last executing test programs: 36.266322027s ago: executing program 0 (id=6233): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000b80)={{r0, &(0x7f0000000040)='cgroup.procs\x00', 0x109103, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x1]}, {0x7, 0x7, 0x0, 0x5}}, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x9}, 0x9, &(0x7f0000000a40)=[{0x1, 0x1, &(0x7f0000000140)='cgroup.procs\x00', &(0x7f0000000180)="9d71ba632ea4e6592b539fc8434bb1ceb080941c9c210224af8433be3c401357d7c80323145fc7d29e528ad55972c1b8bcb1", 0x32, 0x32}, {0x1, 0x7, &(0x7f00000001c0)='$///a\x87-&#,\'!\x00', &(0x7f0000000200)="a5e9c8676f74358e538e0b3fdfb212b0412522479f7354a4044ca185901928295a00105a4efbb596a38962192beb8683d19dd9da62c896686090aa", 0x3b, 0x8}, {0x1, 0x9, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', &(0x7f0000000280)="e8e0ed20e8a572d92adb72cb0ac11b5aaab69036d02651b958f8990057b66b67aa2b8caf7f006cf6b3bde3253b81d4dc8caa13307402668e6cea9d87f148fbae54a3d185d3fb1f2d164d9c7fca0fdf49c94be7c0dd542ce58ae72bf126349d764f9243d6815de56ee7c4f9fbfef5d4d531d2d0eb85ffa0847c417f140d4e34d5920b7400ace6ac2b0857e408bde100ac79064ebb578f599254b7e9f4f12b21e3aaf5db82a343e30dbf7a5b22039988e268893a4c9ada26aae5cf2ad6dc015ff905f3ded11c928d257242854113a3a4e2", 0xd0, 0x10}, {0x1, 0x4c35, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', &(0x7f0000000400)="4bb433bdcd625d6fb0853ab1526d349a823e3d361c75111f7c834332cc16ed6425b731f53ed695871714d9c6430ed5793900972afae30cf3955c1f372a8d2271a9a2c8f7e4b52120963092327aab9fca4abb248e1ecbec0665641a78f7d442228dd7cfea8ea5a3f8970eafb21d511ad1cbd84e773b4cf334ca283f66222f8bc86cf289505cf90c6b9f78917dd6c27cc8bb63b3d07772d7d3ad0f3651bb5146e2e5ffb46045bc05000aef290dcf632666cad7d1c5ae213b5a52ba0fa7aa341583e3f95a97029ac3a1abb5ff4717dda752c817ccfcba6f7ada628b057de8021e", 0xdf}, {0x3, 0x3, &(0x7f0000000500)='\\\\\x00', &(0x7f0000000540)="09a803ac22d7e64721b2e9de7fca62e3588c55355a7787ad56f9fb1592db55375eda26c01f76b5592831c7be14e37e7b7da2247b7fd8b5df55d399ecbf48cce1d566ca268a0869311d19ad543b2f46849283af8548912b9e7cc0a4585e9b6d173b4c82b7150317857a2d13528cefaf7576a336cdcc31175cb031edbc780ba897f0c980ef9dd306f78cabf6b3c143450d0e8e74dfcf9cf3", 0x97, 0x24}, {0x2, 0x4, &(0x7f0000000600)='-\x00', &(0x7f0000000640)="5e92fa93a25e4594e0246d4579301aa41c06f768888941686de1868829ce6118fa48431d983b8cc0b0dcc5f8b8654eaf935dd6686e01bfbca9f2ff534f3bc36e44586240edcfbe93d8bd887bcf6c97b5220afade2e75a1b307a0c774bb8d053b374b10dc1acb9163b97571b5dfeebf4142affb6b108f80d31696e9ebbf80db76a7175950f4476c7a46db71015b7085b7d91d2a608a41c595f165d24ebd90a1daf8659cc3e40be931f46225c0f8ddc7", 0xaf, 0x10}, {0x2, 0x4, &(0x7f0000000740)='./cgroup.cpu/syz1\x00', &(0x7f0000000780)="6999e31f7b816762e2fb4ea130ae04a24633aca980318c4220aea44f39a36badab095dbe65ff804bbcced872d446a8657c1ecacc210da3e3fe3f62e2b85910cab2b11ec452e184403b78f78b2f9c0f5e11b04cad74291ee25760b938adfb43e3822827f451f533f1bd3e8095956ed9a9781e059961f7f073805337d08c125ee6e51928af50e7bf710937bc585045b2985228c666539a96659e6ca9b72abf52c5cab52ff3b2589b0e9fa262385c38bb3b7e62ee846c94a82fb530e02fb9514a46bf98fd8a49bc315355d9d57a59332964e85843635d18d21eb9eefc9864198964fcf410a8abf4ae", 0xe7, 0x10}, {0x1, 0x7f, &(0x7f0000000880)='cgroup.procs\x00', &(0x7f00000008c0)="e3cf777f2dec7e7e71167567414fc2754f1b53222bc82f7696792a2d4f9cddc699dee07d4ff429e2bd52f0f63d34fb3a26a4d8aa573cefae20c8607b803650474e20f570edeed8595c90de97e4c87a7584cf41b947218e7bf91dfffbe5b744391f", 0x61, 0x20}, {0x1, 0x4, &(0x7f0000000940)='cgroup.procs\x00', &(0x7f0000000980)="7ec7a575c9822067110a75052c7c3d4c183066497c5cc138a9c3f06fc15affa44593e5cb24ace77abbd3e3e5d9d1cedc58bc323db8341ac67c9527cb30997533037e9bfb2a102d4484f4ade9457e69e5a81c2806fe4a05652353a829103dc87782c728461321f0f190a635bd69301a3b945fda2386495efb4e3be6eac2375153422030f7ee029dbd5ab83c1c69b798fa9e7d12ba4f5c35fa65606bed6d5af4192ecfb836972ef096f7c5248638b52d7096548ed9dea35b", 0xb7, 0x2}]}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000) (async) r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, 0xffffffffffffffff}, 0x4) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000c40)={'nat\x00', 0x0, 0x0, 0x0, [0x8001, 0x7fff, 0x101, 0x800, 0x2, 0x2], 0xa, &(0x7f0000000c00)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x118) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) (async) r8 = openat$cgroup_procs(r1, &(0x7f0000000700)='cgroup.procs\x00', 0x2, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r10, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) unshare(0x28000600) 12.118926357s ago: executing program 4 (id=6354): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 11.899655579s ago: executing program 4 (id=6355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) 11.74299655s ago: executing program 4 (id=6356): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000079ab2088b989387a0000ffffffff9500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x2}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xa, 0x1, 0x0, 0x0, @str='wlan0\x00'}]}, 0x20}}, 0x0) 11.614885547s ago: executing program 4 (id=6357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) 11.278080283s ago: executing program 4 (id=6361): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-neon)\x00'}, 0x58) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000380)={&(0x7f0000000300)='-\x00', &(0x7f0000000340)='#::#*:&\x00', 0x7}) syz_emit_ethernet(0x52, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60210000001c3afffe800000000000000000000000000000ff0300000000000000000000000000018200907800040300000000000000000000000000000000110d050000"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0x1000000, 0xffffffff, 0x158, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf8, 0x158, 0x0, {0x0, 0x1c8}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d5]}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2002, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x0, 0x0, 0x3, 0x1], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x6, 0x1], 0x1, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2e8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xdc, 0x30, 0xb, 0x0, 0x0, {}, [{0xc8, 0x1, [@m_ct={0xc4, 0x0, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "f3221401f2eb1384ef3ccc830477732b"}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x64, 0x6, "8ac81f8836e0865022b08baeaadfa33750be5bda7c2e5052a1096a85dfb9bc81d5eeff057a78b72ae1116e2e5f75806aaf03445a7aac0733523da3121eb811c116b1b17c46a148c3a4df5ca7c3d6120d2aaff310e442488788931063cc9ac285"}, {0xc}, {0xc}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) r3 = socket(0x15, 