0xbf}}, @TCA_HFSC_RSC={0x10, 0x1, {0x75cb, 0x8, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0xbd0, 0x14db0268, 0x957}}, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0xfffffff8, 0xa40}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x2, 0x5}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x56}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x1, 0x5, {0x6, 0x10}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0xb4}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0x0, 0xfff3}, {0x2, 0x6}}}, 0x24}}, 0x40010)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000180)=0x100000, 0x4)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x10202, 0x4)
r8 = socket(0x2, 0x3, 0x7f)
sendmmsg$inet(r8, &(0x7f0000005f40), 0x0, 0x4040000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
bind$xdp(r3, &(0x7f0000000400)={0x2c, 0x9, r7, 0x3fc}, 0x10)
socket$inet6(0xa, 0x3, 0x1)

1m7.763050685s ago: executing program 1 (id=6233):
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000)
sendto$packet(r3, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m7.376629391s ago: executing program 4 (id=6234):
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
r0 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4084094}, 0x20000000)

1m7.139466405s ago: executing program 3 (id=6235):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xffffff2a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000400)=0x78, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x1ffffd, @private2, 0x4}, 0x1c)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
accept$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000180)=0x6, 0x4)
recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7de102ec8729aaaaaaaaaa2981000e0086dd6d0020080064110020010000000000000000000000000001ff0200000000000000000000000000014f194e20003090780200000003000000000000002aa7ba4927c51ee2f5170f2f3a0072ae8bdc7d17030e9cdab3dac3ad86d358801cc1da49ece4be1c578b9ae7174e98c7322e109dbcb3bc4e915ba6de2dab118899e2077b885aaf3c1d2e182f2863f441"], 0x9e)
socket(0x1, 0xa, 0x4)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x400448c9, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
sendto$inet6(r2, &(0x7f00000001c0)="37abfe9b9806015514a75a", 0xb, 0x24040085, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @remote, 0xc7}, 0x1c)

1m6.792325257s ago: executing program 0 (id=6236):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x34, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x40080)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r1, 0x20, 0x1c000000007400}, 0x38)

1m6.556555199s ago: executing program 0 (id=6237):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007fffe00d606feff0ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff71e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe3ccde9ff72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff57e29b95b4277b46aa41eab05a756d8556d4c14b570770bc0a3c9cdd688e3e583ee2284fc32c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41ae192b1222ccc12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c3daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015d622c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe22ed64360c29124bf041f978042f5a23624447ee4d1612268c80e5c3b88a2a22264ad8012750997733121fcbaa2a094ef8ab27579d4daa10d9b42b9f75ef42df0c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xbd}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000005000)=[{0xfffffffffffffffe}], 0x1}, 0x4}], 0x2, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30f8}}], 0x1, 0x4004044)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xfc0, "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"}, &(0x7f0000001740)=0xfc8)
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000440)={<r6=>r3, &(0x7f0000000000)='syz1\x00', 0x200, 0x0, 0x4, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x700})
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000480), 0x4)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c050}, 0x0)

1m5.944332589s ago: executing program 4 (id=6238):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000006000000", @ANYRES32, @ANYRES32=0x0], 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x51, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
socket$inet6_sctp(0xa, 0x1, 0x84)
write$rfkill(r4, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
getsockopt(r0, 0x1, 0x3, &(0x7f0000000580)=""/193, &(0x7f00000001c0)=0xc1)

1m5.674135173s ago: executing program 3 (id=6239):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x94, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (fail_nth: 6)

0s ago: executing program 32 (id=6237):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xbd}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000005000)=[{0xfffffffffffffffe}], 0x1}, 0x4}], 0x2, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30f8}}], 0x1, 0x4004044)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xfc0, "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"}, &(0x7f0000001740)=0xfc8)
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000440)={<r6=>r3, &(0x7f0000000000)='syz1\x00', 0x200, 0x0, 0x4, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x700})
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000480), 0x4)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c050}, 0x0)

kernel console output (not intermixed with test programs):

 [1, 0] type 2 family 0 port 6081 - 0
[  759.224074][   T50] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  759.224097][   T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  760.080976][T24369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5706'.
[  760.081026][T24369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5706'.
[  762.222335][T24376] bridge0: port 3(veth0) entered disabled state
[  762.222953][T24376] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.223511][T24376] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.532696][T24376] tipc: Resetting bearer <eth:syzkaller0>
[  762.610946][ T4053] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  762.610997][ T4053] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.611020][ T4053] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  762.611082][ T4053] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  762.611105][ T4053] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.611128][ T4053] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  762.611159][ T4053] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  762.611180][ T4053] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.611200][ T4053] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  762.611226][ T4053] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  762.611247][ T4053] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.611270][ T4053] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  763.305054][T24436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5725'.
[  763.319134][T24437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5725'.
[  763.995711][T24456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  764.164278][T24461] syzkaller0: entered promiscuous mode
[  764.164322][T24461] syzkaller0: entered allmulticast mode
[  764.190436][T24464] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  764.229321][T24462] netlink: 'syz.0.5730': attribute type 4 has an invalid length.
[  764.253949][T24462] netlink: 'syz.0.5730': attribute type 4 has an invalid length.
[  764.259162][T24464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5732'.
[  764.356294][T24464] 8021q: adding VLAN 0 to HW filter on device bond4
[  764.503210][T24474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5734'.
[  764.590193][T24482] sctp: [Deprecated]: syz.4.5735 (pid 24482) Use of int in maxseg socket option.
[  764.590193][T24482] Use struct sctp_assoc_value instead
[  764.607587][T24482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5735'.
[  764.857696][T24492] netlink: 'syz.4.5740': attribute type 10 has an invalid length.
[  764.874891][T24492] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  764.900249][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5740'.
[  764.909990][T24492] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5740'.
[  764.933279][T24492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  764.946064][T24492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  764.960030][T24492] bond0 (unregistering): Released all slaves
[  765.486723][T24501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  765.646581][T24508] netlink: 'syz.3.5746': attribute type 2 has an invalid length.
[  765.646630][T24508] netlink: 'syz.3.5746': attribute type 8 has an invalid length.
[  765.646658][T24508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5746'.
[  765.811986][T24517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5749'.
[  765.889637][T24515] netlink: 'syz.2.5748': attribute type 4 has an invalid length.
[  765.898423][T24515] netlink: 'syz.2.5748': attribute type 4 has an invalid length.
[  765.919460][T24522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5750'.
[  765.920123][T24522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5750'.
[  766.486632][T24541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  766.529991][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  766.543800][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  766.546308][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  766.561016][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  766.571567][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  766.836592][T24548] bridge0: port 4(vlan4) entered disabled state
[  766.836785][T24548] bridge0: port 3(vlan2) entered disabled state
[  766.837023][T24548] bridge0: port 2(bridge_slave_1) entered disabled state
[  766.837587][T24548] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.433259][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5763'.
[  767.444750][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5763'.
[  767.712761][T24539] lo speed is unknown, defaulting to 1000
[  768.013007][  T144] veth0: left allmulticast mode
[  768.013049][  T144] veth0: left promiscuous mode
[  768.026854][  T144] bridge0: port 3(veth0) entered disabled state
[  768.054185][  T144] bridge_slave_1: left allmulticast mode
[  768.054230][  T144] bridge_slave_1: left promiscuous mode
[  768.054451][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  768.080277][  T144] bridge_slave_0: left allmulticast mode
[  768.080319][  T144] bridge_slave_0: left promiscuous mode
[  768.080529][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.285401][  T144] bond2 (unregistering): (slave ip6gretap1): Releasing active interface
[  768.395640][  T144] bond3 (unregistering): (slave geneve5): Releasing active interface
[  768.602796][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  768.616100][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  768.626798][  T144] bond0 (unregistering): Released all slaves
[  768.637463][ T5627] Bluetooth: hci1: command tx timeout
[  768.650482][  T144] bond1 (unregistering): Released all slaves
[  768.682414][  T144] bond2 (unregistering): Released all slaves
[  768.712805][  T144] bond3 (unregistering): Released all slaves
[  768.736816][  T144] bond4 (unregistering): Released all slaves
[  768.771534][  T144] bond5 (unregistering): Released all slaves
[  768.923044][  T144] tipc: Disabling bearer <eth:syzkaller0>
[  768.929256][  T144] tipc: Left network mode
[  769.245199][T24599] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5770'.
[  769.254482][T24599] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5770'.
[  769.268654][T24599] netlink: 'syz.1.5770': attribute type 16 has an invalid length.
[  769.276617][T24599] netlink: 'syz.1.5770': attribute type 17 has an invalid length.
[  769.572962][T24599] bridge0: port 1(bridge_slave_0) entered blocking state
[  769.573125][T24599] bridge0: port 1(bridge_slave_0) entered forwarding state
[  769.584731][T24607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5773'.
[  769.588660][T24599] bridge0: port 2(bridge_slave_1) entered blocking state
[  769.588771][T24599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  769.725826][T24607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5773'.
[  769.814819][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  770.014940][T24620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  770.193211][T24621] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  770.232547][T24621] bond8 (unregistering): Released all slaves
[  770.245518][T24636] IPVS: set_ctl: invalid protocol: 120 255.255.255.255:20004
[  770.327465][T24639] netlink: 'syz.1.5779': attribute type 30 has an invalid length.
[  770.707669][ T5627] Bluetooth: hci1: command tx timeout
[  770.823387][T24655] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  770.893893][  T144] hsr_slave_0: left promiscuous mode
[  770.899860][  T144] hsr_slave_1: left promiscuous mode
[  771.240968][T24671] __nla_validate_parse: 1 callbacks suppressed
[  771.254421][T24671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5783'.
[  771.374389][T24674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5785'.
[  771.453453][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  771.462685][T24539] bridge0: port 1(bridge_slave_0) entered blocking state
[  771.468361][T24539] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.468531][T24539] bridge_slave_0: entered allmulticast mode
[  771.477887][T24539] bridge_slave_0: entered promiscuous mode
[  771.488968][T24674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5785'.
[  771.496028][T24539] bridge0: port 2(bridge_slave_1) entered blocking state
[  771.496137][T24539] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.496296][T24539] bridge_slave_1: entered allmulticast mode
[  771.497883][T24671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  771.513447][T24539] bridge_slave_1: entered promiscuous mode
[  771.644131][T24679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  771.654821][T24679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5787'.
[  771.720012][T24539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  771.735332][T24539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  771.909579][T24539] team0: Port device team_slave_0 added
[  771.923951][T24539] team0: Port device team_slave_1 added
[  772.053910][T24539] batman_adv: batadv0: Adding interface: batadv_slave_0
[  772.053953][T24539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  772.053975][T24539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  772.060736][T24539] batman_adv: batadv0: Adding interface: batadv_slave_1
[  772.060752][T24539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  772.060775][T24539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  772.313101][T24539] hsr_slave_0: entered promiscuous mode
[  772.319052][T24539] hsr_slave_1: entered promiscuous mode
[  772.398366][T24700] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001
[  772.787310][ T5627] Bluetooth: hci1: command tx timeout
[  772.918757][T24712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5793'.
[  772.918805][T24712] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5793'.
[  773.377539][T24723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  773.440472][T24724] tun1: tun_chr_ioctl cmd 2148553947
[  773.465221][T24724] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  773.490352][T24724] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  773.609622][T24729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5797'.
[  773.630238][T24539] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  773.642697][T24539] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  773.651160][T24539] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  773.664041][T24539] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  773.674185][T24729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5797'.
[  773.724437][T24539] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  773.744604][T24539] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  773.745387][T24539] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  773.771606][T24539] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  773.877278][T24742] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.878647][T24742] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.941197][T24539] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.983516][T24747] xt_CT: No such helper "snmp_trap"
[  773.993709][T24539] 8021q: adding VLAN 0 to HW filter on device team0
[  774.025274][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.025454][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.063229][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.063335][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  774.205028][T24759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5803'.
[  774.867605][ T5627] Bluetooth: hci1: command tx timeout
[  774.943128][T24754] lo speed is unknown, defaulting to 1000
[  775.218581][T24795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5809'.
[  775.518159][T24539] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.571446][T24807] FAULT_INJECTION: forcing a failure.
