last executing test programs: 56.037496516s ago: executing program 4 (id=663): setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='nv\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="4c00fff012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 55.88242922s ago: executing program 4 (id=664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000240)=""/21, &(0x7f0000000280)=0x15) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 55.394796782s ago: executing program 3 (id=668): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 18) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 54.121647446s ago: executing program 1 (id=672): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) 54.105360852s ago: executing program 3 (id=673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (fail_nth: 9) 53.799237932s ago: executing program 1 (id=675): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 53.791977169s ago: executing program 4 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xfc, 0xe2, &(0x7f0000000140)="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", &(0x7f0000000240)=""/226, 0x10000, 0x0, 0xcf, 0x2e, &(0x7f0000000340)="efdd4203a7890c0e47145000da6be163b734f63a7cd192aadc0b7efc6d8aec88dbcb3a2766d42e0e18b65a2a961c43f8bba88f76b32997fbac39a7e4d35ce217275ef40fbfc8cabab15a852441bc53bba570be266b8a463ef66dc47bdf26b153496bf9dba37bb269432f901b4734e5395ad6c0b8d77772ad71e217b47d3403756a31d43749d3aa8335175503cadea6c69652bb2092104163ddb3940d54a01ece90f9dcff8793f13cf5ee2ccfa5c024c6252d863f8ae50a6b01b635774879daf96dce5961d596c71e93678c1ac8379c", &(0x7f0000001a40)="66b1d78718ccf64ad84f65c2f812a4c483ab0471f56a9775341384321545edb5ae61c3ea3467476996773784b104", 0x3, 0x0, 0x8}, 0x50) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) bind$inet6(r1, &(0x7f0000001a00)={0xa, 0x4e22, 0x1, @loopback, 0x3}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x85, 0x0, &(0x7f00000004c0)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, &(0x7f00000000c0)=""/102}, 0x20) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000500)=""/173, 0xad}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/69, 0x45}], 0x5, &(0x7f0000001880)=""/232, 0xe8}, 0x5}], 0x1, 0x3, &(0x7f00000019c0)={r2, r3+10000000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000840000000030900010073797a30"], 0x108}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000109000000000066329e1e92b8b0155e5498e049a544f100"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 53.628447584s ago: executing program 2 (id=677): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (fail_nth: 23) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 53.292192407s ago: executing program 2 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r1, 0x601, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x700, 0x7800, 0x8, 0x2, {{0xb, 0x4, 0x1, 0x3, 0x2c, 0x65, 0x0, 0x5, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}, {[@lsrr={0x83, 0x17, 0xc, [@multicast2, @broadcast, @broadcast, @empty, @local]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x3, [@ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @fwd={0x6}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x3b, 0x1}, @enum={0xa, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x6}, {0xc, 0x6}, {0x4, 0x7}, {0xd, 0xfff}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x32, 0x4}, @enum64={0xb, 0x7, 0x0, 0x13, 0x1, 0x2, [{0xe, 0x8, 0x10000}, {0x3, 0x0, 0xf}, {0x8, 0x9, 0xfffffff0}, {0xe, 0x800, 0x8}, {0x9, 0x7, 0x1}, {0xb, 0x3, 0x2}, {0xd, 0x8, 0x899}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @fwd={0xb}, @fwd={0x8}, @typedef={0xb, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000540)=""/200, 0x10f, 0xc8, 0x1, 0x1, 0x10000, @value}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x4, 0x10}, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, 0x0, &(0x7f0000000500)=""/64}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x7, &(0x7f00000000c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x3, 0x9, 0x6, 0x0, 0x6d2}, @call={0x85, 0x0, 0x0, 0xc0}], &(0x7f0000000100)='syzkaller\x00', 0xb07, 0x0, 0x0, 0x40f00, 0x27, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x2, 0x800}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000800)=[r5, r6, r7, r8, r9, r10, r11], &(0x7f0000000840)=[{0x3, 0x4, 0x4, 0xb}, {0x0, 0x4, 0x10, 0x7}, {0x5, 0x3, 0x6, 0x5}, {0x3, 0x2, 0xd, 0xc}, {0x4, 0x4, 0x8, 0x7}], 0x10, 0x7, @void, @value}, 0x94) 53.220425606s ago: executing program 2 (id=680): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 53.132874544s ago: executing program 2 (id=681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x40844) 52.871198815s ago: executing program 4 (id=682): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_emit_ethernet(0x1d7, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x1c9, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "e75adb10fe836419e6d22d24f694ff97ee4ca79431c6079165496e90b742c9ceab6e3b39e6767508ed27b7af37ef837cd5b3a294226ed2f56d71bfb73e44a503ef27dfe47fcee4c7bf92229ad89ef1e88ae65d7490fd0f2467da90c7f385d194d3d0f5c60686475c4597bce637118f4010361993c8258a136fad58208c24d17864adca5c226b2c30d6294006d650a8bdfb8c080ace94"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x0, "b045d1206a51329c95e184f888b4ab90c0537bc85be8c475edf28c093030dfd5c8e97f9eca319a93ae964422a900385d2effa2dafe74d19eff06a11ae7b2fdd64b0d78bad7f77eef3308ce9befef166f07f9e5f47b587962e68a9ca81c67437737d863d9256ac2940036791b820f66ee3dcd6b8de729a82f31c6b885863e6b4249927ac93efd4bc146c70312cdad7a461807aaaf8320c4bfac0625299de40af1c70672eed686bb713f64a4665c0152af00e5c52d1599303dc8ccfafafe5bb478c18810e39a9048bc125a9fa82639ee154aae5c21bbb6a9a37026d9"}}}}}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @map_val={0x18, 0x488fe0822acc85d4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x2, 0x3, 0x6, 0x401, 0x90}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 52.753417963s ago: executing program 2 (id=683): r0 = socket$kcm(0x15, 0x5, 0x0) r1 = socket(0x11, 0x3, 0x3) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000019580)={"b343e8b1142711bcfafaa3af0286eb89", 0x0, 0x0, {0x8, 0x9dc}, {0x174, 0x6}, 0x4a, [0x0, 0x100000001, 0x8, 0x7, 0x1, 0xa2b, 0xffffffffffffffff, 0x3ff, 0x24c0, 0x5, 0x7fffffffffffffff, 0x2, 0x3, 0xfffffffffffffffc, 0x3, 0x40]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000019700)={{r1}, r2, 0xf5b558c6ee36a651, @inherit={0x58, &(0x7f0000019680)={0x0, 0x2, 0x2e, 0x9, {0x0, 0x800, 0x3, 0x0, 0x9}, [0x2, 0x7]}}, @name="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"}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x8, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r7}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000001a700)=ANY=[@ANYBLOB="285cac91e37776f5b421452615077a5c416f8ded0000fc0118016a168c94a37f289dd08d1863de15436a", @ANYRES32=r11, @ANYBLOB="000000000000000008000d0006000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) clock_gettime(0x0, &(0x7f0000006cc0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000006a80)=[{{&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/75, 0x4b}, {&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f00000002c0)=""/45, 0x2d}], 0x7, &(0x7f00000005c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000015c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001640)=""/130, 0x82}], 0x1}, 0x3}, {{&(0x7f0000001740)=@nfc, 0x80, &(0x7f00000029c0)=[{&(0x7f00000017c0)=""/198, 0xc6}, {&(0x7f00000018c0)=""/223, 0xdf}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002a00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003a80)=""/187, 0xbb}], 0x1, &(0x7f0000003b80)=""/163, 0xa3}}, {{&(0x7f0000003c40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003cc0)=""/203, 0xcb}, {&(0x7f0000003dc0)=""/100, 0x64}, {&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000003e80)=""/54, 0x36}, {&(0x7f0000003ec0)=""/49, 0x31}, {&(0x7f000001a740)=""/8, 0x8}, {&(0x7f0000003f40)=""/112, 0x70}, {&(0x7f0000003fc0)=""/39, 0x27}], 0x8, &(0x7f0000004080)=""/137, 0x89}, 0x100}, {{&(0x7f0000004140)=@nl, 0x80, &(0x7f0000005280)=[{&(0x7f00000041c0)=""/182, 0xb6}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x2, &(0x7f00000052c0)=""/4096, 0x1000}, 0x101}, {{&(0x7f00000062c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006440)=[{&(0x7f0000006340)=""/12, 0xc}, {&(0x7f0000006380)=""/162, 0xa2}], 0x2, &(0x7f0000006480)=""/56, 0x38}, 0x5}, {{&(0x7f00000064c0)=@generic, 0x80, &(0x7f0000006640)=[{&(0x7f0000006540)=""/37, 0x25}, {&(0x7f0000006580)=""/167, 0xa7}], 0x2, &(0x7f0000006680)=""/144, 0x90}, 0xa}, {{&(0x7f0000006740)=@vsock, 0x80, &(0x7f0000006a00)=[{&(0x7f00000067c0)=""/135, 0x87}, {&(0x7f0000006880)=""/80, 0x50}, {&(0x7f0000006900)=""/253, 0xfd}], 0x3, &(0x7f0000006a40)=""/31, 0x1f}, 0x5}], 0x9, 0x20, &(0x7f0000006d00)={r12, r13+10000000}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r14, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 52.753242381s ago: executing program 3 (id=684): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0xfffffffe, 0x3000000}}}}}}, 0x0) 52.557575779s ago: executing program 0 (id=685): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) 52.501758012s ago: executing program 1 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002040)={0x4c, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x804) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0xa8e}, {0x6, 0xfc}]}) write$ppp(r2, &(0x7f0000000180)="1e08", 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x15, 0x8000, 0x5}}]}]}]}, 0x4c}}, 0x24040800) 52.369851298s ago: executing program 3 (id=687): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x4000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 52.346199709s ago: executing program 4 (id=688): syz_emit_ethernet(0x114, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "860cc1", 0xde, 0x3b, 0xff, @private1, @mcast2, {[@fragment={0x3d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x66}, @dstopts={0x67, 0xa, '\x00', [@ra={0x5, 0x2, 0xfe}, @calipso={0x7, 0x20, {0x0, 0x6, 0x1, 0x8, [0x1e, 0x30000000000000, 0x3]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x2b, 0xc, [0x2, 0xa3a980f, 0x7fff, 0x2339]}}]}, @routing={0xff, 0xa, 0x1, 0x4, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x44}, @remote, @dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @local}]}], "f1ebb3509b0437b1300ffa89d4ab70d104fc99fe76d4d583378a77b486d8e69012d31d593a19"}}}}}, 0x0) 52.237608149s ago: executing program 0 (id=689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x3, {0x1, 0xff, 0x1}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 51.965246699s ago: executing program 4 (id=690): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500002c0000000003009078ffffffffe000000100004e20001890780400"/58], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x4010) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x1, 0x1ff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="85000000a0000000150000000000080009000a0000009500000000000000000044f6062ac7a8c5d53783c41d9a399beddce8d35e529649c70f0ee1bd09d300b45ca4f4073e0d49c26f4eb9b3f116df490f0251f24a49504ad0c54dc7255e70b2a7f4cd2b1e980c94e6e1d6e46fed0721551ca0c0677a0acc46767a5376bb08c62cf25fde9bc3f9a8ed42c467a07448742b2839ec6013bfdde2006e209fdf97d6c2fe0f34f4e2f4f57f040bfeff80ce1ccc030f5d426a11f39b988a3f208146b907d3"], &(0x7f0000000500)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffde3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0xba5a, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c0002800c0004800500010084000000080001400002000008000240000000000c00038005000100430000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x38, r6, 0x600, 0x70bd29, 0x10, {0x37}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000004c0)={'veth1_to_bridge\x00', @multicast}) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f0000000240), &(0x7f0000000300)=r11}, 0x20) 51.81920135s ago: executing program 1 (id=691): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 51.709013489s ago: executing program 0 (id=692): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 51.567484194s ago: executing program 1 (id=693): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2000}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) (fail_nth: 26) 51.514254587s ago: executing program 3 (id=694): setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='nv\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="4c0000f012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 51.060687181s ago: executing program 3 (id=695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4, 0x0, 0xf69}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'nicvf0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = socket$packet(0x11, 0x6, 0x300) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="09000000010001", 0x7) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000180)=0x10000, 0x4) recvmmsg(r5, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0xe9be}], 0x1, 0x12041, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$netlink(0x10, 0x3, 0x12) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x21, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @empty, 0x0, 0x0, 'team0\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d747a3b2be34f8c0809a2d0e0c3e83db33055f35201078241f18c41298e8d27fae15db83081df04c2233cf6aeee560a70da700912dad2f5d5111750464582601"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000000040)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'nq\x00', 0x6, 0x1b0e, 0x9}, 0x2c) 46.668425525s ago: executing program 0 (id=696): bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 38.655733506s ago: executing program 1 (id=697): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="b9480d806c65000000000000000000000000000000000000000000000000000002"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@func={0x85, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010828bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="20005080080003000dac0f0005000200040000000900010000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) 36.495260423s ago: executing program 2 (id=698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xb8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x24, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xfc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 34.128403554s ago: executing program 0 (id=699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 31.692864077s ago: executing program 32 (id=690): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500002c0000000003009078ffffffffe000000100004e20001890780400"/58], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x4010) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x1, 0x1ff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="85000000a0000000150000000000080009000a0000009500000000000000000044f6062ac7a8c5d53783c41d9a399beddce8d35e529649c70f0ee1bd09d300b45ca4f4073e0d49c26f4eb9b3f116df490f0251f24a49504ad0c54dc7255e70b2a7f4cd2b1e980c94e6e1d6e46fed0721551ca0c0677a0acc46767a5376bb08c62cf25fde9bc3f9a8ed42c467a07448742b2839ec6013bfdde2006e209fdf97d6c2fe0f34f4e2f4f57f040bfeff80ce1ccc030f5d426a11f39b988a3f208146b907d3"], &(0x7f0000000500)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffde3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0xba5a, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c0002800c0004800500010084000000080001400002000008000240000000000c00038005000100430000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x38, r6, 0x600, 0x70bd29, 0x10, {0x37}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000004c0)={'veth1_to_bridge\x00', @multicast}) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f0000000240), &(0x7f0000000300)=r11}, 0x20) 26.581004014s ago: executing program 33 (id=695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r4, 0x0, 0xf69}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'nicvf0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = socket$packet(0x11, 0x6, 0x300) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="09000000010001", 0x7) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000180)=0x10000, 0x4) recvmmsg(r5, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0xe9be}], 0x1, 0x12041, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$netlink(0x10, 0x3, 0x12) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x21, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @empty, 0x0, 0x0, 'team0\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d747a3b2be34f8c0809a2d0e0c3e83db33055f35201078241f18c41298e8d27fae15db83081df04c2233cf6aeee560a70da700912dad2f5d5111750464582601"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000000040)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'nq\x00', 0x6, 0x1b0e, 0x9}, 0x2c) 17.669254742s ago: executing program 0 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x31, 0x6d}}}}, [@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "97c5"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcb, 0x0, 0x76e6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r6, 0x5, 0xffffffff, 0x1000000c, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 15.405574422s ago: executing program 34 (id=697): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="b9480d806c65000000000000000000000000000000000000000000000000000002"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@func={0x85, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010828bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="20005080080003000dac0f0005000200040000000900010000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) 9.496009761s ago: executing program 35 (id=698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xb8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x24, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xfc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 36 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x31, 0x6d}}}}, [@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "97c5"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcb, 0x0, 0x76e6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r6, 0x5, 0xffffffff, 0x1000000c, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) kernel console output (not intermixed with test programs): syscall_64+0xfa/0x3b0 [ 127.520954][ T6945] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.520993][ T6945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.521013][ T6945] ? clear_bhb_loop+0x60/0xb0 [ 127.521039][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.521068][ T6945] RIP: 0033:0x7fac0c38d33c [ 127.521086][ T6945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.521103][ T6945] RSP: 002b:00007fac0d140030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.521125][ T6945] RAX: ffffffffffffffda RBX: 00007fac0c5b5fa0 RCX: 00007fac0c38d33c [ 127.521139][ T6945] RDX: 000000000000000f RSI: 00007fac0d1400a0 RDI: 0000000000000004 [ 127.521152][ T6945] RBP: 00007fac0d140090 R08: 0000000000000000 R09: 0000000000000000 [ 127.521170][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.521181][ T6945] R13: 0000000000000000 R14: 00007fac0c5b5fa0 R15: 00007fff6abf6918 [ 127.521226][ T6945] [ 127.840460][ T6959] FAULT_INJECTION: forcing a failure. [ 127.840460][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 127.888455][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: syz.3.375 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 127.888486][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.888499][ T6959] Call Trace: [ 127.888508][ T6959] [ 127.888517][ T6959] dump_stack_lvl+0x189/0x250 [ 127.888556][ T6959] ? __pfx____ratelimit+0x10/0x10 [ 127.888588][ T6959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.888621][ T6959] ? __pfx__printk+0x10/0x10 [ 127.888649][ T6959] ? __pfx___might_resched+0x10/0x10 [ 127.888680][ T6959] ? fs_reclaim_acquire+0x7d/0x100 [ 127.888710][ T6959] should_fail_ex+0x414/0x560 [ 127.888743][ T6959] should_failslab+0xa8/0x100 [ 127.888767][ T6959] kmem_cache_alloc_noprof+0x73/0x3c0 [ 127.888800][ T6959] ? alloc_empty_file+0x55/0x1d0 [ 127.888830][ T6959] alloc_empty_file+0x55/0x1d0 [ 127.888858][ T6959] alloc_file_pseudo+0x13d/0x210 [ 127.888887][ T6959] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 127.888912][ T6959] ? do_raw_spin_unlock+0x122/0x240 [ 127.888938][ T6959] ? _raw_spin_unlock+0x28/0x50 [ 127.888975][ T6959] sock_alloc_file+0xb8/0x2e0 [ 127.889005][ T6959] ? __sys_socket+0x12c/0x1b0 [ 127.889026][ T6959] __sys_socket+0x13d/0x1b0 [ 127.889050][ T6959] __x64_sys_socket+0x7a/0x90 [ 127.889071][ T6959] do_syscall_64+0xfa/0x3b0 [ 127.889089][ T6959] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.889120][ T6959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.889141][ T6959] ? clear_bhb_loop+0x60/0xb0 [ 127.889167][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.889187][ T6959] RIP: 0033:0x7fbd20790847 [ 127.889206][ T6959] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.889224][ T6959] RSP: 002b:00007fbd2152ff48 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 127.889246][ T6959] RAX: ffffffffffffffda RBX: 00007fbd209b5fa0 RCX: 00007fbd20790847 [ 127.889260][ T6959] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 127.889272][ T6959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.889284][ T6959] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006 [ 127.889297][ T6959] R13: 0000000000000001 R14: 0000200000000040 R15: 0000200000000080 [ 127.889327][ T6959] [ 128.128609][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.224970][ T6967] netlink: 'syz.2.379': attribute type 25 has an invalid length. [ 128.638742][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 128.666899][ T6988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.781295][ T6992] unsupported nlmsg_type 40 [ 128.970579][ T6999] netlink: 'syz.1.391': attribute type 25 has an invalid length. [ 129.321793][ T7018] vlan2: entered promiscuous mode [ 129.394353][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 129.504504][ T7028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.512228][ T7028] IPv6: NLM_F_CREATE should be set when creating new route [ 129.519655][ T7028] IPv6: NLM_F_CREATE should be set when creating new route [ 129.526938][ T7028] IPv6: NLM_F_CREATE should be set when creating new route [ 129.541277][ T7028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.757601][ T7039] netlink: 'syz.3.407': attribute type 25 has an invalid length. [ 129.896630][ T7048] FAULT_INJECTION: forcing a failure. [ 129.896630][ T7048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.915829][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.0.410 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 129.915861][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.915874][ T7048] Call Trace: [ 129.915883][ T7048] [ 129.915892][ T7048] dump_stack_lvl+0x189/0x250 [ 129.915932][ T7048] ? __pfx____ratelimit+0x10/0x10 [ 129.915966][ T7048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.916000][ T7048] ? __pfx__printk+0x10/0x10 [ 129.916024][ T7048] ? __might_fault+0xb0/0x130 [ 129.916069][ T7048] should_fail_ex+0x414/0x560 [ 129.916103][ T7048] _copy_from_iter+0x1db/0x16f0 [ 129.916140][ T7048] ? rcu_is_watching+0x15/0xb0 [ 129.916175][ T7048] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 129.916198][ T7048] ? __pfx__copy_from_iter+0x10/0x10 [ 129.916231][ T7048] ? __build_skb_around+0x257/0x3e0 [ 129.916260][ T7048] ? netlink_sendmsg+0x642/0xb30 [ 129.916284][ T7048] ? skb_put+0x11b/0x210 [ 129.916312][ T7048] netlink_sendmsg+0x6b2/0xb30 [ 129.916349][ T7048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.916379][ T7048] ? aa_sock_msg_perm+0x94/0x160 [ 129.916409][ T7048] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.916436][ T7048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.916463][ T7048] __sock_sendmsg+0x21c/0x270 [ 129.916499][ T7048] ____sys_sendmsg+0x505/0x830 [ 129.916533][ T7048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.916571][ T7048] ? import_iovec+0x74/0xa0 [ 129.916596][ T7048] ___sys_sendmsg+0x21f/0x2a0 [ 129.916627][ T7048] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.916696][ T7048] ? __fget_files+0x2a/0x420 [ 129.916719][ T7048] ? __fget_files+0x3a0/0x420 [ 129.916755][ T7048] __x64_sys_sendmsg+0x19b/0x260 [ 129.916786][ T7048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.916826][ T7048] ? __pfx_ksys_write+0x10/0x10 [ 129.916843][ T7048] ? rcu_is_watching+0x15/0xb0 [ 129.916883][ T7048] ? do_syscall_64+0xbe/0x3b0 [ 129.916908][ T7048] do_syscall_64+0xfa/0x3b0 [ 129.916927][ T7048] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.916958][ T7048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.916980][ T7048] ? clear_bhb_loop+0x60/0xb0 [ 129.917006][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.917036][ T7048] RIP: 0033:0x7fac0c38e929 [ 129.917057][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.917075][ T7048] RSP: 002b:00007fac0d140038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.917098][ T7048] RAX: ffffffffffffffda RBX: 00007fac0c5b5fa0 RCX: 00007fac0c38e929 [ 129.917114][ T7048] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 129.917127][ T7048] RBP: 00007fac0d140090 R08: 0000000000000000 R09: 0000000000000000 [ 129.917141][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.917153][ T7048] R13: 0000000000000000 R14: 00007fac0c5b5fa0 R15: 00007fff6abf6918 [ 129.917187][ T7048] [ 129.942692][ T7050] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.412'. [ 130.326639][ T7060] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.447617][ T7068] FAULT_INJECTION: forcing a failure. [ 130.447617][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 130.474284][ T7068] CPU: 0 UID: 0 PID: 7068 Comm: syz.3.418 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 130.474316][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.474329][ T7068] Call Trace: [ 130.474337][ T7068] [ 130.474346][ T7068] dump_stack_lvl+0x189/0x250 [ 130.474390][ T7068] ? __pfx____ratelimit+0x10/0x10 [ 130.474423][ T7068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.474457][ T7068] ? __pfx__printk+0x10/0x10 [ 130.474487][ T7068] ? __pfx___might_resched+0x10/0x10 [ 130.474526][ T7068] should_fail_ex+0x414/0x560 [ 130.474561][ T7068] should_failslab+0xa8/0x100 [ 130.474586][ T7068] kmem_cache_alloc_noprof+0x73/0x3c0 [ 130.474619][ T7068] ? security_inode_alloc+0x39/0x330 [ 130.474655][ T7068] security_inode_alloc+0x39/0x330 [ 130.474687][ T7068] inode_init_always_gfp+0x9ed/0xdc0 [ 130.474717][ T7068] ? __pfx_sock_alloc_inode+0x10/0x10 [ 130.474750][ T7068] alloc_inode+0x82/0x1b0 [ 130.474774][ T7068] __sock_create+0x12d/0x9f0 [ 130.474798][ T7068] ? __might_fault+0xb0/0x130 [ 130.474823][ T7068] __sys_socketpair+0x1c5/0x560 [ 130.474852][ T7068] __x64_sys_socketpair+0x9b/0xb0 [ 130.474873][ T7068] do_syscall_64+0xfa/0x3b0 [ 130.474889][ T7068] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.474916][ T7068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.474934][ T7068] ? clear_bhb_loop+0x60/0xb0 [ 130.474955][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.474971][ T7068] RIP: 0033:0x7fbd2078e929 [ 130.474987][ T7068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.475002][ T7068] RSP: 002b:00007fbd21531038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 130.475021][ T7068] RAX: ffffffffffffffda RBX: 00007fbd209b5fa0 RCX: 00007fbd2078e929 [ 130.475034][ T7068] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 130.475044][ T7068] RBP: 00007fbd21531090 R08: 0000000000000000 R09: 0000000000000000 [ 130.475055][ T7068] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 130.475066][ T7068] R13: 0000000000000001 R14: 00007fbd209b5fa0 R15: 00007ffe1ec36048 [ 130.475092][ T7068] [ 130.475131][ T7068] socket: no more sockets [ 130.655343][ T7073] bridge0: port 3(veth0_to_bridge) entered blocking state [ 130.717264][ T7073] bridge0: port 3(veth0_to_bridge) entered disabled state [ 130.750204][ T7073] veth0_to_bridge: entered allmulticast mode [ 130.820242][ T7073] veth0_to_bridge: entered promiscuous mode [ 130.838457][ T7073] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.852765][ T7073] bridge0: port 3(veth0_to_bridge) entered blocking state [ 130.860347][ T7073] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 130.992600][ T7090] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 131.002929][ T7090] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 131.011222][ T7090] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 131.019177][ T7090] netlink: 'syz.4.427': attribute type 2 has an invalid length. [ 131.027435][ T7090] netlink: 76 bytes leftover after parsing attributes in process `syz.4.427'. [ 131.203661][ T7098] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 131.329693][ T7103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.453312][ T7105] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 131.525228][ T7114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.592593][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 131.728923][ T7125] netlink: 68 bytes leftover after parsing attributes in process `syz.2.442'. [ 131.763385][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 131.862226][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'. [ 131.894167][ T7129] vlan3: entered promiscuous mode [ 131.901421][ T7132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.445'. [ 131.904528][ T7129] bond0: entered promiscuous mode [ 131.919861][ T7129] bond_slave_0: entered promiscuous mode [ 131.926054][ T7129] bond_slave_1: entered promiscuous mode [ 131.934318][ T7132] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 131.999509][ T7136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.101702][ T7139] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 132.130519][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.449'. [ 132.264293][ T7151] netlink: 'syz.2.448': attribute type 6 has an invalid length. [ 132.409320][ T7158] openvswitch: netlink: Multiple metadata blocks provided [ 132.508388][ T7162] FAULT_INJECTION: forcing a failure. [ 132.508388][ T7162] name failslab, interval 1, probability 0, space 0, times 0 [ 132.557306][ T7161] FAULT_INJECTION: forcing a failure. [ 132.557306][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 132.562274][ T7164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.589349][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.1.457 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 132.589382][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.589395][ T7162] Call Trace: [ 132.589403][ T7162] [ 132.589413][ T7162] dump_stack_lvl+0x189/0x250 [ 132.589451][ T7162] ? __pfx____ratelimit+0x10/0x10 [ 132.589484][ T7162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.589515][ T7162] ? __pfx__printk+0x10/0x10 [ 132.589546][ T7162] ? __pfx___might_resched+0x10/0x10 [ 132.589581][ T7162] should_fail_ex+0x414/0x560 [ 132.589612][ T7162] should_failslab+0xa8/0x100 [ 132.589636][ T7162] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 132.589657][ T7162] ? __alloc_skb+0x112/0x2d0 [ 132.589685][ T7162] __alloc_skb+0x112/0x2d0 [ 132.589713][ T7162] netlink_sendmsg+0x5c6/0xb30 [ 132.589750][ T7162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.589792][ T7162] ? aa_sock_msg_perm+0x94/0x160 [ 132.589822][ T7162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.589850][ T7162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.589876][ T7162] __sock_sendmsg+0x21c/0x270 [ 132.589911][ T7162] __sys_sendto+0x3bd/0x520 [ 132.589938][ T7162] ? __pfx___sys_sendto+0x10/0x10 [ 132.589973][ T7162] ? count_memcg_event_mm+0x21/0x260 [ 132.590018][ T7162] ? exc_page_fault+0x76/0xf0 [ 132.590053][ T7162] ? do_user_addr_fault+0xc8a/0x1390 [ 132.590087][ T7162] __x64_sys_sendto+0xde/0x100 [ 132.590115][ T7162] do_syscall_64+0xfa/0x3b0 [ 132.590133][ T7162] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.590163][ T7162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.590184][ T7162] ? clear_bhb_loop+0x60/0xb0 [ 132.590210][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.590231][ T7162] RIP: 0033:0x7fae365907bc [ 132.590250][ T7162] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 132.590268][ T7162] RSP: 002b:00007fae3737ce60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 132.590289][ T7162] RAX: ffffffffffffffda RBX: 00007fae3737cfa0 RCX: 00007fae365907bc [ 132.590305][ T7162] RDX: 0000000000000020 RSI: 00007fae3737cff0 RDI: 0000000000000004 [ 132.590318][ T7162] RBP: 0000000000000000 R08: 00007fae3737ceb4 R09: 000000000000000c [ 132.590331][ T7162] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 132.590343][ T7162] R13: 00007fae3737cf08 R14: 00007fae3737cff0 R15: 0000000000000000 [ 132.590375][ T7162] [ 132.875987][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.3.456 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 132.876027][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.876041][ T7161] Call Trace: [ 132.876050][ T7161] [ 132.876059][ T7161] dump_stack_lvl+0x189/0x250 [ 132.876099][ T7161] ? __pfx____ratelimit+0x10/0x10 [ 132.876132][ T7161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.876166][ T7161] ? __pfx__printk+0x10/0x10 [ 132.876193][ T7161] ? __pfx___might_resched+0x10/0x10 [ 132.876226][ T7161] ? fs_reclaim_acquire+0x7d/0x100 [ 132.876257][ T7161] should_fail_ex+0x414/0x560 [ 132.876291][ T7161] should_failslab+0xa8/0x100 [ 132.876316][ T7161] __kmalloc_cache_noprof+0x70/0x3d0 [ 132.876337][ T7161] ? rdma_restrack_init+0x4f/0x4a0 [ 132.876363][ T7161] ? trace_kmalloc+0x1f/0xd0 [ 132.876386][ T7161] rdma_restrack_init+0x4f/0x4a0 [ 132.876416][ T7161] _ib_alloc_device+0x50/0x660 [ 132.876446][ T7161] siw_newlink+0xe3/0xd70 [ 132.876476][ T7161] nldev_newlink+0x4a2/0x5a0 [ 132.876501][ T7161] ? __pfx_nldev_newlink+0x10/0x10 [ 132.876626][ T7161] ? aa_get_newest_label+0xf7/0x5d0 [ 132.876653][ T7161] ? __pfx_aa_get_newest_label+0x10/0x10 [ 132.876680][ T7161] ? __pfx_aa_get_newest_label+0x10/0x10 [ 132.876726][ T7161] ? bpf_lsm_capable+0x9/0x20 [ 132.876751][ T7161] ? security_capable+0x7e/0x2e0 [ 132.876781][ T7161] ? __pfx_nldev_newlink+0x10/0x10 [ 132.876805][ T7161] rdma_nl_rcv+0x6ae/0x980 [ 132.876844][ T7161] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 132.876868][ T7161] ? __lock_acquire+0xab9/0xd20 [ 132.876922][ T7161] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.876947][ T7161] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.876978][ T7161] netlink_unicast+0x75b/0x8d0 [ 132.877013][ T7161] netlink_sendmsg+0x805/0xb30 [ 132.877050][ T7161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.877080][ T7161] ? aa_sock_msg_perm+0x94/0x160 [ 132.877109][ T7161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.877135][ T7161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.877162][ T7161] __sock_sendmsg+0x21c/0x270 [ 132.877199][ T7161] ____sys_sendmsg+0x505/0x830 [ 132.877233][ T7161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.877270][ T7161] ? import_iovec+0x74/0xa0 [ 132.877296][ T7161] ___sys_sendmsg+0x21f/0x2a0 [ 132.877326][ T7161] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.877389][ T7161] ? __fget_files+0x2a/0x420 [ 132.877406][ T7161] ? __fget_files+0x3a0/0x420 [ 132.877434][ T7161] __x64_sys_sendmsg+0x19b/0x260 [ 132.877458][ T7161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.877488][ T7161] ? __pfx_ksys_write+0x10/0x10 [ 132.877500][ T7161] ? rcu_is_watching+0x15/0xb0 [ 132.877531][ T7161] ? do_syscall_64+0xbe/0x3b0 [ 132.877550][ T7161] do_syscall_64+0xfa/0x3b0 [ 132.877564][ T7161] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.877588][ T7161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.877604][ T7161] ? clear_bhb_loop+0x60/0xb0 [ 132.877625][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.877641][ T7161] RIP: 0033:0x7fbd2078e929 [ 132.877657][ T7161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.877670][ T7161] RSP: 002b:00007fbd21531038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.877688][ T7161] RAX: ffffffffffffffda RBX: 00007fbd209b5fa0 RCX: 00007fbd2078e929 [ 132.877700][ T7161] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 132.877710][ T7161] RBP: 00007fbd21531090 R08: 0000000000000000 R09: 0000000000000000 [ 132.877719][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.877728][ T7161] R13: 0000000000000000 R14: 00007fbd209b5fa0 R15: 00007ffe1ec36048 [ 132.877763][ T7161] [ 133.242250][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.248907][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.324908][ T7173] FAULT_INJECTION: forcing a failure. [ 133.324908][ T7173] name failslab, interval 1, probability 0, space 0, times 0 [ 133.337784][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.4.462 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 133.337813][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.337826][ T7173] Call Trace: [ 133.337835][ T7173] [ 133.337844][ T7173] dump_stack_lvl+0x189/0x250 [ 133.337883][ T7173] ? __pfx____ratelimit+0x10/0x10 [ 133.337916][ T7173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.337949][ T7173] ? __pfx__printk+0x10/0x10 [ 133.337979][ T7173] ? __pfx___might_resched+0x10/0x10 [ 133.338018][ T7173] should_fail_ex+0x414/0x560 [ 133.338051][ T7173] should_failslab+0xa8/0x100 [ 133.338076][ T7173] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 133.338099][ T7173] ? __alloc_skb+0x112/0x2d0 [ 133.338120][ T7173] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 133.338156][ T7173] __alloc_skb+0x112/0x2d0 [ 133.338184][ T7173] __ip_append_data+0x2d99/0x40f0 [ 133.338239][ T7173] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 133.338294][ T7173] ? __pfx___ip_append_data+0x10/0x10 [ 133.338330][ T7173] ? __local_bh_enable_ip+0x12d/0x1c0 [ 133.338362][ T7173] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.338396][ T7173] ip_append_data+0x10e/0x190 [ 133.338431][ T7173] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 133.338466][ T7173] udp_sendmsg+0x550/0x2300 [ 133.338493][ T7173] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 133.338529][ T7173] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 133.338561][ T7173] ? __pfx_udp_sendmsg+0x10/0x10 [ 133.338586][ T7173] ? __lock_acquire+0xab9/0xd20 [ 133.338643][ T7173] ? __pfx_aa_sk_perm+0x10/0x10 [ 133.338666][ T7173] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 133.338699][ T7173] ? __fget_files+0x2a/0x420 [ 133.338721][ T7173] ? sock_rps_record_flow+0x19/0x410 [ 133.338752][ T7173] ? inet_sendmsg+0x29c/0x370 [ 133.338770][ T7173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.338802][ T7173] __sock_sendmsg+0x19c/0x270 [ 133.338839][ T7173] __sys_sendto+0x3bd/0x520 [ 133.338866][ T7173] ? __pfx___sys_sendto+0x10/0x10 [ 133.338887][ T7173] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 133.338935][ T7173] ? __fget_files+0x3a0/0x420 [ 133.338971][ T7173] ? ksys_write+0x22a/0x250 [ 133.338994][ T7173] ? __pfx_ksys_write+0x10/0x10 [ 133.339011][ T7173] ? rcu_is_watching+0x15/0xb0 [ 133.339049][ T7173] __x64_sys_sendto+0xde/0x100 [ 133.339077][ T7173] do_syscall_64+0xfa/0x3b0 [ 133.339095][ T7173] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.339126][ T7173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.339147][ T7173] ? clear_bhb_loop+0x60/0xb0 [ 133.339173][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.339193][ T7173] RIP: 0033:0x7fec0058e929 [ 133.339212][ T7173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.339229][ T7173] RSP: 002b:00007fec01333038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 133.339250][ T7173] RAX: ffffffffffffffda RBX: 00007fec007b5fa0 RCX: 00007fec0058e929 [ 133.339265][ T7173] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000004 [ 133.339278][ T7173] RBP: 00007fec01333090 R08: 0000000000000000 R09: 0000000000000000 [ 133.339290][ T7173] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.339302][ T7173] R13: 0000000000000000 R14: 00007fec007b5fa0 R15: 00007ffee86fde48 [ 133.339334][ T7173] [ 133.755593][ T7178] netlink: 'syz.3.464': attribute type 7 has an invalid length. [ 133.793316][ T7178] : entered promiscuous mode [ 133.809230][ T7182] FAULT_INJECTION: forcing a failure. [ 133.809230][ T7182] name failslab, interval 1, probability 0, space 0, times 0 [ 133.831425][ T7182] CPU: 0 UID: 0 PID: 7182 Comm: syz.2.466 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 133.831455][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.831468][ T7182] Call Trace: [ 133.831476][ T7182] [ 133.831484][ T7182] dump_stack_lvl+0x189/0x250 [ 133.831523][ T7182] ? __pfx____ratelimit+0x10/0x10 [ 133.831556][ T7182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.831589][ T7182] ? __pfx__printk+0x10/0x10 [ 133.831618][ T7182] ? __pfx___might_resched+0x10/0x10 [ 133.831649][ T7182] ? fs_reclaim_acquire+0x7d/0x100 [ 133.831679][ T7182] should_fail_ex+0x414/0x560 [ 133.831712][ T7182] should_failslab+0xa8/0x100 [ 133.831736][ T7182] __kmalloc_noprof+0xcb/0x4f0 [ 133.831756][ T7182] ? security_sk_alloc+0x52/0x390 [ 133.831780][ T7182] security_sk_alloc+0x52/0x390 [ 133.831814][ T7182] sk_prot_alloc+0x101/0x220 [ 133.831844][ T7182] sk_alloc+0x3a/0x370 [ 133.831879][ T7182] unix_create1+0xb0/0x7c0 [ 133.831912][ T7182] unix_create+0x154/0x200 [ 133.831941][ T7182] __sock_create+0x4b0/0x9f0 [ 133.831971][ T7182] __sys_socketpair+0x1c5/0x560 [ 133.832000][ T7182] __x64_sys_socketpair+0x9b/0xb0 [ 133.832030][ T7182] do_syscall_64+0xfa/0x3b0 [ 133.832047][ T7182] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.832078][ T7182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.832098][ T7182] ? clear_bhb_loop+0x60/0xb0 [ 133.832124][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.832144][ T7182] RIP: 0033:0x7f2f0db8e929 [ 133.832164][ T7182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.832181][ T7182] RSP: 002b:00007f2f0e918038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 133.832203][ T7182] RAX: ffffffffffffffda RBX: 00007f2f0ddb5fa0 RCX: 00007f2f0db8e929 [ 133.832218][ T7182] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 133.832230][ T7182] RBP: 00007f2f0e918090 R08: 0000000000000000 R09: 0000000000000000 [ 133.832243][ T7182] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 133.832255][ T7182] R13: 0000000000000001 R14: 00007f2f0ddb5fa0 R15: 00007ffc5bc8ccc8 [ 133.832287][ T7182] [ 134.175583][ T7189] __nla_validate_parse: 4 callbacks suppressed [ 134.175603][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 134.224507][ T7191] nbd: must specify an index to disconnect [ 134.583724][ T7193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.741524][ T7220] FAULT_INJECTION: forcing a failure. [ 134.741524][ T7220] name failslab, interval 1, probability 0, space 0, times 0 [ 134.758445][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.3.480 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 134.758475][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.758488][ T7220] Call Trace: [ 134.758496][ T7220] [ 134.758505][ T7220] dump_stack_lvl+0x189/0x250 [ 134.758543][ T7220] ? __pfx____ratelimit+0x10/0x10 [ 134.758574][ T7220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.758605][ T7220] ? __pfx__printk+0x10/0x10 [ 134.758633][ T7220] ? __pfx___might_resched+0x10/0x10 [ 134.758670][ T7220] should_fail_ex+0x414/0x560 [ 134.758699][ T7220] ? __pfx_sock_alloc_inode+0x10/0x10 [ 134.758729][ T7220] should_failslab+0xa8/0x100 [ 134.758753][ T7220] ? __pfx_sock_alloc_inode+0x10/0x10 [ 134.758783][ T7220] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 134.758817][ T7220] ? sock_alloc_inode+0x28/0xc0 [ 134.758860][ T7220] ? __pfx_sock_alloc_inode+0x10/0x10 [ 134.758891][ T7220] sock_alloc_inode+0x28/0xc0 [ 134.758919][ T7220] alloc_inode+0x67/0x1b0 [ 134.758943][ T7220] __sock_create+0x12d/0x9f0 [ 134.758971][ T7220] __sys_socketpair+0x23a/0x560 [ 134.759000][ T7220] __x64_sys_socketpair+0x9b/0xb0 [ 134.759022][ T7220] do_syscall_64+0xfa/0x3b0 [ 134.759040][ T7220] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.759069][ T7220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.759091][ T7220] ? clear_bhb_loop+0x60/0xb0 [ 134.759116][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.759136][ T7220] RIP: 0033:0x7fbd2078e929 [ 134.759154][ T7220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.759173][ T7220] RSP: 002b:00007fbd21531038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 134.759195][ T7220] RAX: ffffffffffffffda RBX: 00007fbd209b5fa0 RCX: 00007fbd2078e929 [ 134.759210][ T7220] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 134.759222][ T7220] RBP: 00007fbd21531090 R08: 0000000000000000 R09: 0000000000000000 [ 134.759235][ T7220] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 134.759254][ T7220] R13: 0000000000000001 R14: 00007fbd209b5fa0 R15: 00007ffe1ec36048 [ 134.759285][ T7220] [ 134.759366][ T7220] socket: no more sockets [ 134.844633][ T7217] tipc: Enabling of bearer rejected, failed to enable media [ 134.997470][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 135.009508][ T7225] netlink: 'syz.2.481': attribute type 11 has an invalid length. [ 137.014740][ T7261] unsupported nla_type 52263 [ 137.035148][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 137.035315][ T7261] sctp: [Deprecated]: syz.1.494 (pid 7261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.035315][ T7261] Use struct sctp_sack_info instead [ 137.124542][ T7269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.495'. [ 137.357450][ T7273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.497'. [ 137.395191][ T7279] netlink: 48 bytes leftover after parsing attributes in process `syz.4.500'. [ 137.583803][ T7285] netlink: 'syz.2.503': attribute type 10 has an invalid length. [ 137.619650][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 137.768325][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.509'. [ 137.818418][ T7303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.511'. [ 137.828622][ T7303] netlink: 43 bytes leftover after parsing attributes in process `syz.1.511'. [ 137.859840][ T7303] netlink: 'syz.1.511': attribute type 5 has an invalid length. [ 138.484760][ T7341] FAULT_INJECTION: forcing a failure. [ 138.484760][ T7341] name failslab, interval 1, probability 0, space 0, times 0 [ 138.502020][ T7341] CPU: 0 UID: 0 PID: 7341 Comm: syz.0.524 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 138.502053][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.502066][ T7341] Call Trace: [ 138.502076][ T7341] [ 138.502086][ T7341] dump_stack_lvl+0x189/0x250 [ 138.502126][ T7341] ? __pfx____ratelimit+0x10/0x10 [ 138.502160][ T7341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.502195][ T7341] ? __pfx__printk+0x10/0x10 [ 138.502225][ T7341] ? __pfx___might_resched+0x10/0x10 [ 138.502258][ T7341] ? fs_reclaim_acquire+0x7d/0x100 [ 138.502289][ T7341] should_fail_ex+0x414/0x560 [ 138.502365][ T7341] should_failslab+0xa8/0x100 [ 138.502392][ T7341] __kmalloc_noprof+0xcb/0x4f0 [ 138.502413][ T7341] ? security_sk_alloc+0x52/0x390 [ 138.502439][ T7341] security_sk_alloc+0x52/0x390 [ 138.502463][ T7341] sk_prot_alloc+0x101/0x220 [ 138.502493][ T7341] sk_alloc+0x3a/0x370 [ 138.502525][ T7341] unix_create1+0xb0/0x7c0 [ 138.502560][ T7341] unix_create+0x154/0x200 [ 138.502597][ T7341] __sock_create+0x4b0/0x9f0 [ 138.502626][ T7341] __sys_socketpair+0x23a/0x560 [ 138.502654][ T7341] __x64_sys_socketpair+0x9b/0xb0 [ 138.502677][ T7341] do_syscall_64+0xfa/0x3b0 [ 138.502694][ T7341] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.502724][ T7341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.502745][ T7341] ? clear_bhb_loop+0x60/0xb0 [ 138.502771][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.502791][ T7341] RIP: 0033:0x7fac0c38e929 [ 138.502809][ T7341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.502826][ T7341] RSP: 002b:00007fac0d140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 138.502849][ T7341] RAX: ffffffffffffffda RBX: 00007fac0c5b5fa0 RCX: 00007fac0c38e929 [ 138.502865][ T7341] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 138.502877][ T7341] RBP: 00007fac0d140090 R08: 0000000000000000 R09: 0000000000000000 [ 138.502889][ T7341] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 138.502902][ T7341] R13: 0000000000000001 R14: 00007fac0c5b5fa0 R15: 00007fff6abf6918 [ 138.502953][ T7341] [ 138.816700][ T7346] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 138.842878][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.851125][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.925619][ T7348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.251767][ T7359] syzkaller1: entered promiscuous mode [ 139.262142][ T7359] syzkaller1: entered allmulticast mode [ 139.325460][ T7359] sch_fq: defrate 0 ignored. [ 139.342661][ T7359] __nla_validate_parse: 2 callbacks suppressed [ 139.342682][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 139.521814][ T7374] FAULT_INJECTION: forcing a failure. [ 139.521814][ T7374] name failslab, interval 1, probability 0, space 0, times 0 [ 139.590726][ T7374] CPU: 0 UID: 0 PID: 7374 Comm: syz.2.537 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 139.590760][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.590772][ T7374] Call Trace: [ 139.590781][ T7374] [ 139.590790][ T7374] dump_stack_lvl+0x189/0x250 [ 139.590828][ T7374] ? __pfx____ratelimit+0x10/0x10 [ 139.590859][ T7374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.590892][ T7374] ? __pfx__printk+0x10/0x10 [ 139.590921][ T7374] ? __pfx___might_resched+0x10/0x10 [ 139.590959][ T7374] should_fail_ex+0x414/0x560 [ 139.590991][ T7374] should_failslab+0xa8/0x100 [ 139.591016][ T7374] kmem_cache_alloc_noprof+0x73/0x3c0 [ 139.591049][ T7374] ? sk_prot_alloc+0x57/0x220 [ 139.591086][ T7374] sk_prot_alloc+0x57/0x220 [ 139.591108][ T7374] ? sk_alloc+0x24/0x370 [ 139.591135][ T7374] sk_alloc+0x3a/0x370 [ 139.591165][ T7374] unix_create1+0xb0/0x7c0 [ 139.591199][ T7374] unix_create+0x154/0x200 [ 139.591227][ T7374] __sock_create+0x4b0/0x9f0 [ 139.591257][ T7374] __sys_socketpair+0x23a/0x560 [ 139.591286][ T7374] __x64_sys_socketpair+0x9b/0xb0 [ 139.591310][ T7374] do_syscall_64+0xfa/0x3b0 [ 139.591328][ T7374] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.591358][ T7374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.591379][ T7374] ? clear_bhb_loop+0x60/0xb0 [ 139.591417][ T7374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.591434][ T7374] RIP: 0033:0x7f2f0db8e929 [ 139.591450][ T7374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.591465][ T7374] RSP: 002b:00007f2f0e918038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 139.591484][ T7374] RAX: ffffffffffffffda RBX: 00007f2f0ddb5fa0 RCX: 00007f2f0db8e929 [ 139.591503][ T7374] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 139.591514][ T7374] RBP: 00007f2f0e918090 R08: 0000000000000000 R09: 0000000000000000 [ 139.591524][ T7374] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 139.591535][ T7374] R13: 0000000000000001 R14: 00007f2f0ddb5fa0 R15: 00007ffc5bc8ccc8 [ 139.591561][ T7374] [ 139.980340][ T7388] vlan2: entered promiscuous mode [ 140.016328][ T7392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.070962][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 140.427484][ T7408] netlink: 'syz.1.550': attribute type 24 has an invalid length. [ 140.508719][ T7412] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.517631][ T7412] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.526136][ T7412] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.534562][ T7412] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.612136][ T7421] FAULT_INJECTION: forcing a failure. [ 140.612136][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 140.631708][ T7412] vxlan0: entered promiscuous mode [ 140.640418][ T7412] vxlan0: entered allmulticast mode [ 140.659199][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.4.554 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 140.659231][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.659245][ T7421] Call Trace: [ 140.659253][ T7421] [ 140.659262][ T7421] dump_stack_lvl+0x189/0x250 [ 140.659301][ T7421] ? __pfx____ratelimit+0x10/0x10 [ 140.659338][ T7421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.659372][ T7421] ? __pfx__printk+0x10/0x10 [ 140.659401][ T7421] ? __pfx___might_resched+0x10/0x10 [ 140.659432][ T7421] ? fs_reclaim_acquire+0x7d/0x100 [ 140.659463][ T7421] should_fail_ex+0x414/0x560 [ 140.659496][ T7421] should_failslab+0xa8/0x100 [ 140.659521][ T7421] kmem_cache_alloc_noprof+0x73/0x3c0 [ 140.659554][ T7421] ? security_inode_alloc+0x39/0x330 [ 140.659589][ T7421] security_inode_alloc+0x39/0x330 [ 140.659622][ T7421] inode_init_always_gfp+0x9ed/0xdc0 [ 140.659652][ T7421] ? __pfx_pidfs_alloc_inode+0x10/0x10 [ 140.659671][ T7421] alloc_inode+0x82/0x1b0 [ 140.659695][ T7421] path_from_stashed+0x299/0x8f0 [ 140.659723][ T7421] ? __pfx___might_resched+0x10/0x10 [ 140.659759][ T7421] ? __pfx_path_from_stashed+0x10/0x10 [ 140.659783][ T7421] ? do_raw_spin_unlock+0x122/0x240 [ 140.659817][ T7421] pidfs_register_pid+0x108/0x1b0 [ 140.659849][ T7421] ? __pfx_pidfs_register_pid+0x10/0x10 [ 140.659879][ T7421] ? apparmor_socket_post_create+0x2b2/0x2e0 [ 140.659906][ T7421] ? bpf_lsm_socket_post_create+0x9/0x20 [ 140.659931][ T7421] ? security_socket_post_create+0x83/0x360 [ 140.659971][ T7421] unix_socketpair+0xdc/0x6f0 [ 140.660005][ T7421] __sys_socketpair+0x2bb/0x560 [ 140.660035][ T7421] __x64_sys_socketpair+0x9b/0xb0 [ 140.660059][ T7421] do_syscall_64+0xfa/0x3b0 [ 140.660076][ T7421] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.660107][ T7421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.660128][ T7421] ? clear_bhb_loop+0x60/0xb0 [ 140.660154][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.660174][ T7421] RIP: 0033:0x7fec0058e929 [ 140.660199][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.660218][ T7421] RSP: 002b:00007fec01333038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 140.660241][ T7421] RAX: ffffffffffffffda RBX: 00007fec007b5fa0 RCX: 00007fec0058e929 [ 140.660257][ T7421] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 140.660269][ T7421] RBP: 00007fec01333090 R08: 0000000000000000 R09: 0000000000000000 [ 140.660282][ T7421] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 140.660295][ T7421] R13: 0000000000000001 R14: 00007fec007b5fa0 R15: 00007ffee86fde48 [ 140.660327][ T7421] [ 141.054440][ T7427] FAULT_INJECTION: forcing a failure. [ 141.054440][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 141.068281][ T7427] CPU: 1 UID: 0 PID: 7427 Comm: syz.3.555 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 141.068312][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.068326][ T7427] Call Trace: [ 141.068335][ T7427] [ 141.068343][ T7427] dump_stack_lvl+0x189/0x250 [ 141.068383][ T7427] ? __pfx____ratelimit+0x10/0x10 [ 141.068416][ T7427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.068449][ T7427] ? __pfx__printk+0x10/0x10 [ 141.068480][ T7427] ? __pfx___might_resched+0x10/0x10 [ 141.068520][ T7427] should_fail_ex+0x414/0x560 [ 141.068553][ T7427] should_failslab+0xa8/0x100 [ 141.068579][ T7427] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 141.068601][ T7427] ? __alloc_skb+0x112/0x2d0 [ 141.068623][ T7427] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 141.068659][ T7427] __alloc_skb+0x112/0x2d0 [ 141.068688][ T7427] __ip_append_data+0x2d99/0x40f0 [ 141.068744][ T7427] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 141.068799][ T7427] ? __pfx___ip_append_data+0x10/0x10 [ 141.068837][ T7427] ? __local_bh_enable_ip+0x12d/0x1c0 [ 141.068870][ T7427] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.068905][ T7427] ip_append_data+0x10e/0x190 [ 141.068941][ T7427] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 141.068976][ T7427] udp_sendmsg+0x550/0x2300 [ 141.069003][ T7427] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 141.069040][ T7427] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 141.069072][ T7427] ? __pfx_udp_sendmsg+0x10/0x10 [ 141.069098][ T7427] ? __lock_acquire+0xab9/0xd20 [ 141.069163][ T7427] ? __pfx_aa_sk_perm+0x10/0x10 [ 141.069186][ T7427] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 141.069220][ T7427] ? __fget_files+0x2a/0x420 [ 141.069243][ T7427] ? sock_rps_record_flow+0x19/0x410 [ 141.069267][ T7427] ? inet_sendmsg+0x29c/0x370 [ 141.069285][ T7427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.069317][ T7427] __sock_sendmsg+0x19c/0x270 [ 141.069354][ T7427] __sys_sendto+0x3bd/0x520 [ 141.069381][ T7427] ? __pfx___sys_sendto+0x10/0x10 [ 141.069402][ T7427] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 141.069451][ T7427] ? __fget_files+0x3a0/0x420 [ 141.069487][ T7427] ? ksys_write+0x22a/0x250 [ 141.069510][ T7427] ? __pfx_ksys_write+0x10/0x10 [ 141.069527][ T7427] ? rcu_is_watching+0x15/0xb0 [ 141.069570][ T7427] __x64_sys_sendto+0xde/0x100 [ 141.069598][ T7427] do_syscall_64+0xfa/0x3b0 [ 141.069615][ T7427] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.069646][ T7427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.069666][ T7427] ? clear_bhb_loop+0x60/0xb0 [ 141.069693][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.069714][ T7427] RIP: 0033:0x7fbd2078e929 [ 141.069733][ T7427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.069752][ T7427] RSP: 002b:00007fbd21531038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 