0xa, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) accept4$llc(r4, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000400)=0x10, 0x800) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x400c030) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000200)=""/261, 0x105, 0x20120, 0x0, 0x0) accept4$tipc(r1, &(0x7f0000000040)=@name, &(0x7f0000000140)=0x10, 0x1000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r7, 0xf5f) accept(r7, 0x0, 0x0) close(r8) accept4$tipc(r6, 0x0, 0x0, 0x800) 10.227789096s ago: executing program 4 (id=6367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@empty, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4040, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {0xbe00, 0x88be, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 10.169484146s ago: executing program 1 (id=6368): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 10.048736539s ago: executing program 0 (id=6236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES64=r0, @ANYBLOB="0000000000000010200012800b0001006272696467650000100002800c002e00000000001c"], 0x40}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) socket(0x1e, 0x4, 0x0) write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="eb016fb4c5d102ef995aeccc735b0bd5dce11aad8ac5004e0cd4b8d33800174ca7d592658557f11c48b239bd89f070bfb77b9bd589f7d0acd62dba9d2918565aaf8a276ac761c903a71074a11b700fd74895982aeaa80e", @ANYRES8=r4, @ANYRES32=r2], 0x14) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x890}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010800000012090000000000000005000400000000000900020073797a3100000000050001000700000013000300686173683a6e65742c696661636500000c0007800800130000000000050005000a000000"], 0x58}}, 0x0) 9.856177574s ago: executing program 3 (id=6370): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x7f, 0x1}) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r4, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) 8.774756313s ago: executing program 2 (id=6373): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000640)={0x0, 0x80000000}, &(0x7f0000000680)=0x8) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe80000000000030fbb10323ccf1419afc0000000000000000aafe800000100000000000ddffffffffa900004001f558", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200029078000004020000"], 0x0) 8.708767158s ago: executing program 3 (id=6374): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x6, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) 8.494091567s ago: executing program 2 (id=6375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x0, 0x1, 0x2, 0x8001, 0xd626}, 0x20) unshare(0x20000400) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="00000000000000003000128008000100736974002400028006000f0002073f01af4552069b230000080014"], 0x50}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r7, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000780)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x2, &(0x7f0000000500)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000580)=""/146, 0x41100, 0x0, '\x00', r10, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x1, 0x4, 0xdd}, 0x10, r11, r7, 0x8, 0x0, &(0x7f00000009c0)=[{0x5, 0x2, 0xb, 0x8}, {0x4, 0x2, 0xe, 0x4}, {0x3, 0x2, 0xe, 0x9}, {0x3, 0x2, 0x7, 0xa}, {0x2, 0x2, 0x8, 0x8}, {0x2, 0x1, 0xe, 0x9}, {0x2, 0x1, 0x5, 0x8}, {0x2, 0x2, 0xa, 0x9}], 0x10, 0x7}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r7}, 0x18) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000003c0)={r1, &(0x7f00000001c0)='GPL\x00', 0x501800, &(0x7f0000000240)={@_ha_fsid={[0x1, 0x2]}, {0x2, 0x5, 0x7ff, 0x7}}, 0x1ff, &(0x7f0000000280), &(0x7f00000002c0)=0xc}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0x5, 0x3}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$XFS_IOC_GETBMAPA(r7, 0xc020582c, &(0x7f0000000400)={0x10, 0x1000, 0x6, 0x634, 0x7}) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090027bd7000eddbdf250400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 7.390850514s ago: executing program 3 (id=6376): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x10}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1b, r3, 0x1, 0x7}, 0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00e0ff0008000200000000d0"], 0x24}}, 0x0) 7.169787781s ago: executing program 3 (id=6377): unshare(0x6a040000) bpf$PROG_LOAD(0x1e, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0xfffffffb, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240), &(0x7f00000002c0)=0x4) sendmmsg$inet(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="9d6c624bff2d92338fb88f73557d5cdf1e7128814b29700335491799b4a7034ad18332f4f89bf39f3fc8a77e1d836d29a4a0e15d44514e77d6c17ea6d7e503b2bf0cf64e9cb513861903afe3217c040a4885ba826eff98ca9b74ef451b7aadff7c98bc235013b9173d7a1b82e6f8fc5b8ba17f5828baf0419243d4598d238e4201e8bd2a8fe0a5f636822b24c48aebfdae6e395a1a5e72ffea8e882ed03ebde0f252eac6ecfbbffe427d770ce940598f1745acfad0ee56c835d5363634f115e197fff2dd28", 0xc5}, {&(0x7f00000008c0)="eaca75cfbcd13feb2f6eddcfae2d870ab4e02f002ef93511b65293d73f6000cce8056eda756c9e9e695fc855cde448733e88a05464b43776225bca0058c1a4e96b7825a8075fb448385a115bc240f498283e0740b1824c730c86f4ac5ed89c0f2c3749b47dea8c33d62b0ae7ec9b91c62f7531fce1c126640ec08e0ad7c9bdea20c64dbe8e164c039a65e31c6b321d7de131453d32512ea0ae5427330a0695d9e31300000000000000000000000000e493f2502bd1d9b3f2376fad590056868062e4ce2a1b43f71efc80193f366f928c5e507dfcbe619c7fb1164b6f732213a08399ae320b770ac93462dc5fbf47a1067ca6a5611028f383be8b33e478b12af8333c47e0b8dd8d0a5c955ac991e164b5edcf3faeb58978bd42979f268d0e4a", 0x11f}, {0x0}, {&(0x7f0000000380)="c99c8dd4ee61ef237228d50ec9f161cba6da5a57922e32373ded143640fb2b043efe965042612e97822aca390635296549b6cafb948ee08c738a408030a04556c122ef5d4e2ce8046df65804a76699bd2bac2cf155d7f6501daf7fdc31e493a8e3b9d60b9eb75b8d81177a5dd7e7f932ea80d7592702a1887922dc6318963ad72bd3553b8b5028ab48dfa45756a2a2db554d48620208722ecae74097c5850ab08b676ad9b1f2f5f42bbfd0702402d1", 0xaf}], 0x4}}], 0x1, 0x8004) recvfrom(r1, &(0x7f0000000000)=""/22, 0x16, 0x10000, &(0x7f00000001c0)=@ax25={{0x3, @bcast, 0x2}, [@bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FRA_FLOW={0x8}]}, 0x34}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0) sendmsg$rds(r2, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x8}, 0xfffffffffffffffe, 0x0}}], 0x58, 0x80}, 0x0) 6.802686976s ago: executing program 1 (id=6378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x24, 0x49, 0x200, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x38, 0x0, r2, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x14004}, 0x801) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r5, 