last executing test programs: 31.23974981s ago: executing program 0 (id=3023): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000000000000010000050000000003000000020000000000000000000000000004000000000000002e2e00f1a0e5b5ee9a62ae615b11536c74d9efdd490af1de0139e79d94ebdaf831cc14ec64b7afafee3c70ae729e74962a716eb62d25366e466b44e334e25a6206a93fa4741ab500994114f02ede7289f4bf3e85a302b670674bdf57d650f45020441ee8cc30dee24c67b912c54ba2408da4649702b4edb6c5516b0c6673d170a16a7defcff52d33e082f21fc6"], 0x0, 0x42}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', 0x0, r0, 0x2, 0x0, 0x5}, 0x50) 31.01497939s ago: executing program 0 (id=3025): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004700)=ANY=[@ANYBLOB="a04400005200010000000000000000001c0000008b4409"], 0x44a0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 30.594933213s ago: executing program 0 (id=3029): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000fedbdf25f9ff0000030004002d04c7cc00114b1250c9a7630924a7dbd90007000d00"], 0x24}}, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (rerun: 32) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r4], 0x4b) 30.004307505s ago: executing program 0 (id=3034): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = accept(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x21, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x4, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x18, 0x7, 0x1}}}}]}, 0x40}}, 0x400) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x14c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x118, 0x2, [@TCA_MATCHALL_ACT={0x114, 0x2, [@m_ctinfo={0x110, 0x10, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xe9}]}, {0xdc, 0x6, "e8c411bad0949cc4567f371a3c4e2c9da3ebbe0b2654f0f960fac969b26827084ae6be86ea46c5fbf9212d0546573479f5d838eab236aba6c8ba1c2759df1e21726e40a6892fcf9eaec769062bbdc0b990dea4648d09dbc85f11fbc7d37f781eb45111fb74f71744f13c9c1b29afa99a10f9abb96ff7c76a68fa979c09c3ab0a08a907843f81d0a45e445f381ff17228a8e91866303fe129998f75ce12086549a18c9ad2cba2697987285c06f0ffef0c7fd3d1b92d73986c1abd3c9ae4a28f2084a298db1dc9138c7c7576aea8d164d6681aaf9602d84771"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x14c}}, 0x800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'macsec0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@isdn={0x22, 0x26, 0x7f, 0xe, 0xfe}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) socket$inet6(0xa, 0x5, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, 0x0, 0x0) 29.055693673s ago: executing program 0 (id=3037): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4(r1, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) 28.91538548s ago: executing program 0 (id=3039): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x48, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x94a}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xcb}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x48, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x94a}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xcb}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=@newtfilter={0x48, 0x2c, 0x10, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xd}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'geneve0\x00'}]}}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept4(r0, 0x0, 0x0, 0x0) (async) r4 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040), 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040), 0x4) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) close(r7) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x2f11, 0x0, 0x0, 0x41000, 0x4e, '\x00', r2, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRESDEC], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000180)=0x4) r8 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r9}) (async) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r9}) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x8916, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x24}, 0x50) 23.10168087s ago: executing program 3 (id=3093): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000030000000030a010200000000000000000100fffb08000b40000000020900010073797a300000000008000a4000000004"], 0xa4}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcc2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000030000000030a010200000000000000000100fffb08000b40000000020900010073797a300000000008000a4000000004"], 0xa4}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) (async) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) socket(0x40000000015, 0x5, 0x0) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcc2}, 0x1c) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) (async) 22.619504842s ago: executing program 3 (id=3098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000067f9bfff00000000fdff6f0341edffffb7082f94c893f89860ee70635c798f173e0000000000007b8af8ff800000b7d3080000000000007b8af0ff00000000bfa10000000000fd6103a1551dbb84100007010000f8ffffffdda400000000000007040000f0a9e6d254029d32", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="270302005902140006008d5988a8", 0xe}], 0x1}, 0x20000000) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}}, 0x800) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r12, 0x84, 0x79, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0) 20.095181873s ago: executing program 3 (id=3103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x5c, 0x0, 0x70, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x3, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3f, 0x3, "acd1e93ad0ea106ddb39225708bb69c808216067eee7c4a0", "561e1642983432c4630021d6bede7e392b9d9a148783918358d915b3071872e0"}}}}}}}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100001040000fff20000000000000000", @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0002000055b9156e08001f0009000000"], 0x50}}, 0x0) 19.745473029s ago: executing program 4 (id=3107): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x913fdc377908132b, 0x4}}]}}]}, 0x7c}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x2008c014) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000280), &(0x7f0000000340)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001ce2ffff1b00000002000000000000000000000f0300000063d038000000000000000f01000000de0000"], 0x0, 0x36}, 0x28) r8 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x4, 0x6, 0xbb118b1d343e2733, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x18841}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r11, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xab}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.923288324s ago: executing program 2 (id=3112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0xffe1, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611488000600fe009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 18.917378919s ago: executing program 4 (id=3113): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={0x0, 0x0, 0x0, &(0x7f00000007c0)=""/231, 0xe7}}, 0x10) writev(r2, &(0x7f0000000040), 0x2) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x2, 0x10001, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x40, 0x8, 0xc}}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000bee1ffff090000000900000010080100", @ANYRES32=r4, @ANYBLOB="08003fac5bf4ee6b704e96688cc0830000000000", @ANYRES32=r5, @ANYRESDEC=r1, @ANYBLOB="0400000000000000010000000100"/24, @ANYRES32, @ANYBLOB], 0x50) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="08002cbd7000fbdbdf250f0000000c00990004000000380400004c001780050006000400000000000000050006000c000000000000000c000500fa247c19aaf6d8ba0c000500f9b458f2cd4675540c000500210722136ceb2acb0c0005002400345df34822730400e20008003500020000002e2d9988dab993528630d1ad900f47d0eed2535cbbc05e7aab1cd147c111512314e3f59ca28d9bb83a6f9f2e5e701a8a24dd25de0c152165450cb23319535e7cf0ed"], 0x78}, 0x1, 0x0, 0x0, 0x40440c0}, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r8) bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) close(0x3) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r10, 0x29, 0x43, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendto$inet6(r10, 0x0, 0x0, 0x11, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 18.818758728s ago: executing program 1 (id=3114): r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) 18.351356704s ago: executing program 1 (id=3115): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) close(r1) setsockopt$sock_timeval(r0, 0x1, 0x2, &(0x7f0000000040), 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e22, @multicast1}, 'wlan0\x00'}) 17.940549616s ago: executing program 3 (id=3116): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x24048800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x24048800) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80200001800a00010071756f7461000000100002800c000140000000000000000014"], 0xf8}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a4000000150a010100000000000000000100000a81000800c36909a113803e2db8cc980f3f1f925db4cbb23796988660b3c8f11219fb0cbb3110b3997faeff8e00ae8bab18f532fd90178a4ea47d73b34a51b991e212d27d98109792ef7e501ae70006ba9c0b5214d1c2200eb52ee6c4428a9f359a73d02469f8528100b01576a0ff161d6b78386a5e42c98c971c1243fde39bc36d000000090002007379723000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x8011}, 0x4191) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010029bd7000fedbdf2500000046000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000001000000003c00000002000000e0000002000000000000000000000000060000000403"], 0xfc}}, 0x0) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8d4) (async) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8d4) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x4000870) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) (async) r9 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r9) sendto$l2tp6(r9, &(0x7f0000000000)="fd", 0x1, 0x88c0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004080) (async) sendmsg$alg(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004080) 17.876463993s ago: executing program 1 (id=3117): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000400)="06", 0x1}, {0x0}], 0x2}}], 0x2a0, 0x20004840) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000040)="c1", 0xfe41) poll(&(0x7f0000000180)=[{r5, 0x4}], 0x1, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f00000000c0), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000180)=0xad, 0x4) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 17.808355602s ago: executing program 4 (id=3118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008005) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 17.807367904s ago: executing program 2 (id=3119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) (async, rerun: 64) r1 = socket$kcm(0xa, 0x922000000003, 0x11) (rerun: 64) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 32) sendmsg$nl_crypto(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000000000000200"/36], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 17.488785081s ago: executing program 2 (id=3120): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x0) bind$tipc(r7, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x4}}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 17.282740316s ago: executing program 3 (id=3121): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x10, 0x5c8}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xc) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000180)={0x1, 0x5, 0x7b, &(0x7f0000000100)=""/123}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x1, 0x1000, 0x8, 0x8, 0x3, 0x2}, {0x7, 0x5, 0x2, 0x2, 0x1, 0x800}], ['\x00', '\x00']}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x50) vmsplice(r5, &(0x7f0000000600)=[{&(0x7f0000000500)="d44e225663b184687ef1907f257c419f1a569f790852562e66bb2a9c5b5ef7744eb51f148b95bea3e49a79465642c49b2d64cc96f10af753d3182fbda64eb6cf554bbf7b424ddc27a658bd7591d52bec0116151b03b3de04b40963ed6b9471482b9564580ff5432ddc1966ad3df6aad51dff28157ffe335ece867dd5d8f857d1423cc8549c92128d18e55ec22273a95f7a3d78b117422442b86be89f2e31a5", 0x9f}, {&(0x7f00000005c0)}], 0x2, 0x8) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@newnexthop={0x48, 0x68, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x2, 0x0, 0x38}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x44}}, @NHA_GROUP={0x1c, 0x2, [{0x2}, {0x0, 0xe6}, {0x1, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4006000}, 0x80) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000780)=0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r5) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r7, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r8 = accept4(r5, &(0x7f0000000940)=@in={0x2, 0x0, @multicast2}, &(0x7f00000009c0)=0x80, 0xc0000) writev(r2, &(0x7f0000000fc0)=[{&(0x7f0000000a00)="2982458c793b79b254302e535a56036e51167b7d20ff187e753408a54a4f2b054da6a2ea1077de72d0835fa89a875d30655be80de7dab4f839f6ca04d114ab0146c3bd4e9664f3ccf9b0bd7bd287de90660c2cf3f51a2d525e915d1c497a9b12f318f6ec28787d280b6997265fbc0f821a4b9c69f35bee65312fb5a10ac6a58d33a8b3ff764197d64491de22749deed593ad164790d716f090573ef0c498a272608b45851bc360729235bb51cc97e0f70ba7659c1a8e2f89890a7f46bdcb3aaff3d58b2aca19c5cff1136f6e4ad67a1f9b652505646882de", 0xd8}, {&(0x7f0000000b00)="344907fb182e971355340ac6f0e51798c4f6635e354230d365ecdbc555d448ece252008a5cc67c9dde32d5e544ffd6ed9c78f406857ec450fab0f47da1f95ab3c8f0bc85f39a90973d780ea0668d1a992902160e00a306be49184c7fe518006004855bb9552841fca732db2f0ce091f9d95cc7b9770b1d5704505de711a9055ebb867c72509102c4142f9f1315de90c1b6d89362a39ed7c8082e4ea60b6433e40494610e24", 0xa5}, {&(0x7f0000000bc0)="6698c9e0a442576df54100395b3e42287b332840a0460707c4f9ea940d8aa8de811712fb205c678e004115d24d697db48e61cc0e984465eb4d0da5ad8dbf27786927ce3bf6c03985c6c6cebe43489bab54b84e062747585d7001c171b2e62dd6e890bf3a36396d37f67f79a4eb304ee640c49ca4a8d81fb472fe9fb93644938be6522988a92ec249428c2cc773e6d9319ba04fe8f4ff64bdd6ab021f237fedc5606d9ac83c6a143d0d87123f46e8f19c8c846ac15930cb9327b03f016c90cc2a4572db0d3ab916f39e6c6e78d677c9fb207635b6c34011204eb1b0a0e2fa50a9d03f", 0xe2}, {&(0x7f0000000cc0)="42d759b8128aebc3670d80e414481e884ae6360c050498af4940c1d9800cc0778ec3db7e8cf291737f55c6ca404dc1199a0d5c3f0aed02801efc91bf", 0x3c}, {&(0x7f0000000d00)="3a500382da4cd77bfa19b69cd39b456459b2ba83d87bdc28c6656069dc07def41a01dc8b4b091c28c7d85c916cc416346d2675db8f8c6b5cf1ebfb9a21954f244ab9257bd10ef096045ffd7466bfa6afcb8d775dfc8f21eb047675d30204250e36dd9470810adf96c5dda930a67581b212b4ae08060ec7dbba487104fcb5651ed9076fd307ac2521bb89a4f22ac9f078e0290f488615832b6ddefb47d0964b5aa670c88f898a0e74439d643117213831e283a5f9469ef6ca3e5215a82ef65b79b59a2dae9942b8361ea74a4b5ac5bc6a0896f6a04a74977d8654fe4af8f3b5aeaba2e310382213043cb6088ada2500f2d977efc8", 0xf4}, {&(0x7f0000000e00)="47b9b57cfdf9a57059a2aa93e6b807c3640d9d7600e11cc7389d3fafbe0956be280dfddecbcb73ae5b43ea74705c6bdd7fc69e2e69972aadea584de6e020ac17409581bbc3", 0x45}, {&(0x7f0000000e80)="ba77c5946b1d90c5c69b341477ce4ad6ef6b51c0ea75bca2fd21ad3e7e8c79bac70b321c789f11626e55822a0434ce13bd539cc9e17d26b76c56ec56135875b177734c3974ced5cc0a2456f4c5bc4bbb8d653265e0d4c91dd808e8608d82e90426b14d6006c7ffb96e5bbbc53c0b6c3bf333c5243a8e284345b8d6294a8340a9e25fa4cce885726569b11884b1487ddf50781a5703599c62dbb50b6cabb9f48df9d51dd3", 0xa4}, {&(0x7f0000000f40)="b4de6677f08acf63b40ede76360ac07723809508e04efdb6323bacef6b8d34cf521bbf82b19d732e5b3499b4cbe19869a7a55f5e47463fab2b047a759968d19442828f1a7ec2df139137a52920807560048dc9076007e9a4ea24791c29", 0x5d}], 0x8) socket$inet(0x2, 0x6, 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x4c, r9, 0x328, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xe}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc84b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x59}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x8000) r11 = openat$cgroup_ro(r3, &(0x7f0000001200)='blkio.bfq.time\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r11, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r12, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f00000015c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001580)={&(0x7f00000013c0)={0x1a8, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x400, 0x10}}}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) sendmmsg$alg(r11, &(0x7f0000002f80)=[{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001600)="52ea57fe733377045e18b7822818ffd34a206fac72635ec507270a08281cde7738a50b7e5bfe8e9bcf48867920f03a7ea60506c850ec0ce564b9dfefb59f433c492da1ad702b2dda5919899ebb1e1c6a6ab9c595c7a8212bf72c17e1d75a82afff36af954e1b7a20c7733b4ecdf08f1a4e309882b4da834e9268bc44e63c29828d99f5b68889f08fcc628c35aa1848844867e081154490feb66c49dffba8cfe0b857492702a6e1", 0xa7}], 0x1, &(0x7f0000001700)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x90, 0x117, 0x2, 0x77, "081a857b3bbfa391b0d051c90c030818d0b7c78ce7c9b203dafd863a5097c52248bacf29cabc2d27f3831b90c4d774e2959cb92344f4233deea3d16d2b18987631b098ef54e2492b78aacdadd36a51be1867cd346785fb4d92c48f6d17eb55da5c85791235d7a4a297996137f2bfe07be01d304a31b5f5"}, @op={0x18, 0x117, 0x3, 0x1}], 0xc0, 0x4000}, {0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000017c0)="f040fc61d00ee27d942c770c92a2e56fc7cffc2e0f67e83f1b58a1cc2467c3a9e82e16af499bd576fd55107f709828ff7a203d1c34cbf712734da275f149b3a8765a29281d77e218828904bde8474b0ac006504bcd3c9bbd4b54eab24f796d86d10e8b30e033ea77de7b630b1623ddbbd7b07da25d743f90de7ed7df07f613e529ed57a0400f5dfb1635d0ddae49", 0x8e}, {&(0x7f0000001880)="579852d142dc23c49cbce4215f00ae8f8579c7b3975f88e6c62a4eb802de616b6e374153a9dc1e2d6dd00bddb5d93fcd3075172ee04b38c49dfc6d997581371be5cd0d6447c955a32c8ca40ec5aefe3a13abf96ad8ba8c09eaf07f4ad93fd1edc6b828529616039483d7368adc00cf6ec0b115f938965bd8d731162264df8f8e1ce2d3b4ec328acf7e847580c519eacee0877e572867bb8a3bc84d3f88c588b10f381fd7657a4dafa3", 0xa9}, {&(0x7f0000001940)="6e26c3cfc3a7b73c240576b979536bc5de56990c303919ddbcba1f62af2ab12d13742563d98fef06eb580527051a8079f79a987dfd256d083ab59976152af85a319efd834aeccc704e045ade0e165a93e279627891aa9c877d38e088b02a8765373922530be3cdfcea8b606c2b7c3df965f0fe64fccf58c35b673f413e0f51515ee31568af853b047d7f8b7392cc02c7506720ad94a46238270bc341df2278a8591913e7eb36971a684fe2265af4188bd878b2d9389ae649029edcd4c3ba1949060766c470e149ec290af998313cfa7a7e003dbe12921f4112d0", 0xda}, {&(0x7f0000001a40)="70206a05ad0b0838e990a61e3ef0a2374cb9dd05c1677c9270f595427d41180fb5da83162c68204a716f119646f62dccd3abbf8f64f59b874c58a52daea9ddcb59356c866c46d908920a27c03a4f4cd9bcbd5312833cf45f089f56ef2a745ec9d13fe73ca183c794ac6e09deb1b3ef87949a908230191ec0672197676078a7818308a3478af0bda2b9", 0x89}, {&(0x7f0000001b00)="95ba698d6d12ceb042f928a357b10a98a7d6b556decbb767ecc10cf02caf8caed345bba44a26752e1abac6e651e3b0430e5d0a4a71d3f8db36910e0435e471962222f812bcd1c13bdfc26a803d08d9f68b137ee23e15788b86073852004e7ea88a84a3ff12721c2867", 0x69}, {&(0x7f0000001b80)="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", 0xfb}], 0x6, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d00)="b35163d1ff3ed0225a37b5b27255bbca336b046b17746b61129562e80b4f8c75cd019f63b0fe24b4276d60b626529b3b11476732f73edd34150ed4dc6b2ca34ae523d906bc29ac8a0f225fed1121320db5ff7cdc88fe1de6486cdd58624a1510f0304c8147571d334c4b8365344bed4019892c4244d479e58c7173a245fec3c465019a28f415e69d0470c41a1b7a592c2bfbd5fe6eace287281e1dd0f446bae54a3158cf5440ba9fb200e257be1dd5d1275192adaa7fca05db58e94dc7d7fc98ad0ebf", 0xc3}, {&(0x7f0000001e00)="c7fd6ba167139bf637d1ef802d27872c495f6cd44928922c446ef029484d3f61fb50dc7fb426f664e038403568d14bf586d625ff57d39a3c0c4e1ec6d79f672996da30b736717e2ba3710dd9c691ecba04b6733ee7f9c0d05f063c0763e0a1a8827096f607f80a2e479e319fc3da427269a4f22f4756413ad07d7926c0f3b9ff762f35648d7d67f0cfa35c583f016e2ffea83c4415293649899c4ad0afd09a566c500f096c6aa3f7f49f07fac637be1048f3799a23f3da15681c1c7408b846404fa170673fc371cc2acc5365b65d100e44bf10c876", 0xd5}], 0x2, &(0x7f0000001f40)=[@iv={0x1018, 0x117, 0x2, 