[  775.571446][T24807] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  775.571483][T24807] CPU: 0 UID: 0 PID: 24807 Comm: syz.3.5812 Not tainted syzkaller #0 PREEMPT(full) 
[  775.571503][T24807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  775.571514][T24807] Call Trace:
[  775.571521][T24807]  <TASK>
[  775.571536][T24807]  dump_stack_lvl+0xe8/0x150
[  775.571563][T24807]  should_fail_ex+0x410/0x560
[  775.571595][T24807]  prepare_alloc_pages+0x223/0x600
[  775.571622][T24807]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  775.571644][T24807]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  775.571668][T24807]  ? __pfx_policy_nodemask+0x10/0x10
[  775.571692][T24807]  ? __lock_acquire+0x6df/0x2e50
[  775.571713][T24807]  alloc_pages_mpol+0x21e/0x390
[  775.571741][T24807]  folio_alloc_mpol_noprof+0x39/0x160
[  775.571764][T24807]  vma_alloc_folio_noprof+0xe1/0x1e0
[  775.571786][T24807]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  775.571809][T24807]  ? lock_acquire+0x115/0x350
[  775.571833][T24807]  do_pte_missing+0x173a/0x34b0
[  775.571878][T24807]  handle_mm_fault+0x1a53/0x3750
[  775.571911][T24807]  ? handle_mm_fault+0xf1/0x3750
[  775.571945][T24807]  ? __pfx_handle_mm_fault+0x10/0x10
[  775.571968][T24807]  ? follow_page_pte+0x748/0xf10
[  775.571999][T24807]  ? __pfx_follow_page_pte+0x10/0x10
[  775.572042][T24807]  __get_user_pages+0x1675/0x2750
[  775.572097][T24807]  __gup_longterm_locked+0xd52/0x15c0
[  775.572123][T24807]  ? lock_acquire+0x115/0x350
[  775.572142][T24807]  ? gup_fast_fallback+0x20d/0x20e0
[  775.572166][T24807]  ? sanity_check_pinned_pages+0x817/0x8d0
[  775.572193][T24807]  gup_fast_fallback+0x1d92/0x20e0
[  775.572251][T24807]  ? __pfx_gup_fast_fallback+0x10/0x10
[  775.572273][T24807]  ? rds_info_getsockopt+0x259/0x770
[  775.572294][T24807]  ? rcu_is_watching+0x16/0xb0
[  775.572316][T24807]  ? is_valid_gup_args+0x11f/0x200
[  775.572341][T24807]  ? pin_user_pages_fast+0x4d/0xb0
[  775.572365][T24807]  iov_iter_extract_pages+0x3a1/0x690
[  775.572393][T24807]  rds_info_getsockopt+0x28b/0x770
[  775.572420][T24807]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  775.572454][T24807]  ? lock_acquire+0x115/0x350
[  775.572478][T24807]  rds_getsockopt+0x38b/0x600
[  775.572507][T24807]  ? __pfx_rds_getsockopt+0x10/0x10
[  775.572542][T24807]  do_sock_getsockopt+0x6ae/0x7e0
[  775.572569][T24807]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  775.572604][T24807]  ? __fget_files+0x3a2/0x420
[  775.572626][T24807]  ? __fget_files+0x2a/0x420
[  775.572656][T24807]  __x64_sys_getsockopt+0x1a4/0x240
[  775.572685][T24807]  do_syscall_64+0x166/0x520
[  775.572710][T24807]  ? trace_irq_disable+0x3b/0x140
[  775.572727][T24807]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.572746][T24807]  ? clear_bhb_loop+0x70/0xc0
[  775.572769][T24807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.572787][T24807] RIP: 0033:0x7f3d8759e159
[  775.572804][T24807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  775.572820][T24807] RSP: 002b:00007f3d857f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  775.572840][T24807] RAX: ffffffffffffffda RBX: 00007f3d87825fa0 RCX: 00007f3d8759e159
[  775.572854][T24807] RDX: 000000000000271f RSI: 0000200000000114 RDI: 0000000000000004
[  775.572867][T24807] RBP: 00007f3d857f6090 R08: 0000200000000000 R09: 0000000000000000
[  775.572879][T24807] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002
[  775.572891][T24807] R13: 00007f3d87826038 R14: 00007f3d87825fa0 R15: 00007ffc457c1a78
[  775.572921][T24807]  </TASK>
[  776.040270][T24539] veth0_vlan: entered promiscuous mode
[  776.074778][T24539] veth1_vlan: entered promiscuous mode
[  776.139728][T24539] veth0_macvtap: entered promiscuous mode
[  776.156892][T24539] veth1_macvtap: entered promiscuous mode
[  776.184473][T24539] batman_adv: batadv0: Interface activated: batadv_slave_0
[  776.203766][T24539] batman_adv: batadv0: Interface activated: batadv_slave_1
[  776.260167][   T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  776.270078][   T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.461343][  T280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  776.474831][   T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.625004][T24842] __nla_validate_parse: 3 callbacks suppressed
[  776.631793][T24842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5820'.
[  776.675941][T24842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5820'.
[  776.684414][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.684434][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.904607][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.904652][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  777.304082][T24859] xt_CT: You must specify a L4 protocol and not use inversions on it
[  777.460522][T24868] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  778.033766][   T61] IPVS: starting estimator thread 0...
[  778.128242][T24897] IPVS: using max 29 ests per chain, 69600 per kthread
[  778.875487][T24922] tipc: Enabling of bearer <eth:syz_tun> rejected, max 3 bearers permitted
[  778.876981][T24923] tipc: Enabling of bearer <eth:syz_tun> rejected, max 3 bearers permitted
[  779.280017][T24928] bridge5: entered promiscuous mode
[  779.285451][T24928] bridge5: entered allmulticast mode
[  779.294087][T24928] team0: Port device bridge5 added
[  779.306211][T24928] bridge0: port 4(team0) entered blocking state
[  779.306307][T24928] bridge0: port 4(team0) entered disabled state
[  779.306455][T24928] team0: entered allmulticast mode
[  779.306475][T24928] team_slave_0: entered allmulticast mode
[  779.306493][T24928] team_slave_1: entered allmulticast mode
[  779.341087][T24928] team0: entered promiscuous mode
[  779.348804][T24928] team_slave_0: entered promiscuous mode
[  779.352336][T24928] team_slave_1: entered promiscuous mode
[  779.485562][T24934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5844'.
[  780.238281][T24983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  780.275023][T24982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5854'.
[  780.383195][T24982] team_slave_0 (unregistering): left promiscuous mode
[  780.383242][T24982] team_slave_0 (unregistering): left allmulticast mode
[  780.400696][T24982] team0: Port device team_slave_0 removed
[  780.499201][T24998] syzkaller0: entered promiscuous mode
[  780.499242][T24998] syzkaller0: entered allmulticast mode
[  780.552353][T25000] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  780.700136][T24959] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  781.167729][T25022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5866'.
[  781.485246][T25040] tipc: Invalid UDP bearer configuration
[  781.485355][T25040] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  781.503692][T25042] FAULT_INJECTION: forcing a failure.
[  781.503692][T25042] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  781.503741][T25042] CPU: 0 UID: 0 PID: 25042 Comm: syz.3.5872 Not tainted syzkaller #0 PREEMPT(full) 
[  781.503761][T25042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  781.503770][T25042] Call Trace:
[  781.503777][T25042]  <TASK>
[  781.503785][T25042]  dump_stack_lvl+0xe8/0x150
[  781.503817][T25042]  should_fail_ex+0x410/0x560
[  781.503850][T25042]  _copy_from_user+0x2d/0xb0
[  781.503871][T25042]  kstrtouint_from_user+0xd6/0x180
[  781.503900][T25042]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  781.503935][T25042]  ? lock_acquire+0x115/0x350
[  781.503958][T25042]  proc_fail_nth_write+0x8e/0x210
[  781.503986][T25042]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  781.504022][T25042]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  781.504047][T25042]  vfs_write+0x296/0xba0
[  781.504081][T25042]  ? __pfx_vfs_write+0x10/0x10
[  781.504108][T25042]  ? __fget_files+0x2a/0x420
[  781.504135][T25042]  ? __fget_files+0x3a2/0x420
[  781.504156][T25042]  ? __fget_files+0x2a/0x420
[  781.504187][T25042]  ksys_write+0x150/0x270
[  781.504216][T25042]  ? __pfx_ksys_write+0x10/0x10
[  781.504252][T25042]  do_syscall_64+0x166/0x520
[  781.504277][T25042]  ? trace_irq_disable+0x3b/0x140
[  781.504295][T25042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.504314][T25042]  ? clear_bhb_loop+0x70/0xc0
[  781.504337][T25042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.504356][T25042] RIP: 0033:0x7f3d8755e98e
[  781.504373][T25042] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  781.504389][T25042] RSP: 002b:00007f3d857f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  781.504408][T25042] RAX: ffffffffffffffda RBX: 00007f3d857f66c0 RCX: 00007f3d8755e98e
[  781.504422][T25042] RDX: 0000000000000001 RSI: 00007f3d857f60a0 RDI: 0000000000000005
[  781.504434][T25042] RBP: 00007f3d857f6090 R08: 0000000000000000 R09: 0000000000000000
[  781.504449][T25042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  781.504460][T25042] R13: 00007f3d87826038 R14: 00007f3d87825fa0 R15: 00007ffc457c1a78
[  781.504491][T25042]  </TASK>
[  781.613351][T25046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5874'.
[  781.675153][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'.
[  781.736569][T25046] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  781.863816][T25052] netlink: 'syz.3.5876': attribute type 1 has an invalid length.
[  781.871996][T25052] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5876'.
[  781.897953][T25055] syzkaller0: entered promiscuous mode
[  781.897982][T25055] syzkaller0: entered allmulticast mode
[  782.368980][T25039] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  782.503066][T25078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  782.510747][T25078] syzkaller0: entered promiscuous mode
[  782.516364][T25078] syzkaller0: entered allmulticast mode
[  782.583644][T25081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5886'.
[  782.583693][T25081] openvswitch: netlink: Flow actions attr not present in new flow.
[  782.855558][T25081] syzkaller0: mtu less than device minimum
[  783.082231][T25087] syzkaller0: entered promiscuous mode
[  783.082270][T25087] syzkaller0: entered allmulticast mode
[  783.261297][T25094] lo: Caught tx_queue_len zero misconfig
[  783.577816][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  783.591491][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  783.604947][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  783.629531][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  783.637799][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  783.894719][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5898'.
[  783.895250][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5898'.
[  783.895606][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5898'.
[  783.895957][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5898'.
[  783.901682][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5898'.
[  783.902116][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5898'.
[  783.902476][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5898'.
[  784.280065][T25106] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  784.498933][T25135] gtp0: entered promiscuous mode
[  784.498976][T25135] gtp0: entered allmulticast mode
[  784.503113][T25135] team0: Device gtp0 is of different type
[  784.858738][T25152] syzkaller0: left promiscuous mode
[  784.858784][T25152] syzkaller0: left allmulticast mode
[  785.043373][T25112] lo speed is unknown, defaulting to 1000
[  785.062655][  T280] tipc: Subscription rejected, illegal request
[  785.724989][T25194] netlink: 'syz.2.5920': attribute type 11 has an invalid length.
[  785.747140][ T5627] Bluetooth: hci5: command tx timeout
[  786.055551][T25112] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.056307][T25112] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.056678][T25112] bridge_slave_0: entered allmulticast mode
[  786.062041][T25112] bridge_slave_0: entered promiscuous mode
[  786.070941][T25112] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.071037][T25112] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.072645][T25112] bridge_slave_1: entered allmulticast mode
[  786.080379][T25112] bridge_slave_1: entered promiscuous mode
[  786.242301][T25112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  786.264238][T25112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  786.303374][T25209] netlink: 'syz.1.5924': attribute type 6 has an invalid length.
[  786.392307][T25112] team0: Port device team_slave_0 added
[  786.404120][T25112] team0: Port device team_slave_1 added
[  786.541023][T25112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  786.541066][T25112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.541089][T25112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  786.545687][T25112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  786.545702][T25112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.545727][T25112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  786.679175][T25112] hsr_slave_0: entered promiscuous mode
[  786.683655][T25112] hsr_slave_1: entered promiscuous mode
[  786.684302][T25112] debugfs: 'hsr0' already exists in 'hsr'
[  786.684321][T25112] Cannot create hsr debugfs directory
[  786.838872][T25216] __nla_validate_parse: 59 callbacks suppressed
[  786.845393][T25216] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5927'.
[  786.854766][T25216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5927'.
[  787.681216][  T280] tipc: Subscription rejected, illegal request
[  787.827722][ T5627] Bluetooth: hci5: command tx timeout
[  788.378602][T25112] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  788.395650][T25112] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  788.397604][T25112] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  788.414770][T25112] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  788.416232][T25112] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  788.430087][T25112] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  788.432338][T25112] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  788.454202][T25112] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  788.761558][T25112] 8021q: adding VLAN 0 to HW filter on device bond0
[  788.793471][T25112] 8021q: adding VLAN 0 to HW filter on device team0
[  788.802999][ T4053] bridge0: port 1(bridge_slave_0) entered blocking state
[  788.803128][ T4053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  788.825537][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[  788.825650][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  789.003683][T25112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  789.205487][T25256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  789.538359][T25267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5939'.
[  789.647583][T25269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5940'.
[  789.648730][T25269] ip6t_rt: too many addresses specified
[  789.652029][T25269] netlink: 'syz.1.5940': attribute type 138 has an invalid length.
[  789.652045][T25269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5940'.
[  789.907621][ T5627] Bluetooth: hci5: command tx timeout
[  790.052891][T25112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  790.190697][T25112] veth0_vlan: entered promiscuous mode
[  790.252151][T25112] veth1_vlan: entered promiscuous mode
[  790.280905][ T4053] tipc: Subscription rejected, illegal request
[  790.359626][T25112] veth0_macvtap: entered promiscuous mode
[  790.371144][T25112] veth1_macvtap: entered promiscuous mode
[  791.203013][T25112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  791.235991][T25112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  791.356151][T25301] netlink: 'syz.2.5949': attribute type 27 has an invalid length.
[  791.364304][T25301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5949'.
[  791.381025][  T161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  791.381132][  T161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  791.381222][  T161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  791.381255][  T161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  791.410993][T25301] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  791.504000][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  791.504046][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  791.663143][ T4053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  791.671931][ T4053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  791.733660][T25316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5952'.
[  791.790068][T25320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5894'.
[  791.823129][T25318] netlink: 'syz.0.5951': attribute type 4 has an invalid length.
[  791.953665][T25314] netlink: 'syz.0.5951': attribute type 4 has an invalid length.
[  791.987128][ T5627] Bluetooth: hci5: command tx timeout
[  792.342094][T25336] syzkaller0: left promiscuous mode
[  792.342134][T25336] syzkaller0: left allmulticast mode
[  792.345644][   T12] tipc: Subscription rejected, illegal request
[  792.460892][T25337] x_tables: duplicate underflow at hook 2
[  792.624036][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5959'.
[  792.669987][T25345] macvtap1: entered allmulticast mode
[  792.670023][T25345] dummy0: entered allmulticast mode
[  792.670107][T25345] dummy0: entered promiscuous mode
[  792.709841][T25345] dummy0: left allmulticast mode
[  792.751766][ T2242] dummy0: left promiscuous mode
[  793.184078][  T144] tipc: Subscription rejected, illegal request
[  793.199002][T25369] netlink: 'syz.1.5966': attribute type 4 has an invalid length.
[  793.259627][T25368] netlink: 'syz.1.5966': attribute type 4 has an invalid length.
[  793.854165][T25393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5974'.