0x29, 0xce, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x24, 0x49, 0x200, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x38, 0x0, r2, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x14004}, 0x801) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) (async) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) (async) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$MRT6(r5, 0x29, 0xce, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 6.570421482s ago: executing program 0 (id=6379): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xee, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x382}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) 6.500690983s ago: executing program 1 (id=6380): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x4, [0x400, 0x101, 0x4, 0x6]}, &(0x7f0000000100)=0xc) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000140)=""/175, &(0x7f0000000200)=0xaf) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0xff, 0xb, 0x8, 0x9, r1}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x8, 0x0, 0x1, 0x10001, r2}, &(0x7f0000000380)=0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000003c0)={'veth0_to_batadv\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x6, @private2}}, [0x5, 0x1400000000000, 0x6, 0x8, 0x9, 0x5, 0x1, 0xffffffffffffbabd, 0x58, 0x6, 0x4, 0xaecb, 0xf, 0x4, 0x7]}, &(0x7f0000000500)=0x100) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000540)=0x8001, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000600)={r1, @in6={{0xa, 0x4e20, 0x75c, @loopback, 0x100}}, [0x8000, 0x6, 0x4, 0xd44, 0x2, 0x5, 0x9, 0x5, 0x9, 0x1, 0x8, 0x4, 0x1, 0xff, 0x7]}, &(0x7f0000000700)=0x100) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000740)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000780)=0x2c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000007c0), &(0x7f0000000800)=0x14) recvfrom(r5, &(0x7f0000000840)=""/29, 0x1d, 0x20000, &(0x7f0000000880)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x800}, 0x80) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000900)={'ipvs\x00'}, &(0x7f0000000940)=0x1e) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000009c0)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x100, 0x0, 0x0, 0x0, 0xfff9, &(0x7f0000000980)='veth0_to_batadv\x00', 0x9, 0x1, 0x7fff}) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000a40)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@delnexthop={0x38, 0x69, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8}, {0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c000}, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000b80)={'security\x00', 0xf, "cb5d5a2e62ef9a8c98840f9bca2198"}, &(0x7f0000000bc0)=0x33) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=@ipv4_delrule={0x78, 0x21, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x80, 0x0, 0x8, 0x1, 0x0, 0x0, 0x5, 0x267764ee147f0155}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}, @FRA_DST={0x8, 0x1, @private=0xa010102}, @FRA_FLOW={0x8, 0xb, 0x4}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_DST={0x8, 0x1, @empty}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}, @FRA_FLOW={0x8, 0xb, 0x8001}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'xfrm0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040800}, 0x480dee936dc6a06a) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000d40), 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000d80)=0x1, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000f80)={{r3, &(0x7f0000000dc0)='\x00', 0x100, &(0x7f0000000e00)={@align=0xa7ce, {0x3, 0x3a65, 0x1, 0x3}}, 0x3, &(0x7f0000000e40), &(0x7f0000000e80)=0x1}, {[0xffff8001, 0x7, 0x4]}, 0x0, 0xaa, &(0x7f0000000ec0)=""/170}) getsockopt$MRT(r7, 0x0, 0x0, &(0x7f0000001000), &(0x7f0000001040)=0x4) 6.450335133s ago: executing program 2 (id=6381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r2, r1, 0x0, 0xbdc4) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) r4 = socket(0x10, 0x803, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x1, r7, 0x7, r4}, 0x10) (async) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x1, r7, 0x7, r4}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x68, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008100}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 6.199732215s ago: executing program 0 (id=6382): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0xe, &(0x7f0000001c40)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000001dc0)='syzkaller\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xe, 0xffff}, {0xe}}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000005100)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}}, 0x48010) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logger_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40011}, 0x4040100) 6.158365152s ago: executing program 1 (id=6383): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x3c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50000}, 0x40) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r7, 0xa1) accept4$bt_l2cap(r7, 0x0, 0x0, 0x0) shutdown(r7, 0x1) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x9}, 0x0, 0x0, 0xf, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, {}, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 'wlan1\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="24e42909e863", @empty, @dev={0xac, 0x14, 0x14, 0x18}, @empty, 0x18}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 4.112544488s ago: executing program 2 (id=6384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002000000000008000340000000d50800044000000001080006400000000408000140000000130900010073797a3000af59000900020073797a32"], 0x94}}, 0x8000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cca878e35f69c9cc01bd35", 0x42}], 0x1, 0x0, 0x168}}], 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000280)={'ip6tnl0\x00', 0x7f}) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_emit_ethernet(0x17e, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x35, 0x4, 0x3, 0x28, 0x170, 0x66, 0x0, 0x5, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@generic={0x86, 0xc, "6a2cf476e4a1772cb393"}, @noop, @cipso={0x86, 0x51, 0xfffffffffffffffe, [{0x6, 0x10, "a0a1797f8ab934ab54916e88cae6"}, {0x6, 0x11, "bd1da495e7b1432e5b6358b24d09e8"}, {0x6, 0x3, "11"}, {0x5, 0x10, "f123bab576dc68fc8a5a77a3b5f9"}, {0x3, 0x11, "5a0ccf6a0c18ad591b0de44d676c85"}, {0x428c44cb0aeb3ded, 0x4, "fc1e"}, {0x7, 0x2}]}, @cipso={0x86, 0x3c, 0x3, [{0x5, 0x7, "8764a76eb4"}, {0x6, 0x10, "f8c3e075829dba49f31707ce18b4"}, {0x1, 