0x1000, "8984965d416230246faf5a597bc7c9c6c6cba5e54fa3757bf9f73da1c7eba62163d4ffaafc9b46e43a1fa6f97c8724afbfd66d5bb668c7b1ef76ec3efc4d87e75d89e46e87080ed71019e606ac1e405a3911412ed682f20b730383afeece7477db5baba7f2c83e69839cba716918db257789299fd0e8c83865a179b9c886880eb130dabd8ac0b769356f9b96ae3c80aa41bcd51e50cb3a115357b16fb600693752a8be387541b7f22d22acad3879cb9eb1a1287da3037ddaf80e726633b382f5bf293f3f3f5159dff2f7877ef213bd074f3cc64405b87ee672f178b92f6dc2a1a65e7736e3c47061da5049457551796484a700f6247565b04543aaf015160fef2c6b7287bd9954e16fb6880fe703a95eac650c947a27ab9d02c811a46e8cb7f9134813fd0383efc1fe5f2c888f0804304ea619d423e128b757dd65a5bc40ed254ae7cb8241536c38760a916698297882bd5cf791500f312cf5e10e2dc0916971b3096581e87635f3eecac1a185bff5c50988062a71f7a39653d063926e01c6eae50ceefe66ce546a9f783d6ff09a75093cd8b80606e92d8bb35e02c8db1c2ca9f28ffc3719a0a7b9c5794e164fee419fa024f4b3be4c66b64a00bce8b987989176510852137e3335116a8c9e09a5c15bbb5115fa44f6c497c7ebb858def84fc46b2fdd6ec6754e75ed6afca601ce9e616481a1e99f88b79fa831918416f3caa0247760ff6c54aac93dc3ab9bc0b972682f2ddaa18665d699f799edd198834e7a0d7c006301cb37b50a6c6b09990e94b2c04a062346f6fd8ae4f23942f0ac25783906ed5923c55290f61b4e31cf899352dba8f7dac7016335af63bf885af758010654ba39f48034a1dc4f3a89f48a582f3c59eeb4255ef12eea2b6c898c2ce0599a093203c6b7dcdeb6f9cadf1992b185c15268a5662e7f43e08cb73abc7882d3922046400f15c13ea59a64aee61b7766ba34bdd3b90bab1abd49283ce5c3661cfb4bcbe67bfcb5e9520471250095ad0f1b9ff0d93bdcb699d78a24552492b3728c960ea0bafb5ffa07628266955ea39081404d2d390086a1cd9fd9b3a76b06f10a22ba162b577ae4c254decafee1927c424df40402ea2ea3d8b029df4f43ae31916e6d19f2df45c8907f17dfe4568b9db6d3c1051b80b1a9a782269b765baf3b103781e9e8b658d7da2e37af936a10a92039fd11cf887698d4a10c6447df79c0bd4e30b4731be2d3ec3772a68b0455056713e835619f1e3669edf3a916ac846b785056f138151ff08d17b4fc92905c2fffb3dd56e5ef6f34bb1b9f862007b7fc6c8cd5a9f9d366f64d71f3506334fa402f8ab2974f4142b61fb3c725404f8d2a7020b6a549eefe9ae47feaaefcda896fa401753cde1f9308bab697df27c680921c099e57a88f46561215f915ef9a9bef4b449d1489e88713580a2a5d83c208951f7d7767cee0ba4c1b1bb529a2e80aa615ffd57862910dc4e47e3c9852967208cd4a9f088236203f0e654f3284109f6a82a768b10fb7770cb449d7f6d7331af6cd9442887b6af59f14a429286a14bd14bcb12120719f5600086cb24da35e0a342180386a657a52b35b7f3dcc1db947a8ee98efb61a49b4da6cd9080b2ada7f63816776e900985528a3d5f78cb8aa5e45b67e739ce8359f04e2c759a4a8b7099635ec0d011b377f664f0a4c6e10b35993a464669caa5d0916590cf94d47bc360194eac4a61883e21e055a3dbcb0997fca835fd5db033b1de9c5510876dadd342378d7043cf4bafe49028496b171d94c41e484ae058528d227e2ca4fb58d726d2e109284ac2a4b262dadbdb81179fa28c3cadd5130737afb779644579aec080405f1e1e65175187a60c955a33d2effa58da7bd24dae539cff7c932ba74c538832b00914722ad6eb27f6f36b06c547ac49b361bc27b89020cc23eee57d1937006c83676c84c78ec831855e737b12f35da4d8116853b55931d2a64845e8c0fcbebd9175bb1e2965f12455984b9ec61b5783536436d9269b142fcabc9716de867e56f7d38685b52410c7a331a77ed0fb86129cf33fedd8991cf53075c6e944e8a7417e2d418dab78d30f64dccb385529dc19e157c1f254636ba4c0cf90354683505f71ad9510df0232cab007a4d9a07370c34d7562de92b63eeba64a20bb6b829d5b8cdba2da7d9ec1e2098d51ab3ea88b29db8c229d4ee6d0145e175e2f960072499e380829a1f7114e0f780f254757577a907671ec471082135176035cb04ae92c1974614cc6a2b90e10cc347aa0e6028ce6f9da6d10b34820a899a93332f5c10e419ad82905c434f27ddf317f9ba9e161bc70cef2bdd85b06896917f8a47a13da897211f077175d32b90b3b7e39dae356e807f0dc09a0d6cc68e307a90207bab45ca79cbe8fc5f5157a1d4f1db82a67ba2219e59d9fba84115e7e6681a4b1aed83aa089d6357dc452bd345288b4d963362afd18a32246c679dd055d7de60d10143058c6620be9b5f5d210386bbfec77abc768e76394290280e725a1ef55210cd4121e5574921abc93ec4b1111b6911bd791c3456d804e203772d92236270208946887c694258d08b06a01f319393e0d1a8f8b85c85d63c5bda31fff6cd31a999f0800ca4127f6f5124b9ad12a6a450f07745454b9af43c5373ac5c79d51c7c8f3961f44ad01c31622fc842ab0d2d581fdbc16adef50a57bbe56b358d0401bfa308fdad5e644358e67abd3acfae89ed2fe565bcfc0441406c9d5e4a277d1b20da35ffc7a2ba2f4c8cdbfd3e9dcf0be417e2608cf454eb08218f45f8a6854b886eb219eaebd1c67fc196fc1f97974f26676f992f43f2f77507aab032d13857396f4abd60b4209236b1c02289423894d8073886721ed0d200980a2792706e23e437f7f4deeac97b4f0a5b29e9482eaeb43a9d751fc2e1daf1ffd19a33455fa6de289f4e350e0e6635d95044e018750031be9fc2a7a2af79121c9800a3739ac898d7ec8249c54da902e75c547e9afd043dde7146adf6cf766e29b6c6c563cacf7909be3173ed2487135cec49c70f635dce1947fb8bc9383d1d7743a4aa3b0c1452f1035c4305fd671f38b2665d8a027a7968ab701b72cf6d658dfddbf206d35d1cafc62b7a896630d1227860a6f536dd43ef4ad3a598adefb15616759172cc2b1cc83190e31d51983a2fff825df2602362a336bf0815c95677e757287ca9df398cceff91b837b468cba1975e67156fe78ca8efc9ca204e2efefd3ff19d1a62b4401ed1b1525b1a2f235739df196ef3159f8759964db8e571bc64f141910493489c37e4a512831abd201dd216c3bf93f5d940d771d868327aced3a9a61bbf78470175c42b29c7604ad8703e9c865f726242544d7af88308ddd1115ab77374ed0ed27fff579df7177a40adee68d7e1cddc8cf325f2884cf1078a8a8a7e6c2a7f84e714a1c465cd2109c9241763d63eceece5fbe9bbb8c9db3ac2f96ab25c2bbbac1469e9b7142ef23ebe8947aaed99aa234d93f50c77157da38344cfd4d97b12b26d7c503e1d76b5df51e11e58209ea0244bf78a9c6ed928a9531f9b351061f31fc76aa1e31d6d58213df1a592f72a33cc697134bb8dbd79f5d468ffe286e5318fc1c2a7b76b85509abbdafa7e8e6c2647cc227f5da6a6462351b29d32859fb97b8352a043811e7e6433536010d92953bab00bd113e9057b8fc4cbcd05e8fc16cd6423fe3825f9fa692b8ef533e85453514e39fc3749f99961e3e297d10df48357993a482b64c1fe57e72c3a44ffa122a14870f41f197fd1097a114821ad3687ab042c415b0096b227e0dbce6a97e22ab14386d74967144634256224bbd6710667c3d27e33810573dd221f4ee84d5a30f88b85af97ade3a46068754f0c0eb769242c0bc568f99c9d90ff6f8d96e43dd9e0ccb578db0755b4d2569585c9942cb2f3154e53cda16c4047e10685f9bf13db6c8872dabc56eddabdaf3bcc9798cb874f7b2f9daf44f3ed4a184dc9a5d7bcc3747f0b964d50197402f1d24f8bf15b984210fdb2627af73f80535135fb25e6c21c1fba11a9584a75f54b8a7cdcbab862df88af9d8a4b9d6d46315c29351a57e3a37554ecc9597328f9666b80934e4b08936f1feb4e936429bcb91dc2b13f000922def2d096e34a33bbbbd96ecc4893eabed92c1607a3343cf2264c280ce0412c60ebdc9d1ac3331080fa8a81ea2a0f292c2608b10111c75e1fa464feaa1b49d349bb114c77b789e344ee7cd6c15d3a6903788adc4d8ec55ee40e56dd26eddb93f61752fe4db5eba3281b8aeefac063c2c0f56e7adda9295e7ef76ef85c07631898efff0a0c977da703414bb8e2247bc0efd67129eeea482c9947f7e6ba3143efd5e3703b14c5c296708fe722a321e96f30f1cf4ab3c405f8c5e3102a702a917fe43a9a99213ca3a092a0ee86465c18058a86c09e2f16b16cb3e7f01d7406ed84cb51bd6b2a47c49342af303eaf1a4be7a5651d0b584ea90ee3d361e90f007492d5b5ee7d91f5d9877a6f564f4750f97b8d757f3552b462ae660f1bea47f59b4d9bcaaa40ff0d1ec301bdf3511008f70e9183e914c213be9c3b0ff0be693e7d607866233ffbfaaa2842023c350b9f9ea06d83043cb139b5e1ca7129c0d56380dbb1736caaf6cc60ced8f656778b5d7586982258aeffe368128403eaf585ddeb150546cdb7e1f1ef5d84e01b29cfcd0ecbdc6b6d338c120a5ac9228f34063d54744b758508d6d28fa9940e9603f4729a671be1a8d935b0625396df1d7d06e0faca3be56aab520978d84f5b68d9bf9ddd8595338d673b8e7cea829926e7465938858efc617df41cf16f1ceeb388b53f8e3c00fbee6cb01e340fab8f78d6156bddc066b1fb6a5c71c2abffb522ecdb6a99b7a2d26850f888345adbcba552742d13159b4786288e9d2a57faf18bf8a4ff587bd54b67348c9d7b64f45de6296c68eb9a83e570b26e363cb703a690830cb54710d0975172d25f2367e15fc4ed740ba9c17e60549a20fb6c719ca4dff509684e3fb5de89744d2a0952f4251e6358cc8ad57275bf727132f3e90d0f85d51f9407183c0df8cec8a8500f01e8dec64418a15787edb7e4ea16f54e4945f9509240a657ecd652d3969b3073b8eaebbdf1cf06907e6edff58f20548b6f21cd183e6aa2bac0a95f47547b68f6cfbd53c5e123b67674953d9affb835802bce52090bc11a285bff264f673d498ab613d46eb9f82e631f7037023172b5a59e92b11bf7ffdb0db136fbaf2f616a888e0fe093176dea7df13c6c8a8c9b29c7fbc952ebaf8d339d9c5be5b63e3f09dd3eeb0e00fe928424cc92b6927c5030bd13259c9643b74f91ffa0f1c8011845208a64909f8480471cc6be15e368ace79ed738ae0b3d6e873736fe95a64f83aad380b88f26eba4b5e9095f1f89826bee0b10e8772e6b4fdb1b595c8a82862fcf2ff8fdcdef139cf57f7e5f4df3c973d192113d1eea66e3b90edb8b2a681da0f7c0bf7206ceb4121c58cb598048a0f66a09690f62761b66569eb2d61dded9f733d98f5a1652f5297fa8018d61403944d8ecd7ebe62393efee92e1e1c8c9ac0913fea3ba0258466035659de107fd21f7e6dd984c17c9e0545f4a44c84a6cb394c64c84bc10b8fcf2c916f21be14eb8a739b9e3f7e9a030f4f27fb07fa4a8180985ab6021b19945e713c19afdd8dad330ae25cbf274c43f8dce841fbaff67b0b060dc4d8cfcb1022178b642fb0b4d3ac3c345d6ad516c091d38eaef2e0f0d6b9c07c26a7c8b23395084227fbd26244479daa4c50cb0342643208b347194ab"}, @assoc={0x18, 0x117, 0x4, 0xff}], 0x1030, 0x20000000}], 0x3, 0x4000) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000003040), &(0x7f0000003080)=0x4) 17.182171637s ago: executing program 4 (id=3122): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x78, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44000}, 0x810) (async) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x724b3e67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d8874b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18f86c13}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getrule={0x14, 0x22, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x20000020) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4}}, &(0x7f0000000600)=0xe8) sendmsg$nl_route(r4, &(0x7f0000000700)={&(0x7f00000004c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@can_delroute={0x6c, 0x19, 0x1, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x8}, [@CGW_SRC_IF={0x8}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}, @CGW_MOD_UID={0x8, 0xe, r6}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1}, 0x0, 0x1, 0x0, 0x0, "369e61d75fb864ae"}, 0x6}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "3fa26dbea4b4ed10"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x4}, {0x1, 0x0, 0x0, 0x1}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x20044001) (async) r7 = accept(r4, &(0x7f0000000740)=@un=@abs, &(0x7f00000007c0)=0x80) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40218000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r8, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x9}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xa}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x101}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7fffffff}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xfffffff7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c0}, 0x80) connect$x25(r7, &(0x7f0000000980), 0x12) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan3\x00'}) (rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r7) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r9, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) setsockopt$inet_buf(r7, 0x0, 0x9, &(0x7f0000000b40)="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", 0xfb) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r7) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, r10, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x741}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdd5a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x1) r11 = socket$kcm(0x29, 0x7, 0x0) (async) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fffffff, '\x00', r5, 0xffffffffffffffff, 0x5, 0x3}, 0x50) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000010c0)={r12, &(0x7f0000000ec0)="7ef449c15d437988f331ca85a11e279628aba59990ed4252bdcc25ec2216b7632c2110d4ec9a4c499fea304fffe08f3c2db0fa0cc2723961a6703063ca8652e675caa1d3cc58f3fc68a16e34097319c7945efc075666bfc6178f8a353165154ad36e97b6ee7dfe5c30a716b6fec75112cb01e37e2dfff22d7575b467f6ecd1a7abe408afcdbc2ce529422a4101b54e371a6278a209a059d7139c9b28df19eca23bcf5751f783a4adc45fee8fb1b537dcd50e5f300a1a67a0ed4d3cb51089ec9dfc87b0d6c66c", &(0x7f0000000fc0)=""/197}, 0x20) (async) sendmmsg$alg(r7, &(0x7f0000003200)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001100)="5aa007162e1a19fd8f7a54b80720fecb050f8c89fb7ca2177272408a2167c44abc021aeba3e0221718e0188ea75cd014e92bdb499e2f062cc07644132da9a1f219dcd41eb37a34fa41d2844e01959bc4a80366c08b5fc7ee34f970c7e7cf66e6a6b60f1936b9219ca6b23317bbb1a19d3edf6f4a0d2b4fff0613d2b7e44ae9f9cb857b65865d8ab48f2fabcfc610e421bddf0184d9a7b60c24e07d1316c4e4661833a1426069d8b68ea1ac20b05f76f35fcdc4ca3aa9053f1abe82b1741e811161fd1478e2229891becd072e", 0xcc}, {&(0x7f0000001200)="f8371c7b5012868f296826ffa7e406522264b631d5f5552b7c9e9fa37226e6b2134494c3c7e0db0941a5ee1bde483be72b70d7f7c1c588e2817764038e9d3e3a4c2e4ebc4722c57109a2535b8083a0f95acf2af1ab4c94c6a3e70dbe10fef65c93fde6ae3b283bc476b9b83e5400a2335c78845a75bd65fadafbb8b4eb3c378cf781ef5700a8dc0868e5648e0adb3bcba533270f8209bf0583a3df679c7d73ecacfb92cc6e0ad9a188b27caa7add3aa6ea5e9c22e8d2015c1985a832f94d0df58f925b73bdb74329afa1b1466332f231f4f6a97a4ecd7891e65b23c10d4f43", 0xdf}, {&(0x7f0000001300)="dba5daa406da081a5827fe07262a18c62b26b7c6a24b737423329c79097c7d18b863d43ef9b222c6f0321c789a5c76ae269979ad422ea5df66ee51baaf0736a191b624036acadfe3948c741ad1cabac21251efad0a1e3482a6a46a16639d60ce7a775198d9257ea9567eef31d90d919d26d2", 0x72}, {&(0x7f0000001380)="2460985409925c58ae598ad945584c39e20258f796abaefb7d0d6ac4520effeefdbf0bb7e830d8c6d74ad19fec764bd2511f1a869cfa7da703e6978905851ac2da97e23a1d962bda06d1b4c0b10bfeabd678f6e36a890341bea8ae157e6f4f2df0ba69ca0a51d7ad4e90163ae5c017d92d1d90c9bb5fa3efff0e6c66792638ec3e6b82260047f9ceb6d9f75c6a05ae9567c5e0cceba9dcb62a1b9581f4db94c5a380bb4d6fe3b0a8c368f7367534e316a1528747da16e662024703941dea32c9ae415272bff82c5cbb1a56b0aa7320634e52865d7a04159f15206942d3168ddb21588090b53c", 0xe6}, {&(0x7f0000001480)="298886dc8b99b34938f3045818889774ff5de2f25a73306be44bb08444de10d245ad1977e4e784108d8798fcee99af7b130fbcaf3aad77b580a2fb6abc91600ec1a12d8c33ea092fa3ae2796316cbff14721c860b1fe2e53c8841d143a38b7f4323553d1284a8ccb7ceb3ebba0362434d5fca66bfda0c54fbe85b4f3687f60d4bb8f5d50a6ab13a3aa72a71f0bf40a0ac71571b0a32612b429d544b5f8962fe681fdc3662203405524d01031dc83c473e90107df73c5b3190aa54868691cc86225ad61f0ff", 0xc5}], 0x5, &(0x7f0000001600)=[@op={0x18}, @iv={0xa8, 0x117, 0x2, 0x93, "2204191f4835403027fab9402823dbf294a37651d52e5c7950f398d6f2ea5e51b1c4d0ff78ecb24aaa76476ac9478a7e88fb0e1d781d67e43bb1a88fbd62ffa88c54ae3ea22de427be5c25a1d12104158db8c0b73153265332d47dccfddf3b87816b479324271529f0f475e9b79da0e51ca4c6e0b2a5785699152e70848e5b1bd0d3f21d3a3e083db2495291ad950a1fbfc199"}, @assoc={0x18, 0x117, 0x4, 0x322}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x81}, @iv={0x100, 0x117, 0x2, 0xec, "63d1f5d118f9e57dbeae41feb73782c8a7b51c5fa263fc6d3e80e26b4f94a9d3af625bd8f7d2cb55db6701e7fc757732ceaf723f329f9a167e0a034881e4ddd8385feda75cb6899628aab213de1f9b2b0fed0fd16caada71113b2cd13f2da5f0b72008b69ffa6de7a95ceada3722635dc1f1b519e41722ea5efb1d9d89c26cc7fb76f4e0cfc1a138490e2ed6ad0d53782a7661f0477f71a61309f0eab13dc0e79f89218b3f652668a0c3cae321b9cf36ae05363b8734244c1821d6abe9fb0268a5a59476f95a9b55dd3115bab3887568b04d6e79ff56b3c14e5e78dd6d8ec6d1d72acb6b45155484a357b07e"}, @op={0x18}], 0x220, 0x4}, {0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="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", 0xfe}, {&(0x7f0000002940)="6c62984afc4712e56661c0c2a793979d5b6256536660a7dcc7debaec5f6cb27050a46d0c1bd2626fed48188cff2cc5ea143fe78e81c977275c9b97fd248a4c664a4f10dbc23c18985f198acd1846fb477664f95bd5d7d63c796b77", 0x5b}, {&(0x7f00000029c0)="54a3e0dec908c70aafb4ab4bd797dccc96583267214d78cea4f351902624c0caf7dca29787e37cf7b661881d7b787a372f967c7574dc91c8c9d5e2d3cb4c3172330d5d4b04b0ff588602318ebd2d38f23bc308d25e59899bf086046e571063c29bc09e14e30a95aa3653e8d02bd15d1a2d3d95ec904a75edad4f822e68147e55672db7aa7376473566e531d063f7d850d8c7f6107ffb6028bd47d9582332d5f021e63997f888539194e82d42641c8f9d0eeb28d127c8346f8dbde978d69d26887b0463203433a154e6e289897e1b4fdecc67600cfdb5f050d0e0b824ccdcfd10319d625657f705d94f16f82f6d836db0", 0xf0}, {&(0x7f0000002ac0)="d30d29d4a1683d2ab522f4e616b1a08477ffe4fafab164d574b41e460601b656c476f6e9ae1c21454ae0c31c062838a905f6ecea5521e696b47bc0b350a8ad3682b03637b861612faa2a0a3413c2df4f7bf8e810d3487f5a174791efdc5fd752aa9d3c88e9396fa93ac819a28e05d38c35a3a0b6d378cb0889dda0d326ba8678d940b5d73be7c233b66b369c10919a668d6d28a3f32c1ee6372c303c7183ad6c8754264d3f374d944c9827da3df26c301c1c7d762eb1244f6e02bdfac02abeae6ed164e118610afb1b5d6c604c4352ab6eb02548260a650deb33b2b123ba75930a9b67b7f06aee5c55d7d355b85b", 0xee}, {&(0x7f0000002bc0)="b1a1624d197b7977b6f33f25c661fe245c253943aea74972e7d0368a0b9c4c861e0971e686ce9eea77c9887eb40d02dbca6544a2d778439060148af877525ac3d091c94b1e096a5ed7e0efe2f03c78909377b5627d7d812eb29f4a00b7f2fd465e72735051c17ab9774251305a394348d7cec0e610c2ebd2e6eb81437f40b51bb26547389de4ba80d1a4e538e6383bad821c6e5bc7c95c2eae9d6aca035c1d00bdbdad8d9d70e0af2fe66ecca70e0fdb6afef06cc80ef2b1835ea2707ee0f97038547fd34169db527ad01a1500fa3e8e75a51966b4b692a77f657f9681", 0xdd}, {&(0x7f0000002cc0)="78660f176c49db26ecbb878d89d93e3bb82513f6758d947600b2071851721f0781e39d1dd69bbfc04caf232e8052dc31d811c92095f3d49caa8ce4600c00f8f7acb0b7ce2cdceaad8f776e4576336e744e5278ffa4704675889e520382172e370e6cba2a846002c1abb0f25660d75e5879c1e2992bd62e363ad5f021805293d0879951057875adefb11f4f7ae9a5c60a70", 0x91}, {&(0x7f0000002d80)}], 0x8, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002e40)="2dd1c8714be636a0f02cf283fad6042c129c146359e32f9b44eeab0d718f3e32996c7190425d7ed7ef62ee137839dfcd36f5760fefcc1a0aba64f930abf68908c47ad2", 0x43}, {&(0x7f0000002ec0)="253942733a0247d18a97adc03db843eaa3a46b1c5f20e98c2fe22f2c799132bd406f47", 0x23}, {&(0x7f0000002f00)="1cf9a213474fa2f7daa000475d89cb1928f067ac645b193f155bc4c1a63d248ac6bdf9742dcf22d56b6be857e827ed169ab06ef8ae4f3f7b44", 0x39}, {&(0x7f0000002f40)="5aa44c0e1eba6ec95c8dc818d828f7481af0c3b29821a11e9a97798364b15b7a2739c10c791621c99ec65d2419e0b6da9501694e2212b410fadc0efc15a54de42979fab7827f76f0f6c1dd00adc1e895c0e8aa5b17362be513e2199aaa2c66ef6636dc0d10d3bb7aa87173a0e98e7697b47b2569d5559ad5bddbe8326dc341067b33d09b4aea20d2a94fcfee0ec38c31763a62a50675803d40a946c7d16986924d0b945469ef3f61d68461e2fbd7f50b25c4b6ba42fded3dfcf5f8db9cfd6b744950554558253ab1fe9d87405b8eecee0db21c8f963a", 0xd6}, {&(0x7f0000003040)="f4dd4067bb4f2f2dcb56732738ccd1aa54c8e24d070d481f49ada36bbf2d32c8ada3633e46bd6228033ced10d93fe39ec8b5f431d78be03cd93bcdd8f04ce7306ba53562b44ee303a17d4d8bd65d5a43ad8def10f9285c2d2f52127e991da3ac3ce333c0d8a10389b82fe9a0ff438d21c4fca3efe941f8700dd907b77a7623a0ad8f0adc976f780c2e2e218e85aa7a378ce1bd0af0a1ee8db8395f253f0acae6639cf701ec502247a7d2854034ae1396a07514089bfa7bdb6c5450eeddbaa76bfb554764bbb23e51c6b54c4bcc80f070", 0xd0}], 0x5, &(0x7f00000031c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2008041}], 0x3, 0x20040080) writev(r11, &(0x7f0000003980)=[{&(0x7f00000032c0)="51fbc594c8760830554704cc0d82c5099327fc016ab140904c7c8eb40573414fbb5a4cf474f656dbf20565e64de2eb297f8723267a3fbb6f0f1759e8b27146d332c71358c67a049336d26280d562fbab6dcfbaa63ef283c2b65deda34bd4bacf9951b918d0780d4b72ce114f9ea82f8a2a76cec99a0ef7f2dc613f408750c09b9dbc1cf8c12644d2b169c56732d3df8968d0e0c64330a34411b10f466e656bc9284ec5b3764608a9904387b5d8b7c6e523b0f5f598f544a8efa59c8ab9568024f5d623d6cf65ceb16949fb02094d517226fb21cc8277b193d289ed", 0xdb}, {&(0x7f00000033c0)="376d6bceb42038ef94dbdea63fdf3b3fc92c615d801d072b1de7dac242c616ffd214e23390a9b1f6690123ed5f3d8d2a0cdc15b3a1cb0a48b448d99b0ed53693151215287b66f1aa121715ae5f898cfa7e671472148ef2613353d0ebe001e3b957347ad4cd7c4bb4f1b90c9758b5779e6053864f57aa92c0dad5881413ca3b25922877c342e2de0bc42e177e3f3aab581cd91847f424d8feaad5f8153150955c0b588d6764dfa2daf2", 0xa9}, {&(0x7f0000003480)="5671171331fc75d889f4e80e0d743e569e271c80b7e32ae61e6c9da18ae7f19fa01f3f97c299f87a61434c94eab4e57477478e7aba509e529a96f4dc82666cec488b74fb4ef032cededb5146886e5ef853d89a78c65da1551db0512df2e920b446f71fa297c425a52dd95f42b97b3e7a9e40cb8b6111d434e3c152b53fb4874fd64b62107bae8037847f876c9ed4fc7834c3", 0x92}, {&(0x7f0000003540)="5da3ca00ec988a39249c5e6f511d3dc806b9248db080241745b60a5b28bb04e1b67e5c23a6d61b600d63293d9fcd7c68ba29d99ca313a2880f293b61f68fdd7ab14f4be420219bf02f1c8ce1204d012e264f73c5ad931e9c10aaa53344aeeca8d734643c691a2fd99d", 0x69}, {&(0x7f00000035c0)="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", 0xfb}, {&(0x7f00000036c0)="0a2fbf3f2c54bc4a49f32eca4e82a988bb60df3989b5005fac2ed8930f17569905c9f1a643b26db41b34c31149c22a595a6b13991c40a3e8f4c76b68234f7abf8419ed4410d47ea3dfd76b2f662fd971b5485973fb16914c2b4cbf0f978289f11e1d45e40e300cc43743afae0f0a5691754c7c06635d2d164ceeb9026bdd63a33b4f3a4c1f24653a742ea5380a1cd1be370ebff1b3e20fd75c601d5839fdcb1ba2af4e8af1d2663f6380609a6dc37dff71d016b6d7a753e57675e8b05534", 0xbe}, {&(0x7f0000003780)="81ad139219cfd90246a3075a913e708a37b622c8960577f7c1cce112a8898ba7f251641a4e1183723909bb3752a025314c712e8af95d5a65dcb079a2f97f283a7c7f557c69cd68db7c5adb6eebecbc1932ebc420e3d2186eefca4a2b5ce6d2c55b2d5ba144ded9fb4f427b1c1f4191fafc59ce21f401b9983b555e0179deb73a7bb914c8439017ada25a8a0434fa1ff2c8c8daece808e3e048f29b08040b376d357bdaf986f643da0a6a1d5999309d6c2600a3cc72f495f487b29d505352f768e9d79432880f12a3a94dda65ac2242e6274435b27c0f17cda6eaff1966a0c8814dfe7df698a97cf49106092798c57748728b82", 