[  793.935523][T25394] tipc: Started in network mode
[  793.935580][T25394] tipc: Node identity fad303b80fa9, cluster identity 4711
[  793.940287][T25394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  794.173336][T25394] syzkaller0: entered promiscuous mode
[  794.173386][T25394] syzkaller0: entered allmulticast mode
[  794.174005][T25394] tipc: Resetting bearer <eth:syzkaller0>
[  794.550857][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  794.566614][T25392] tipc: Resetting bearer <eth:syzkaller0>
[  795.443451][  T144] tipc: Subscription rejected, illegal request
[  795.466866][T25411] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5979'.
[  798.193167][T25417] netlink: 'syz.1.5981': attribute type 4 has an invalid length.
[  798.264090][T25418] netlink: 'syz.1.5981': attribute type 4 has an invalid length.
[  798.288490][T25392] tipc: Disabling bearer <eth:syzkaller0>
[  798.300236][  T191] tipc: Node number set to 4118414264
[  798.566231][T25423] netlink: 'syz.0.5983': attribute type 21 has an invalid length.
[  798.897448][T25434] bridge0: port 1(bridge_slave_0) entered forwarding state
[  799.169301][   T12] tipc: Subscription rejected, illegal request
[  799.182473][T25447] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5992'.
[  800.173564][T25459] netlink: 'syz.4.5996': attribute type 4 has an invalid length.
[  800.188451][T25459] netlink: 'syz.4.5996': attribute type 4 has an invalid length.
[  800.267603][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  800.284914][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  800.292592][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  800.302364][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  800.302933][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  800.634767][T25471] netlink: zone id is out of range
[  800.693966][T25473] FAULT_INJECTION: forcing a failure.
[  800.693966][T25473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  800.709866][T25473] CPU: 1 UID: 0 PID: 25473 Comm: syz.4.6001 Not tainted syzkaller #0 PREEMPT(full) 
[  800.709890][T25473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  800.709900][T25473] Call Trace:
[  800.709907][T25473]  <TASK>
[  800.709915][T25473]  dump_stack_lvl+0xe8/0x150
[  800.709946][T25473]  should_fail_ex+0x410/0x560
[  800.709976][T25473]  _copy_from_user+0x2d/0xb0
[  800.709997][T25473]  ___sys_sendmsg+0x1c6/0x360
[  800.710016][T25473]  ? __lock_acquire+0x6df/0x2e50
[  800.710038][T25473]  ? __pfx____sys_sendmsg+0x10/0x10
[  800.710090][T25473]  ? __fget_files+0x2a/0x420
[  800.710113][T25473]  ? __fget_files+0x3a2/0x420
[  800.710145][T25473]  __x64_sys_sendmsg+0x1b1/0x290
[  800.710167][T25473]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  800.710206][T25473]  do_syscall_64+0x166/0x520
[  800.710233][T25473]  ? trace_irq_disable+0x3b/0x140
[  800.710251][T25473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  800.710268][T25473]  ? clear_bhb_loop+0x70/0xc0
[  800.710288][T25473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  800.710306][T25473] RIP: 0033:0x7f446379e159
[  800.710328][T25473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  800.710344][T25473] RSP: 002b:00007f4464661028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  800.710365][T25473] RAX: ffffffffffffffda RBX: 00007f4463a25fa0 RCX: 00007f446379e159
[  800.710380][T25473] RDX: 0000000004000000 RSI: 0000200000001100 RDI: 0000000000000003
[  800.710392][T25473] RBP: 00007f4464661090 R08: 0000000000000000 R09: 0000000000000000
[  800.710404][T25473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  800.710415][T25473] R13: 00007f4463a26038 R14: 00007f4463a25fa0 R15: 00007fff671d34d8
[  800.710446][T25473]  </TASK>
[  801.255875][T25485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6004'.
[  801.966342][T25464] lo speed is unknown, defaulting to 1000
[  802.041808][T25498] =v: renamed from veth0_to_bond (while UP)
[  802.349106][T25492] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  802.387501][ T5627] Bluetooth: hci3: command tx timeout
[  802.812557][T25515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6012'.
[  803.287155][T25533] FAULT_INJECTION: forcing a failure.
[  803.287155][T25533] name failslab, interval 1, probability 0, space 0, times 0
[  803.300091][T25533] CPU: 1 UID: 0 PID: 25533 Comm: syz.2.6018 Not tainted syzkaller #0 PREEMPT(full) 
[  803.300118][T25533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  803.300131][T25533] Call Trace:
[  803.300139][T25533]  <TASK>
[  803.300148][T25533]  dump_stack_lvl+0xe8/0x150
[  803.300181][T25533]  should_fail_ex+0x410/0x560
[  803.300215][T25533]  should_failslab+0xa8/0x100
[  803.300239][T25533]  __kvmalloc_node_noprof+0x176/0x820
[  803.300262][T25533]  ? __kvmalloc_node_noprof+0x345/0x820
[  803.300281][T25533]  ? bpf_check_cfg+0x1ad/0x37d0
[  803.300307][T25533]  ? bpf_check_cfg+0x1ad/0x37d0
[  803.300340][T25533]  bpf_check_cfg+0x1ad/0x37d0
[  803.300389][T25533]  ? kasan_quarantine_put+0xbb/0x1f0
[  803.300421][T25533]  ? lockdep_hardirqs_on+0x7b/0x110
[  803.300453][T25533]  ? __pfx_bpf_check_cfg+0x10/0x10
[  803.300478][T25533]  ? bpf_prog_calc_tag+0x310/0x370
[  803.300497][T25533]  ? vfree+0x42b/0x490
[  803.300525][T25533]  ? bpf_prog_calc_tag+0x310/0x370
[  803.300550][T25533]  ? check_and_resolve_insns+0x1d54/0x21d0
[  803.300581][T25533]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  803.300605][T25533]  ? add_kfuncs+0x251/0x2e0
[  803.300629][T25533]  bpf_check+0x24b6/0x2e10
[  803.300660][T25533]  ? ktime_get_with_offset+0x93/0x2d0
[  803.300685][T25533]  ? __pfx_bpf_check+0x10/0x10
[  803.300706][T25533]  ? bpf_obj_name_cpy+0x194/0x1e0
[  803.300735][T25533]  bpf_prog_load+0x14d6/0x1c20
[  803.300769][T25533]  ? __pfx_bpf_prog_load+0x10/0x10
[  803.300814][T25533]  __sys_bpf+0xd0d/0xd90
[  803.300849][T25533]  ? __pfx___sys_bpf+0x10/0x10
[  803.300878][T25533]  ? __fget_files+0x2a/0x420
[  803.300919][T25533]  ? ksys_write+0x242/0x270
[  803.300945][T25533]  ? __pfx_ksys_write+0x10/0x10
[  803.300975][T25533]  __x64_sys_bpf+0xba/0xd0
[  803.300997][T25533]  do_syscall_64+0x166/0x520
[  803.301022][T25533]  ? trace_irq_disable+0x3b/0x140
[  803.301039][T25533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.301056][T25533]  ? clear_bhb_loop+0x70/0xc0
[  803.301078][T25533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.301096][T25533] RIP: 0033:0x7f2c1659e159
[  803.301113][T25533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  803.301129][T25533] RSP: 002b:00007f2c173ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  803.301150][T25533] RAX: ffffffffffffffda RBX: 00007f2c16825fa0 RCX: 00007f2c1659e159
[  803.301164][T25533] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[  803.301176][T25533] RBP: 00007f2c173ef090 R08: 0000000000000000 R09: 0000000000000000
[  803.301188][T25533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  803.301200][T25533] R13: 00007f2c16826038 R14: 00007f2c16825fa0 R15: 00007fff4e5cb458
[  803.301230][T25533]  </TASK>
[  803.379062][T25464] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.380249][T25464] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.380626][T25464] bridge_slave_0: entered allmulticast mode
[  803.387741][T25464] bridge_slave_0: entered promiscuous mode
[  803.405333][T25464] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.411539][T25464] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.411695][T25464] bridge_slave_1: entered allmulticast mode
[  803.421129][T25464] bridge_slave_1: entered promiscuous mode
[  803.669673][T25464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  803.693570][T25464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  803.724768][T25542] netlink: 'syz.2.6020': attribute type 13 has an invalid length.
[  804.030968][T25464] team0: Port device team_slave_0 added
[  804.049750][T25464] team0: Port device team_slave_1 added
[  804.232794][T25464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  804.232828][T25464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  804.234655][T25464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  804.269609][T25548] syzkaller0: entered promiscuous mode
[  804.269625][T25548] syzkaller0: entered allmulticast mode
[  804.298303][T25552] FAULT_INJECTION: forcing a failure.
[  804.298303][T25552] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  804.298362][T25552] CPU: 0 UID: 0 PID: 25552 Comm: syz.4.6024 Not tainted syzkaller #0 PREEMPT(full) 
[  804.298381][T25552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  804.298392][T25552] Call Trace:
[  804.298400][T25552]  <TASK>
[  804.298407][T25552]  dump_stack_lvl+0xe8/0x150
[  804.298435][T25552]  should_fail_ex+0x410/0x560
[  804.298468][T25552]  _copy_to_user+0x31/0xb0
[  804.298490][T25552]  ip_tunnel_parm_to_user+0x2ee/0x400
[  804.298523][T25552]  ? __pfx_ip_tunnel_parm_to_user+0x10/0x10
[  804.298553][T25552]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  804.298586][T25552]  ip_tunnel_siocdevprivate+0x1ae/0x1d0
[  804.298612][T25552]  ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10
[  804.298643][T25552]  ? __pfx___mutex_lock+0x10/0x10
[  804.298668][T25552]  ? full_name_hash+0x92/0xe0
[  804.298698][T25552]  dev_ifsioc+0xb56/0x1360
[  804.298732][T25552]  dev_ioctl+0x84c/0x1150
[  804.298763][T25552]  sock_ioctl+0x753/0x7e0
[  804.298788][T25552]  ? __pfx_sock_ioctl+0x10/0x10
[  804.298811][T25552]  ? __fget_files+0x3a2/0x420
[  804.298834][T25552]  ? __fget_files+0x2a/0x420
[  804.298860][T25552]  ? bpf_lsm_file_ioctl+0x9/0x20
[  804.298890][T25552]  ? __pfx_sock_ioctl+0x10/0x10
[  804.298911][T25552]  __se_sys_ioctl+0xfc/0x170
[  804.298932][T25552]  do_syscall_64+0x166/0x520
[  804.298957][T25552]  ? trace_irq_disable+0x3b/0x140
[  804.298975][T25552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.298994][T25552]  ? clear_bhb_loop+0x70/0xc0
[  804.299060][T25552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.299079][T25552] RIP: 0033:0x7f446379e159
[  804.299097][T25552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  804.299112][T25552] RSP: 002b:00007f4464661028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  804.299133][T25552] RAX: ffffffffffffffda RBX: 00007f4463a25fa0 RCX: 00007f446379e159
[  804.299146][T25552] RDX: 0000200000000840 RSI: 00000000000089f0 RDI: 0000000000000003
[  804.299158][T25552] RBP: 00007f4464661090 R08: 0000000000000000 R09: 0000000000000000
[  804.299170][T25552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  804.299181][T25552] R13: 00007f4463a26038 R14: 00007f4463a25fa0 R15: 00007fff671d34d8
[  804.299211][T25552]  </TASK>
[  804.302854][T25464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  804.302868][T25464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  804.302892][T25464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  804.487511][ T5627] Bluetooth: hci3: command tx timeout
[  804.710381][T25464] hsr_slave_0: entered promiscuous mode
[  804.711440][T25464] hsr_slave_1: entered promiscuous mode
[  804.725701][T25464] debugfs: 'hsr0' already exists in 'hsr'
[  804.725748][T25464] Cannot create hsr debugfs directory
[  804.770215][T25564] netlink: 'syz.4.6026': attribute type 83 has an invalid length.
[  805.286014][T25464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  805.308618][T25464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.550530][T25580] ipvlan2: entered allmulticast mode
[  805.557177][T25580] virt_wifi0: entered allmulticast mode
[  805.562293][T25580] batman_adv: batadv0: Adding interface: ipvlan2
[  805.562308][T25580] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  805.562336][T25580] batman_adv: batadv0: Interface activated: ipvlan2
[  805.664247][T25464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  805.676648][T25464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.844517][T25464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  805.844598][T25464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.855772][T25586] lo speed is unknown, defaulting to 1000
[  805.855843][T25586] lo speed is unknown, defaulting to 1000
[  805.856555][T25586] lo speed is unknown, defaulting to 1000
[  805.862278][T25586] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  805.862312][T25586] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  805.862348][T25586] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  805.881557][T25586] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22
[  805.930641][T25588] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  806.024466][T25464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  806.024525][T25464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.045639][T25586] lo speed is unknown, defaulting to 1000
[  806.050912][T25586] lo speed is unknown, defaulting to 1000
[  806.055099][T25586] lo speed is unknown, defaulting to 1000
[  806.063632][T25586] lo speed is unknown, defaulting to 1000
[  806.068888][T25586] lo speed is unknown, defaulting to 1000
[  806.073159][T25586] lo speed is unknown, defaulting to 1000
[  806.078741][T25586] lo speed is unknown, defaulting to 1000
[  806.082234][T25586] lo speed is unknown, defaulting to 1000
[  806.092122][T25586] lo speed is unknown, defaulting to 1000
[  806.100083][T25586] lo speed is unknown, defaulting to 1000
[  806.184759][T25594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6034'.
[  806.184803][T25594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6034'.
[  806.185246][T25594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6034'.
[  806.185593][T25594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6034'.
[  806.500680][T25464] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  806.511382][T25464] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  806.514929][T25464] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  806.521930][T25464] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  806.523373][T25464] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  806.535274][T25464] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  806.536256][T25464] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  806.545952][T25464] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  806.557096][ T5627] Bluetooth: hci3: command tx timeout
[  806.702581][T25464] 8021q: adding VLAN 0 to HW filter on device bond0
[  806.737654][T25464] 8021q: adding VLAN 0 to HW filter on device team0
[  806.753100][ T4053] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.753229][ T4053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  806.805486][ T4053] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.805602][ T4053] bridge0: port 2(bridge_slave_1) entered forwarding state
[  806.930769][T25612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6038'.