141.069774][ T7427] RAX: ffffffffffffffda RBX: 00007fbd209b5fa0 RCX: 00007fbd2078e929 [ 141.069789][ T7427] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000004 [ 141.069803][ T7427] RBP: 00007fbd21531090 R08: 0000000000000000 R09: 0000000000000000 [ 141.069816][ T7427] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.069829][ T7427] R13: 0000000000000000 R14: 00007fbd209b5fa0 R15: 00007ffe1ec36048 [ 141.069860][ T7427] [ 141.597679][ T7434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.751986][ T7448] netlink: 'syz.3.563': attribute type 24 has an invalid length. [ 141.808323][ T7447] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 141.839190][ T7447] netlink: 232 bytes leftover after parsing attributes in process `syz.2.561'. [ 141.883407][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 142.297245][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 142.477107][ T7487] netlink: 'syz.0.575': attribute type 24 has an invalid length. [ 142.483351][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 143.095877][ T7519] netlink: 'syz.4.587': attribute type 24 has an invalid length. [ 143.325648][ T7526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.481836][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.593'. [ 143.498578][ T7538] netlink: 92 bytes leftover after parsing attributes in process `syz.1.593'. [ 143.701846][ T7546] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.884196][ T7554] netlink: 'syz.2.601': attribute type 24 has an invalid length. [ 143.950688][ T7558] FAULT_INJECTION: forcing a failure. [ 143.950688][ T7558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.019677][ T7558] CPU: 0 UID: 0 PID: 7558 Comm: syz.0.603 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 144.019710][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.019724][ T7558] Call Trace: [ 144.019733][ T7558] [ 144.019743][ T7558] dump_stack_lvl+0x189/0x250 [ 144.019782][ T7558] ? __pfx____ratelimit+0x10/0x10 [ 144.019814][ T7558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.019848][ T7558] ? __pfx__printk+0x10/0x10 [ 144.019872][ T7558] ? __might_fault+0xb0/0x130 [ 144.019905][ T7558] should_fail_ex+0x414/0x560 [ 144.019938][ T7558] _copy_from_user+0x2d/0xb0 [ 144.019961][ T7558] ___sys_sendmsg+0x158/0x2a0 [ 144.019992][ T7558] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.020061][ T7558] ? __fget_files+0x2a/0x420 [ 144.020084][ T7558] ? __fget_files+0x3a0/0x420 [ 144.020120][ T7558] __x64_sys_sendmsg+0x19b/0x260 [ 144.020150][ T7558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.020188][ T7558] ? __pfx_ksys_write+0x10/0x10 [ 144.020206][ T7558] ? rcu_is_watching+0x15/0xb0 [ 144.020254][ T7558] ? do_syscall_64+0xbe/0x3b0 [ 144.020278][ T7558] do_syscall_64+0xfa/0x3b0 [ 144.020296][ T7558] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.020326][ T7558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.020347][ T7558] ? clear_bhb_loop+0x60/0xb0 [ 144.020373][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.020394][ T7558] RIP: 0033:0x7fac0c38e929 [ 144.020413][ T7558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.020431][ T7558] RSP: 002b:00007fac0d140038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.020455][ T7558] RAX: ffffffffffffffda RBX: 00007fac0c5b5fa0 RCX: 00007fac0c38e929 [ 144.020470][ T7558] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 144.020484][ T7558] RBP: 00007fac0d140090 R08: 0000000000000000 R09: 0000000000000000 [ 144.020497][ T7558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.020510][ T7558] R13: 0000000000000000 R14: 00007fac0c5b5fa0 R15: 00007fff6abf6918 [ 144.020543][ T7558] [ 144.030049][ T7563] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 144.258385][ T7569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'. [ 144.534091][ T7579] netlink: 'syz.1.611': attribute type 24 has an invalid length. [ 144.731423][ T7594] netlink: 'syz.1.617': attribute type 1 has an invalid length. [ 144.757334][ T7595] netlink: 'syz.4.616': attribute type 25 has an invalid length. [ 144.905048][ T7602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.619'. [ 144.924704][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.978998][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 145.253486][ T7623] netlink: 'syz.4.627': attribute type 25 has an invalid length. [ 145.388365][ T7631] netlink: 'syz.1.631': attribute type 25 has an invalid length. [ 145.398055][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 145.411757][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'. [ 145.475834][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 145.649039][ T7643] batadv0.5: entered promiscuous mode [ 145.821518][ T7651] netlink: 'syz.0.640': attribute type 25 has an invalid length. [ 145.929511][ T7660] netlink: 'syz.1.643': attribute type 25 has an invalid length. [ 146.029915][ T7665] openvswitch: netlink: Actions may not be safe on all matching packets [ 146.229474][ T7675] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 146.528549][ T7692] FAULT_INJECTION: forcing a failure. [ 146.528549][ T7692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.553872][ T7690] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 146.569731][ T7692] CPU: 0 UID: 0 PID: 7692 Comm: syz.4.653 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 146.569764][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.569778][ T7692] Call Trace: [ 146.569787][ T7692] [ 146.569796][ T7692] dump_stack_lvl+0x189/0x250 [ 146.569837][ T7692] ? __pfx____ratelimit+0x10/0x10 [ 146.569870][ T7692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.569903][ T7692] ? __pfx__printk+0x10/0x10 [ 146.569940][ T7692] should_fail_ex+0x414/0x560 [ 146.569975][ T7692] _copy_to_user+0x31/0xb0 [ 146.569998][ T7692] simple_read_from_buffer+0xe1/0x170 [ 146.570027][ T7692] proc_fail_nth_read+0x1df/0x250 [ 146.570057][ T7692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.570086][ T7692] ? rw_verify_area+0x258/0x650 [ 146.570118][ T7692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.570146][ T7692] vfs_read+0x200/0x980 [ 146.570184][ T7692] ? __pfx___mutex_lock+0x10/0x10 [ 146.570205][ T7692] ? __pfx_vfs_read+0x10/0x10 [ 146.570240][ T7692] ? __fget_files+0x2a/0x420 [ 146.570268][ T7692] ? __fget_files+0x3a0/0x420 [ 146.570290][ T7692] ? __fget_files+0x2a/0x420 [ 146.570324][ T7692] ksys_read+0x145/0x250 [ 146.570359][ T7692] ? __pfx_ksys_read+0x10/0x10 [ 146.570389][ T7692] ? rcu_is_watching+0x15/0xb0 [ 146.570428][ T7692] ? do_syscall_64+0xbe/0x3b0 [ 146.570452][ T7692] do_syscall_64+0xfa/0x3b0 [ 146.570469][ T7692] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.570500][ T7692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.570521][ T7692] ? clear_bhb_loop+0x60/0xb0 [ 146.570547][ T7692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.570568][ T7692] RIP: 0033:0x7fec0058d33c [ 146.570587][ T7692] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.570605][ T7692] RSP: 002b:00007fec01333030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.570627][ T7692] RAX: ffffffffffffffda RBX: 00007fec007b5fa0 RCX: 00007fec0058d33c [ 146.570643][ T7692] RDX: 000000000000000f RSI: 00007fec013330a0 RDI: 0000000000000004 [ 146.570655][ T7692] RBP: 00007fec01333090 R08: 0000000000000000 R09: 0000000000000000 [ 146.570668][ T7692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.570680][ T7692] R13: 0000000000000000 R14: 00007fec007b5fa0 R15: 00007ffee86fde48 [ 146.570725][ T7692] [ 147.162955][ T7708] bond1: entered promiscuous mode [ 147.168934][ T7708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.200320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.212877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.225229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.237502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.249909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.262217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.274664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.287098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.314802][ T7715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.335113][ T7715] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 147.390373][ T7715] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 147.445935][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 147.473985][ T7715] bond1: (slave wireguard0): making interface the new active one [ 147.497971][ T7715] wireguard0: entered promiscuous mode [ 147.527139][ T7715] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 147.645330][ T7718] 8021q: VLANs not supported on lo [ 147.810646][ T7725] vlan2: entered promiscuous mode [ 148.103960][ T7735] FAULT_INJECTION: forcing a failure. [ 148.103960][ T7735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.167327][ T7735] CPU: 1 UID: 0 PID: 7735 Comm: syz.3.668 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 148.167361][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.167375][ T7735] Call Trace: [ 148.167384][ T7735] [ 148.167394][ T7735] dump_stack_lvl+0x189/0x250 [ 148.167433][ T7735] ? __pfx____ratelimit+0x10/0x10 [ 148.167466][ T7735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.167500][ T7735] ? __pfx__printk+0x10/0x10 [ 148.167522][ T7735] ? __might_fault+0xb0/0x130 [ 148.167558][ T7735] should_fail_ex+0x414/0x560 [ 148.167593][ T7735] _copy_to_iter+0x1db/0x16f0 [ 148.167627][ T7735] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 148.167668][ T7735] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.167704][ T7735] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.167736][ T7735] ? __pfx__copy_to_iter+0x10/0x10 [ 148.167766][ T7735] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 148.167804][ T7735] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 148.167842][ T7735] __skb_datagram_iter+0xf8/0x990 [ 148.167876][ T7735] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 148.167917][ T7735] skb_copy_datagram_iter+0xc5/0x230 [ 148.167953][ T7735] netlink_recvmsg+0x2ab/0xa30 [ 148.167991][ T7735] ? __pfx_netlink_recvmsg+0x10/0x10 [ 148.168024][ T7735] ? aa_sock_msg_perm+0x94/0x160 [ 148.168055][ T7735] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 148.168083][ T7735] ? security_socket_recvmsg+0x7e/0x2e0 [ 148.168118][ T7735] ? __pfx_netlink_recvmsg+0x10/0x10 [ 148.168145][ T7735] sock_recvmsg+0x22c/0x270 [ 148.168185][ T7735] __sys_recvfrom+0x1f6/0x340 [ 148.168214][ T7735] ? __pfx___sys_recvfrom+0x10/0x10 [ 148.168253][ T7735] ? count_memcg_event_mm+0x21/0x260 [ 148.168307][ T7735] ? rcu_is_watching+0x15/0xb0 [ 148.168352][ T7735] __x64_sys_recvfrom+0xde/0x100 [ 148.168382][ T7735] do_syscall_64+0xfa/0x3b0 [ 148.168400][ T7735] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.168432][ T7735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.168453][ T7735] ? clear_bhb_loop+0x60/0xb0 [ 148.168479][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.168500][ T7735] RIP: 0033:0x7fbd207906f4 [ 148.168520][ T7735] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 148.168539][ T7735] RSP: 002b:00007fbd2152fe70 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 148.168579][ T7735] RAX: ffffffffffffffda RBX: 00007fbd2152ffa0 RCX: 00007fbd207906f4 [ 148.168595][ T7735] RDX: 0000000000001000 RSI: 00007fbd2152fff0 RDI: 0000000000000004 [ 148.168608][ T7735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.168621][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 148.168634][ T7735] R13: 00007fbd2152ff08 R14: 00007fbd2152fff0 R15: 0000000000000000 [ 148.168675][ T7735] [ 148.487391][ T7740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.859013][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 148.874648][ T7747] validate_nla: 4 callbacks suppressed [ 148.874670][ T7747] netlink: 'syz.0.670': attribute type 2 has an invalid length. [ 148.889071][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.670'. [ 148.969036][ T7748] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 148.977225][ T7748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.670'. [ 149.039683][ C0] net_ratelimit: 8697 callbacks suppressed [ 149.039709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.058047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.067585][ T7748] geneve0: left promiscuous mode [ 149.070294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.087585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.099984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.112356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.124722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.137409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.150161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.162606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.168561][ T7748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.175855][ T7749] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 149.269741][ T7748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.286256][ T7749] netlink: 244 bytes leftover after parsing attributes in process `syz.0.670'. [ 149.316630][ T7748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.376801][ T7748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.521036][ T7748] geneve0: entered promiscuous mode [ 149.555798][ T7748] team0: Port device geneve0 added [ 149.645888][ T7748] syz.0.670 (7748) used greatest stack depth: 19000 bytes left [ 149.746610][ T7764] FAULT_INJECTION: forcing a failure. [ 149.746610][ T7764] name failslab, interval 1, probability 0, space 0, times 0 [ 149.784919][ T7764] CPU: 1 UID: 0 PID: 7764 Comm: syz.2.677 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 149.784959][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.784974][ T7764] Call Trace: [ 149.784983][ T7764] [ 149.784992][ T7764] dump_stack_lvl+0x189/0x250 [ 149.785033][ T7764] ? __pfx____ratelimit+0x10/0x10 [ 149.785068][ T7764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.785103][ T7764] ? __pfx__printk+0x10/0x10 [ 149.785135][ T7764] ? __pfx___might_resched+0x10/0x10 [ 149.785168][ T7764] ? fs_reclaim_acquire+0x7d/0x100 [ 149.785200][ T7764] should_fail_ex+0x414/0x560 [ 149.785234][ T7764] should_failslab+0xa8/0x100 [ 149.785261][ T7764] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 149.785296][ T7764] ? __d_alloc+0x31/0x6f0 [ 149.785331][ T7764] __d_alloc+0x31/0x6f0 [ 149.785358][ T7764] ? errseq_sample+0x40/0x70 [ 149.785386][ T7764] d_alloc_pseudo+0x1f/0xb0 [ 149.785415][ T7764] alloc_file_pseudo+0xcc/0x210 [ 149.785448][ T7764] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 149.785504][ T7764] ? security_socket_post_create+0x83/0x360 [ 149.785552][ T7764] sock_alloc_file+0xb8/0x2e0 [ 149.785601][ T7764] __sys_socketpair+0x387/0x560 [ 149.785632][ T7764] __x64_sys_socketpair+0x9b/0xb0 [ 149.785656][ T7764] do_syscall_64+0xfa/0x3b0 [ 149.785675][ T7764] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.785706][ T7764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.785728][ T7764] ? clear_bhb_loop+0x60/0xb0 [ 149.785869][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.785895][ T7764] RIP: 0033:0x7f2f0db8e929 [ 149.785997][ T7764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.786027][ T7764] RSP: 002b:00007f2f0e918038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 149.786053][ T7764] RAX: ffffffffffffffda RBX: 00007f2f0ddb5fa0 RCX: 00007f2f0db8e929 [ 149.786069][ T7764] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 149.786084][ T7764] RBP: 00007f2f0e918090 R08: 0000000000000000 R09: 0000000000000000 [ 149.786099][ T7764] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 149.786114][ T7764] R13: 0000000000000001 R14: 00007f2f0ddb5fa0 R15: 00007ffc5bc8ccc8 [ 149.786148][ T7764] [ 150.140541][ T7768] netlink: 'syz.2.680': attribute type 25 has an invalid length. [ 150.396547][ T7772] vxcan1: entered allmulticast mode [ 150.439345][ T7774] vxcan1: left allmulticast mode [ 151.110966][ T7791] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 151.145259][ T7790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.279493][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 151.494531][ T7797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.690'. [ 151.676369][ T7800] netlink: 'syz.1.691': attribute type 25 has an invalid length. [ 151.850469][ T7806] FAULT_INJECTION: forcing a failure. [ 151.850469][ T7806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.886832][ T7806] CPU: 1 UID: 0 PID: 7806 Comm: syz.1.693 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 151.886867][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.886882][ T7806] Call Trace: [ 151.886891][ T7806] [ 151.886902][ T7806] dump_stack_lvl+0x189/0x250 [ 151.886943][ T7806] ? __pfx____ratelimit+0x10/0x10 [ 151.886978][ T7806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.887013][ T7806] ? __pfx__printk+0x10/0x10 [ 151.887039][ T7806] ? __might_fault+0xb0/0x130 [ 151.887074][ T7806] should_fail_ex+0x414/0x560 [ 151.887110][ T7806] _copy_from_user+0x2d/0xb0 [ 151.887133][ T7806] csum_and_copy_from_iter_full+0x1e1/0x1eb0 [ 151.887189][ T7806] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 151.887225][ T7806] ? __alloc_skb+0x142/0x2d0 [ 151.887259][ T7806] ? trace_kmalloc+0x1f/0xd0 [ 151.887283][ T7806] ip_generic_getfrag+0x12f/0x2b0 [ 151.887321][ T7806] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 151.887359][ T7806] ? skb_put+0x11b/0x210 [ 151.887389][ T7806] __ip_append_data+0x3240/0x40f0 [ 151.887448][ T7806] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 151.887507][ T7806] ? __pfx___ip_append_data+0x10/0x10 [ 151.887546][ T7806] ? __local_bh_enable_ip+0x12d/0x1c0 [ 151.887581][ T7806] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.887617][ T7806] ip_append_data+0x10e/0x190 [ 151.887662][ T7806] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 151.887699][ T7806] udp_sendmsg+0x550/0x2300 [ 151.887727][ T7806] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 151.887766][ T7806] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 151.887800][ T7806] ? __pfx_udp_sendmsg+0x10/0x10 [ 151.887827][ T7806] ? __lock_acquire+0xab9/0xd20 [ 151.887889][ T7806] ? __pfx_aa_sk_perm+0x10/0x10 [ 151.887913][ T7806] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 151.887949][ T7806] ? __fget_files+0x2a/0x420 [ 151.887974][ T7806] ? sock_rps_record_flow+0x19/0x410 [ 151.887999][ T7806] ? inet_sendmsg+0x29c/0x370 [ 151.888018][ T7806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.888051][ T7806] __sock_sendmsg+0x19c/0x270 [ 151.888090][ T7806] __sys_sendto+0x3bd/0x520 [ 151.888119][ T7806] ? __pfx___sys_sendto+0x10/0x10 [ 151.888141][ T7806] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 151.888193][ T7806] ? __fget_files+0x3a0/0x420 [ 151.888231][ T7806] ? ksys_write+0x22a/0x250 [ 151.888255][ T7806] ? __pfx_ksys_write+0x10/0x10 [ 151.888272][ T7806] ? rcu_is_watching+0x15/0xb0 [ 151.888313][ T7806] __x64_sys_sendto+0xde/0x100 [ 151.888343][ T7806] do_syscall_64+0xfa/0x3b0 [ 151.888363][ T7806] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.888395][ T7806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.888417][ T7806] ? clear_bhb_loop+0x60/0xb0 [ 151.888444][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.888466][ T7806] RIP: 0033:0x7fae3658e929 [ 151.888486][ T7806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.888506][ T7806] RSP: 002b:00007fae3737e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 151.888530][ T7806] RAX: ffffffffffffffda RBX: 00007fae367b5fa0 RCX: 00007fae3658e929 [ 151.888547][ T7806] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000004 [ 151.888561][ T7806] RBP: 00007fae3737e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.888575][ T7806] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.888588][ T7806] R13: 0000000000000000 R14: 00007fae367b5fa0 R15: 00007ffcc731a108 [ 151.888623][ T7806] [ 154.049718][ C0] net_ratelimit: 27192 callbacks suppressed [ 154.049742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.049836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 154.055964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.068501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 154.080327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.092538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 154.104373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.116460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 154.128264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.140577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 157.519566][ C0] sched: DL replenish lagged too much [ 159.059661][ C1] net_ratelimit: 28674 callbacks suppressed [ 159.059686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 159.059710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.066177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 159.078296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.090203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 159.102103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.114273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 159.126436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.138304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 159.150041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.069895][ C1] net_ratelimit: 22169 callbacks suppressed [ 164.069921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 164.069990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.076521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 164.088373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.100567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 164.113723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.124581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 164.136227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.148614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 164.160310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.079689][ C1] net_ratelimit: 20269 callbacks suppressed [ 169.079713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 169.079776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.086179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 169.098236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.110292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 169.123427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.134260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 169.145966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.158346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 169.170155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.089773][ C1] net_ratelimit: 20205 callbacks suppressed [ 174.089797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 174.090639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.096307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 174.108057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.120494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 174.132357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.144499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 174.156601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.168431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 174.180407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.099821][ C0] net_ratelimit: 20500 callbacks suppressed [ 179.099821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 179.099844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.106370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 179.118377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.130488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 179.143607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.154402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 179.166151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.178465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 179.190300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.109606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.109606][ C1] net_ratelimit: 20874 callbacks suppressed [ 184.109640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 184.110108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 184.122163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.128218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 184.140285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.152287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 184.165723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.176557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 184.188182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.119752][ C1] net_ratelimit: 21452 callbacks suppressed [ 189.119776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 189.119866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.126376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 189.138218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.150553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 189.162356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.174500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 189.186412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.198527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 189.210237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.129679][ C0] net_ratelimit: 21844 callbacks suppressed [ 194.129704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.129901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 194.136753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.148792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 194.160563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.172717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 194.184577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.196744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 194.208779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.220911][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 194.763065][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.779399][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.139771][ C1] net_ratelimit: 21460 callbacks suppressed [ 199.139801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 199.139813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.140084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.146232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 199.158317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.170383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 199.182535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.194400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 199.207912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.218560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 204.149633][ C0] net_ratelimit: 21434 callbacks suppressed [ 204.149658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.149726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 204.156031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.168354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 204.181464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.192321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 204.204111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.216449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 204.228194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.240370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 209.159956][ C1] net_ratelimit: 20379 callbacks suppressed [ 209.159980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 209.160922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.166565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 209.178887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.191217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 209.202838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.215131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 209.226949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.239070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 209.250735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.446735][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 212.467656][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 214.169573][ C1] net_ratelimit: 21657 callbacks suppressed [ 214.169597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 214.169650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.176079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 214.189258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.200041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 