0x10, "883404ed26f307604c984b176e08"}, {0x5, 0x3, "90"}, {0x5, 0xc, "d726988b1f566ebab58c"}]}, @timestamp_prespec={0x44, 0x24, 0x5b, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0xe}, 0xb29c}, {@rand_addr=0x64010102, 0xb610}, {@private=0xa010101, 0x1ff}, {@multicast1, 0x7}]}]}}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "600285cad37e44283cd568078c24292eb2f84c05dbfdf7b636b4b5439fe3c0c6", "e0ef7c6aea63cf26041b044aff906f30673493003e5986a9312666f73d047ce8baf9a037b97573a27ffb85a42c6b8934", "6ecff58c1a740137852e563ba2c384f257e234dc7f671d6269be465f", {"5ded37aec32a7f2583d965df6b9291f6", "5f05069468da0afcc74387d961e74159"}}}}}}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x0, 0x3, 0x3}, 0x10) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000200)=0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 4.111270518s ago: executing program 0 (id=6385): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) (async) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r2}, 0x20) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004010) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="0911008d0c00"}) 3.740527438s ago: executing program 0 (id=6386): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x2e0, 0x190, 0xffffffff, 0x190, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c0002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f000000000014"], 0x38}}, 0x0) listen(r1, 0x0) poll(&(0x7f0000000500)=[{r1, 0x18}], 0x1, 0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xc00, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000640)={'wlan0\x00', @broadcast}) ioctl$int_in(r3, 0x5452, &(0x7f000000fa00)=0x9) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x8890) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071109500000000009500"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x90) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$nci(r5, &(0x7f0000000540)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x1, 0xad, "df6475310ef84b3c075646d69b581862537688279726b8aa871993d97a9755397950d4574ac6db9b62c64c1c911b94339ee5b15bd25c5aabdb0e11e2e67c7afed5344f4e39d3ecf4b7f537bb222226a023dced5ca6f310e3f532d76a26e663a3625889ea13b300018c440a8c370b36cc76881464328bbfb2404a4480a2448d1de0e3a3660f3c9ccbe48fbe5bab45b1da36a7a64d1d06c607cabd215f0691288a61076e52b6b1ad1396cdeeb01a"}}, 0xb2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000600)={@private=0xa010101, @multicast1, 0x1, 0x5, [@local, @remote, @empty, @broadcast, @empty]}, 0x24) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc3, 0x0, 0x0, 0x58049}, [@IFLA_ADDRESS={0xa, 0x1, @random="4af29c3ff049"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs$namespace(r8, &(0x7f0000000080)='ns/mnt\x00') 3.233008724s ago: executing program 3 (id=6387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYBLOB="a060d720f798a11bde73dc25969e6acea9cc2656c7f7fdbb92f84b727416e74c644b659bfb32881d7a818a5381bbb7d30fda31152fcf633f7e8ed6d8e970db919e7772f6ec46f17044c035418634104c1467544b8958e73b60c6608c77c27415d70ca6cd12862aea2ca37b1af799f3e246ea390a4cc18b2a5d9b378e73bf5b77b9cfc6d4c97907373aa00c65eac6ccc30fa884965df51a502cbab0c30b406a6f72f04f177c1fef01cc918199eb9bd130cad9e5346b8a48692d8c00bef7c54af4045dad4ab02b4cea7a6e55ec1e0380d168eb4b02d1d3f7008f2dbf06d434228736a9dd1cbbc064b81addff46ec49500f3d52ab2be5540c0770f124e87693378e8bb989b10d210630d9d4d9428d2d49d49a76b5348cdf4f6e5d8fcb6ec0d8c8dfde1af371d43bda022db92bcaf673ee1d9737d694d7d689c7654fc3cade11836b734c0ed70cc8c27142b953e83d847091e43790a1997540377d7a6dafb766d3088ad3ab91b7a507f3d38848f19d99b8ccf3e123a7b2ede7341468094fef260fd8e0e83a3c8cb7792ff1f7da6e644388e6e8a4982f8e6f80c32eed413141a6860acbe564ad43ab684c05e6496a6f7203866f0cfb01463f5ce9e5d8375bb6adf0c43a05b5bf00867deb434d9bbe22ab27dc9f77729886b893cc5316f55eb54359d27d2c6651240b78183a7c67140e7d3c118ebb2c6834fd28124153b72575ff9a13d9333a6c3be256e94b4d3364afebd9b61e99c4e0e6238eb215932aebe054c2ee88e25a79edcbcfca31ab555bb7a9268c7028649d055e951e9b118b19dc9d40f85476fc89eeb7a08aeed0698fa9636b1bc4cb9f131fed829161746056024a6311f2bb5888393a901eab59a0034e21357cd5b1297389b5619aec1efbbd0884e61c18597c1ed93a0a61b59ebb8a0aa7fa1fb211fd690cf0f7f8bdc7d0c3de3fd4275e5b9a85757fe0c483632ec76551f39a711f31ed052be6c9136572c12de488da9316d90e877129888c61f22ff4aa9037af740f02808bb0da867adb0e7d7e22e0ac654c3c118ef0ce6d5f7bdf258106697b02c2c4473f5ba5d3eb3f725478ecae01ded2a88724fff5a4c3eca2c1472f64ecbe67a5f7834b84754b0b2b29f9e0de13cce4740c330d09206b7f48ef61262bdad3e42b4ce5cb5ef7f0b22a90d9315d354d451f5e6917b0fc9b5778632cac7e4affa2e1ddfabf107c13b9e022e0f1f7d44e7dad35261e5b653ab6ed844b1ffe87a7f0e46789a9eead77c860db17011496c823feaf63b88f5417e9f230f7a27d54efed54f5630170b07969999b8e126d6bc1e90a32ce6139b110af0e484ed1b85eeefc34fab6b75d3ff013e52e385a7e6e1cb0e9930d1fba515c560f5ae5b17cbbb6bd8bfb6ea53ef095b0e25504827120e9b09cb9fabba1d260e93f5206640b844495dbac91511ebbae90bd86ac8bd24edfb0066faf8c618b1c55afe558ff5cbbfddf19e8e30de5cddb1ea34fb10c696aa27e682c746e8fd1110a2ed751d6805585646a2d9f00611f15ca358b4933a35740250937c5fd06da5e05c0a8cceabf1862b6791d867c5903b3c0cd77fd3f85b1856bddc333e30a5db07768ccfc961091982f64d1c4d833ee8f269742473aa7e0e221ddaf3753da9a03d37f0a02a3713cfa66285c458254a0e030c58f70eff6f45078dc0b95edf0401a0812fd07aad7390bd409f7b45fc3ae1167b258ac60c374b677366f8bd463b7dff4610663b42f2f97903a9ff4a80bd84d195f944002cad638d597c506d05bdcac1fbb8a4f2334821e52bc8cb1f27969a224c87f262dc2661fca0b5b8c56d581ea75f50e7947fdf180ccb5315678a0c6fddd83936e329273940b678a126c9946c00a134de0e8bbde79a4fef4dc4ff509ac2087acfa3182e6a2c276f81d6d6dc09bf5f0b692b2aea619056c49926ad1f11ad15a38947bec9deb0a3d9e1c7c211cf0558114a6622c44192b62610fb8585669dba162addaaadc750d3b97decdf89f6ed815f86872147ac50e6ec37b954aca4c2d64583b5fd9bf821ac49274f57eeff85894f13cef39f6963256d6cba66904f9fb2bf3effe7f26b6b80a2f160fc5fd65ffebfd77aae76b649adfbf187a81db7f40d07807784af853953f9d5783fc22c13f4a5636be56b9c48ccafac77680d44646bb4a9cbd8ef66c28848aeeeba48a18b06c1750de8bb16354c5c113ea96c695cfa32e69f8b519a2695fc35010cafc1d0d386945ebee48302007d630505c2ef6a26017d05108a48e165ef9b07e2156f3ec728d1105b6c77b7d6e084a3c291b51587b9c4264008d561f741bd6f3f6ee47c9b7b237f136e97d04f321ab0149fd3a93a5322010cccfc28157d7d09e896a6197b3f2382e303041df3bda9840ed0e69a3645e2c0cca55a0ce4533c18170a9d00cd53043fb773b75fb374b0ecdf832b0c5cf9231c2a0bf6174f68ab9d6031a7c61c7278aff8f18551a89ce074afe5523fc4133371f8bca8c424a1612f21485aeff4ad21c79b5455e7cf28520ac24dc5387cfbb452db2a732a09760e7b8b79bdd5943c2f474f699ca752038eab199b5f1cb0919771453422999c3509576a176bbf6d607e298284daadc09546b5be817167ca1796b0fc1261ec7e60ea68b2d084db12cb03b04d426f74ba20fec29e7c47abb6b98bad46cd69187d8fb5e1fbd14914767f5e33f56815