[  807.033894][T25618] openvswitch: netlink: Message has 8 unknown bytes.
[  807.121073][T25617] netlink: 'syz.3.6039': attribute type 4 has an invalid length.
[  807.154590][ T7689] lo speed is unknown, defaulting to 1000
[  807.154627][ T7689] syz_device_name_32_chars_1234567: Port: 1 Link DOWN
[  807.181642][T25617] netlink: 'syz.3.6039': attribute type 4 has an invalid length.
[  807.199585][ T7689] lo speed is unknown, defaulting to 1000
[  807.199619][ T7689] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  807.394323][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6042'.
[  807.587237][T25637] netlink: 'syz.3.6044': attribute type 4 has an invalid length.
[  807.619822][ T7689] lo speed is unknown, defaulting to 1000
[  807.619861][ T7689] syz_device_name_32_chars_1234567: Port: 1 Link DOWN
[  807.727845][T25636] netlink: 'syz.3.6044': attribute type 4 has an invalid length.
[  807.820833][T25641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6045'.
[  807.830732][T25641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6045'.
[  808.627274][ T5627] Bluetooth: hci3: command tx timeout
[  809.340079][T25641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6045'.
[  809.368784][T25641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6045'.
[  809.390926][ T7696] lo speed is unknown, defaulting to 1000
[  809.390963][ T7696] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  809.555722][T25464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  809.664655][T25464] veth0_vlan: entered promiscuous mode
[  809.695049][T25464] veth1_vlan: entered promiscuous mode
[  809.817705][T25464] veth0_macvtap: entered promiscuous mode
[  809.840837][T25464] veth1_macvtap: entered promiscuous mode
[  809.885273][T25464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  809.998595][T25464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  810.027253][  T144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  810.029095][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  810.029132][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  810.029167][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  810.165857][T25670] FAULT_INJECTION: forcing a failure.
[  810.165857][T25670] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  810.173051][T25670] CPU: 1 UID: 0 PID: 25670 Comm: syz.2.6052 Not tainted syzkaller #0 PREEMPT(full) 
[  810.173075][T25670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  810.173087][T25670] Call Trace:
[  810.173096][T25670]  <TASK>
[  810.173104][T25670]  dump_stack_lvl+0xe8/0x150
[  810.173139][T25670]  should_fail_ex+0x410/0x560
[  810.173174][T25670]  _copy_from_user+0x2d/0xb0
[  810.173196][T25670]  ___sys_recvmsg+0x173/0x5a0
[  810.173225][T25670]  ? __pfx____sys_recvmsg+0x10/0x10
[  810.173250][T25670]  ? lock_acquire+0x115/0x350
[  810.173298][T25670]  do_recvmmsg+0x31a/0x7f0
[  810.173327][T25670]  ? __pfx_do_recvmmsg+0x10/0x10
[  810.173359][T25670]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  810.173390][T25670]  ? __fget_files+0x3a2/0x420
[  810.173426][T25670]  __x64_sys_recvmmsg+0x198/0x250
[  810.173448][T25670]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  810.173481][T25670]  do_syscall_64+0x166/0x520
[  810.173506][T25670]  ? trace_irq_disable+0x3b/0x140
[  810.173524][T25670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.173543][T25670]  ? clear_bhb_loop+0x70/0xc0
[  810.173565][T25670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.173592][T25670] RIP: 0033:0x7f2c1659e159
[  810.173610][T25670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.173626][T25670] RSP: 002b:00007f2c173ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  810.173646][T25670] RAX: ffffffffffffffda RBX: 00007f2c16825fa0 RCX: 00007f2c1659e159
[  810.173659][T25670] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005
[  810.173671][T25670] RBP: 00007f2c173ef090 R08: 0000000000000000 R09: 0000000000000000
[  810.173683][T25670] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  810.173695][T25670] R13: 00007f2c16826038 R14: 00007f2c16825fa0 R15: 00007fff4e5cb458
[  810.173725][T25670]  </TASK>
[  810.209359][   T52] block nbd6: Receive control failed (result -32)
[  810.214227][ T5627] block nbd6: Receive control failed (result -32)
[  810.409113][  T280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  810.409205][  T280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  810.572008][T25678] netlink: 'syz.4.6056': attribute type 15 has an invalid length.
[  810.579790][  T280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  810.579810][  T280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  811.471127][   T12] tipc: Subscription rejected, illegal request
[  811.486749][T25706] __nla_validate_parse: 1 callbacks suppressed
[  811.493476][T25706] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6063'.
[  811.790289][T25722] FAULT_INJECTION: forcing a failure.
[  811.790289][T25722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  811.790344][T25722] CPU: 1 UID: 0 PID: 25722 Comm: syz.3.6070 Not tainted syzkaller #0 PREEMPT(full) 
[  811.790367][T25722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  811.790378][T25722] Call Trace:
[  811.790386][T25722]  <TASK>
[  811.790394][T25722]  dump_stack_lvl+0xe8/0x150
[  811.790419][T25722]  should_fail_ex+0x410/0x560
[  811.790449][T25722]  _copy_from_user+0x2d/0xb0
[  811.790470][T25722]  ___sys_sendmsg+0x1c6/0x360
[  811.790490][T25722]  ? __lock_acquire+0x6df/0x2e50
[  811.790514][T25722]  ? __pfx____sys_sendmsg+0x10/0x10
[  811.790565][T25722]  ? __fget_files+0x2a/0x420
[  811.790588][T25722]  ? __fget_files+0x3a2/0x420
[  811.790619][T25722]  __x64_sys_sendmsg+0x1b1/0x290
[  811.790642][T25722]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  811.790682][T25722]  do_syscall_64+0x166/0x520
[  811.790708][T25722]  ? trace_irq_disable+0x3b/0x140
[  811.790724][T25722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.790743][T25722]  ? clear_bhb_loop+0x70/0xc0
[  811.790766][T25722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.790784][T25722] RIP: 0033:0x7f66d559e159
[  811.790801][T25722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  811.790817][T25722] RSP: 002b:00007f66d6413028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  811.790837][T25722] RAX: ffffffffffffffda RBX: 00007f66d5825fa0 RCX: 00007f66d559e159
[  811.790850][T25722] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  811.790865][T25722] RBP: 00007f66d6413090 R08: 0000000000000000 R09: 0000000000000000
[  811.790877][T25722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  811.790889][T25722] R13: 00007f66d5826038 R14: 00007f66d5825fa0 R15: 00007ffe4797b498
[  811.790918][T25722]  </TASK>
[  812.492774][T25738] syzkaller0: left promiscuous mode
[  812.492820][T25738] syzkaller0: left allmulticast mode
[  812.537265][T25744] FAULT_INJECTION: forcing a failure.
[  812.537265][T25744] name failslab, interval 1, probability 0, space 0, times 0
[  812.537310][T25744] CPU: 0 UID: 0 PID: 25744 Comm: syz.0.6079 Not tainted syzkaller #0 PREEMPT(full) 
[  812.537331][T25744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  812.537342][T25744] Call Trace:
[  812.537350][T25744]  <TASK>
[  812.537358][T25744]  dump_stack_lvl+0xe8/0x150
[  812.537389][T25744]  should_fail_ex+0x410/0x560
[  812.537431][T25744]  should_failslab+0xa8/0x100
[  812.537456][T25744]  __kmalloc_node_noprof+0x100/0x720
[  812.537481][T25744]  ? __get_vm_area_node+0x200/0x2f0
[  812.537504][T25744]  ? __get_vm_area_node+0x283/0x2f0
[  812.537527][T25744]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  812.537551][T25744]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  812.537583][T25744]  __vmalloc_node_range_noprof+0x5b4/0x1540
[  812.537610][T25744]  ? lock_acquire+0x115/0x350
[  812.537648][T25744]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  812.537668][T25744]  ? bpf_verifier_vlog+0x58d/0x900
[  812.537701][T25744]  ? bpf_prog_calc_tag+0x51/0x370
[  812.537720][T25744]  __vmalloc_noprof+0xd2/0x120
[  812.537743][T25744]  ? bpf_prog_calc_tag+0x51/0x370
[  812.537766][T25744]  bpf_prog_calc_tag+0x51/0x370
[  812.537789][T25744]  check_and_resolve_insns+0xbb/0x21d0
[  812.537813][T25744]  ? __pfx_bpf_check_btf_info+0x10/0x10
[  812.537832][T25744]  ? add_subprog+0x2e2/0x3f0
[  812.537855][T25744]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  812.537886][T25744]  bpf_check+0x180a/0x2e10
[  812.537915][T25744]  ? ktime_get_with_offset+0x93/0x2d0
[  812.537938][T25744]  ? __pfx_bpf_check+0x10/0x10
[  812.537960][T25744]  ? bpf_obj_name_cpy+0x194/0x1e0
[  812.537988][T25744]  bpf_prog_load+0x14d6/0x1c20
[  812.538020][T25744]  ? __pfx_bpf_prog_load+0x10/0x10
[  812.538063][T25744]  __sys_bpf+0xd0d/0xd90
[  812.538091][T25744]  ? __pfx___sys_bpf+0x10/0x10
[  812.538121][T25744]  ? __fget_files+0x2a/0x420
[  812.538160][T25744]  ? ksys_write+0x242/0x270
[  812.538190][T25744]  ? __pfx_ksys_write+0x10/0x10
[  812.538220][T25744]  __x64_sys_bpf+0xba/0xd0
[  812.538240][T25744]  do_syscall_64+0x166/0x520
[  812.538266][T25744]  ? trace_irq_disable+0x3b/0x140
[  812.538283][T25744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.538302][T25744]  ? clear_bhb_loop+0x70/0xc0
[  812.538324][T25744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.538341][T25744] RIP: 0033:0x7f787bb9e159
[  812.538360][T25744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  812.538376][T25744] RSP: 002b:00007f787ca79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  812.538396][T25744] RAX: ffffffffffffffda RBX: 00007f787be25fa0 RCX: 00007f787bb9e159
[  812.538417][T25744] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  812.538429][T25744] RBP: 00007f787ca79090 R08: 0000000000000000 R09: 0000000000000000
[  812.538441][T25744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  812.538452][T25744] R13: 00007f787be26038 R14: 00007f787be25fa0 R15: 00007ffe62849008
[  812.538483][T25744]  </TASK>
[  812.538582][T25744] warn_alloc: 2 callbacks suppressed
[  812.538594][T25744] syz.0.6079: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  812.538646][T25744] CPU: 0 UID: 0 PID: 25744 Comm: syz.0.6079 Not tainted syzkaller #0 PREEMPT(full) 
[  812.538666][T25744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  812.538676][T25744] Call Trace:
[  812.538683][T25744]  <TASK>
[  812.538691][T25744]  dump_stack_lvl+0xe8/0x150
[  812.538718][T25744]  warn_alloc+0x24d/0x270
[  812.538749][T25744]  ? __pfx_warn_alloc+0x10/0x10
[  812.538781][T25744]  ? __kmalloc_node_noprof+0x4d7/0x720
[  812.538806][T25744]  ? __get_vm_area_node+0x200/0x2f0
[  812.538827][T25744]  ? __get_vm_area_node+0x283/0x2f0
[  812.538848][T25744]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  812.538872][T25744]  ? __vmalloc_node_range_noprof+0x5b4/0x1540
[  812.538908][T25744]  __vmalloc_node_range_noprof+0x969/0x1540
[  812.538934][T25744]  ? lock_acquire+0x115/0x350
[  812.538974][T25744]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  812.539000][T25744]  ? bpf_verifier_vlog+0x58d/0x900
[  812.539034][T25744]  ? bpf_prog_calc_tag+0x51/0x370
[  812.539051][T25744]  __vmalloc_noprof+0xd2/0x120
[  812.539075][T25744]  ? bpf_prog_calc_tag+0x51/0x370
[  812.539097][T25744]  bpf_prog_calc_tag+0x51/0x370
[  812.539122][T25744]  check_and_resolve_insns+0xbb/0x21d0
[  812.539144][T25744]  ? __pfx_bpf_check_btf_info+0x10/0x10
[  812.539162][T25744]  ? add_subprog+0x2e2/0x3f0
[  812.539185][T25744]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  812.539215][T25744]  bpf_check+0x180a/0x2e10
[  812.539244][T25744]  ? ktime_get_with_offset+0x93/0x2d0
[  812.539266][T25744]  ? __pfx_bpf_check+0x10/0x10
[  812.539288][T25744]  ? bpf_obj_name_cpy+0x194/0x1e0
[  812.539315][T25744]  bpf_prog_load+0x14d6/0x1c20
[  812.539346][T25744]  ? __pfx_bpf_prog_load+0x10/0x10
[  812.539390][T25744]  __sys_bpf+0xd0d/0xd90
[  812.539423][T25744]  ? __pfx___sys_bpf+0x10/0x10
[  812.539452][T25744]  ? __fget_files+0x2a/0x420
[  812.539490][T25744]  ? ksys_write+0x242/0x270
[  812.539517][T25744]  ? __pfx_ksys_write+0x10/0x10
[  812.539545][T25744]  __x64_sys_bpf+0xba/0xd0
[  812.539564][T25744]  do_syscall_64+0x166/0x520
[  812.539588][T25744]  ? trace_irq_disable+0x3b/0x140
[  812.539604][T25744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.539625][T25744]  ? clear_bhb_loop+0x70/0xc0
[  812.539648][T25744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.539665][T25744] RIP: 0033:0x7f787bb9e159
[  812.539680][T25744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  812.539695][T25744] RSP: 002b:00007f787ca79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  812.539712][T25744] RAX: ffffffffffffffda RBX: 00007f787be25fa0 RCX: 00007f787bb9e159
[  812.539726][T25744] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  812.539737][T25744] RBP: 00007f787ca79090 R08: 0000000000000000 R09: 0000000000000000
[  812.539748][T25744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  812.539759][T25744] R13: 00007f787be26038 R14: 00007f787be25fa0 R15: 00007ffe62849008
[  812.539788][T25744]  </TASK>
[  812.539816][T25744] Mem-Info:
[  812.539825][T25744] active_anon:6617 inactive_anon:0 isolated_anon:0
[  812.539825][T25744]  active_file:0 inactive_file:44579 isolated_file:0
[  812.539825][T25744]  unevictable:0 dirty:211 writeback:0
[  812.539825][T25744]  slab_reclaimable:11890 slab_unreclaimable:133042
[  812.539825][T25744]  mapped:30246 shmem:523 pagetables:3601
[  812.539825][T25744]  sec_pagetables:0 bounce:0
[  812.539825][T25744]  kernel_misc_reclaimable:0
[  812.539825][T25744]  free:1183697 free_pcp:15627 free_cma:0
[  812.539871][T25744] Node 0 active_anon:26468kB inactive_anon:0kB active_file:0kB inactive_file:178108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120984kB dirty:844kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14772kB pagetables:14284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  812.539918][T25744] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  812.539963][T25744] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  812.540014][T25744] lowmem_reserve[]: 0 2487 2487 2487 2487
[  812.540046][T25744] Node 0 DMA32 free:782964kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26468kB inactive_anon:0kB active_file:0kB inactive_file:178108kB unevictable:0kB writepending:844kB zspages:0kB present:3129332kB managed:2546700kB mlocked:0kB bounce:0kB free_pcp:62508kB local_pcp:21636kB free_cma:0kB
[  812.540152][T25744] lowmem_reserve[]: 0 0 0 0 0
[  812.540182][T25744] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  812.540231][T25744] lowmem_reserve[]: 0 0 0 0 0
[  812.540261][T25744] Node 1 Normal free:3936464kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  812.540311][T25744] lowmem_reserve[]: 0 0 0 0 0
[  812.540341][T25744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  812.540449][T25744] Node 0 DMA32: 1349*4kB (UM) 1834*8kB (UME) 617*16kB (UME) 1716*32kB (UME) 883*64kB (UME) 500*128kB (UME) 378*256kB (UME) 219*512kB (UME) 134*1024kB (UM) 11*2048kB (UME) 51*4096kB (UM) = 782900kB
[  812.540588][T25744] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  812.540675][T25744] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 7*16kB (UM) 2*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936464kB
[  812.540811][T25744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  812.540826][T25744] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  812.540840][T25744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  812.540855][T25744] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  812.540869][T25744] 45098 total pagecache pages
[  812.540876][T25744] 0 pages in swap cache
[  812.540883][T25744] Free swap  = 124996kB
[  812.540890][T25744] Total swap = 124996kB
[  812.540898][T25744] 2097051 pages RAM
[  812.540905][T25744] 0 pages HighMem/MovableOnly
[  812.540911][T25744] 428760 pages reserved
[  812.540918][T25744] 0 pages cma reserved
[  812.728716][T25742] vlan3: entered promiscuous mode
[  812.728737][T25742] hsr0: entered promiscuous mode
[  812.728965][T25742] vlan3: entered allmulticast mode
[  812.728978][T25742] hsr0: entered allmulticast mode
[  812.728990][T25742] hsr_slave_0: entered allmulticast mode
[  812.729006][T25742] hsr_slave_1: entered allmulticast mode
[  813.643180][T25763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6085'.