0xf3}, {&(0x7f0000003880)="b5060381f6b2a89aa15ff67c90b807d6d501d756de2159cf6ebca9de397f522dba31a6660bf3a45105a1012f48934d58d0a07377633f4102ad66369433988ad3b591c61d5ed93e7098a0705ebce01a5222f1e840fa97afa609b6ab77d4ffb03d3bada11c70db64d7e2a6b09970f663f8d29299c1be4c672c8cc219facdeced31", 0x80}, {&(0x7f0000003900)="e9bf1fc81cca0ae91df589b159f1d187a42a42cb450918522e1c290c925cf164f901c0b5f2044eb207f52ea93251d70e13411db28cc7984c6e048ffae6a271b39d7a35af3335675dcd43", 0x4a}], 0x9) (async, rerun: 64) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000003a80), r0) (rerun: 64) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x14, r13, 0x20, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000003bc0)={0x3ff, 0xfffffffffffffffa, 0x4, 0x8000, 0x1, 0x0, [{0xebf1, 0x4, 0x9, '\x00', 0x3000}]}) 16.110287587s ago: executing program 2 (id=3123): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x80, 0x1, 0x0, 0xfffffffe}, {0x6, 0x0, 0x10}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x50) 16.091764448s ago: executing program 4 (id=3124): socket(0x21, 0x3, 0x40) 16.012307813s ago: executing program 1 (id=3125): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf0000000000000000080001800800050004000000060001"], 0x28}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000005840)=""/248, &(0x7f0000005940)=0xf8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}]}}, 0x0, 0x26, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) ioctl$sock_ifreq(r2, 0x8921, &(0x7f0000001900)={'veth1_to_bridge\x00', @ifru_ivalue=0x1}) (async, rerun: 64) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001a80), 0x8) (rerun: 64) accept$packet(r5, &(0x7f0000001ac0), &(0x7f0000005200)=0x14) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) recvmmsg(r2, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)=""/234, 0xea}, {&(0x7f0000000100)=""/21, 0x15}, {&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/250, 0xfa}, {&(0x7f00000013c0)=""/109, 0x6d}, {&(0x7f0000001440)=""/33, 0x21}, {&(0x7f0000001480)=""/72, 0x48}, {&(0x7f0000001500)=""/109, 0x6d}], 0x9, &(0x7f0000001640)=""/244, 0xf4}, 0x10}, {{&(0x7f0000001740)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000005740)=""/210, 0xd2}, {&(0x7f0000001940)=""/157, 0x9d}, {&(0x7f0000001a00)=""/89, 0x59}, {&(0x7f0000001880)=""/94, 0x5e}], 0x4}, 0x8}, {{&(0x7f0000001b40)=@nfc_llcp, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001bc0)=""/210, 0xd2}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/51, 0x33}, {&(0x7f0000002d00)=""/128, 0x80}], 0x4, &(0x7f0000002dc0)=""/144, 0x90}, 0xffffffff}, {{&(0x7f0000002e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002f00)=""/133, 0x85}, {&(0x7f0000002fc0)=""/89, 0x59}, {&(0x7f0000003040)=""/24, 0x18}, {&(0x7f0000003080)=""/167, 0xa7}], 0x4, &(0x7f0000003180)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/32, 0x20}, {&(0x7f0000005240)=""/9, 0x9}, {&(0x7f0000005280)=""/226, 0xe2}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/26, 0x1a}], 0x6, &(0x7f0000005500)=""/229, 0xe5}}], 0x5, 0x40010132, 0x0) 16.01147696s ago: executing program 3 (id=3126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c0001001800018014000300000000000000ffff0100000000000000"], 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x7fffffe}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r9) 15.881434102s ago: executing program 4 (id=3127): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000007f000000000000000a00000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fcb60300000000000085000000a0000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000089000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004080)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x9, 0x1c, 0x0, 0x0, @binary="8b0adf34c2"}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$unix(0x1, 0x5, 0x0) write$tun(r4, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0xfe6d, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x4, 0x700000000000000}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25ffdbfc, {0x0, 0x0, 0x0, r11, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x8) 15.778196947s ago: executing program 2 (id=3128): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000100)) (async) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x0, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8863}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}]}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0xff88, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x8a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x13c}}, 0x0) 15.672239571s ago: executing program 1 (id=3129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.593373968s ago: executing program 1 (id=3130): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, "0000000000000208", "5171bb74cd3660dab9e200", "d1a024e8", "000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xfffd, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x4c, 0x4000800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000140)={'vlan1\x00', {0x2, 0x0, @private}}) 15.589955856s ago: executing program 2 (id=3131): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x3, 0x804}, 0x48) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) 299.939927ms ago: executing program 32 (id=3130): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, "0000000000000208", "5171bb74cd3660dab9e200", "d1a024e8", "000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0xfffd, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x4c, 0x4000800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000140)={'vlan1\x00', {0x2, 0x0, @private}}) 226.891726ms ago: executing program 33 (id=3131): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x3, 0x804}, 0x48) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) 145.075233ms ago: executing program 34 (id=3126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c0001001800018014000300000000000000ffff0100000000000000"], 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x7fffffe}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r9) 0s ago: executing program 35 (id=3127): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000007f000000000000000a00000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fcb60300000000000085000000a0000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000089000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004080)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x9, 0x1c, 0x0, 0x0, @binary="8b0adf34c2"}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$unix(0x1, 0x5, 0x0) write$tun(r4, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0xfe6d, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x4, 0x700000000000000}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25ffdbfc, {0x0, 0x0, 0x0, r11, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x8) kernel console output (not intermixed with test programs): 97.356791][T15175] RAX: ffffffffffffffda RBX: 00007fb88901b6c0 RCX: 00007fb88815d60e [ 397.356800][T15175] RDX: 0000000000000001 RSI: 00007fb88901b0a0 RDI: 0000000000000006 [ 397.356808][T15175] RBP: 00007fb88901b090 R08: 0000000000000000 R09: 0000000000000000 [ 397.356815][T15175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.356822][T15175] R13: 00007fb888416128 R14: 00007fb888416090 R15: 00007ffdb452eae8 [ 397.356842][T15175] [ 397.640788][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.751837][T15179] xt_l2tp: missing protocol rule (udp|l2tpip) [ 397.758144][T15179] xt_l2tp: missing protocol rule (udp|l2tpip) [ 397.764363][T15179] xt_l2tp: missing protocol rule (udp|l2tpip) [ 398.109051][T15188] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2486'. [ 398.675585][T15197] netlink: 212088 bytes leftover after parsing attributes in process `syz.0.2490'. [ 398.679337][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.687923][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'. [ 399.685278][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.773470][T15135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.016136][T15209] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 400.133546][T15219] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2497'. [ 400.158853][T15223] nbd: illegal input index 2958377 [ 400.175155][T15219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.209208][T15220] syzkaller0: entered promiscuous mode [ 400.225857][T15220] syzkaller0: entered allmulticast mode [ 400.325389][T15232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.337027][T15232] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.818223][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.352751][T15291] __nla_validate_parse: 3 callbacks suppressed [ 401.352773][T15291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2519'. [ 401.400651][T15285] bond9: entered promiscuous mode [ 401.406236][T15285] bond9: entered allmulticast mode [ 401.411859][T15285] 8021q: adding VLAN 0 to HW filter on device bond9 [ 401.420581][T15296] syz_tun: entered allmulticast mode [ 401.731164][T15320] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20003 [ 401.731667][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2525'. [ 401.749091][T15320] x_tables: duplicate underflow at hook 1 [ 401.765556][T15319] netlink: 'syz.2.2525': attribute type 1 has an invalid length. [ 401.944684][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.008932][ T10] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 402.026879][T15335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.184031][T15334] fido_id[15334]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 402.233170][T15337] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 402.237317][T15339] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2531'. [ 402.286962][T15337] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 402.330615][T15337] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2530'. [ 402.661441][T15371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2540'. [ 402.771632][T15377] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2541'. [ 402.807335][T15379] syzkaller0: entered promiscuous mode [ 402.829718][T15379] syzkaller0: entered allmulticast mode [ 403.087754][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.547786][T15400] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.602835][T15401] raw_sendmsg: syz.2.2549 forgot to set AF_INET. Fix it! [ 403.892669][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 404.054528][T15425] netlink: 'syz.2.2559': attribute type 1 has an invalid length. [ 404.088523][T15429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'. [ 404.108103][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.158603][T15429] 8021q: adding VLAN 0 to HW filter on device bond10 [ 404.177440][T15429] macvlan2: entered promiscuous mode [ 404.188668][T15429] macvlan2: entered allmulticast mode [ 404.202094][T15429] bond10: entered promiscuous mode [ 404.217954][T15429] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 404.258994][T15429] bond10: left promiscuous mode [ 404.447366][T15452] netlink: 'syz.3.2565': attribute type 4 has an invalid length. [ 404.761536][T15474] netlink: 'syz.3.2573': attribute type 53 has an invalid length. [ 404.887668][T15481] netlink: 'syz.2.2576': attribute type 2 has an invalid length. [ 404.955166][T15481] netlink: 'syz.2.2576': attribute type 2 has an invalid length. [ 404.980475][T15481] netlink: 'syz.2.2576': attribute type 2 has an invalid length. [ 404.997008][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2575'. [ 405.017781][T15481] netlink: 'syz.2.2576': attribute type 2 has an invalid length. [ 405.027136][T15480] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2575'. [ 405.230672][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.314980][T15507] veth11: entered promiscuous mode [ 405.565536][T15520] bond0: Caught tx_queue_len zero misconfig [ 406.328405][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.365635][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.405327][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.674499][T15532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.685385][T15541] __nla_validate_parse: 3 callbacks suppressed [ 408.685437][T15541] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2592'. [ 409.030010][T15575] netlink: 'syz.0.2602': attribute type 22 has an invalid length. [ 409.071070][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2602'. [ 409.086245][T15578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2601'. [ 409.445742][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.493723][T15593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.623509][T15596] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2608'. [ 410.074257][T15607] xt_cgroup: invalid path, errno=-2 [ 410.092257][T15607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2612'. [ 410.092414][T15608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2612'. [ 410.161800][T15610] bond6: Unable to set down delay as MII monitoring is disabled [ 410.170207][T15614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2612'. [ 410.181574][T15610] bond6 (unregistering): Released all slaves [ 410.226963][T15615] team0: No ports can be present during mode change [ 410.485339][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.758843][T15643] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2622'. [ 410.768629][T15642] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2622'. [ 410.781184][T15643] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2622'. [ 411.525786][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.221001][T15701] nbd: couldn't find device at index 0 [ 412.565377][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.336692][T15767] tipc: Enabled bearer , priority 0 [ 413.356604][T15766] tipc: Enabling of bearer rejected, already enabled [ 413.407948][T15766] dvmrp0: entered allmulticast mode [ 413.700392][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.863109][T15801] xt_socket: unknown flags 0x8 [ 414.347394][T15829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.460380][T15834] __nla_validate_parse: 6 callbacks suppressed [ 414.460399][T15834] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2679'. [ 414.506899][T15832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2681'. [ 414.528212][T15838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.655582][T15844] x_tables: duplicate underflow at hook 1 [ 414.667347][T15843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.677833][T15849] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2685'. [ 414.690218][T15848] netlink: 'syz.3.2686': attribute type 58 has an invalid length. [ 414.711128][T15848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2686'. [ 414.817968][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.997939][T15860] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2689'. [ 415.051553][T15863] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 415.059364][T15863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.083045][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2689'. [ 415.119786][T15860] veth11: entered promiscuous mode [ 415.130863][T15860] veth11: entered allmulticast mode [ 415.253871][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'. [ 415.295285][T15869] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2692'. [ 415.304380][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'. [ 415.314737][T15871] gretap0: left allmulticast mode [ 415.334607][T15873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'. [ 415.574389][T15889] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 415.585228][T15889] bond8 (unregistering): Released all slaves [ 415.700855][T15898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.896351][T15905] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 415.934498][T15905] bond10: (slave lo): Enslaving as an active interface with an up link [ 415.951962][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.973225][T15910] ip6tnl0: Caught tx_queue_len zero misconfig [ 415.980859][T15910] netlink: 'syz.0.2704': attribute type 2 has an invalid length. [ 416.400886][T15941] netlink: 'syz.3.2714': attribute type 1 has an invalid length. [ 417.005809][T15979] lo: Caught tx_queue_len zero misconfig [ 417.133588][T15986] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 417.466963][T16005] netlink: 'syz.0.2729': attribute type 1 has an invalid length. [ 418.041049][T15997] ieee802154 phy0 wpan0: encryption failed: -22 [ 418.093937][ C1] net_ratelimit: 2 callbacks suppressed [ 418.093959][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.767586][ T5629] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 418.913572][T16064] netlink: 'syz.3.2744': attribute type 1 has an invalid length. [ 419.065280][T16064] bond7: entered promiscuous mode [ 419.074857][T16064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 419.223652][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.354069][T16096] vlan0: entered allmulticast mode [ 419.366369][T16096] bond0: entered allmulticast mode [ 419.374475][T16096] bridge2: entered allmulticast mode [ 419.611916][T16110] __nla_validate_parse: 11 callbacks suppressed [ 419.611937][T16110] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2755'. [ 419.730578][T16110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.751408][T16110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.809887][T16110] bond0 (unregistering): Released all slaves [ 419.848281][T16102] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2754'. [ 419.907359][ T6199] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 419.970773][ T6199] bond2: now running without any active interface! [ 420.043149][T16128] netlink: 'syz.1.2761': attribute type 8 has an invalid length. [ 420.053345][T16121] syzkaller1: entered promiscuous mode [ 420.058870][T16121] syzkaller1: entered allmulticast mode [ 420.241152][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 420.351696][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.371141][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.382607][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.776269][T16160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2774'. [ 421.031748][ T6854] wlan1: Trigger new scan to find an IBSS to join [ 421.052634][T16174] bond7: entered allmulticast mode [ 421.061183][T16166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 421.074858][T16166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 421.084666][T16174] bond7: left allmulticast mode [ 421.226079][T16184] xt_connbytes: Forcing CT accounting to be enabled [ 421.351846][T16187] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 421.381127][T16187] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 421.448777][T16198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.478065][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.527201][T16201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.676613][T16213] syzkaller1: entered promiscuous mode [ 421.687848][T16213] syzkaller1: entered allmulticast mode [ 421.813491][T16223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2791'. [ 422.396126][T16255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2803'. [ 422.405162][T16255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2803'. [ 422.448459][T16255] gretap2: entered promiscuous mode [ 422.453738][T16255] gretap2: entered allmulticast mode [ 422.527329][T16265] syzkaller0: entered promiscuous mode [ 422.562837][T16265] syzkaller0: entered allmulticast mode [ 422.581483][T16270] rdma_op ffff8880558181f0 conn xmit_rdma 0000000000000000 [ 422.602764][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.030885][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2810'. [ 423.082090][T16293] netlink: 'syz.0.2812': attribute type 1 has an invalid length. [ 423.146417][T16293] syzkaller0: entered promiscuous mode [ 423.151963][T16293] syzkaller0: entered allmulticast mode [ 423.367281][T16307] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 423.623250][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.961915][T16315] bond8: entered promiscuous mode [ 424.026948][T16323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.036836][T16323] batadv_slave_0: entered promiscuous mode [ 