214.211933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.224332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 214.236020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.248310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 214.260389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.179672][ C0] net_ratelimit: 21363 callbacks suppressed [ 219.179695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.179856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 219.186742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.198105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 219.210301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.222230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 219.234656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.246163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 219.257910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.270291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 219.333487][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.571148][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.593465][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.615879][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.636446][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.493095][ T5845] Bluetooth: hci2: command tx timeout [ 222.976808][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.052194][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.215409][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.339196][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.372837][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.189687][ C0] net_ratelimit: 21615 callbacks suppressed [ 224.189712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.189876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 224.196025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.208366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 224.220455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.232311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 224.244332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.256227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 224.268133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.280282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 225.010964][ T5845] Bluetooth: hci2: command tx timeout [ 225.131243][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.175399][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.253088][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.296353][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.612628][ T5845] Bluetooth: hci0: command tx timeout [ 225.736125][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.523665][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.620293][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.628539][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.662053][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.682074][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.063121][ T5851] Bluetooth: hci2: command tx timeout [ 227.973255][ T5851] Bluetooth: hci0: command tx timeout [ 227.978798][ T5851] Bluetooth: hci1: command tx timeout [ 229.050009][ T5851] Bluetooth: hci3: command tx timeout [ 229.141656][ T5845] Bluetooth: hci2: command tx timeout [ 229.199755][ C1] net_ratelimit: 21865 callbacks suppressed [ 229.199779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 229.199951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.206215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 229.218717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.230421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 229.242158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.254587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 229.266304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.278484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 229.290473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.691195][ T5845] Bluetooth: hci1: command tx timeout [ 230.696837][ T5845] Bluetooth: hci0: command tx timeout [ 234.209894][ C1] net_ratelimit: 22033 callbacks suppressed [ 234.209919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 234.210244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.216356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 234.228524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.240641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 234.253396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.264787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 234.276575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.290486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 234.300615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.746686][ T5851] Bluetooth: hci3: command tx timeout [ 234.786342][ T5851] Bluetooth: hci0: command tx timeout [ 234.804147][ T5851] Bluetooth: hci1: command tx timeout [ 237.451295][ T5845] Bluetooth: hci1: command tx timeout [ 237.456802][ T5845] Bluetooth: hci3: command tx timeout [ 239.219776][ C1] net_ratelimit: 21257 callbacks suppressed [ 239.219803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 239.221205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.226220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 239.238109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.250368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 239.262234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.274326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 239.286414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.298331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 239.310506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.537830][ T5845] Bluetooth: hci3: command tx timeout [ 244.229634][ C0] net_ratelimit: 20930 callbacks suppressed [ 244.229659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.229826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 244.237497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.248150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 244.259896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.272266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 244.284092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.296335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 244.308344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.320254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 249.239615][ C0] net_ratelimit: 20954 callbacks suppressed [ 249.239639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.239661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 249.245862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.258094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 249.270257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.282329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 249.294301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.306257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 249.318055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.330191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 254.249897][ C1] net_ratelimit: 20847 callbacks suppressed [ 254.249920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 254.249957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.256621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 254.268314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.280684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 254.292367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.304605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 254.316542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.328510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 254.340451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.211029][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.229779][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.259865][ C1] net_ratelimit: 21503 callbacks suppressed [ 259.259889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 259.259925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.266441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 259.278146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.290583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 259.302327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.314494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 259.326497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.338395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 259.350519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.269610][ C1] net_ratelimit: 21311 callbacks suppressed [ 264.269626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.269634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 264.270201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 264.276121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.288157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 264.299951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.312285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 264.323942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.336236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 264.349637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.981909][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.435624][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.470779][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.574867][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.687811][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.279681][ C0] net_ratelimit: 21130 callbacks suppressed [ 269.279704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.279714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 269.280136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 269.286153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.298100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 269.309904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.322184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 269.333906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.346109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 269.358017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.614933][ T5851] Bluetooth: hci4: command tx timeout [ 271.722910][ T5851] Bluetooth: hci4: command tx timeout [ 273.818088][ T5851] Bluetooth: hci4: command tx timeout [ 274.289558][ C0] net_ratelimit: 20620 callbacks suppressed [ 274.289562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 274.289580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.289939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.296105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 274.308757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.320163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 274.332061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.344179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 274.355818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.368132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 275.961741][ T5851] Bluetooth: hci4: command tx timeout [ 279.299596][ C1] net_ratelimit: 20630 callbacks suppressed [ 279.299621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 279.299634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.301690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.306138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 279.317975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.330206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 279.342002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.354330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 279.366280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.378200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 284.309642][ C1] net_ratelimit: 21084 callbacks suppressed [ 284.309667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 284.310281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.316128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 284.328003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.340346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 284.352058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.364244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 284.376272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.388408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 284.400255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.625376][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.815886][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.872792][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.937698][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.958279][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.418975][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 286.493196][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 286.575598][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 286.633790][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.654479][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.860916][ T5156] Bluetooth: hci5: command tx timeout [ 289.270418][ T5851] Bluetooth: hci6: command tx timeout [ 289.277775][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 289.312102][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 289.319770][ C1] net_ratelimit: 20919 callbacks suppressed [ 289.319787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 289.320165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.326270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 289.338152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.350222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 289.362201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.374252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 289.386440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.400005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 289.411227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.501030][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 290.028378][ T5845] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 290.276919][ T51] Bluetooth: hci5: command tx timeout [ 