[  813.646159][T25763] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  813.695766][T25763] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.696429][T25763] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.793378][T25768] FAULT_INJECTION: forcing a failure.
[  813.793378][T25768] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  813.807494][T25768] CPU: 1 UID: 0 PID: 25768 Comm: syz.1.6086 Not tainted syzkaller #0 PREEMPT(full) 
[  813.807520][T25768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  813.807531][T25768] Call Trace:
[  813.807539][T25768]  <TASK>
[  813.807547][T25768]  dump_stack_lvl+0xe8/0x150
[  813.807579][T25768]  should_fail_ex+0x410/0x560
[  813.807611][T25768]  _copy_from_user+0x2d/0xb0
[  813.807633][T25768]  ___sys_recvmsg+0x173/0x5a0
[  813.807661][T25768]  ? __pfx____sys_recvmsg+0x10/0x10
[  813.807685][T25768]  ? lock_acquire+0x115/0x350
[  813.807729][T25768]  do_recvmmsg+0x31a/0x7f0
[  813.807759][T25768]  ? __pfx_do_recvmmsg+0x10/0x10
[  813.807791][T25768]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  813.807820][T25768]  ? __fget_files+0x3a2/0x420
[  813.807856][T25768]  __x64_sys_recvmmsg+0x198/0x250
[  813.807879][T25768]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  813.807911][T25768]  do_syscall_64+0x166/0x520
[  813.807936][T25768]  ? trace_irq_disable+0x3b/0x140
[  813.807954][T25768]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.807973][T25768]  ? clear_bhb_loop+0x70/0xc0
[  813.807996][T25768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.808015][T25768] RIP: 0033:0x7fbca8b9e159
[  813.808034][T25768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  813.808051][T25768] RSP: 002b:00007fbca999a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  813.808072][T25768] RAX: ffffffffffffffda RBX: 00007fbca8e25fa0 RCX: 00007fbca8b9e159
[  813.808086][T25768] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003
[  813.808098][T25768] RBP: 00007fbca999a090 R08: 0000000000000000 R09: 0000000000000000
[  813.808110][T25768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  813.808122][T25768] R13: 00007fbca8e26038 R14: 00007fbca8e25fa0 R15: 00007fffd55115b8
[  813.808152][T25768]  </TASK>
[  814.240221][T25787] gre1: entered promiscuous mode
[  814.240262][T25787] gre1: entered allmulticast mode
[  814.250471][T25785] syzkaller0: entered promiscuous mode
[  814.250492][T25785] syzkaller0: entered allmulticast mode
[  814.269056][T25802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6095'.
[  814.286213][T25802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6095'.
[  814.292543][  T144] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  814.295475][   T41] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  814.295533][   T41] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  814.295566][   T41] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  814.458639][T25814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6098'.
[  814.521501][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6096'.
[  814.599572][T25816] syzkaller0: entered promiscuous mode
[  814.599612][T25816] syzkaller0: entered allmulticast mode
[  814.645472][T25823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6100'.
[  814.656208][T25825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6102'.
[  814.839532][T25831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6106'.
[  814.933314][T25833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6105'.
[  815.100611][T25841] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  815.125373][T25841] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.126007][T25841] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.543269][T25854] syzkaller0: entered promiscuous mode
[  815.543328][T25854] syzkaller0: entered allmulticast mode
[  815.911476][T25867] netlink: 'syz.3.6117': attribute type 4 has an invalid length.
[  815.935850][ T7689] lo speed is unknown, defaulting to 1000
[  815.936938][T25867] netlink: 'syz.3.6117': attribute type 4 has an invalid length.
[  815.940750][ T7696] lo speed is unknown, defaulting to 1000
[  816.043812][T25870] netlink: 'syz.0.6118': attribute type 4 has an invalid length.
[  816.175306][T25869] netlink: 'syz.0.6118': attribute type 4 has an invalid length.
[  816.458155][T25875] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  819.189318][T25886] bridge: RTM_NEWNEIGH with invalid ether address
[  819.190005][T25889] bridge0: port 3(veth0) entered blocking state
[  819.190529][T25889] bridge0: port 3(veth0) entered disabled state
[  819.190853][T25889] veth0: entered allmulticast mode
[  819.192778][T25889] veth0: entered promiscuous mode
[  819.193377][T25889] bridge0: port 3(veth0) entered blocking state
[  819.193476][T25889] bridge0: port 3(veth0) entered forwarding state
[  819.194212][T25890] bridge0: port 4(veth1) entered blocking state
[  819.194333][T25890] bridge0: port 4(veth1) entered disabled state
[  819.194447][T25890] veth1: entered allmulticast mode
[  819.196694][T25890] veth1: entered promiscuous mode
[  819.199333][T25890] bridge0: port 4(veth1) entered blocking state
[  819.199434][T25890] bridge0: port 4(veth1) entered forwarding state
[  819.261437][T25894] __nla_validate_parse: 3 callbacks suppressed
[  819.261455][T25894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6125'.
[  819.261516][T25894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6125'.
[  819.438417][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  819.438807][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  819.439270][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  819.439707][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  819.440177][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  819.440612][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  819.441045][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  819.441484][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  819.441935][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  819.442418][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  819.620513][T25894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6125'.
[  819.620609][T25894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6125'.
[  819.774303][T25903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6128'.
[  819.792430][T25903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6128'.
[  819.940706][T25906] netlink: 'syz.0.6129': attribute type 4 has an invalid length.
[  820.004907][T25912] netlink: 'syz.0.6129': attribute type 4 has an invalid length.
[  821.251223][T25939] can: request_module (can-proto-5) failed.
[  821.832293][T25938] syzkaller0: entered promiscuous mode
[  821.832332][T25938] syzkaller0: entered allmulticast mode
[  821.833241][T25941] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.858027][T25947] bridge: RTM_NEWNEIGH with invalid ether address
[  821.886640][T25919] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  823.181431][T25980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6150'.
[  823.194390][T25980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6150'.
[  823.346802][T25977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6149'.
[  823.967862][T25995] syzkaller0: entered promiscuous mode
[  823.973486][T25995] syzkaller0: entered allmulticast mode
[  824.447751][    C0] net_ratelimit: 5457 callbacks suppressed
[  824.447820][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  824.448349][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  824.450086][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  824.450628][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  824.452282][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  824.452800][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  824.454518][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  824.455057][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  824.456764][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  824.457338][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  824.812850][T26003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6157'.
[  824.824136][T26003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6157'.
[  824.905082][T26014] netlink: 'syz.3.6160': attribute type 1 has an invalid length.
[  829.465037][    C0] net_ratelimit: 5564 callbacks suppressed
[  829.465072][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  829.465512][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  829.467013][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  829.467524][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  829.469007][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  829.469473][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  829.470989][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  829.471460][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  829.472958][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  829.473466][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  830.857252][T26003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6157'.
[  830.857295][T26003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6157'.
[  831.098464][T26028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6163'.
[  831.098707][T26028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6163'.
[  831.367451][T26034] netlink: 'syz.3.6166': attribute type 1 has an invalid length.
[  831.431809][T26034] 8021q: adding VLAN 0 to HW filter on device bond2
[  831.522528][T26034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6166'.
[  831.639195][T26034] bond2: (slave dummy0): making interface the new active one
[  831.650982][T26034] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  833.946656][T26084] netlink: 472 bytes leftover after parsing attributes in process `syz.4.6182'.
[  833.956476][T26084] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6182'.
[  833.992122][T26084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6182'.
[  834.226604][T26089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6183'.
[  834.226863][T26089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6183'.
[  834.351175][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  834.380429][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  834.468480][    C0] net_ratelimit: 4840 callbacks suppressed
[  834.468521][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  834.469129][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  834.470930][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  834.471481][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  834.473341][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  834.473896][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  834.475686][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  834.476275][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  834.483678][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  834.484163][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  834.618263][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  834.632954][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  834.633572][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  835.707017][T26119] xt_l2tp: invalid flags combination: 8
[  836.370454][T26136] __nla_validate_parse: 1 callbacks suppressed
[  836.370501][T26136] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6194'.
[  836.787990][   T52] Bluetooth: hci4: command tx timeout
[  838.047696][T26088] lo speed is unknown, defaulting to 1000
[  838.146368][T26159] netlink: 'syz.4.6200': attribute type 4 has an invalid length.
[  838.162961][T26162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6201'.
[  838.221685][T26157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6198'.
[  838.239442][T26163] netlink: 'syz.4.6200': attribute type 4 has an invalid length.
[  838.291875][T26162] tipc: Started in network mode
[  838.297073][T26162] tipc: Node identity 669e9a227b6a, cluster identity 4711
[  838.311081][T26162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  838.868073][   T52] Bluetooth: hci4: command tx timeout
[  839.478026][    C0] net_ratelimit: 4467 callbacks suppressed
[  839.478075][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  839.478506][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  839.479930][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  839.480354][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  839.481787][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  839.482209][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  839.483578][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  839.484030][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  839.485916][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  839.486399][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  839.749473][ T7692] tipc: Node number set to 502569506
[  839.769280][T26088] lo speed is unknown, defaulting to 1000
[  840.775144][T26213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6215'.
[  840.801992][T26218] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6214'.
[  840.947999][   T52] Bluetooth: hci4: command tx timeout
[  841.179618][   T12] team0: left allmulticast mode
[  841.179654][   T12] team_slave_1: left allmulticast mode
[  841.179690][   T12] team0: left promiscuous mode
[  841.179706][   T12] team_slave_1: left promiscuous mode
[  841.180205][   T12] bridge0: port 4(team0) entered disabled state
[  841.234384][   T12] vlan2: left allmulticast mode
[  841.234428][   T12] geneve0: left allmulticast mode
[  841.234451][   T12] vlan2: left promiscuous mode
[  841.234465][   T12] geneve0: left promiscuous mode
[  841.255054][   T12] bridge0: port 3(vlan2) entered disabled state
[  841.278992][   T12] bridge_slave_1: left allmulticast mode
[  841.279035][   T12] bridge_slave_1: left promiscuous mode
[  841.279219][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.440614][   T12] bridge_slave_0: left allmulticast mode
[  841.440656][   T12] bridge_slave_0: left promiscuous mode
[  841.440899][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  841.565957][   T12] dvmrp8: left allmulticast mode
[  842.973016][   T12] bond3 (unregistering): (slave bridge3): Releasing backup interface
[  843.024686][   T12] team0: Port device bridge5 removed
[  843.032634][   T52] Bluetooth: hci4: command tx timeout
[  843.132353][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  843.167967][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  843.184474][   T12] bond0 (unregistering): Released all slaves
[  843.200801][   T12] bond1 (unregistering): Released all slaves
[  843.236432][   T12] bond2 (unregistering): (slave veth3): Releasing active interface
[  843.246023][   T12] batadv1: entered promiscuous mode
[  843.274817][   T12] bond2 (unregistering): (slave batadv1): Releasing active interface
[  843.284873][   T12] batadv1: left promiscuous mode
[  843.298891][   T12] bond2 (unregistering): Released all slaves
[  843.314139][   T61] smbdirect: ib_dev[syz1] removed
[  843.352288][   T12] bond3 (unregistering): Released all slaves
[  843.597430][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  843.598207][ T7694] infiniband syz1: ib_query_port failed (-19)
[  844.024777][   T12] : left promiscuous mode
[  844.037256][T26264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6224'.