424.335123][T16345] netlink: 'syz.3.2826': attribute type 4 has an invalid length. [ 424.646864][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.979664][T16378] netlink: 'syz.3.2840': attribute type 1 has an invalid length. [ 424.992204][ T6858] wlan1: Trigger new scan to find an IBSS to join [ 425.006680][T16378] __nla_validate_parse: 9 callbacks suppressed [ 425.006700][T16378] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2840'. [ 425.056440][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 425.345461][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2839'. [ 425.360489][T16407] bond0: (slave bond_slave_1): Device is not bonding slave [ 425.367937][T16407] bond0: option active_slave: invalid value (bond_slave_1) [ 425.385354][T16407] bond0 (unregistering): Released all slaves [ 425.499149][T16403] bond8: entered promiscuous mode [ 425.504470][T16403] bond8: entered allmulticast mode [ 425.673937][T16424] openvswitch: netlink: IP tunnel dst address not specified [ 425.764969][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.896740][T16433] netlink: 'syz.4.2854': attribute type 3 has an invalid length. [ 425.906512][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 425.925642][T16431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.936733][T16431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.955518][T16431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.968183][T16428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.002444][T16431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.026707][T16431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.240777][T16450] ip6t_rpfilter: unknown options [ 426.273525][T16458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2861'. [ 426.282558][T16458] netlink: 'syz.4.2861': attribute type 7 has an invalid length. [ 426.290310][T16458] netlink: 'syz.4.2861': attribute type 8 has an invalid length. [ 426.298059][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2861'. [ 426.468157][T16463] netlink: 'syz.3.2865': attribute type 4 has an invalid length. [ 426.496527][T16463] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2865'. [ 426.533103][T16465] sctp: [Deprecated]: syz.1.2863 (pid 16465) Use of int in max_burst socket option deprecated. [ 426.533103][T16465] Use struct sctp_assoc_value instead [ 426.728331][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2869'. [ 426.781221][ T6199] wlan1: Creating new IBSS network, BSSID 1e:3f:e0:1c:b6:b4 [ 426.811972][T16489] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2870'. [ 426.830463][T16489] netlink: 'syz.1.2870': attribute type 1 has an invalid length. [ 427.123998][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.135355][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.144439][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.155917][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.163820][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.311422][ T5636] syz_tun (unregistering): left allmulticast mode [ 427.532187][T16521] netlink: 'syz.2.2876': attribute type 1 has an invalid length. [ 427.611670][T16521] 8021q: adding VLAN 0 to HW filter on device bond11 [ 427.709602][T16526] netlink: 'syz.2.2877': attribute type 1 has an invalid length. [ 427.851574][T16532] veth0: entered promiscuous mode [ 428.247074][T16505] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.254444][T16505] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.262267][T16505] bridge_slave_0: entered allmulticast mode [ 428.269410][T16505] bridge_slave_0: entered promiscuous mode [ 428.277167][T16505] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.284329][T16505] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.291481][T16505] bridge_slave_1: entered allmulticast mode [ 428.298531][T16505] bridge_slave_1: entered promiscuous mode [ 428.324422][T16505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.351542][T16505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.422032][T16505] team0: Port device team_slave_0 added [ 428.431769][T16505] team0: Port device team_slave_1 added [ 428.462354][T16505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.469365][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.495267][T16505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.512640][T16505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.519652][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.545913][T16505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.587084][T16505] hsr_slave_0: entered promiscuous mode [ 428.593475][T16505] hsr_slave_1: entered promiscuous mode [ 428.600937][T16505] debugfs: 'hsr0' already exists in 'hsr' [ 428.606802][T16505] Cannot create hsr debugfs directory [ 428.821946][ T153] bridge_slave_1: left promiscuous mode [ 428.828785][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.987971][ T153] batman_adv: batadv0: Removing interface: gretap1 [ 429.036831][ T153] bond5 (unregistering): (slave geneve0): Releasing active interface [ 429.085246][ C1] net_ratelimit: 22 callbacks suppressed [ 429.085270][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.246292][ T50] Bluetooth: hci5: command tx timeout [ 429.314839][ T153] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 429.323277][ T153] bridge2 (unregistering): left allmulticast mode [ 429.431320][ T153] bond0 (unregistering): Released all slaves [ 429.451578][ T153] bond1 (unregistering): Released all slaves [ 429.473645][ T153] bond2 (unregistering): Released all slaves [ 429.503167][ T153] bond3 (unregistering): Released all slaves [ 429.531408][ T153] bond4 (unregistering): Released all slaves [ 429.552352][ T153] bond5 (unregistering): Released all slaves [ 429.584218][ T153] bond6 (unregistering): Released all slaves [ 429.607578][ T153] bond7 (unregistering): Released all slaves [ 429.629736][ T153] bond8 (unregistering): Released all slaves [ 429.704419][T16487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.728300][T16496] netlink: 'syz.1.2872': attribute type 1 has an invalid length. [ 429.760595][T16500] netlink: 'syz.4.2873': attribute type 1 has an invalid length. [ 429.784575][T16500] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2873'. [ 429.799921][T16500] netlink: 'syz.4.2873': attribute type 1 has an invalid length. [ 429.982677][ T153] tipc: Left network mode [ 429.982679][T16533] veth0: left promiscuous mode [ 430.016691][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.062061][T16547] __nla_validate_parse: 2 callbacks suppressed [ 430.062081][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 430.134216][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.143427][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 430.399568][T16556] bond13: option lp_interval: invalid value (0) [ 430.414235][T16556] bond13: option lp_interval: allowed values 1 - 2147483647 [ 430.440797][T16556] bond13 (unregistering): Released all slaves [ 430.499581][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2885'. [ 430.673989][T16572] veth0_to_bridge: left allmulticast mode [ 430.679871][T16572] veth0_to_bridge: left promiscuous mode [ 430.705553][T16572] bridge0: port 3(veth0_to_bridge) entered disabled state [ 430.781110][T16572] bridge_slave_1: left allmulticast mode [ 430.790915][T16572] bridge_slave_1: left promiscuous mode [ 430.809730][T16572] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.841898][T16572] bridge_slave_0: left allmulticast mode [ 430.847627][T16572] bridge_slave_0: left promiscuous mode [ 430.853447][T16572] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.146530][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2887'. [ 431.244019][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.352418][ T50] Bluetooth: hci5: command tx timeout [ 431.495208][T16562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.843537][T16604] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 431.855233][T16604] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 431.876158][T16505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.892255][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.947203][T16505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.990808][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.998880][T16505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.075921][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.199190][T16505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.228796][T16505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.253344][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.526538][T16505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.619177][T16505] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.653085][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.660294][ T6854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.752707][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.759909][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.250978][T16671] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2904'. [ 433.377337][ T50] Bluetooth: hci5: command tx timeout [ 433.377477][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.652562][T16692] validate_nla: 2 callbacks suppressed [ 433.652584][T16692] netlink: 'syz.2.2909': attribute type 24 has an invalid length. [ 433.716386][T16698] sctp: [Deprecated]: syz.0.2910 (pid 16698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.716386][T16698] Use struct sctp_sack_info instead [ 433.898426][T16702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.233450][T16722] netem: change failed [ 434.241528][T16722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.313075][T16722] netem: change failed [ 434.327623][T16730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.356062][T16731] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.510119][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.684037][T16741] netlink: 'syz.0.2920': attribute type 11 has an invalid length. [ 434.723885][T16741] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.2920'. [ 434.807581][T16505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.166737][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.469196][ T50] Bluetooth: hci5: command tx timeout [ 435.476976][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2931'. [ 435.555192][ T153] team0 (unregistering): Port device 26±ÿ removed [ 435.569432][ T153] team0 (unregistering): Port device team_slave_0 removed [ 435.588405][ T6196] smc: removing ib device syz1 [ 435.633242][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 435.717211][T16505] veth0_vlan: entered promiscuous mode [ 435.731521][T16505] veth1_vlan: entered promiscuous mode [ 435.900156][ T6196] smbdirect: ib_dev[syz1] removed [ 435.912310][T16505] veth0_macvtap: entered promiscuous mode [ 435.961076][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'. [ 436.016898][T16796] ieee802154 phy0 wpan0: encryption failed: -22 [ 436.049699][T16505] veth1_macvtap: entered promiscuous mode [ 436.063223][T16786] xt_socket: unknown flags 0x50 [ 436.087961][T16792] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 436.122897][T16792] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 436.135226][T16792] gretap1: entered promiscuous mode [ 436.146123][T16792] gretap1: entered allmulticast mode [ 436.341437][T16794] veth1_vlan (unregistering): left allmulticast mode [ 436.353692][T16800] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2936'. [ 436.648611][T16806] IPv6: NLM_F_CREATE should be specified when creating new route [ 436.662783][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.698684][T16794] team0: Port device macvlan1 removed [ 436.960601][T16794] team0: Port device vlan0 removed [ 437.127014][T16505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.139369][T16505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.196812][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.269624][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.310530][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.413104][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.533484][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2941'. [ 437.621215][T16818] vlan3: entered allmulticast mode [ 437.626411][T16818] veth1_virt_wifi: entered allmulticast mode [ 437.650713][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.658588][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.660957][T16821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2942'. [ 437.790153][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.835381][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.843335][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.979569][T16830] netlink: 'syz.2.2946': attribute type 1 has an invalid length. [ 438.336442][T16830] bond13: entered promiscuous mode [ 438.342185][T16830] 8021q: adding VLAN 0 to HW filter on device bond13 [ 438.418163][T16830] bond13: (slave bridge6): making interface the new active one [ 438.426047][T16830] bridge6: entered promiscuous mode [ 438.433136][T16830] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 438.543393][T16840] ipvlan0: entered allmulticast mode [ 438.555592][T16840] bond13: entered allmulticast mode [ 438.570963][T16840] bridge6: entered allmulticast mode [ 438.611253][ T153] IPVS: stop unused estimator thread 0... [ 438.635771][T16851] macsec1: entered promiscuous mode [ 438.687079][T16859] netlink: 'syz.1.2950': attribute type 1 has an invalid length. [ 438.811789][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.858913][T16866] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2951'. [ 438.903310][T16859] bond9: entered promiscuous mode [ 438.923979][T16859] 8021q: adding VLAN 0 to HW filter on device bond9 [ 438.992882][T16862] ipvlan3: entered allmulticast mode [ 438.998251][T16862] bond9: entered allmulticast mode [ 439.051681][T16869] ipvlan4: entered allmulticast mode [ 439.215097][T16859] bond9: (slave bridge10): making interface the new active one [ 439.242565][T16859] bridge10: entered promiscuous mode [ 439.274099][T16882] tipc: Can't bind to reserved service type 2 [ 439.283327][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 439.287799][T16859] bridge10: entered allmulticast mode [ 439.296273][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 439.304337][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 439.312661][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 439.319711][T16859] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 439.330239][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 439.634361][T16887] x_tables: duplicate underflow at hook 1 [ 439.656097][T16890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.875929][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2962'. [ 439.893396][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'. [ 439.937326][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.221800][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.229152][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.442541][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2967'. [ 440.594658][T16943] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2970'. [ 440.612179][T16945] netlink: 'syz.1.2969': attribute type 29 has an invalid length. [ 440.612240][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 440.613288][T16945] netlink: 'syz.1.2969': attribute type 29 has an invalid length. [ 440.613307][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 440.630197][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2969'. [ 440.697570][T16946] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2969'. [ 440.904150][T16954] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 440.912727][T16954] bond13: option packets_per_slave: allowed values 0 - 65535 [ 440.924870][T16954] bond13 (unregistering): Released all slaves [ 440.998737][T16956] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 441.025987][T16962] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 441.052651][T16962] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 441.064924][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.084838][T16968] wg1 speed is unknown, defaulting to 1000 [ 441.106767][T16968] wg1 speed is unknown, defaulting to 1000 [ 441.164154][T16968] wg1 speed is unknown, defaulting to 1000 [ 441.214500][T16968] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 441.228760][T16968] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 441.260209][T16968] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 441.325047][T16968] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 441.343336][T16968] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 441.455957][ T5629] Bluetooth: hci4: command tx timeout [ 441.481140][T16968] wg1 speed is unknown, defaulting to 1000 [ 441.545775][T16968] wg1 speed is unknown, defaulting to 1000 [ 441.587187][T16968] wg1 speed is unknown, defaulting to 1000 [ 441.604316][T16879] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.604591][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.604817][T16879] bridge_slave_0: entered allmulticast mode [ 441.606884][T16879] bridge_slave_0: entered promiscuous mode [ 441.610428][T16879] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.610619][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.610773][T16879] bridge_slave_1: entered allmulticast mode [ 441.612845][T16879] bridge_slave_1: entered promiscuous mode [ 441.755548][T16996] bond13: entered promiscuous mode [ 441.760790][T16996] bond13: entered allmulticast mode [ 441.766519][T16996] 8021q: adding VLAN 0 to HW filter on device bond13 [ 441.773890][T16968] wg1 speed is unknown, defaulting to 1000 [ 441.799806][T16968] wg1 speed is unknown, defaulting to 1000 [ 441.828084][T16879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.838001][T16968] wg1 speed is unknown, defaulting to 1000 [ 441.842240][T16879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.919427][T16879] team0: Port device team_slave_0 added [ 441.929286][T16879] team0: Port device team_slave_1 added [ 442.016959][T17009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2986'. [ 442.019380][T16879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.039615][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.068904][T16879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.082764][T16879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.094096][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.120579][T16879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.196556][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.322012][T16879] hsr_slave_0: entered promiscuous mode [ 442.329177][T16879] hsr_slave_1: entered promiscuous mode [ 442.346007][T17021] netlink: 'syz.0.2990': attribute type 1 has an invalid length. [ 442.468956][T17021] 8021q: adding VLAN 0 to HW filter on device bond14 [ 442.490994][T17027] veth0_to_bond: left allmulticast mode [ 442.493048][T17029] sctp: [Deprecated]: syz.3.2993 (pid 17029) Use of int in maxseg socket option. [ 442.493048][T17029] Use struct sctp_assoc_value instead [ 442.511232][T17027] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 442.663787][T17027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2990'. [ 442.805869][T16879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.817590][T16879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.919384][T17038] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 443.043215][T16879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.053772][T16879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.109397][T17040] netlink: 'syz.0.2998': attribute type 1 has an invalid length. [ 443.197904][T17044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2998'. [ 443.240861][T16879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.251420][T17054] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2998'. [ 443.252651][T16879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.301192][T17057] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3003'. [ 443.326676][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.479530][T16879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.489866][T16879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.545448][ T50] Bluetooth: hci4: command tx timeout [ 443.680293][T17053] netlink: 'syz.1.3001': attribute type 3 has an invalid length. [ 444.337495][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.769427][T17093] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 444.878638][T16879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 444.919029][T16879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.958864][T17093] bond15: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 445.022489][T16879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.058733][T16879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.086172][T17102] bond15 (unregistering): (slave ip6gretap1): Releasing backup interface [ 445.119624][T17102] bond15 (unregistering): Released all slaves [ 445.277342][T16879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.312806][T16879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.331515][T16879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.378358][T16879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.459682][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.634433][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 446.028225][T17119] netlink: 'syz.2.3015': attribute type 2 has an invalid length. [ 446.053328][T17119] netlink: 'syz.2.3015': attribute type 1 has an invalid length. [ 446.577531][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 447.705424][ T5629] Bluetooth: hci4: command 0x040f tx timeout [ 447.708724][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.564593][T17124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.705405][T17134] netlink: 'syz.1.3017': attribute type 21 has an invalid length. [ 448.729336][T17134] __nla_validate_parse: 3 callbacks suppressed [ 448.729355][T17134] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3017'. [ 448.762194][T16879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.776000][T17134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3017'. [ 448.783830][T16879] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.814023][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.829526][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 448.842556][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.849681][ T6195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.858405][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.865555][ T6195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.328281][T17154] netem: unknown loss type 0 [ 449.333221][T17154] netem: change failed [ 449.681554][T17172] macvlan0: entered promiscuous mode [ 449.736761][T17176] lo: entered allmulticast mode [ 449.742972][T17176] lo: left allmulticast mode [ 449.775896][ T5629] Bluetooth: hci4: command 0x040f tx timeout [ 449.864065][T17174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3026'. [ 449.872738][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3026'. [ 449.943775][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.059456][T16879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.368952][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3032'. [ 450.674160][T17206] syzkaller0: entered promiscuous mode [ 450.681956][T17206] syzkaller0: entered allmulticast mode [ 450.731764][T17206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3035'. [ 450.757460][T17206] bridge_slave_1: left allmulticast mode [ 450.773600][T17206] bridge_slave_1: left promiscuous mode [ 450.784657][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.800093][T17206] bridge_slave_0: left allmulticast mode [ 450.805983][T17206] bridge_slave_0: left promiscuous mode [ 450.812108][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.058002][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 451.292919][T17204] macsec0: left allmulticast mode [ 451.457038][T16879] veth0_vlan: entered promiscuous mode [ 451.483370][T16879] veth1_vlan: entered promiscuous mode [ 451.557563][T16879] veth0_macvtap: entered promiscuous mode [ 451.648422][T17218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3036'. [ 451.756096][T16879] veth1_macvtap: entered promiscuous mode [ 451.839816][T16879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.852441][T16879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.875653][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.898268][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.923686][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.947166][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.096086][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.119396][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.165381][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.274569][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.282475][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.455752][T17231] bond10: Unable to set down delay as MII monitoring is disabled [ 452.523744][T17231] bond10 (unregistering): Released all slaves [ 452.847316][T17233] nicvf0: entered allmulticast mode [ 452.926876][T17238] netlink: 'syz.4.2952': attribute type 14 has an invalid length. [ 453.133841][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.171531][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 453.185770][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 453.193849][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.202029][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.209920][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.533199][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3044'. [ 454.055494][T17293] netem: change failed [ 454.260915][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.394843][T17307] netlink: 'syz.4.3055': attribute type 1 has an invalid length. [ 454.409814][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3054'. [ 454.430170][T17302] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3054'. [ 454.472032][T17306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.551788][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.591080][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.677680][T17315] netlink: 'syz.3.3057': attribute type 21 has an invalid length. [ 454.686714][T17317] netlink: 'syz.3.3057': attribute type 21 has an invalid length. [ 454.827204][T17315] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 454.854355][T17320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3059'. [ 454.855669][T17315] bond1 (unregistering): Released all slaves [ 454.903493][T17317] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 454.911921][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.941704][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.004514][T17330] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.257256][T17337] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3064'. [ 455.297532][T17336] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3064'. [ 455.327859][ T50] Bluetooth: hci3: command tx timeout [ 455.384811][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 455.412756][T17343] tipc: New replicast peer: 255.255.255.255 [ 455.420697][T17343] tipc: Enabled bearer , priority 10 [ 455.502565][T17343] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3066'. [ 455.593999][T17348] tipc: Enabling of bearer rejected, failed to enable media [ 455.636154][T17349] tipc: Enabling of bearer rejected, failed to enable media [ 455.710214][T17252] wg1 speed is unknown, defaulting to 1000 [ 455.762187][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.788291][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.461166][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.483058][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.510804][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.547759][T17382] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3078'. [ 456.548481][T17378] xt_TCPMSS: Only works on TCP SYN packets [ 456.672059][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'. [ 456.707453][T17381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3079'. [ 456.827477][T17394] netlink: 'syz.3.3081': attribute type 12 has an invalid length. [ 456.980635][T17394] syzkaller1: entered promiscuous mode [ 456.987266][T17394] syzkaller1: entered allmulticast mode [ 457.144225][T17252] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.151507][T17252] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.158793][T17252] bridge_slave_0: entered allmulticast mode [ 457.183460][T17252] bridge_slave_0: entered promiscuous mode [ 457.200145][T17252] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.229945][T17252] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.258353][T17252] bridge_slave_1: entered allmulticast mode [ 457.287754][T17252] bridge_slave_1: entered promiscuous mode [ 457.396062][ T50] Bluetooth: hci3: command tx timeout [ 457.452029][T17252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.499323][T17252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.626186][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.672161][T17436] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 457.711728][T17436] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 457.712457][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3091'. [ 457.719798][T17436] gretap1: entered promiscuous mode [ 457.804402][T17436] gretap1: entered allmulticast mode [ 457.830048][T17252] team0: Port device team_slave_0 added [ 457.839844][T17252] team0: Port device team_slave_1 added [ 458.030496][T17433] team1: entered promiscuous mode [ 458.047667][T17433] team1: entered allmulticast mode [ 458.062628][T17452] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 458.158920][T17462] syzkaller0: entered promiscuous mode [ 458.164467][T17462] syzkaller0: entered allmulticast mode [ 458.220030][ T12] bridge_slave_1: left promiscuous mode [ 458.227068][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.245379][ T12] bridge_slave_0: left promiscuous mode [ 458.251383][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.662104][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.853124][ T12] bond0 (unregistering): (slave geneve2): Releasing active interface [ 459.385797][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.408076][ T12] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 459.416202][ T12] bridge4 (unregistering): left promiscuous mode [ 459.445298][ T50] Bluetooth: hci3: command tx timeout [ 459.901843][ T12] bond0 (unregistering): Released all slaves [ 459.925260][ T12] bond1 (unregistering): Released all slaves [ 459.946883][ T12] bond2 (unregistering): Released all slaves [ 459.986691][ T12] bond3 (unregistering): Released all slaves [ 460.001511][ T12] bond4 (unregistering): Released all slaves [ 460.015523][ T12] bond5 (unregistering): Released all slaves [ 460.029423][ T12] bond6 (unregistering): Released all slaves [ 460.043567][ T12] bond7 (unregistering): Released all slaves [ 460.065194][ T12] bond8 (unregistering): Released all slaves [ 460.081485][ T12] bond9 (unregistering): Released all slaves [ 460.100745][ T12] bond10 (unregistering): Released all slaves [ 460.124973][ T12] bond11 (unregistering): Released all slaves [ 460.141976][ T12] bond12 (unregistering): Released all slaves [ 460.166708][ T12] bond13 (unregistering): Released all slaves [ 460.182228][ T12] bond14 (unregistering): (slave veth0_to_bond): Releasing active interface [ 460.192477][ T12] bond14 (unregistering): Released all slaves [ 460.224435][T17252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.231674][T17252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.258089][T17252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.356678][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 460.395246][T17252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.402531][T17252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.441176][T17252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.643349][ T12] tipc: Disabling bearer [ 460.666043][ T12] tipc: Left network mode [ 460.853307][T17491] veth3: entered promiscuous mode [ 460.860203][T17491] veth3: entered allmulticast mode [ 461.123143][T17252] hsr_slave_0: entered promiscuous mode [ 461.160671][T17252] hsr_slave_1: entered promiscuous mode [ 461.190379][T17252] debugfs: 'hsr0' already exists in 'hsr' [ 461.204242][T17252] Cannot create hsr debugfs directory [ 461.257476][T17521] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 461.405592][T17506] bridge0: port 3(veth0_to_bridge) entered blocking state [ 461.422006][T17506] bridge0: port 3(veth0_to_bridge) entered disabled state [ 461.440388][T17506] veth0_to_bridge: entered allmulticast mode [ 461.464325][T17506] veth0_to_bridge: entered promiscuous mode [ 461.480896][T17506] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.496109][T17506] bridge0: port 3(veth0_to_bridge) entered blocking state [ 461.504659][T17506] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 461.525688][ T50] Bluetooth: hci3: command tx timeout [ 461.668568][T17537] __nla_validate_parse: 2 callbacks suppressed [ 461.668590][T17537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3112'. [ 461.701241][T17539] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3113'. [ 461.717656][T17539] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3113'. [ 461.794855][T17542] netlink: 'syz.4.3113': attribute type 21 has an invalid length. [ 461.823823][T17544] netlink: 'syz.1.3114': attribute type 2 has an invalid length. [ 461.843253][T17544] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3114'. [ 461.852424][T17542] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3113'. [ 461.861967][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3112'. [ 462.004944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.017407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.030011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.042462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.054902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.067601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.080139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.092732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.119114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.131816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.304801][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 463.205019][T17565] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3118'. [ 463.233312][T17573] syz_tun: entered allmulticast mode [ 463.247908][T17570] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3117'. [ 463.439783][T17582] netlink: 'syz.2.3120': attribute type 1 has an invalid length. [ 464.226757][T17585] bond14: (slave bridge7): making interface the new active one [ 464.240346][T17585] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 464.750070][T17619] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 465.073553][T17639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 467.005529][ C1] net_ratelimit: 8419 callbacks suppressed [ 467.005582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.027260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.039964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.052164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 467.064400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.076694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.094187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.106425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 467.118709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.139698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.015046][ C1] net_ratelimit: 12215 callbacks suppressed [ 472.015104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.035897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.048103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 472.060316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.072458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.085197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.097404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 472.109597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.121855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.134553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.025171][ C1] net_ratelimit: 9550 callbacks suppressed [ 477.025211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.046946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.059103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 477.071286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.083431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.096717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.109147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 477.121530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.133758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.153928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.873549][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.900294][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.912862][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.929536][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.938962][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 481.085444][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 481.101243][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 481.111577][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 481.124547][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 481.132414][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 481.352697][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 481.374798][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 481.385208][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 481.400696][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 481.410885][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 481.550725][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 481.572697][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 481.596473][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 481.610052][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 481.619638][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 482.036289][ C1] net_ratelimit: 8573 callbacks suppressed [ 482.036348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 482.056801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.070136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.083410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.096736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.113248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.125488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 482.138177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.150322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 482.162525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.045703][ T50] Bluetooth: hci1: command tx timeout [ 483.205205][ T50] Bluetooth: hci6: command tx timeout [ 483.445201][ T50] Bluetooth: hci7: command tx timeout [ 483.686103][ T50] Bluetooth: hci8: command tx timeout [ 485.125394][ T50] Bluetooth: hci1: command tx timeout [ 485.286029][ T50] Bluetooth: hci6: command tx timeout [ 485.525200][ T50] Bluetooth: hci7: command tx timeout [ 485.765198][ T50] Bluetooth: hci8: command tx timeout [ 487.046924][ C1] net_ratelimit: 8995 callbacks suppressed [ 487.046953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.067254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 487.080510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.092696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 487.104924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.117105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.132234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.144458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.157306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.179846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 487.235644][ T50] Bluetooth: hci1: command tx timeout [ 487.365177][ T50] Bluetooth: hci6: command tx timeout [ 487.605229][ T50] Bluetooth: hci7: command tx timeout [ 487.845865][ T50] Bluetooth: hci8: command tx timeout [ 489.285728][ T50] Bluetooth: hci1: command tx timeout [ 489.446265][ T50] Bluetooth: hci6: command tx timeout [ 489.688003][ T50] Bluetooth: hci7: command tx timeout [ 489.925196][ T50] Bluetooth: hci8: command tx timeout [ 491.368666][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 492.055567][ C1] net_ratelimit: 7461 callbacks suppressed [ 492.055598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.077208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.089732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 492.102559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.114756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 492.126993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.139201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.151347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.163494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.183732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.065291][ C1] net_ratelimit: 7171 callbacks suppressed [ 497.065320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.085566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.097784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.109932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.123191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.135468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 497.148668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.160878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 497.173085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.192014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.608822][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.616971][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.075402][ C1] net_ratelimit: 8101 callbacks suppressed [ 502.075432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 502.096015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.108267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.120416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.132551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.145275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.157700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 502.174056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.186227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 502.205747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.072101][ C1] sched: DL replenish lagged too much [ 507.085859][ C1] net_ratelimit: 9299 callbacks suppressed [ 507.085888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.106787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 507.120970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 507.134636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 507.148307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.161704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.176024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.189272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 507.203719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.217090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 512.095445][ C1] net_ratelimit: 8293 callbacks suppressed [ 512.095475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.117269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 512.130544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 512.144501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.157701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.170987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.183176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 512.196137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.208382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 512.220903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.189700][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 513.207018][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 513.216792][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 513.224940][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 513.238424][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.285501][ T5629] Bluetooth: hci2: command tx timeout [ 517.105323][ C1] net_ratelimit: 8730 callbacks suppressed [ 517.105353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 517.125627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 517.138019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.150218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.162367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.174508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 517.187290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.199502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 517.212079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 517.224247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.365515][ T5629] Bluetooth: hci2: command tx timeout [ 519.446289][ T5629] Bluetooth: hci2: command tx timeout [ 521.525609][ T5629] Bluetooth: hci2: command tx timeout [ 522.115179][ C1] net_ratelimit: 8779 callbacks suppressed [ 522.115209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.134845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.148634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 522.161967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 522.175273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.187483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.199586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.211678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 522.224562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 522.237487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.377320][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 527.126742][ C1] net_ratelimit: 9250 callbacks suppressed [ 527.126803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 527.146038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.158246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 527.170718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 527.182937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.195124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.207524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 527.219650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 527.232689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.256699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.136728][ C1] net_ratelimit: 7610 callbacks suppressed [ 532.136758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 532.158877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.172311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 532.186412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 532.199747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.213085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.227501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 532.239703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 532.251921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.264104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.145172][ C1] net_ratelimit: 7849 callbacks suppressed [ 537.145232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 537.167116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 537.180061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.192354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 537.205082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 537.217260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.229701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.242238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 537.254397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 537.273754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.531440][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 541.581699][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 541.592928][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 541.609167][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 541.621332][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 541.801774][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 541.821018][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 541.829984][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 541.842491][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 541.857002][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 541.970334][ T5629] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 541.988139][ T5629] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 541.998938][ T5629] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 542.019018][ T5629] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 542.028924][ T5629] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 542.167560][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 542.174177][ C1] net_ratelimit: 8810 callbacks suppressed [ 542.174193][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 542.194300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 542.196599][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 542.207049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.207375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 542.208133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 542.218385][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 542.227000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.227456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.228174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 542.249949][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 542.252016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 542.260309][ T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 542.270855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.685075][ T5629] Bluetooth: hci9: command tx timeout [ 543.845291][ T5629] Bluetooth: hci10: command tx timeout [ 544.085167][ T5629] Bluetooth: hci11: command tx timeout [ 544.325084][ T5629] Bluetooth: hci12: command tx timeout [ 545.765620][ T5629] Bluetooth: hci9: command tx timeout [ 545.927241][ T5629] Bluetooth: hci10: command tx timeout [ 546.166108][ T5629] Bluetooth: hci11: command tx timeout [ 546.405463][ T5629] Bluetooth: hci12: command tx timeout [ 547.175523][ C1] net_ratelimit: 8555 callbacks suppressed [ 547.175554][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.196246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.209351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.221666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.234539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.246900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.259085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 547.272939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 547.285155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.297299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.845073][ T5629] Bluetooth: hci9: command tx timeout [ 548.005203][ T5629] Bluetooth: hci10: command tx timeout [ 548.246365][ T5629] Bluetooth: hci11: command tx timeout [ 548.485121][ T5629] Bluetooth: hci12: command tx timeout [ 549.777825][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 549.925093][ T50] Bluetooth: hci9: command tx timeout [ 550.085115][ T50] Bluetooth: hci10: command tx timeout [ 550.326647][ T50] Bluetooth: hci11: command tx timeout [ 550.565770][ T50] Bluetooth: hci12: command tx timeout [ 552.186394][ C1] net_ratelimit: 7494 callbacks suppressed [ 552.186423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 552.207280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.219589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 552.232126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 552.244318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.256483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.269496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 552.281717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 552.293938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.306121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 555.368373][ T137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 557.195169][ C1] net_ratelimit: 9113 callbacks suppressed [ 557.195199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 557.215412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.227675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.240105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.252232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 557.264415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.276778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.289140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.301264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.314094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.205217][ C1] net_ratelimit: 7902 callbacks suppressed [ 562.205247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 562.225150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.238484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.252473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.265800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.281533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.295965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.309382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 562.324137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 562.336414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.060919][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.067431][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.127828][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 567.215960][ C1] net_ratelimit: 7642 callbacks suppressed [ 567.215989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 567.236296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.248738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.261215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.273377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 567.285680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.298993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.311203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.324642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.345559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.225385][ C1] net_ratelimit: 7413 callbacks suppressed [ 572.225442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.245544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.260225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.274179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.287767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 572.302524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 572.314849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.327047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.339631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.351850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 573.524674][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.538692][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.552276][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.566248][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.577000][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 575.605328][ T50] Bluetooth: hci0: command tx timeout [ 577.235145][ C1] net_ratelimit: 8786 callbacks suppressed [ 577.235204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.255619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.268171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.280327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 577.292519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.304706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.317092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.329503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.342424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.354763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.696456][ T50] Bluetooth: hci0: command tx timeout [ 579.765689][ T50] Bluetooth: hci0: command tx timeout [ 581.845321][ T50] Bluetooth: hci0: command tx timeout [ 582.246215][ C1] net_ratelimit: 9162 callbacks suppressed [ 582.246245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.267083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 582.280457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.293744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.306990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.320964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.334511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.346821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.358964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.371358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.255256][ C1] net_ratelimit: 8773 callbacks suppressed [ 587.255301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 587.275776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.288238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.300677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.312886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.325382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 587.338327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.350685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.362835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.382476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.385447][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 590.725774][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 592.264981][ C1] net_ratelimit: 8277 callbacks suppressed [ 592.265031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 592.286156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 592.299299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.312718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.326582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.339928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 592.353331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.366636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.380668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.392873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.276039][ C1] net_ratelimit: 8944 callbacks suppressed [ 597.276070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 597.297762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.311650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.324034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.336270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.348552][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.360875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 597.373976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 597.386393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.398576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.200801][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.215449][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 601.229458][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 601.238262][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 601.250450][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 602.285308][ C1] net_ratelimit: 8455 callbacks suppressed [ 602.285358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.306006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.320583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.333019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.345508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.357955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 602.370947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 602.383363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.408792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.421779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.484859][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 602.500151][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 