a0c51cb9476baf3cbcb5d26e4ca64cbf5e48f058d454709084ee1851bdcee4673c1763426c5a8368ae843ad24bb14d2f2b7d8584805008903595af611dbb2e45a0c18d89e92728a7a2a456aac2f986346b39a53c730e9e98831da76f45e06b9eac4d50642122d6df51dc4750234dc042590b2689b00e96d2d39f5a9a54c9a50d8fa05c5ab5dbd60b212588631f638375f220e677a9f9b1c34e7780baa7f2349da8876630651bdb096094c32c1739bac52d5a53648afaefeb5ddc881c35f7fb7dc0859dccb175221b78b6fde7f2d917be2e97a60d8677eaa5761d2d837c2c885b2e8c1ae85275f734e09fbc96dc9fa404f7bd690fa90b30075e7d2bc774685cf2b5649ebe6f5e653e43575d0ed9959f9ebbacfa1db5f73d8000434a211d31394ecfdbabf55ea733eac6865b1d724807d5cd1bb27b2481b9b22fc7655b3db83905061bf2294722152e27ff69c5b12680804cf28eecc9480ba5432dc7d5ce218166839d44555112d247c2d64fb86c12dc93b419ba5a4cc7c8e04a910fca332641de4606b4aa8890e5310919821b570a13a1f1e2ec6461c068d6d88439b81a931ad33976d1d3473d14ce10479aacd4a3e85bdd01230390a6b39125e31d631508bf0c7dca3ac804605d2fbf61000a04e290cfa261e6ccfdf9c0121015d8b573472eff7d56e9a0dfc44d231261c1805ea69fb264a48a9663cc23dcc91cbf03e6363c5b670b4c1419346a5cb7e0049d1ca88af69efa7df62886ba14aba3c576915e603d5f40e3afdc4778954a27d9fb2d3f9315cd20b604b82f3c1f0d918a0b5ab4b77c9ffe1a750990d96568e94312920b21517295d1d425286b3994974dadcb293c314559abc6486874c85b158c148c0ae0efaf83f628b9c1a35725db380d77508a18bb275c26b4c020677485634b7b70557d4bdb9b450a91211ad6b88aafc6754fc4637f6cd59b9a681b8b3f2efca1a0c7860cdeb354d1e5c597dbc7a6e09d404284993d6554266776156d6d3330b0e55b18079443fac6ab4320cf0a0b64c3a9e020700eccac98c404f1479888f81906bd212063ce939a91878baaa31c698283344839cad4ffb23ed594619c48c64d90fb69a5ba6fd70f092fb8294ffc4a8508265b7c3cb72f7b5aa222cb999bb85fb91c9ed4f55e7a27c6eceea277ab5627b59ac1a1e809088aaf641caeca2856ab0eb9bf39f90db37049a827e284a0b78aff0dd6b6115431229a56ae80e1a627335ab7e7de4f7761cd85f8850b95469955b559a0bb4b7944dfedbc79dd80e8ba557f3647346d9280b87e82502ed9d0a0f3b4856b993e04e2672fbf590a308e4bc657058cb6f25c261d973fab395304ed2e33075b2351340467b42d987e2b70030369e406ae5397b21bff47b0a67d377666f2b3a12ecc3edc8babdc4c3a5125526ee74be2035c732e6d01aadd758150939b33d9e698023715d0bf5fa7c3355ff11d6aef11596cde659675d00b777f0f6ddefc9d6923e08274476c38df29294a012d25d7c8cd62f9a5294b6cb248a45f1f0f8ea889f5cea62e3e64ea0f5073f7f9fcc767ff662c7e7cc4be8c3d396dce1e8ce76a20ba860d16f7ea965017f721bd6005e59cc134077cb7ecaef25256684775a3981738c1ef43a9362b32ace59063d8e8cb26d1615031740c0cba0b679c436f0cfbc6454ee29c2181e3eb3971fc72ac1505f7f16b122a1ad25953f057de4964f2985ae662c8a49e925f9ab0b57780f81f12a6df1989edd61b0b5363b628e7639d829f2dfa8a4c823c66bc4619b8b2f6bc700f7cca01397dbcc6a304c4f0fbd7aeabbf5160220ec8d51d260ca47e023462c9e6c55b5718fb96573b6f6a25ed416fff784eceb0f4dd0c8b4d78babfb0433a14a4fd77db491f8a8cf7e9248e1dab1d4647d78a1f92692e3cb45ac1ac7815bcafd8edb46240bfc5f084b27ced8a8d310fa1ca4b2c20bbaa42edc982340baf88411fdb1a5d1c2017a2bfa01431a6c5865161d9786372d76a0f7a9bee0eb7f082326d0c873c170a9624ddaa484bb81963aa6d0eda79eae0d818bb7433be475228bc35bf430252e5c9b9c67fea397761a9fbcc1945ac44c47180ea35967f11942cea669a5dc4862a87276b3ff75ecd4641bfcdf2586e59db8284e8d45c607e6699d4b70cb08b42cb048c959616babc677c28093d71ac78593d05c0d38300b752ed3b62b1bd964fa6087056791181ac354bbdfd47f95fbecd193ec556df7d39572566addbd670ccf424bd31baa02116b306db33713c5456f4fbc6c7590e86ecf4f6ff49a45aa88c94040bb235ab5537bbffa347db24ca32f01f7db3ca026dfaf56c42590e98b0b2968ba5ba6cd8e013084cf174f05d9e947858f6cbe8ea155edc9d5f1ed4c32d8cbe341c582eeafd1e46a91c282bb2b57a8bf4957541a242487f715310997d574e996d15521942424b2ecc4966bbcc69fa4d7c29d1bd91a7997d5746bcf010c264317373d330adedf4b53c34233889a17dcc45c9c440c05b27a60178813f5289d255e84c904070afdf8b626029f5ef5cacd4aeffc607829956d16d7419745fabb75ab280f618b1cc75b9eb3811d57a5234d20593310be0a289bb57e28d06d1d735c9c87c928b8fc6e0c6d9c484a8661303095ae1035b636317d3230657fd7265c213cb9edb8c49fa6e9ba0b640b9d6596151b13a1856a3ad999a75e668a3223dc5d9474aed2dffffaf6ae4e48117cf9d8dbf21c91e751c89234d2cf1feeccba6be1ef550dfe06707c07c12e526a8e46596bafae86719db6302daf67209ec8df375407c7957e22f2ccf797f132d5bb5ae02e8dc5aeed45d5df1d37fdc248108e88a11e02bc9e5ef486d2fdeb91035639399ce30fe0fc14f65ee76e79940aa7490ac03e113741c8c88749b407e776ba93d6aba7e93b0c40eb7f1f847982f6d084232668e656fa040f9fb00cd298d6f10a46038db9cc69c97c360a29451c26fa9f08ccc0960c3386aade8db7b15e4d5752bb2c85ea140fefbfe2d8aab90d14523a8de0795e0772a061fca93fb3c43c9a9faceff299c725e9cf15d4bc703680e50160f69d207a329e85fe2d558732e61f2e0faef081c91ccab2956d4c19", @ANYRES32=r0], 0xd8}, 0x1, 0x0, 0x0, 0x2004444d}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 3.117535056s ago: executing program 2 (id=6388): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeaa7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r5, 0x5}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f0000000200), 0x12) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000c35fff), &(0x7f0000000000)) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000008, 0x6e071, 0xffffffffffffffff, 0x80000000) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c850) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)=@newqdisc={0x6c, 0x24, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0xf}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0xff, 0xffffffff, 0x1, 0xfffffffa, 0x8354}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0xd3, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r2, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 3.001691898s ago: executing program 1 (id=6389): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2, 0x0, 0xfffffdb2) 2.822965686s ago: executing program 3 (id=6390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x1e, 0x5, 0x0) getsockname$packet(r1, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000020020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) 2.497261177s ago: executing program 2 (id=6391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c850) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041004}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)=@newqdisc={0x6c, 0x24, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0xf}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0xff, 0xffffffff, 0x1, 0xfffffffa, 0x8354}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0xd3, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r5, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) (async) getsockopt(r1, 0x0, 0x33, &(0x7f0000000000)=""/5, &(0x7f0000000100)=0x5) 0s ago: executing program 1 (id=6392): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20008010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (rerun: 32) kernel console output (not intermixed with test programs): 445': attribute type 21 