[  844.063059][T26264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6224'.
[  844.063101][T26264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6224'.
[  844.489017][    C0] net_ratelimit: 4544 callbacks suppressed
[  844.489078][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  844.489542][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  844.491014][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  844.491477][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  844.493105][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  844.493561][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  844.495022][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  844.495476][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  844.497063][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  844.497521][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  844.712172][T26267] tipc: Invalid UDP bearer configuration
[  844.712235][T26267] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  844.947422][   T12] ovs-s!!: left promiscuous mode
[  845.575488][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  845.621575][   T12] tipc: Disabling bearer <udp:syz2>
[  845.624024][   T12] tipc: Disabling bearer <udp:syz0>
[  845.624157][   T12] tipc: Left network mode
[  846.820746][T26306] syzkaller0: entered promiscuous mode
[  846.832653][T26306] syzkaller0: entered allmulticast mode
[  849.496909][    C1] net_ratelimit: 6783 callbacks suppressed
[  849.496963][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  849.497519][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  849.497780][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  849.498069][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  849.498621][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  849.498990][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  849.499173][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  849.499539][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  849.499792][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  849.500352][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  853.876781][    C1] sched: DL replenish lagged too much
[  854.507271][    C1] net_ratelimit: 13186 callbacks suppressed
[  854.507300][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  854.507810][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  854.508301][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  854.508331][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  854.508821][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  854.508836][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  854.509327][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  854.509388][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  854.509881][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  854.509891][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  859.517320][    C1] net_ratelimit: 13899 callbacks suppressed
[  859.517368][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  859.517754][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  859.517910][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  859.518266][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  859.518442][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  859.518767][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  859.518955][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  859.519315][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  859.519450][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  859.519952][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  864.526946][    C1] net_ratelimit: 13526 callbacks suppressed
[  864.526997][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  864.527542][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  864.528092][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  864.528309][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  864.528662][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  864.528859][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  864.529218][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  864.529362][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  864.529759][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  864.529912][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  869.537037][    C1] net_ratelimit: 13197 callbacks suppressed
[  869.537095][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  869.537627][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  869.538141][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  869.538655][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  869.539161][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  869.539454][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  869.539705][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  869.540001][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  869.540255][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  869.540543][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  874.546915][    C1] net_ratelimit: 13983 callbacks suppressed
[  874.546963][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  874.547499][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  874.548004][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  874.548687][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  874.549249][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  874.549417][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  874.549747][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  874.550076][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  874.550250][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  874.550736][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  879.556939][    C1] net_ratelimit: 14011 callbacks suppressed
[  879.556984][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  879.557533][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  879.557770][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  879.558083][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  879.558281][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  879.558627][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  879.558797][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  879.559269][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  879.559307][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  879.559816][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  884.567622][    C1] net_ratelimit: 13628 callbacks suppressed
[  884.567664][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  884.567965][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  884.568269][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  884.568775][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  884.569285][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  884.569827][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  884.570338][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  884.570841][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  884.571141][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  884.571353][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  889.577164][    C1] net_ratelimit: 13706 callbacks suppressed
[  889.577211][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  889.577758][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  889.578315][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  889.578930][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  889.579469][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  889.580022][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  889.580211][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  889.580564][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  889.580766][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  889.581152][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  894.587225][    C1] net_ratelimit: 13690 callbacks suppressed
[  894.587280][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  894.587836][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  894.588386][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  894.588962][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  894.589554][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  894.589835][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  894.590099][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  894.590383][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  894.590652][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  894.590969][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  899.597048][    C1] net_ratelimit: 13874 callbacks suppressed
[  899.597101][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  899.597186][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  899.597603][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  899.598105][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  899.598568][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  899.598602][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  899.599110][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  899.599608][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  899.600127][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  899.600632][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  903.283193][ T5627] Bluetooth: hci1: command 0x0406 tx timeout
[  904.607333][    C1] net_ratelimit: 13356 callbacks suppressed
[  904.607377][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  904.607432][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  904.607868][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  904.607979][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  904.608367][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  904.608534][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  904.608850][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  904.609163][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  904.609405][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  904.610083][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  909.617076][    C1] net_ratelimit: 13722 callbacks suppressed
[  909.617119][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  909.617708][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  909.618264][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  909.618810][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  909.619358][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  909.619666][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  909.619898][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  909.620171][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  909.620480][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  909.620682][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  914.627140][    C1] net_ratelimit: 13910 callbacks suppressed
[  914.627181][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  914.627313][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  914.627728][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  914.627884][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  914.628282][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  914.628427][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  914.628832][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  914.628961][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  914.629373][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  914.629963][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  919.636972][    C0] net_ratelimit: 13359 callbacks suppressed
[  919.637016][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  919.640041][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  919.640503][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  919.640970][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  919.641428][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  919.641896][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  919.644315][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  919.647301][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  919.647766][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  919.648256][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  922.205752][   T52] Bluetooth: hci5: command tx timeout
[  924.647343][    C1] net_ratelimit: 13103 callbacks suppressed
[  924.647391][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  924.647914][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  924.648466][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  924.648694][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  924.648994][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  924.649612][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  924.650147][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  924.650692][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  924.651237][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  924.651786][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  929.656922][    C1] net_ratelimit: 13623 callbacks suppressed
[  929.656960][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  929.657510][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  929.658075][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  929.658618][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  929.659176][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  929.659598][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  929.659720][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  929.660139][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  929.660274][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  929.660857][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  934.666913][    C1] net_ratelimit: 13374 callbacks suppressed
[  934.666962][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  934.667530][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  934.668082][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  934.668115][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  934.668611][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  934.668689][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  934.669141][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  934.669247][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  934.669649][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  934.669816][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  939.051898][T26349] Bluetooth: hci3: command 0x0406 tx timeout
[  939.677110][    C0] net_ratelimit: 13367 callbacks suppressed
[  939.677139][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  939.677335][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  939.677690][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  939.677887][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  939.678238][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  939.678516][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  939.678771][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  939.679072][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  939.679322][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  939.679651][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  944.686995][    C1] net_ratelimit: 13339 callbacks suppressed
[  944.687047][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  944.687570][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  944.688074][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  944.688296][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  944.688583][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  944.689137][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  944.689236][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  944.689645][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  944.689795][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  944.690187][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  949.697161][    C1] net_ratelimit: 13575 callbacks suppressed
[  949.697201][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  949.697213][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  949.697774][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  949.697786][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  949.698342][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  949.698831][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  949.699326][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  949.699841][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  949.700350][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  949.700822][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  954.707289][    C1] net_ratelimit: 13538 callbacks suppressed
[  954.707339][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  954.707915][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  954.708463][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  954.709021][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  954.709609][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  954.709794][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  954.710371][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  954.710431][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  954.710930][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  954.711475][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  959.717221][    C1] net_ratelimit: 13303 callbacks suppressed
[  959.717266][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  959.717673][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  959.717813][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  959.718217][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  959.718368][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  959.718731][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  959.718911][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  959.719322][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  959.719454][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  959.719860][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  964.726962][    C1] net_ratelimit: 13801 callbacks suppressed
[  964.727009][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  964.727505][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  964.727511][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  964.728051][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  964.728055][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  964.728548][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  964.729048][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  964.729545][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  964.729939][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  964.730065][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  965.466463][T22766] Bluetooth: hci4: command 0x0406 tx timeout