602.513356][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 602.529709][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 602.539885][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 602.633039][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 602.653345][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 602.665107][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 602.681053][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 602.694885][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 602.826533][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 602.843654][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 602.854560][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 602.872000][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 602.882154][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 603.295567][ T50] Bluetooth: hci1: command tx timeout [ 604.645780][ T50] Bluetooth: hci4: command tx timeout [ 604.725140][ T50] Bluetooth: hci5: command tx timeout [ 604.965227][ T50] Bluetooth: hci6: command tx timeout [ 605.365594][ T50] Bluetooth: hci1: command tx timeout [ 606.725771][ T50] Bluetooth: hci4: command tx timeout [ 606.805194][ T50] Bluetooth: hci5: command tx timeout [ 607.045273][ T50] Bluetooth: hci6: command tx timeout [ 607.295418][ C1] net_ratelimit: 9667 callbacks suppressed [ 607.295449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.315561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.329394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 607.343515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.358073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.371764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.386029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.398470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.410702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 607.423215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 607.446126][ T50] Bluetooth: hci1: command tx timeout [ 608.805600][ T50] Bluetooth: hci4: command tx timeout [ 608.885129][ T50] Bluetooth: hci5: command tx timeout [ 609.126236][ T50] Bluetooth: hci6: command tx timeout [ 609.525435][ T50] Bluetooth: hci1: command tx timeout [ 610.885545][ T50] Bluetooth: hci4: command tx timeout [ 610.965086][ T50] Bluetooth: hci5: command tx timeout [ 611.205125][ T50] Bluetooth: hci6: command tx timeout [ 612.305475][ C1] net_ratelimit: 8497 callbacks suppressed [ 612.305502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.326790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.340199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 612.354323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.367811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.380927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.393136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.405705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 612.418297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.436913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.315638][ C1] net_ratelimit: 9309 callbacks suppressed [ 617.315667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 617.336212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.349170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.361472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.373603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.385936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.398388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 617.411333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 617.423684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.442821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.370351][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 622.325698][ C1] net_ratelimit: 8577 callbacks suppressed [ 622.325729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 622.345430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.357664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.369779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.381940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.394430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 622.407473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.421271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.433861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.453077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.489798][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.497866][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.336043][ C1] net_ratelimit: 9707 callbacks suppressed [ 627.336101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 627.358125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.372638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.386607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.399966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.413328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.426705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 627.440576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 627.453880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.467251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.345397][ C1] net_ratelimit: 8525 callbacks suppressed [ 632.345425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 632.365622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.378153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.391132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.403280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 632.415456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.427625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.439729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.451843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.464207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 634.265169][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 634.281371][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 634.291977][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 634.305649][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 634.327028][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 636.405613][ T50] Bluetooth: hci7: command tx timeout [ 636.805166][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 637.355222][ C1] net_ratelimit: 9990 callbacks suppressed [ 637.355253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 637.375498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.387949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.400832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.413320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 637.425781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.438182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.450550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.462812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 637.482034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 638.485659][ T50] Bluetooth: hci7: command tx timeout [ 640.565300][ T50] Bluetooth: hci7: command tx timeout [ 642.365250][ C1] net_ratelimit: 8961 callbacks suppressed [ 642.365277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.386032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.398497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.410970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.423428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 642.436371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 642.448789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.461163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.473651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 642.492493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 642.655439][ T50] Bluetooth: hci7: command tx timeout [ 647.375513][ C1] net_ratelimit: 8205 callbacks suppressed [ 647.375543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.396503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.409137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 647.421701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.434141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.446555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.459026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.472037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 647.484514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 647.503929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.386814][ C1] net_ratelimit: 8957 callbacks suppressed [ 652.386881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 652.407709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.425502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.438235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.450629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.462915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.475410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 652.488018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 652.500245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.521513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.395812][ C1] net_ratelimit: 9152 callbacks suppressed [ 657.395843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.416203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 657.428743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.441230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.453672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.466058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.479087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 657.491942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.505820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.532604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.912793][T17760] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 661.929043][T17760] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 661.937738][T17760] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 661.948026][T17760] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 661.956058][T17760] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 662.405017][ C1] net_ratelimit: 8073 callbacks suppressed [ 662.405075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.425347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.437558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.449965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 662.462303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.475118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 662.487666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.499840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.512017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.524188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 663.241691][ T5635] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 663.256722][ T5635] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 663.267156][ T5635] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 663.279835][ T5635] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 663.289851][ T5635] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 663.395806][T17768] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 663.412321][T17768] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 663.422564][T17768] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 663.436334][T17768] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 663.464189][T17768] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 663.551107][T17775] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 663.568592][T17775] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 663.594686][T17775] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 663.613377][T17775] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 663.622826][T17775] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 667.415405][ C1] net_ratelimit: 9292 callbacks suppressed [ 667.415445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.435649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.447925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.460186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 667.472741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 667.484981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.497379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.509878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 667.522014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 667.534211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.615707][T17782] Bluetooth: hci9: command 0x0406 tx timeout [ 667.626787][T17782] Bluetooth: hci10: command 0x0406 tx timeout [ 667.632961][T17782] Bluetooth: hci11: command 0x0406 tx timeout [ 667.639148][T17782] Bluetooth: hci12: command 0x0406 tx timeout [ 672.425375][ C1] net_ratelimit: 7989 callbacks suppressed [ 672.425405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.447231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.461466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.474008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.492936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 672.505858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 672.515548][ T31] INFO: task kworker/0:6:5753 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 672.518190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.537958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.547410][ T31] Not tainted syzkaller #0 [ 672.550749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 672.582454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:81:22:05:9f:53, vlan:0) [ 672.584963][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.643111][ T31] task:kworker/0:6 state:D stack:23704 pid:5753 tgid:5753 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 672.733417][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 672.773981][ T31] Call Trace: [ 672.784946][ T31] [ 672.787964][ T31] __schedule+0x17b4/0x5680 [ 672.792588][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 672.814402][ T31] ? __pfx_sched_balance_rq+0x10/0x10 [ 672.820805][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 672.826177][ T31] ? wq_worker_sleeping+0x101/0x250 [ 672.831486][ T31] ? __pfx___schedule+0x10/0x10 [ 672.836786][ T31] ? schedule+0x90/0x360 [ 672.841104][ T31] schedule+0x164/0x360 [ 672.846301][ T31] schedule_preempt_disabled+0x13/0x30 [ 672.851824][ T31] __mutex_lock+0x7f7/0x1550 [ 672.856849][ T31] ? __mutex_lock+0x608/0x1550 [ 672.861680][ T31] ? reg_check_chans_work+0xab/0x1090 [ 672.870385][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 672.875714][ T31] ? look_up_lock_class+0x57/0x110 [ 672.880962][ T31] ? register_lock_class+0x31/0x2e0 [ 672.886878][ T31] ? clockevents_program_event+0x491/0x630 [ 672.892787][ T31] ? process_scheduled_works+0xa70/0x1860 [ 672.898937][ T31] reg_check_chans_work+0xab/0x1090 [ 672.904208][ T31] ? tick_program_event+0x8f/0x120 [ 672.910907][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 672.924523][ T31] ? lock_acquire+0x106/0x350 [ 672.930318][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 672.936376][ T31] ? process_scheduled_works+0xa70/0x1860 [ 672.942163][ T31] ? process_scheduled_works+0xa70/0x1860 [ 672.948332][ T31] ? process_scheduled_works+0xa70/0x1860 [ 672.954127][ T31] ? process_scheduled_works+0xa70/0x1860 [ 672.960896][ T31] process_scheduled_works+0xb5d/0x1860 [ 672.966783][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 672.972829][ T31] ? assign_work+0x3d5/0x5e0 [ 672.981402][ T31] worker_thread+0xa53/0xfc0 [ 672.986333][ T31] kthread+0x388/0x470 [ 672.990739][ T31] ? __pfx_worker_thread+0x10/0x10 [ 672.996292][ T31] ? __pfx_kthread+0x10/0x10 [ 673.000952][ T31] ret_from_fork+0x514/0xb70 [ 673.006020][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 673.011202][ T31] ? __switch_to+0xc79/0x1410 [ 673.017097][ T31] ? __pfx_kthread+0x10/0x10 [ 673.021761][ T31] ret_from_fork_asm+0x1a/0x30 [ 673.031469][ T31] [ 673.034591][ T31] INFO: task syz-executor:17685 blocked for more than 143 seconds. [ 673.043421][ T31] Not tainted syzkaller #0 [ 673.048652][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.057607][ T31] task:syz-executor state:D stack:26760 pid:17685 tgid:17685 ppid:1 task_flags:0x400140 flags:0x00080002 [ 673.070501][ T31] Call Trace: [ 673.073841][ T31] [ 673.077220][ T31] __schedule+0x17b4/0x5680 [ 673.081793][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 673.090547][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 673.096292][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 673.101298][ T31] ? __pfx___schedule+0x10/0x10 [ 673.106591][ T31] ? schedule+0x90/0x360 [ 673.110901][ T31] schedule+0x164/0x360 [ 673.115510][ T31] schedule_preempt_disabled+0x13/0x30 [ 673.121027][ T31] __mutex_lock+0x7f7/0x1550 [ 673.126025][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 673.132133][ T31] ? __mutex_lock+0x608/0x1550 [ 673.144764][ T31] ? inet_rtm_newaddr+0x404/0x1ad0 [ 673.150349][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 673.156163][ T31] ? __nla_parse+0x40/0x60 [ 673.160689][ T31] inet_rtm_newaddr+0x404/0x1ad0 [ 673.166095][ T31] ? unwind_get_return_address+0x4d/0x90 [ 673.171821][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 673.178465][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 673.184562][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 673.190408][ T31] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 673.196077][ T31] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 673.202256][ T31] ? netlink_sendmsg+0x5d4/0xb40 [ 673.209519][ T31] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 673.214696][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.220622][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 673.225868][ T31] netlink_rcv_skb+0x232/0x4b0 [ 673.230704][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 673.236589][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.242566][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.248194][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.253466][ T31] netlink_unicast+0x75c/0x8e0 [ 673.263515][ T31] netlink_sendmsg+0x813/0xb40 [ 673.273732][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.279666][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 673.284798][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.290565][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.297112][ T31] __sys_sendto+0x672/0x710 [ 673.301766][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 673.307280][ T31] ? exc_page_fault+0x6a/0xc0 [ 673.312027][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 673.320793][ T31] __x64_sys_sendto+0xde/0x100 [ 673.325910][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.332051][ T31] do_syscall_64+0x15f/0xf80 [ 673.337119][ T31] ? trace_irq_disable+0x3b/0x140 [ 673.342223][ T31] ? clear_bhb_loop+0x40/0x90 [ 673.347351][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.353309][ T31] RIP: 0033:0x7fdcb755d60e [ 673.358183][ T31] RSP: 002b:00007ffd0e7c0d78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 673.368612][ T31] RAX: ffffffffffffffda RBX: 000055558d5ee500 RCX: 00007fdcb755d60e [ 673.382473][ T31] RDX: 0000000000000028 RSI: 00007fdcb8344670 RDI: 0000000000000003 [ 673.390812][ T31] RBP: 0000000000000001 R08: 00007ffd0e7c0df4 R09: 000000000000000c [ 673.399344][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 673.407642][ T31] R13: 0000000000000000 R14: 00007fdcb8344670 R15: 0000000000000000 [ 673.416579][ T31] [ 673.419676][ T31] [ 673.419676][ T31] Showing all locks held in the system: [ 673.434951][ T31] 4 locks held by kworker/u8:0/12: [ 673.441332][ T31] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 673.452586][ T31] #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 673.463467][ T31] #2: ffffffff8fdbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 673.473223][ T31] #3: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 673.485127][ T31] 3 locks held by kworker/1:0/24: [ 673.490210][ T31] 1 lock