has an invalid length. [ 800.301904][T26737] netlink: 'syz.0.5445': attribute type 21 has an invalid length. [ 800.329166][T26737] netlink: 'syz.0.5445': attribute type 21 has an invalid length. [ 800.491489][T26762] netlink: 'syz.3.5452': attribute type 1 has an invalid length. [ 800.577945][T26767] netlink: 'syz.4.5454': attribute type 12 has an invalid length. [ 803.708151][T26737] __nla_validate_parse: 5 callbacks suppressed [ 803.708172][T26737] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5445'. [ 803.943599][T26792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5461'. [ 804.010868][T26798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.292372][T26820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5469'. [ 804.345533][T26827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5468'. [ 804.356211][T26827] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5468'. [ 804.366548][T26826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5466'. [ 804.388430][T26825] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5467'. [ 805.068906][T26863] netlink: 'syz.2.5480': attribute type 1 has an invalid length. [ 805.090872][T26863] netlink: 'syz.2.5480': attribute type 2 has an invalid length. [ 805.110286][T26863] netlink: 'syz.2.5480': attribute type 1 has an invalid length. [ 805.121405][T26863] netlink: 'syz.2.5480': attribute type 2 has an invalid length. [ 805.412530][T26874] netlink: 'syz.3.5483': attribute type 1 has an invalid length. [ 805.493101][T26878] x_tables: duplicate underflow at hook 2 [ 805.508820][T26879] x_tables: duplicate underflow at hook 2 [ 805.527701][T26874] bond11: entered promiscuous mode [ 805.539514][T26874] 8021q: adding VLAN 0 to HW filter on device bond11 [ 805.624675][T26874] macvtap0: entered allmulticast mode [ 805.812099][T26876] macvtap1: entered allmulticast mode [ 805.889076][T26896] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 805.895989][T26896] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 805.915820][ T9768] tipc: Subscription rejected, illegal request [ 805.922577][T26874] bond11: (slave bridge7): making interface the new active one [ 805.922607][T26874] bridge7: entered promiscuous mode [ 805.937290][T26874] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 805.940560][T26896] netlink: 'syz.4.5487': attribute type 2 has an invalid length. [ 806.086475][T26889] syzkaller0: entered promiscuous mode [ 806.104603][T26889] syzkaller0: entered allmulticast mode [ 806.260156][T26905] netlink: 'syz.3.5489': attribute type 10 has an invalid length. [ 806.282994][T26905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5489'. [ 806.683119][T26927] netlink: 'syz.2.5494': attribute type 18 has an invalid length. [ 808.776143][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.536973][T26927] netlink: 'syz.2.5494': attribute type 18 has an invalid length. [ 809.539300][T26932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5495'. [ 809.567671][T26932] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 809.932728][T26947] netlink: 'syz.3.5501': attribute type 17 has an invalid length. [ 810.035683][ T9768] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 810.358915][T26974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5508'. [ 810.387670][T26978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5509'. [ 810.424513][T26974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5508'. [ 810.433761][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5509'. [ 810.463796][T26978] netlink: 'syz.1.5509': attribute type 14 has an invalid length. [ 810.476748][T26981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5511'. [ 810.486127][T26978] netlink: 'syz.1.5509': attribute type 13 has an invalid length. [ 810.488472][T26984] xt_l2tp: missing protocol rule (udp|l2tpip) [ 810.580256][T26987] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5512'. [ 811.043245][T27011] netlink: 'syz.4.5520': attribute type 32 has an invalid length. [ 811.346134][T27026] netlink: 'syz.0.5526': attribute type 1 has an invalid length. [ 811.427772][T27031] gtp2: entered promiscuous mode [ 811.448289][T27031] gtp2: entered allmulticast mode [ 811.510596][T27037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5529'. [ 811.723375][T27049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5532'. [ 811.740332][T27049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.864226][T27049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.947656][T27055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 811.989312][T27055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5534'. [ 811.990835][T27061] syzkaller0: entered promiscuous mode [ 812.020670][T27061] syzkaller0: entered allmulticast mode [ 812.099203][T27061] tipc: Enabled bearer , priority 0 [ 812.135397][T27065] netlink: 'syz.1.5537': attribute type 7 has an invalid length. [ 812.149362][T27065] netlink: 'syz.1.5537': attribute type 8 has an invalid length. [ 812.159103][T27057] tipc: Resetting bearer [ 812.242822][T27057] tipc: Disabling bearer [ 812.287660][T27075] tc_dump_action: action bad kind [ 812.502735][T27081] x_tables: unsorted underflow at hook 4 [ 812.583360][T27087] netlink: 'syz.0.5544': attribute type 1 has an invalid length. [ 812.623580][T27087] netlink: 'syz.0.5544': attribute type 2 has an invalid length. [ 812.713444][T27096] sock: sock_set_timeout: `syz.1.5547' (pid 27096) tries to set negative timeout [ 812.768223][T27096] sock: sock_set_timeout: `syz.1.5547' (pid 27096) tries to set negative timeout [ 812.911798][T27105] sit0: Caught tx_queue_len zero misconfig [ 813.282478][T27119] veth5: entered promiscuous mode [ 813.340351][T27114] syzkaller0: entered promiscuous mode [ 813.358041][T27114] syzkaller0: entered allmulticast mode [ 813.978319][T27161] netlink: 'syz.3.5563': attribute type 1 has an invalid length. [ 814.241995][T27161] bond12: entered promiscuous mode [ 814.250525][T27161] 8021q: adding VLAN 0 to HW filter on device bond12 [ 814.260630][T27150] syzkaller1: entered promiscuous mode [ 814.269665][T27172] netlink: 'syz.0.5567': attribute type 7 has an invalid length. [ 814.290412][T27150] syzkaller1: entered allmulticast mode [ 814.422095][T27177] sctp: [Deprecated]: syz.0.5568 (pid 27177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 814.422095][T27177] Use struct sctp_sack_info instead [ 814.554391][T27180] __nla_validate_parse: 11 callbacks suppressed [ 814.554413][T27180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5569'. [ 815.419764][T27207] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 