[  969.736907][    C0] net_ratelimit: 13955 callbacks suppressed
[  969.736951][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  969.736957][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  969.737468][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  969.737515][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  969.737971][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  969.738511][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  969.739011][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  969.739535][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  969.740019][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  969.740150][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  974.747209][    C1] net_ratelimit: 13519 callbacks suppressed
[  974.747265][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  974.747815][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  974.748367][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  974.748694][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  974.749158][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  974.749194][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  974.749718][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  974.750273][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  974.750816][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  974.750933][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  979.757220][    C1] net_ratelimit: 13573 callbacks suppressed
[  979.757266][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  979.757472][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  979.757785][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  979.758289][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  979.758804][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  979.759340][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  979.759928][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  979.760451][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  979.760778][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  979.760962][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  984.766912][    C0] net_ratelimit: 13524 callbacks suppressed
[  984.766959][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0)
[  984.767406][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  984.767469][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  984.767956][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  984.768041][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  984.768514][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  984.768592][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  984.769067][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  984.769653][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  984.770213][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  989.777190][    C1] net_ratelimit: 13006 callbacks suppressed
[  989.777251][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  989.777795][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  989.778338][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  989.778906][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  989.779132][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  989.779457][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  989.779672][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  989.780035][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  989.780587][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  989.781190][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0)
[  990.990595][   T32] INFO: task syz.0.6237:26335 blocked for more than 143 seconds.
[  990.990621][   T32]       Not tainted syzkaller #0
[  990.990632][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  990.990642][   T32] task:syz.0.6237      state:D stack:26624 pid:26335 tgid:26329 ppid:24539  task_flags:0x400140 flags:0x00080002
[  990.990699][   T32] Call Trace:
[  990.990707][   T32]  <TASK>
[  990.990721][   T32]  __schedule+0x17db/0x58f0
[  990.990776][   T32]  ? __skb_flow_dissect+0x652a/0x6d50
[  990.990807][   T32]  ? __pfx___schedule+0x10/0x10
[  990.990840][   T32]  ? schedule+0x90/0x2b0
[  990.990868][   T32]  schedule+0x164/0x2b0
[  990.990895][   T32]  schedule_preempt_disabled+0x13/0x30
[  990.990929][   T32]  __mutex_lock+0x7c1/0x1550
[  990.990961][   T32]  ? __mutex_lock+0x5d4/0x1550
[  990.990992][   T32]  ? nfnetlink_rcv_msg+0xa69/0x12b0
[  990.991018][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  990.991057][   T32]  ? nfnetlink_rcv_msg+0x228/0x12b0
[  990.991083][   T32]  nfnetlink_rcv_msg+0xa69/0x12b0
[  990.991102][   T32]  ? unwind_get_return_address+0x4d/0x90
[  990.991128][   T32]  ? nfnetlink_rcv_msg+0x228/0x12b0
[  990.991167][   T32]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  990.991238][   T32]  netlink_rcv_skb+0x226/0x4a0
[  990.991264][   T32]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  990.991287][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  990.991320][   T32]  ? bpf_lsm_capable+0x9/0x20
[  990.991348][   T32]  ? security_capable+0x7e/0x2c0
[  990.991377][   T32]  nfnetlink_rcv+0x2b9/0x28c0
[  990.991402][   T32]  ? __dev_queue_xmit+0x29b/0x3820
[  990.991428][   T32]  ? __local_bh_enable_ip+0xd6/0x140
[  990.991453][   T32]  ? lockdep_hardirqs_on+0x7b/0x110
[  990.991479][   T32]  ? __dev_queue_xmit+0x29b/0x3820
[  990.991500][   T32]  ? __local_bh_enable_ip+0xd6/0x140
[  990.991523][   T32]  ? __dev_queue_xmit+0x29b/0x3820
[  990.991544][   T32]  ? __dev_queue_xmit+0x1edc/0x3820
[  990.991565][   T32]  ? do_syscall_64+0x166/0x520
[  990.991591][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.991625][   T32]  ? __dev_queue_xmit+0x29b/0x3820
[  990.991647][   T32]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  990.991675][   T32]  ? __pfx___dev_queue_xmit+0x10/0x10
[  990.991705][   T32]  ? ref_tracker_free+0x689/0x830
[  990.991731][   T32]  ? __pfx_ref_tracker_free+0x10/0x10
[  990.991751][   T32]  ? __asan_memcpy+0x40/0x70
[  990.991779][   T32]  ? __skb_clone+0x5c/0x6c0
[  990.991805][   T32]  ? __skb_clone+0x449/0x6c0
[  990.991832][   T32]  ? skb_clone+0x246/0x3a0
[  990.991856][   T32]  ? __netlink_deliver_tap+0x811/0x860
[  990.991878][   T32]  ? netlink_deliver_tap+0x2e/0x1b0
[  990.991912][   T32]  ? netlink_deliver_tap+0x2e/0x1b0
[  990.991934][   T32]  ? netlink_deliver_tap+0x2e/0x1b0
[  990.991963][   T32]  netlink_unicast+0x7bd/0x940
[  990.991995][   T32]  netlink_sendmsg+0x813/0xb40
[  990.992028][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  990.992061][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  990.992092][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  990.992114][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  990.992143][   T32]  ____sys_sendmsg+0x54e/0x850
[  990.992170][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  990.992200][   T32]  ? import_iovec+0x73/0xa0
[  990.992226][   T32]  ___sys_sendmsg+0x2a5/0x360
[  990.992246][   T32]  ? __lock_acquire+0x6df/0x2e50
[  990.992271][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  990.992296][   T32]  ? futex_wait+0x2a2/0x390
[  990.992394][   T32]  ? __fget_files+0x2a/0x420
[  990.992417][   T32]  ? __fget_files+0x3a2/0x420
[  990.992452][   T32]  __x64_sys_sendmsg+0x1b1/0x290
[  990.992476][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  990.992519][   T32]  do_syscall_64+0x166/0x520
[  990.992545][   T32]  ? trace_irq_disable+0x3b/0x140
[  990.992563][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.992582][   T32]  ? clear_bhb_loop+0x70/0xc0
[  990.992606][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.992626][   T32] RIP: 0033:0x7f787bb9e159
[  990.992644][   T32] RSP: 002b:00007f787ca16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  990.992664][   T32] RAX: ffffffffffffffda RBX: 00007f787be26270 RCX: 00007f787bb9e159
[  990.992679][   T32] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008
[  990.992691][   T32] RBP: 00007f787bc35024 R08: 0000000000000000 R09: 0000000000000000
[  990.992704][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  990.992717][   T32] R13: 00007f787be26308 R14: 00007f787be26270 R15: 00007ffe62849008
[  990.992749][   T32]  </TASK>
[  990.992769][   T32] 
[  990.992769][   T32] Showing all locks held in the system:
[  990.992785][   T32] locks held by kthreadd/2: 1, last CPU#1:
[  990.992924][   T32]  #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  990.993015][   T32] locks held by kworker/u8:0/12: 4, on CPU#1:
[  990.993029][   T32]  #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.993080][   T32]  #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.993128][   T32]  #2: ffffffff90242108 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  990.993171][   T32]  #3: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x274/0xb10
[  990.993253][   T32] locks held by kworker/R-mm_pe/14: 1, last CPU#0:
[  990.993267][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  990.993318][   T32] locks held by pr/ttyS0/16: 1, last CPU#1:
[  990.993332][   T32]  #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  990.993380][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[  990.993393][   T32]  #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  990.993446][   T32] locks held by kworker/u8:2/41: 3, on CPU#1:
[  990.993460][   T32]  #0: ffff88803225f940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.993509][   T32]  #1: ffffc90000b17c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.993559][   T32]  #2: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  990.993614][   T32] locks held by kworker/u8:3/50: 3, on CPU#1:
[  990.993627][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.993677][   T32]  #1: ffffc90000bb7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.993726][   T32]  #2: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  990.993775][   T32] locks held by kworker/u8:4/61: 4, last CPU#1:
[  990.993788][   T32]  #0: ffff8880779d9940 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.993838][   T32]  #1: ffffc9000202fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.993888][   T32]  #2: ffff888032021280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  990.993941][   T32]  #3: ffff8880686d5060 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: rds_tcp_tune+0x220/0x920
[  990.993987][   T32] locks held by kworker/u8:6/144: 4, last CPU#1:
[  990.994001][   T32]  #0: ffff88807a151140 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.994063][   T32]  #1: ffffc90002d77c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.994110][   T32]  #2: ffff888076cdd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  990.994195][   T32]  #3: ffff888051023ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  990.994245][   T32] locks held by kworker/u8:7/161: 4, last CPU#1:
[  990.994259][   T32]  #0: ffff88805c1b2140 ((wq_completion)wg-kex-wg0#21){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.994312][   T32]  #1: ffffc90002d87c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.994362][   T32]  #2: ffff8880293ad440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  990.994412][   T32]  #3: ffff888056cac888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  990.994462][   T32] locks held by kworker/0:2/191: 3, last CPU#0:
[  990.994476][   T32]  #0: ffff88807f944140 ((wq_completion)wg-kex-wg2#24){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.994529][   T32]  #1: ffffc90002e57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.994590][   T32]  #2: ffff888051026640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  990.994641][   T32] locks held by kworker/u8:8/280: 4, last CPU#1:
[  990.994654][   T32]  #0: ffff888078e42140 ((wq_completion)wg-kex-wg1#25){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.994708][   T32]  #1: ffffc90002df7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.994758][   T32]  #2: ffff888029fed440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  990.994808][   T32]  #3: ffff8880564234b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  990.994863][   T32] locks held by kworker/0:3/2242: 4, last CPU#0:
[  990.994877][   T32]  #0: ffff888025ca4940 ((wq_completion)wg-kex-wg1#18){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.994938][   T32]  #1: ffffc900067ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.995000][   T32]  #2: ffff888051020d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  990.995049][   T32]  #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  990.995113][   T32] locks held by kworker/u8:12/3022: 2, last CPU#1:
[  990.995127][   T32]  #0: ffff88804d8f2940 ((wq_completion)wg-kex-wg2#23){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.995180][   T32]  #1: ffffc9000da8fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.995231][   T32] locks held by kworker/R-bat_e/3229: 2, last CPU#1:
[  990.995245][   T32]  #0: ffff88803262d940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.995293][   T32]  #1: ffffc9000de0fc20 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.995343][   T32] locks held by kworker/u8:13/4053: 4, on CPU#0:
[  990.995356][   T32]  #0: ffff88804d8f2940 ((wq_completion)wg-kex-wg2#23){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.995410][   T32]  #1: ffffc9000ecefc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.995459][   T32]  #2: ffff88804ef19440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  990.995510][   T32]  #3: ffff888051026640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  990.995561][   T32] locks held by klogd/4976: 1, last CPU#1:
[  990.995574][   T32]  #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  990.995627][   T32] locks held by udevd/4987: 1, last CPU#1:
[  990.995640][   T32]  #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  990.995692][   T32] locks held by dhcpcd/5282: 1, on CPU#1:
[  990.995706][   T32]  #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50
[  990.995751][   T32] locks held by crond/5359: 2, last CPU#1:
[  990.995762][   T32]  #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  990.995813][   T32]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  990.995859][   T32] locks held by getty/5378: 2, on CPU#0:
[  990.995872][   T32]  #0: ffff8880325540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  990.996005][   T32]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  990.996051][   T32] locks held by syz-executor/5607: 2, last CPU#1:
[  990.996070][   T32]  #0: ffff888012a369b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  990.996117][   T32]  #1: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  990.996169][   T32] locks held by kworker/R-wg-cr/5704: 1, on CPU#1:
[  990.996183][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  990.996235][   T32] locks held by kworker/R-wg-cr/5707: 1, on CPU#0:
[  990.996249][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  990.996300][   T32] locks held by kworker/R-wg-cr/5717: 1, on CPU#1:
[  990.996313][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  990.996366][   T32] locks held by kworker/R-wg-cr/5718: 1, on CPU#1:
[  990.996380][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  990.996430][   T32] locks held by kworker/1:4/5727: 4, on CPU#1:
[  990.996444][   T32]  #0: ffff888026e79940 ((wq_completion)wg-kex-wg2#26){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.996496][   T32]  #1: ffffc90004867c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.996556][   T32]  #2: ffff8880294e9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  990.996608][   T32]  #3: ffff8880564220e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  990.996661][   T32] locks held by kworker/R-bond1/7561: 1, on CPU#0:
[  990.996675][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  990.996724][   T32] locks held by kworker/1:12/7689: 5, last CPU#1:
[  990.996737][   T32]  #0: ffff88807a07d540 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  990.996791][   T32]  #1: ffffc90005d8fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.008651][   T32]  #2: ffff888056cad270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  991.008705][   T32]  #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  991.008757][   T32]  #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  991.008806][   T32] locks held by kworker/1:16/7693: 3, on CPU#1:
[  991.008820][   T32]  #0: ffff888025ca4940 ((wq_completion)wg-kex-wg1#18){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.008875][   T32]  #1: ffffc9000600fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.008942][   T32]  #2: ffff888051020d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  991.008993][   T32] locks held by kworker/1:17/7694: 3, on CPU#1:
[  991.009007][   T32]  #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.009057][   T32]  #1: ffffc9000601fc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.009106][   T32]  #2: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110
[  991.009239][   T32] locks held by kworker/0:10/7696: 4, last CPU#0:
[  991.009255][   T32]  #0: ffff888026e79940 ((wq_completion)wg-kex-wg2#26){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.009308][   T32]  #1: ffffc9000602fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.009370][   T32]  #2: ffff8880294e9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  991.009421][   T32]  #3: ffff8880564220e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  991.009472][   T32] locks held by kworker/0:11/7697: 3, last CPU#0:
[  991.009486][   T32]  #0: ffff88807bb9e940 ((wq_completion)wg-kex-wg2#22){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.009539][   T32]  #1: ffffc9000604fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.009600][   T32]  #2: ffff88804d155440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  991.009655][   T32] locks held by kworker/R-bond4/11123: 1, on CPU#0:
[  991.009668][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  991.009726][   T32] locks held by kworker/R-bond2/18699: 1, on CPU#0:
[  991.009740][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  991.009788][   T32] locks held by kworker/R-bond2/20258: 1, on CPU#0:
[  991.009801][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  991.009853][   T32] locks held by kworker/R-bond3/24160: 1, on CPU#0:
[  991.009866][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  991.009925][   T32] locks held by kworker/R-wg-cr/24658: 1, on CPU#0:
[  991.009939][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  991.009990][   T32] locks held by kworker/0:0/24834: 3, last CPU#0:
[  991.010004][   T32]  #0: ffff88807a07d540 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.010057][   T32]  #1: ffffc90004eb7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.010117][   T32]  #2: ffff888056cad450 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0
[  991.010201][   T32] locks held by kworker/R-wg-cr/25203: 1, on CPU#1:
[  991.010215][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  991.010267][   T32] locks held by kworker/R-wg-cr/25204: 1, on CPU#0:
[  991.010280][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  991.010331][   T32] locks held by kworker/R-wg-cr/25205: 1, on CPU#0:
[  991.010344][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  991.010396][   T32] locks held by kworker/0:1/25302: 2, last CPU#0:
[  991.010408][   T32]  #0: ffff888057e8e540 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.010461][   T32]  #1: ffffc9000389fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.010522][   T32] locks held by kworker/R-wg-cr/25525: 1, last CPU#0:
[  991.010535][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  991.010586][   T32] locks held by kworker/R-wg-cr/25526: 1, on CPU#1:
[  991.010600][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  991.010651][   T32] locks held by kworker/R-wg-cr/25530: 2, last CPU#1:
[  991.010665][   T32]  #0: ffff88803ad60940 ((wq_completion)wg-crypt-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.010718][   T32]  #1: ffffc9000525fc20 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.010780][   T32] locks held by kworker/R-bond2/26036: 1, on CPU#0:
[  991.010794][   T32]  #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  991.010844][   T32] locks held by syz-executor/26088: 2, on CPU#1:
[  991.010858][   T32]  #0: ffffffff907a4f70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  991.010917][   T32]  #1: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[  991.010960][   T32] locks held by kworker/u8:1/26122: 5, last CPU#1:
[  991.010978][   T32]  #0: ffff88807b02c940 ((wq_completion)krds_cp_wq#13/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.011027][   T32]  #1: ffffc90005f9fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.011076][   T32]  #2: ffff8880530fe780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  991.011122][   T32]  #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  991.011174][   T32]  #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  991.011221][   T32] locks held by kworker/1:0/26249: 4, on CPU#1:
[  991.011235][   T32]  #0: ffff88804edc8940 ((wq_completion)wg-kex-wg1#21){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.011290][   T32]  #1: ffffc900044dfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.011351][   T32]  #2: ffff8880293a9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  991.011403][   T32]  #3: ffff888056cadc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  991.011453][   T32] locks held by syz.1.6233/26300: 1, last CPU#1:
[  991.011466][   T32]  #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  991.011575][   T32] locks held by syz.0.6237/26333: 2, last CPU#1:
[  991.011589][   T32]  #0: ffffffff9aee14e0 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0
[  991.011635][   T32]  #1: ffff888029c4a6e8 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0
[  991.011682][   T32] locks held by syz.0.6237/26335: 1, on CPU#1:
[  991.011695][   T32]  #0: ffffffff9aee14e0 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0
[  991.011741][   T32] locks held by syz.4.6238/26336: 1, on CPU#1:
[  991.011755][   T32]  #0: ffffffff90562be0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4b/0x220
[  991.011865][   T32] locks held by syz.4.6238/26337: 2, on CPU#1:
[  991.011879][   T32]  #0: ffffffff902c17e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  991.011936][   T32]  #1: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890
[  991.011982][   T32] locks held by syz.4.6238/26341: 2, on CPU#1:
[  991.011995][   T32]  #0: ffffffff90562be0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x196/0x560
[  991.012047][   T32]  #1: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x1e/0x50
[  991.012096][   T32] locks held by syz.4.6238/26344: 1, on CPU#1:
[  991.012109][   T32]  #0: ffffffff90562be0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x196/0x560
[  991.012161][   T32] locks held by syz.3.6239/26342: 2, on CPU#1:
[  991.012174][   T32]  #0: ffff888076d116e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0
[  991.012220][   T32]  #1: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14a0
[  991.012263][   T32] locks held by syz.3.6239/26343: 1, on CPU#1:
[  991.012276][   T32]  #0: ffff888076d116e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0
[  991.012322][   T32] locks held by kworker/u8:5/26345: 5, last CPU#0:
[  991.012335][   T32]  #0: ffff88802d6ed140 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.012389][   T32]  #1: ffffc90003b57c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.012439][   T32]  #2: ffff88802926d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  991.012489][   T32]  #3: ffff888051020330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  991.012538][   T32]  #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0
[  991.012591][   T32] locks held by kworker/u8:9/26346: 4, on CPU#0:
[  991.012604][   T32]  #0: ffff88805c1b1940 ((wq_completion)wg-kex-wg1#22){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.012658][   T32]  #1: ffffc90003ed7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.012706][   T32]  #2: ffff8880293a9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  991.012756][   T32]  #3: ffff888056cadc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  991.012805][   T32] locks held by kworker/u8:10/26347: 4, last CPU#1:
[  991.012819][   T32]  #0: ffff88802d6ed940 ((wq_completion)wg-kex-wg1#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.012873][   T32]  #1: ffffc900053dfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.012929][   T32]  #2: ffff8880259b5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  991.012979][   T32]  #3: ffff888051021700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  991.013030][   T32] locks held by kworker/0:4/26348: 3, last CPU#0:
[  991.013044][   T32]  #0: ffff88804edc8940 ((wq_completion)wg-kex-wg1#21){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.013097][   T32]  #1: ffffc9000ab0fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  991.013159][   T32]  #2: ffff888056cadc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  991.013213][   T32] 
[  991.013218][   T32] =============================================
[  991.013218][   T32] 
[  991.013235][   T32] NMI backtrace for cpu 1
[  991.013249][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  991.013270][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  991.013282][   T32] Call Trace:
[  991.013289][   T32]  <TASK>
[  991.013299][   T32]  dump_stack_lvl+0xe8/0x150
[  991.013327][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  991.013351][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  991.013381][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  991.013406][   T32]  sys_info+0x135/0x170
[  991.013425][   T32]  watchdog+0xfd7/0x1030
[  991.013461][   T32]  ? watchdog+0x1c7/0x1030
[  991.013485][   T32]  kthread+0x38b/0x480
[  991.013504][   T32]  ? __pfx_watchdog+0x10/0x10
[  991.013520][   T32]  ? __pfx_kthread+0x10/0x10
[  991.013539][   T32]  ret_from_fork+0x514/0xb70
[  991.013561][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  991.013589][   T32]  ? __switch_to+0xc89/0x1420
[  991.013617][   T32]  ? __pfx_kthread+0x10/0x10
[  991.013636][   T32]  ret_from_fork_asm+0x1a/0x30
[  991.013679][   T32]  </TASK>
[  991.013687][   T32] Sending NMI from CPU 1 to CPUs 0:
[  991.013717][    C0] NMI backtrace for cpu 0
[  991.013730][    C0] CPU: 0 UID: 0 PID: 26345 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  991.013752][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  991.013765][    C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker
[  991.013799][    C0] RIP: 0010:unwind_next_frame+0x29b/0x2550
[  991.013823][    C0] Code: 00 00 45 39 e8 0f 84 07 04 00 00 4a 8d 14 ad f4 21 8d 90 45 29 e8 4e 8d 24 82 49 83 c4 fc 49 89 d5 4c 39 e2 0f 86 22 02 00 00 <49> 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 14 46
[  991.013841][    C0] RSP: 0018:ffffc90000006ae0 EFLAGS: 00000202
[  991.013857][    C0] RAX: ffffffff90ef9b20 RBX: ffffffff90ef9b24 RCX: ffffffff90ef9b28
[  991.013874][    C0] RDX: ffffffff90ef9b24 RSI: ffffffff919c7038 RDI: ffffffff8c6d9420
[  991.013889][    C0] RBP: ffffffff89b487fc R08: 0000000000000001 R09: 0000000000000000
[  991.013903][    C0] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff90ef9b24
[  991.013917][    C0] R13: ffffffff90ef9b24 R14: ffffc90000006b88 R15: ffffffff90ef9b28
[  991.013933][    C0] FS:  0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000
[  991.013950][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  991.013964][    C0] CR2: 000055558864d4e8 CR3: 00000000a1f58000 CR4: 00000000003526f0
[  991.013986][    C0] Call Trace:
[  991.013993][    C0]  <IRQ>
[  991.014004][    C0]  ? net_rx_action+0x61d/0xf50
[  991.014033][    C0]  ? unwind_next_frame+0x8f/0x2550
[  991.014058][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  991.014090][    C0]  arch_stack_walk+0x11b/0x150
[  991.014116][    C0]  ? net_rx_action+0x61d/0xf50
[  991.014147][    C0]  stack_trace_save+0xa9/0x100
[  991.014177][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  991.014210][    C0]  ? __lock_acquire+0x6df/0x2e50
[  991.014231][    C0]  kasan_save_track+0x3e/0x80
[  991.014250][    C0]  ? kasan_save_track+0x3e/0x80
[  991.014267][    C0]  ? kasan_save_free_info+0x40/0x50
[  991.014293][    C0]  ? __kasan_slab_free+0x5c/0x80
[  991.014313][    C0]  ? kmem_cache_free+0x182/0x650
[  991.014331][    C0]  ? skb_release_head_state+0x274/0x370
[  991.014350][    C0]  ? __kfree_skb+0x24/0x210
[  991.014367][    C0]  ? ip6_mc_input+0x878/0xc80
[  991.014388][    C0]  ? ip_sabotage_in+0x1e1/0x270
[  991.014494][    C0]  ? nf_hook_slow+0xc5/0x220
[  991.014520][    C0]  ? NF_HOOK+0x21f/0x3c0
[  991.014537][    C0]  ? netif_receive_skb+0x278/0xbf0
[  991.014563][    C0]  ? NF_HOOK+0xa4/0x3a0
[  991.014609][    C0]  ? br_handle_frame_finish+0x1136/0x1950
[  991.014632][    C0]  ? br_nf_hook_thresh+0x3dd/0x4c0
[  991.014654][    C0]  ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40
[  991.014680][    C0]  ? br_nf_pre_routing_ipv6+0x382/0x6f0
[  991.014704][    C0]  ? br_handle_frame+0x127f/0x1510
[  991.014726][    C0]  ? __netif_receive_skb_core+0x989/0x30c0
[  991.014753][    C0]  ? process_backlog+0x727/0x18b0
[  991.014781][    C0]  ? __napi_poll+0xaa/0x330
[  991.014805][    C0]  ? net_rx_action+0x61d/0xf50
[  991.014855][    C0]  ? skb_release_head_state+0x274/0x370
[  991.014873][    C0]  kasan_save_free_info+0x40/0x50
[  991.014900][    C0]  __kasan_slab_free+0x5c/0x80
[  991.014920][    C0]  kmem_cache_free+0x182/0x650
[  991.014943][    C0]  skb_release_head_state+0x274/0x370
[  991.014965][    C0]  __kfree_skb+0x24/0x210
[  991.014984][    C0]  ip6_mc_input+0x878/0xc80
[  991.015008][    C0]  ? __pfx_ip6_mc_input+0x10/0x10
[  991.015032][    C0]  ? ip6_rcv_finish+0x265/0x280
[  991.015052][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  991.015071][    C0]  ip_sabotage_in+0x1e1/0x270
[  991.015093][    C0]  ? __pfx_ip_sabotage_in+0x10/0x10
[  991.015118][    C0]  nf_hook_slow+0xc5/0x220
[  991.015148][    C0]  NF_HOOK+0x21f/0x3c0
[  991.015168][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  991.015187][    C0]  ? NF_HOOK+0x9e/0x3c0
[  991.015205][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  991.015223][    C0]  ? ip6_rcv_core+0xa1/0x1870
[  991.015243][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  991.015266][    C0]  ? netif_receive_skb+0x102/0xbf0
[  991.015292][    C0]  netif_receive_skb+0x278/0xbf0
[  991.015317][    C0]  ? lock_acquire+0x115/0x350
[  991.015337][    C0]  ? __pfx_netif_receive_skb+0x10/0x10
[  991.015365][    C0]  ? br_netif_receive_skb+0x126/0x190
[  991.015391][    C0]  NF_HOOK+0xa4/0x3a0
[  991.015418][    C0]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  991.015441][    C0]  ? NF_HOOK+0xfa/0x3a0
[  991.015462][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  991.015486][    C0]  ? __pfx_br_netif_receive_skb+0x10/0x10
[  991.015512][    C0]  ? br_pass_frame_up+0x275/0x420
[  991.015537][    C0]  br_handle_frame_finish+0x1136/0x1950
[  991.015568][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  991.015591][    C0]  ? ip6t_do_table+0x1d1/0x15b0
[  991.015620][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  991.015648][    C0]  ? nf_hook_slow+0x176/0x220
[  991.015675][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  991.015698][    C0]  br_nf_hook_thresh+0x3dd/0x4c0
[  991.015721][    C0]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[  991.015778][    C0]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  991.015802][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  991.015826][    C0]  ? __pfx_nf_nat_ipv6_in+0x10/0x10
[  991.015849][    C0]  ? lock_acquire+0x115/0x350
[  991.015871][    C0]  br_nf_pre_routing_finish_ipv6+0x90c/0xc40
[  991.015896][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  991.015923][    C0]  br_nf_pre_routing_ipv6+0x382/0x6f0
[  991.015950][    C0]  ? br_nf_pre_routing_ipv6+0x43d/0x6f0
[  991.015975][    C0]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  991.016002][    C0]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  991.016027][    C0]  ? br_nf_pre_routing+0x720/0x14b0
[  991.016054][    C0]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  991.016076][    C0]  br_handle_frame+0x127f/0x1510
[  991.016105][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  991.016129][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  991.016152][    C0]  ? kasan_quarantine_put+0xbb/0x1f0
[  991.016182][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  991.016214][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  991.016236][    C0]  __netif_receive_skb_core+0x989/0x30c0
[  991.016275][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  991.016301][    C0]  ? ip6_rcv_finish+0x265/0x280
[  991.016322][    C0]  ? NF_HOOK+0x336/0x3c0
[  991.016352][    C0]  ? process_backlog+0x3de/0x18b0
[  991.016380][    C0]  ? process_backlog+0x3de/0x18b0
[  991.016417][    C0]  process_backlog+0x727/0x18b0
[  991.016448][    C0]  ? process_backlog+0x3de/0x18b0
[  991.016484][    C0]  __napi_poll+0xaa/0x330
[  991.016512][    C0]  net_rx_action+0x61d/0xf50
[  991.016548][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  991.016575][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  991.016608][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  991.016636][    C0]  handle_softirqs+0x226/0x860
[  991.016663][    C0]  ? do_softirq+0x77/0xd0
[  991.016691][    C0]  ? kernel_fpu_end+0x62/0x80
[  991.016714][    C0]  do_softirq+0x77/0xd0
[  991.016738][    C0]  </IRQ>
[  991.016745][    C0]  <TASK>
[  991.016752][    C0]  __local_bh_enable_ip+0x100/0x140
[  991.016778][    C0]  blake2s_compress+0xfa/0x1c00
[  991.016835][    C0]  ? __asan_memset+0x22/0x50
[  991.016862][    C0]  ? encode_point+0x8346/0x84b0
[  991.016891][    C0]  ? __pfx_encode_point+0x10/0x10
[  991.016913][    C0]  ? kernel_fpu_begin_mask+0x2bb/0x380
[  991.016939][    C0]  ? __pfx_blake2s_compress+0x10/0x10
[  991.016961][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  991.016986][    C0]  ? kernel_fpu_end+0x62/0x80
[  991.017020][    C0]  blake2s_update+0x140/0x450
[  991.017048][    C0]  hmac+0x2d1/0x3b0
[  991.017073][    C0]  ? __pfx_hmac+0x10/0x10
[  991.017113][    C0]  ? kdf+0x13d/0x290
[  991.017140][    C0]  kdf+0x184/0x290
[  991.017167][    C0]  ? __pfx_kdf+0x10/0x10
[  991.017206][    C0]  wg_noise_handshake_create_initiation+0x29e/0x810
[  991.017236][    C0]  ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10
[  991.017266][    C0]  ? __lock_acquire+0x6df/0x2e50
[  991.017293][    C0]  ? do_raw_spin_unlock+0xf5/0x200
[  991.017328][    C0]  ? lock_acquire+0x115/0x350
[  991.017351][    C0]  ? ktime_get_coarse_with_offset+0x8a/0x150
[  991.017376][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  991.017420][    C0]  ? ktime_get_coarse_with_offset+0x8a/0x150
[  991.017442][    C0]  ? ktime_get_coarse_with_offset+0x102/0x150
[  991.017466][    C0]  wg_packet_handshake_send_worker+0x18c/0x370
[  991.017502][    C0]  ? __pfx_wg_packet_handshake_send_worker+0x10/0x10
[  991.017534][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  991.017575][    C0]  ? rcu_is_watching+0x16/0xb0
[  991.017601][    C0]  ? process_scheduled_works+0x97a/0x1630
[  991.017627][    C0]  process_scheduled_works+0xc3d/0x1630
[  991.017654][    C0]  ? __lock_acquire+0x6df/0x2e50
[  991.017691][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  991.017722][    C0]  ? assign_work+0x3cf/0x5d0
[  991.017750][    C0]  worker_thread+0xa47/0xfb0
[  991.017793][    C0]  kthread+0x38b/0x480
[  991.017813][    C0]  ? __pfx_worker_thread+0x10/0x10
[  991.017839][    C0]  ? __pfx_kthread+0x10/0x10
[  991.017860][    C0]  ret_from_fork+0x514/0xb70
[  991.017880][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  991.017912][    C0]  ? __switch_to+0xc89/0x1420
[  991.017942][    C0]  ? __pfx_kthread+0x10/0x10
[  991.017962][    C0]  ret_from_fork_asm+0x1a/0x30
[  991.018003][    C0]  </TASK>
[  994.496743][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  998.131019][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  998.140128][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  998.150208][   T32] Call Trace:
[  998.153488][   T32]  <TASK>
[  998.156418][   T32]  vpanic+0x56d/0xa60
[  998.160415][   T32]  ? __pfx___schedule+0x10/0x10
[  998.165275][   T32]  ? __pfx_vpanic+0x10/0x10
[  998.169797][   T32]  panic+0xc5/0xd0
[  998.173528][   T32]  ? __pfx_panic+0x10/0x10
[  998.177950][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  998.183418][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  998.188800][   T32]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  998.194964][   T32]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  998.201131][   T32]  watchdog+0x1030/0x1030
[  998.205482][   T32]  ? watchdog+0x1c7/0x1030
[  998.209907][   T32]  kthread+0x38b/0x480
[  998.213979][   T32]  ? __pfx_watchdog+0x10/0x10
[  998.218654][   T32]  ? __pfx_kthread+0x10/0x10
[  998.223252][   T32]  ret_from_fork+0x514/0xb70
[  998.227847][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  998.232972][   T32]  ? __switch_to+0xc89/0x1420
[  998.237662][   T32]  ? __pfx_kthread+0x10/0x10
[  998.242256][   T32]  ret_from_fork_asm+0x1a/0x30
[  998.247046][   T32]  </TASK>
[  998.250218][   T32] Kernel Offset: disabled
[  998.254554][   T32] Rebooting in 86400 seconds..