290.476596][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 290.496969][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 290.534080][ T5845] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 290.642802][ T5845] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 290.663670][ T5845] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 290.684242][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 291.453287][ T5851] Bluetooth: hci6: command tx timeout [ 291.581174][ T5156] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 291.603364][ T5156] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 291.628875][ T5156] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 291.662167][ T5156] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 291.683035][ T5156] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 292.591879][ T5156] Bluetooth: hci5: command tx timeout [ 293.016419][ T5156] Bluetooth: hci8: command tx timeout [ 293.437450][ T5156] Bluetooth: hci7: command tx timeout [ 293.776124][ T5156] Bluetooth: hci6: command tx timeout [ 294.113614][ T5156] Bluetooth: hci9: command tx timeout [ 294.329729][ C1] net_ratelimit: 21440 callbacks suppressed [ 294.329755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 294.331141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.336222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 294.348018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.360262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 294.372117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.384315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 294.396572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.408411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 294.420725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.778513][ T5156] Bluetooth: hci5: command tx timeout [ 295.129579][ T5156] Bluetooth: hci8: command tx timeout [ 295.532207][ T5156] Bluetooth: hci7: command tx timeout [ 295.882784][ T5156] Bluetooth: hci6: command tx timeout [ 296.179455][ T5156] Bluetooth: hci9: command tx timeout [ 297.224087][ T5156] Bluetooth: hci8: command tx timeout [ 297.624403][ T5156] Bluetooth: hci7: command tx timeout [ 298.514109][ T5156] Bluetooth: hci9: command tx timeout [ 299.292454][ T5156] Bluetooth: hci8: command tx timeout [ 299.339632][ C1] net_ratelimit: 21781 callbacks suppressed [ 299.339656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 299.340408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.346119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 299.357906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.370452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 299.382148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.394369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 299.406600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.418257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 299.430265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.690573][ T5156] Bluetooth: hci7: command tx timeout [ 300.599139][ T5156] Bluetooth: hci9: command tx timeout [ 304.349672][ C0] net_ratelimit: 21874 callbacks suppressed [ 304.349696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.349792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 304.355944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.368532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 304.380064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.392431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 304.404294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.416591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 304.429114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.440569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 309.359741][ C1] net_ratelimit: 22227 callbacks suppressed [ 309.359758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.359764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 309.360243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 309.367206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.378606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 309.390679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.402686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 309.414504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.426818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 309.438683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.369927][ C1] net_ratelimit: 21622 callbacks suppressed [ 314.369952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 314.370765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.376417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 314.388629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.401013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 314.412874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.425005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 314.437072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.449103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 314.461200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.622519][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.702731][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.379657][ C1] net_ratelimit: 21867 callbacks suppressed [ 319.379681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 319.379890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.386074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 319.397913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.410201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 319.422020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.434134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 319.446233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.458176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 319.470240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.389556][ C0] net_ratelimit: 22195 callbacks suppressed [ 324.389580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.389621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 324.395889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.408034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 324.419977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.432219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 324.444106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.456338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 324.469052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.480330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 329.399631][ C0] net_ratelimit: 21232 callbacks suppressed [ 329.399655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.399842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 329.406099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.418558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 329.430333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.442557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 329.454656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.466700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 329.478671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.490696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 334.409500][ C1] net_ratelimit: 21211 callbacks suppressed [ 334.409523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 334.409755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.415961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 334.427890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.440160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 334.452000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.464210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 334.476132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.488317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 334.500804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.419745][ C1] net_ratelimit: 20532 callbacks suppressed [ 339.419770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 339.421100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.426286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 339.438093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.450576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 339.462741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.475022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 339.487031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.498893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 339.511036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.429778][ C1] net_ratelimit: 20596 callbacks suppressed [ 344.429779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.429802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 344.436278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.448360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 344.460426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.472556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 344.484674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.496588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 344.508437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.520881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 344.587025][ T5851] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 344.643181][ T5851] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 344.682605][ T5851] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 344.703623][ T5851] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 344.724694][ T5851] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 345.176323][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 346.920794][ T5851] Bluetooth: hci10: command tx timeout [ 346.993340][ T5851] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 347.015737][ T5851] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 347.039435][ T5851] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 347.314708][ T5851] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 347.335553][ T5851] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 348.113616][ T5156] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 348.136078][ T5156] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 348.157852][ T5156] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 348.233857][ T5156] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 348.256089][ T5156] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 348.858097][ T31] INFO: task syz-executor:5846 blocked for more than 143 seconds. [ 348.877289][ T31] Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 [ 349.058857][ T5156] Bluetooth: hci10: command tx timeout [ 349.289418][ T31] Blocked by coredump. [ 349.306804][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.439651][ C1] net_ratelimit: 20535 callbacks suppressed [ 349.439670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.439674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 349.440123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 349.446123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.458538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 349.471165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.483096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 349.494997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.507132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 349.519217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.853700][ T31] task:syz-executor state:D stack:21960 pid:5846 tgid:5846 ppid:1 task_flags:0x40054c flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 350.020755][ T5156] Bluetooth: hci11: command tx timeout [ 350.915725][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 350.934380][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 350.953980][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 350.973242][ T5847] Bluetooth: hci12: command tx timeout [ 351.305535][ T5851] Bluetooth: hci10: command tx timeout [ 351.355648][ T31] Call Trace: [ 351.359203][ T31] [ 352.706755][ T5851] Bluetooth: hci11: command tx timeout [ 353.057839][ T5851] Bluetooth: hci12: command tx timeout [ 353.361914][ T31] __schedule+0x16f5/0x4d00 [ 353.366582][ T31] ? stack_trace_save+0x9c/0xe0 [ 353.650481][ T5851] Bluetooth: hci10: command tx timeout [ 354.144966][ T31] ? __lock_acquire+0xab9/0xd20 [ 354.161769][ T31] ? schedule+0x165/0x360 [ 354.166222][ T31] ? __pfx___schedule+0x10/0x10 [ 354.449705][ C1] net_ratelimit: 21509 callbacks suppressed [ 354.449729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 354.449757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.456164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 354.468202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.480388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 354.492417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.504582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 354.516556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.528536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:73:e4:5f:fe:14, vlan:0) [ 354.541280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.872688][ T5851] Bluetooth: hci11: command tx timeout [ 355.122770][ T31] ? schedule+0x91/0x360 [ 355.127141][ T31] schedule+0x165/0x360 [ 355.387441][ T5851] Bluetooth: hci12: command tx timeout [ 355.776328][ T31] schedule_preempt_disabled+0x13/0x30 [ 355.793539][ T31] __mutex_lock+0x724/0xe80 [ 355.798140][ T31] ? __mutex_lock+0x51b/0xe80 [ 356.063195][ T5156] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 356.085639][ T5156] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 356.145786][ T5156] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 356.197967][ T5156] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 356.218845][ T5156] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 357.156415][ T5851] Bluetooth: hci11: command tx timeout [ 357.173939][ T31] ? tun_chr_close+0x3e/0x1c0 [ 357.178735][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 357.922506][ T5851] Bluetooth: hci12: command tx timeout [ 358.355299][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 358.738963][ T31] tun_chr_close+0x3e/0x1c0 [ 358.755278][ T31] __fput+0x44c/0xa70 [ 358.759361][ T31] task_work_run+0x1d1/0x260