815.458155][T27216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5581'. [ 815.473017][T27207] bond13 (unregistering): Released all slaves [ 815.950249][T27230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5585'. [ 816.210407][T27243] validate_nla: 1 callbacks suppressed [ 816.210428][T27243] netlink: 'syz.3.5590': attribute type 1 has an invalid length. [ 816.228113][T27246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5591'. [ 816.261452][T27247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5592'. [ 816.307513][T27246] macvtap2: entered promiscuous mode [ 816.312887][T27246] vlan0: entered promiscuous mode [ 816.318669][T27246] macvtap2: entered allmulticast mode [ 816.324087][T27246] vlan0: entered allmulticast mode [ 816.331726][T27243] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 816.393822][ T30] audit: type=1804 audit(1784182404.016:9): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5593" name="/newroot/451/cgroup.controllers" dev="tmpfs" ino=2326 res=1 errno=0 [ 816.434253][ T30] audit: type=1800 audit(1784182404.016:10): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5593" name="cgroup.controllers" dev="tmpfs" ino=2326 res=0 errno=0 [ 817.141539][T27290] netlink: 'syz.0.5602': attribute type 1 has an invalid length. [ 817.186378][T27290] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 818.001874][T27320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5611'. [ 818.034925][T27320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5611'. [ 818.088494][T27320] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 818.102610][T27320] bond7 (unregistering): Released all slaves [ 818.151185][T27329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5611'. [ 818.184282][T27329] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5611'. [ 818.197732][T27329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5611'. [ 819.610600][T27375] syzkaller0: entered promiscuous mode [ 819.616998][T27375] syzkaller0: entered allmulticast mode [ 820.164716][T27393] veth0: entered promiscuous mode [ 820.172565][T27392] veth0: left promiscuous mode [ 820.654210][T27410] IPVS: length: 8 != 1152 [ 821.478796][T27410] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 821.486994][T27410] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 821.631080][T27410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 821.646102][T27410] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 821.699659][T27410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 821.713630][T27410] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 821.788672][T27410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 821.799386][T27410] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 821.832166][T27360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 821.889246][T27410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 821.915841][T27410] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 822.142283][T27444] __nla_validate_parse: 8 callbacks suppressed [ 822.142337][T27444] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5642'. [ 822.152618][T27441] syzkaller1: entered promiscuous mode [ 822.183907][T27441] syzkaller1: entered allmulticast mode [ 822.209433][T27444] 8021q: VLANs not supported on gre0 [ 822.228233][T27441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5640'. [ 822.282736][T27441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5640'. [ 822.312349][T27444] tunl0: Caught tx_queue_len zero misconfig [ 822.323850][T27450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5640'. [ 822.513811][T27449] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 822.529698][T27449] syzkaller1: linktype set to 823 [ 823.353840][T27484] netlink: 'syz.2.5649': attribute type 1 has an invalid length. [ 823.376530][T27488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5651'. [ 823.416223][T27484] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5649'. [ 823.719576][T27485] syzkaller0: entered promiscuous mode [ 823.737506][T27485] syzkaller0: entered allmulticast mode [ 826.676103][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 828.602509][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 828.980676][T27542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5659'. [ 829.025709][T27542] macvlan0: entered promiscuous mode [ 829.040454][T27548] netlink: 'syz.4.5662': attribute type 13 has an invalid length. [ 829.119957][T27548] veth1_macvtap: left promiscuous mode [ 829.165970][T27548] macsec0: entered allmulticast mode [ 829.720895][T27574] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 829.984225][T27578] syzkaller0: entered promiscuous mode [ 830.026891][T27578] syzkaller0: entered allmulticast mode [ 830.726586][T27613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5677'. [ 830.753034][T27613] netlink: 'syz.4.5677': attribute type 8 has an invalid length. [ 830.843071][T27613] ip6gre2: entered allmulticast mode [ 830.882054][T27616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5678'. [ 830.999278][T27619] IPVS: length: 239 != 24 [ 831.185514][T27624] netlink: 'syz.3.5680': attribute type 1 has an invalid length. [ 831.660075][T27641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.616324][T27661] netlink: 'syz.3.5690': attribute type 2 has an invalid length. [ 832.670341][T27661] netlink: 'syz.3.5690': attribute type 8 has an invalid length. [ 832.728147][T27661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5690'. [ 832.769824][T27666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5691'. [ 832.830186][T27676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5693'. [ 833.164501][T27682] syzkaller1: entered promiscuous mode [ 833.182339][T27682] syzkaller1: entered allmulticast mode [ 833.983770][T27719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5704'. [ 834.256478][T27730] x_tables: duplicate underflow at hook 1 [ 834.355244][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 835.210884][T27770] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5718'. [ 835.665231][T27786] SET target dimension over the limit! [ 835.857358][T27785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.894572][T27785] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.905990][T27798] openvswitch: netlink: IP tunnel dst address not specified [ 836.228667][T27785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 836.262992][T27785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.311873][T27785] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 836.565644][T27767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5716'. [ 