held by khungtaskd/31: [ 673.498321][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 673.508854][ T31] 4 locks held by kworker/u8:3/48: [ 673.514022][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 673.526200][ T31] #1: ffffc90000b87c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 673.539291][ T31] #2: ffff888057f90780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 673.549741][ T31] #3: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 673.562757][ T31] 4 locks held by kworker/u9:0/50: [ 673.568178][ T31] #0: ffff8880349ee940 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 673.579688][ T31] #1: ffffc90000ba7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 673.593814][ T31] #2: ffff888063b500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 673.608394][ T31] #3: ffffffff8ff51b40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 673.623007][ T31] 3 locks held by kworker/1:2/54: [ 673.628338][ T31] 3 locks held by kworker/0:2/993: [ 673.633517][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 673.648597][ T31] #1: ffffc900052cfc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 673.660005][ T31] #2: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 673.670884][ T31] 2 locks held by dhcpcd/5285: [ 673.675912][ T31] #0: ffff8880347606e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 673.686059][ T31] #1: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 673.699394][ T31] 2 locks held by getty/5382: [ 673.704454][ T31] #0: ffff888036af70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 673.717818][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 673.728298][ T31] 5 locks held by kworker/1:4/5626: [ 673.733823][ T31] 6 locks held by kworker/u9:4/5629: [ 673.739430][ T31] #0: ffff88805395d140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 673.751268][ T31] #1: ffffc90003e87c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 673.764564][ T31] #2: ffff8880829d8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 673.774940][ T31] #3: ffff8880829d80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 673.785228][ T31] #4: ffffffff8ff51b40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 673.796683][ T31] #5: ffff8880792ec2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 673.813556][ T31] 4 locks held by kworker/u9:6/5635: [ 673.819150][ T31] #0: ffff888035fa4140 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 673.833679][ T31] #1: ffffc90004087c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 673.846183][ T31] #2: ffff88802c1cc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 673.857197][ T31] #3: ffffffff8ff51b40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 673.868024][ T31] 2 locks held by kworker/1:5/5745: [ 673.873276][ T31] 3 locks held by kworker/0:6/5753: [ 673.878915][ T31] #0: ffff88813fe41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 673.892078][ T31] #1: ffffc90004477c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 673.903580][ T31] #2: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090 [ 673.913889][ T31] 3 locks held by kworker/u8:11/6196: [ 673.919591][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 673.934673][ T31] #1: ffffc90005777c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 673.952279][ T31] #2: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 673.962273][ T31] 3 locks held by kworker/u8:16/6854: [ 673.967981][ T31] #0: ffff888031f7c940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 673.979921][ T31] #1: ffffc90004837c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 673.993943][ T31] #2: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 674.005335][ T31] 2 locks held by kworker/1:8/14021: [ 674.010682][ T31] 7 locks held by syz-executor/17252: [ 674.016823][ T31] #0: ffff8880355de410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 674.026072][ T31] #1: ffff8880788db080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 674.041957][ T31] #2: ffff8880290f1008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 674.060478][ T31] #3: ffffffff8f64e620 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 674.071260][ T31] #4: ffff888059066128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 674.082886][ T31] #5: ffff88805906e258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 674.093348][ T31] #6: ffffffff8e962f38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 674.104007][ T31] 1 lock held by syz.3.3126/17647: [ 674.109574][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 674.119235][ T31] 1 lock held by syz.4.3127/17628: [ 674.124406][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 674.133874][ T31] 2 locks held by syz.1.3130/17638: [ 674.139358][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 674.150513][ T31] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 674.167244][ T31] 1 lock held by syz.2.3131/17639: [ 674.175108][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 674.184188][ T31] 1 lock held by syz-executor/17685: [ 674.190515][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.200297][ T31] 1 lock held by syz-executor/17693: [ 674.207833][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.217934][ T31] 1 lock held by syz-executor/17697: [ 674.223277][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.233179][ T31] 1 lock held by syz-executor/17699: [ 674.238760][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.248507][ T31] 1 lock held by syz-executor/17703: [ 674.253849][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.265666][ T31] 1 lock held by syz-executor/17716: [ 674.270998][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.285157][ T31] 1 lock held by syz-executor/17726: [ 674.290512][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.301684][ T31] 1 lock held by syz-executor/17736: [ 674.307373][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.317127][ T31] 1 lock held by syz-executor/17738: [ 674.322738][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.332957][ T31] 1 lock held by syz-executor/17742: [ 674.338540][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.348302][ T31] 1 lock held by syz-executor/17751: [ 674.353642][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.363572][ T31] 1 lock held by syz-executor/17758: [ 674.369164][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.380607][ T31] 4 locks held by kworker/u9:1/17760: [ 674.393278][ T31] #0: ffff888057ff6140 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 674.404665][ T31] #1: ffffc900024ffc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 674.417722][ T31] #2: ffff888040ed40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 674.428262][ T31] #3: ffffffff8ff51b40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 674.439065][ T31] 1 lock held by syz-executor/17767: [ 674.444437][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.459005][ T31] 4 locks held by kworker/u9:2/17768: [ 674.464446][ T31] #0: ffff8880251a7140 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 674.476279][ T31] #1: ffffc9000249fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 674.490489][ T31] #2: ffff88803a5340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 674.505154][ T31] #3: ffffffff8ff51b40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 674.516007][ T31] 1 lock held by syz-executor/17770: [ 674.521385][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.532326][ T31] 5 locks held by kworker/u9:3/17772: [ 674.538080][ T31] #0: ffff888031915140 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 674.551017][ T31] #1: ffffc9000203fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 674.563992][ T31] #2: ffff88802a314ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 674.574218][ T31] #3: ffff88802a3140b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 674.584303][ T31] #4: ffffffff8ff51b40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 674.594402][ T31] 1 lock held by syz-executor/17774: [ 674.605176][ T31] #0: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 674.614685][ T31] 5 locks held by kworker/u9:5/17775: [ 674.624600][ T31] #0: ffff88802b436140 ((wq_completion)hci12){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 674.636155][ T31] #1: ffffc900035a7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 674.649697][ T31] #2: ffff888045a4cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 674.660089][ T31] #3: ffff888045a4c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 674.670194][ T31] #4: ffffffff8ff51b40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 674.680892][ T31] 5 locks held by kworker/u9:8/17783: [ 674.686563][ T31] #0: ffff88804104e940 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 674.697806][ T31] #1: ffffc900035f7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 674.712388][ T31] #2: ffff888060430ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 674.727007][ T31] #3: ffff8880604300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 674.737534][ T31] #4: ffffffff8ff51b40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 674.747700][ T31] 5 locks held by kworker/u9:9/17784: [ 674.753139][ T31] #0: ffff88804f728140 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 674.764461][ T31] #1: ffffc90003607c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 674.778279][ T31] #2: ffff88808b9bcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 674.788476][ T31] #3: ffff88808b9bc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 674.801980][ T31] #4: ffffffff8ff51b40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 674.812108][ T31] [ 674.814494][ T31] ============================================= [ 674.814494][ T31] [ 674.827070][ T31] NMI backtrace for cpu 0 [ 674.827105][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 674.827127][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 674.827147][ T31] Call Trace: [ 674.827156][ T31] [ 674.827173][ T31] dump_stack_lvl+0xe8/0x150 [ 674.827202][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 674.827302][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 674.827327][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 674.827359][ T31] sys_info+0x135/0x170 [ 674.827460][ T31] watchdog+0xfd3/0x1030 [ 674.827497][ T31] ? watchdog+0x1c9/0x1030 [ 674.827532][ T31] kthread+0x388/0x470 [ 674.827559][ T31] ? __pfx_watchdog+0x10/0x10 [ 674.827585][ T31] ? __pfx_kthread+0x10/0x10 [ 674.827612][ T31] ret_from_fork+0x514/0xb70 [ 674.827636][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 674.827658][ T31] ? __switch_to+0xc79/0x1410 [ 674.827691][ T31] ? __pfx_kthread+0x10/0x10 [ 674.827718][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.827760][ T31] [ 674.827768][ T31] Sending NMI from CPU 0 to CPUs 1: [ 674.938998][ C1] NMI backtrace for cpu 1 [ 674.939017][ C1] CPU: 1 UID: 0 PID: 5626 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 674.939036][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 674.939046][ C1] Workqueue: events_long defense_work_handler [ 674.939160][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 674.939183][ C1] Code: 48 8d 3d f3 1c 8c 04 48 c7 c6 a8 d8 f8 8d 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 83 3d 63 c1 88 04 00 74 1d 83 3d 1a f3 88 04 00 [ 674.939197][ C1] RSP: 0018:ffffc90000a079c0 EFLAGS: 00000046 [ 674.939211][ C1] RAX: 1ffff1100522a45e RBX: ffff888088fd8400 RCX: ffff888036745c40 [ 674.939223][ C1] RDX: 0000000000010100 RSI: 0000000000000001 RDI: 0000000000000000 [ 674.939233][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 674.939242][ C1] R10: dffffc0000000000 R11: fffff52000140f28 R12: ffff8880367467b8 [ 674.939254][ C1] R13: ffff888029152000 R14: ffff888088fdb400 R15: ffff8880291522f0 [ 674.939266][ C1] FS: 0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000 [ 674.939279][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.939290][ C1] CR2: 00007ffe4478b108 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 674.939307][ C1] Call Trace: [ 674.939313][ C1] [ 674.939320][ C1] advance_sched+0x1a5/0xc20 [ 674.939366][ C1] ? __pfx_advance_sched+0x10/0x10 [ 674.939393][ C1] ? __pfx_advance_sched+0x10/0x10 [ 674.939411][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 674.939441][ C1] hrtimer_interrupt+0x44b/0x950 [ 674.939474][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 674.939495][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 674.939513][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 674.939530][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 674.939548][ C1] Code: ff ff ff e8 e1 34 06 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 cb 2f 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 50 92 [ 674.939560][ C1] RSP: 0018:ffffc90000a07d78 EFLAGS: 00000286 [ 674.939573][ C1] RAX: e9114a5646c04700 RBX: 0000000000000000 RCX: 0000000080000101 [ 674.939584][ C1] RDX: 000000008eba6367 RSI: ffffffff8e21757c RDI: ffffffff8c28aa60 [ 674.939596][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cd60 [ 674.939607][ C1] R10: ffffc90000a07ed8 R11: ffffffff81b0d880 R12: 0000000000000002 [ 674.939618][ C1] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000246 [ 674.939653][ C1] ? unwind_next_frame+0xa6/0x2550 [ 674.939672][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 674.939696][ C1] ? unwind_next_frame+0xa6/0x2550 [ 674.939719][ C1] ? do_softirq+0x76/0xd0 [ 674.939734][ C1] ? unwind_next_frame+0xa6/0x2550 [ 674.939752][ C1] unwind_next_frame+0xc3/0x2550 [ 674.939769][ C1] ? unwind_next_frame+0xa6/0x2550 [ 674.939790][ C1] ? unwind_next_frame+0xa6/0x2550 [ 674.939808][ C1] ? handle_softirqs+0x22a/0x840 [ 674.939823][ C1] ? do_softirq+0x76/0xd0 [ 674.939839][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 674.939861][ C1] arch_stack_walk+0x11b/0x150 [ 674.939884][ C1] ? do_softirq+0x76/0xd0 [ 674.939899][ C1] ? skb_clone+0x212/0x3a0 [ 674.939960][ C1] stack_trace_save+0xa9/0x100 [ 674.939983][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 674.940005][ C1] ? NF_HOOK+0xa2/0x6e0 [ 674.940050][ C1] ? NF_HOOK+0x64e/0x6e0 [ 674.940070][ C1] kasan_save_track+0x3e/0x80 [ 674.940098][ C1] ? kasan_save_track+0x3e/0x80 [ 674.940116][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 674.940136][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 674.940156][ C1] ? skb_clone+0x212/0x3a0 [ 674.940173][ C1] ? br_flood+0x8cf/0xb80 [ 674.940210][ C1] ? br_handle_frame_finish+0x1521/0x1c80 [ 674.940230][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 674.940267][ C1] ? br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 674.940287][ C1] ? br_nf_pre_routing_ipv6+0x374/0x6f0 [ 674.940307][ C1] ? br_handle_frame+0x1277/0x1510 [ 674.940326][ C1] ? __netif_receive_skb_core+0x98f/0x3170 [ 674.940388][ C1] ? process_backlog+0x76d/0x1950 [ 674.940403][ C1] ? __napi_poll+0xae/0x340 [ 674.940417][ C1] ? net_rx_action+0x627/0xf70 [ 674.940431][ C1] ? handle_softirqs+0x22a/0x840 [ 674.940446][ C1] ? do_softirq+0x76/0xd0 [ 674.940479][ C1] __kasan_slab_alloc+0x6c/0x80 [ 674.940501][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 674.940520][ C1] ? skb_clone+0x212/0x3a0 [ 674.940538][ C1] ? br_handle_vlan+0x61/0x530 [ 674.940571][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 674.940593][ C1] skb_clone+0x212/0x3a0 [ 674.940614][ C1] br_flood+0x8cf/0xb80 [ 674.940647][ C1] br_handle_frame_finish+0x1521/0x1c80 [ 674.940666][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 674.940688][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 674.940713][ C1] ? ip6t_do_table+0x1c3/0x1560 [ 674.940756][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 674.940771][ C1] ? nf_hook_slow+0x176/0x220 [ 674.940837][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 674.940857][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 674.940880][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 674.940901][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 674.940920][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 674.940964][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 674.940984][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 674.941005][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 674.941030][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 674.941051][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 674.941072][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 674.941094][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 674.941115][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 674.941138][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 674.941158][ C1] br_handle_frame+0x1277/0x1510 [ 674.941182][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 674.941204][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 674.941229][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 674.941248][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 674.941278][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 674.941298][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 674.941321][ C1] ? ip6_rcv_finish+0x265/0x280 [ 674.941361][ C1] ? NF_HOOK+0x336/0x3c0 [ 674.941384][ C1] ? process_backlog+0x3eb/0x1950 [ 674.941404][ C1] ? process_backlog+0x3eb/0x1950 [ 674.941419][ C1] ? process_backlog+0x3eb/0x1950 [ 674.941435][ C1] ? process_backlog+0x3eb/0x1950 [ 674.941451][ C1] process_backlog+0x76d/0x1950 [ 674.941476][ C1] __napi_poll+0xae/0x340 [ 674.941490][ C1] ? skb_defer_free_flush+0x233/0x260 [ 674.941507][ C1] net_rx_action+0x627/0xf70 [ 674.941530][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 674.941551][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 674.941575][ C1] ? try_to_wake_up+0x7f2/0x1380 [ 674.941601][ C1] handle_softirqs+0x22a/0x840 [ 674.941619][ C1] ? do_softirq+0x76/0xd0 [ 674.941643][ C1] ? update_defense_level+0x116/0xd70 [ 674.941662][ C1] ? update_defense_level+0x116/0xd70 [ 674.941681][ C1] do_softirq+0x76/0xd0 [ 674.941696][ C1] [ 674.941702][ C1] [ 674.941708][ C1] __local_bh_enable_ip+0xf8/0x130 [ 674.941724][ C1] update_defense_level+0x91e/0xd70 [ 674.941746][ C1] ? update_defense_level+0x116/0xd70 [ 674.941765][ C1] ? __pfx_update_defense_level+0x10/0x10 [ 674.941784][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 674.941811][ C1] ? process_scheduled_works+0xa70/0x1860 [ 674.941832][ C1] defense_work_handler+0x2d/0xd0 [ 674.941851][ C1] ? process_scheduled_works+0xa70/0x1860 [ 674.941868][ C1] process_scheduled_works+0xb5d/0x1860 [ 674.941898][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 674.941918][ C1] ? assign_work+0x3d5/0x5e0 [ 674.941936][ C1] worker_thread+0xa53/0xfc0 [ 674.941965][ C1] kthread+0x388/0x470 [ 674.941984][ C1] ? __pfx_worker_thread+0x10/0x10 [ 674.942000][ C1] ? __pfx_kthread+0x10/0x10 [ 674.942019][ C1] ret_from_fork+0x514/0xb70 [ 674.942037][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 674.942054][ C1] ? __switch_to+0xc79/0x1410 [ 674.942077][ C1] ? __pfx_kthread+0x10/0x10 [ 674.942097][ C1] ret_from_fork_asm+0x1a/0x30 [ 674.942124][ C1] [ 675.797745][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 675.804659][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 675.813796][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.823876][ T31] Call Trace: [ 675.827179][ T31] [ 675.830136][ T31] vpanic+0x56c/0xa60 [ 675.834152][ T31] ? __pfx___schedule+0x10/0x10 [ 675.839033][ T31] ? __pfx_vpanic+0x10/0x10 [ 675.844167][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 675.850367][ T31] panic+0xc5/0xd0 [ 675.854122][ T31] ? __pfx_panic+0x10/0x10 [ 675.858574][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 675.863989][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 675.870190][ T31] watchdog+0x102c/0x1030 [ 675.874573][ T31] ? watchdog+0x1c9/0x1030 [ 675.879032][ T31] kthread+0x388/0x470 [ 675.883140][ T31] ? __pfx_watchdog+0x10/0x10 [ 675.887850][ T31] ? __pfx_kthread+0x10/0x10 [ 675.892483][ T31] ret_from_fork+0x514/0xb70 [ 675.897105][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 675.902241][ T31] ? __switch_to+0xc79/0x1410 [ 675.906959][ T31] ? __pfx_kthread+0x10/0x10 [ 675.911583][ T31] ret_from_fork_asm+0x1a/0x30 [ 675.916396][ T31] [ 675.919716][ T31] Kernel Offset: disabled [ 675.924039][ T31] Rebooting in 86400 seconds..