837.121560][T27840] syzkaller0: entered promiscuous mode [ 837.150422][T27840] syzkaller0: entered allmulticast mode [ 837.356648][T27840] tipc: Enabled bearer , priority 0 [ 837.437319][T27839] tipc: Resetting bearer [ 837.524343][T27839] tipc: Disabling bearer [ 838.620313][T27891] netlink: 'syz.2.5744': attribute type 4 has an invalid length. [ 839.038323][T27908] x_tables: unsorted entry at hook 2 [ 839.751911][T27934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5754'. [ 839.790149][T27934] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5754'. [ 839.821364][T27934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5754'. [ 839.954334][T27939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5755'. [ 839.994675][T27941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5755'. [ 840.113467][T27947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.644914][T27962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 840.969965][T27974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.983346][T27978] netlink: 'syz.0.5764': attribute type 1 has an invalid length. [ 841.039646][T27978] bond7: entered promiscuous mode [ 841.046085][T27978] 8021q: adding VLAN 0 to HW filter on device bond7 [ 841.236457][T27978] bond7: (slave bridge9): making interface the new active one [ 841.262322][T27978] bridge9: entered promiscuous mode [ 841.349220][T27978] bridge9: left promiscuous mode [ 841.863399][T27997] IPv6: Can't replace route, no match found [ 841.887346][T27997] IPv6: Can't replace route, no match found [ 841.897732][T28000] netlink: 'syz.1.5770': attribute type 23 has an invalid length. [ 842.000620][T27999] bridge0: entered promiscuous mode [ 842.034469][T27999] vlan2: entered promiscuous mode [ 842.066839][T27999] geneve0: entered promiscuous mode [ 842.100629][T27999] bridge0: entered allmulticast mode [ 842.132418][T27987] syzkaller1: entered promiscuous mode [ 842.158612][T27987] syzkaller1: entered allmulticast mode [ 842.245659][ T4941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 842.272343][ T4941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 842.283714][ T4941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 842.321604][ T4941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 842.338951][ T4941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 842.402324][T17619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 842.412526][T17619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 842.421732][T17619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 842.437716][T17619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 842.451170][T17619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 842.531575][T28020] netlink: 'syz.1.5773': attribute type 7 has an invalid length. [ 842.629855][T28024] netlink: 'syz.1.5773': attribute type 7 has an invalid length. [ 843.997029][T28072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5780'. [ 844.310188][ T1020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.345437][ T1020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.515579][T17619] Bluetooth: hci3: command tx timeout [ 844.595807][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 844.997148][ T1020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.029089][ T1020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.422008][T28119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5787'. [ 845.443665][ T1020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.472109][ T1020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.527203][T28119] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 845.775591][ T1020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.884298][ T1020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.048121][T28140] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5792'. [ 846.110838][T28142] xt_hashlimit: size too large, truncated to 1048576 [ 846.268905][T28145] »»»»»»: renamed from vxcan1 (while UP) [ 846.595752][T17619] Bluetooth: hci3: command tx timeout [ 846.949831][T28004] lo speed is unknown, defaulting to 1000 [ 847.081105][T28004] xfrm0 speed is unknown, defaulting to 1000 [ 847.889824][T28203] veth1_to_team: Caught tx_queue_len zero misconfig [ 848.119635][T28196] nbd3: detected capacity change from 0 to 63 [ 848.188774][ T1020] pim6reg: left allmulticast mode [ 848.194079][ T1020] dvmrp0: left allmulticast mode [ 848.241329][T28201] block nbd3: NBD_DISCONNECT [ 848.315135][T28201] block nbd3: Disconnected due to user request. [ 848.324180][T28207] netlink: 'syz.0.5804': attribute type 2 has an invalid length. [ 848.352055][T28201] block nbd3: shutting down sockets [ 848.354034][T28210] netlink: 'syz.4.5805': attribute type 21 has an invalid length. [ 848.371794][T28210] IPv6: NLM_F_CREATE should be specified when creating new route [ 848.374219][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 848.382067][T28210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.390865][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 848.407823][T28210] IPv6: NLM_F_CREATE should be set when creating new route [ 848.415909][T28210] IPv6: NLM_F_CREATE should be set when creating new route [ 848.423177][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 848.424434][T28210] IPv6: NLM_F_CREATE should be set when creating new route [ 848.434304][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 848.434399][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 848.434455][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 848.496493][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 848.507446][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 848.516957][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 848.528900][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 848.538162][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 848.549751][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 848.560854][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 848.570332][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 848.580207][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 848.594776][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 848.606848][ T1588] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 848.618834][ T1588] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 848.631022][ T1588] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 848.643019][T28029] ldm_validate_partition_table(): Disk read failed. [ 848.652861][ T1588] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 848.671867][T28029] Dev nbd3: unable to read RDB block 0 [ 848.680546][T17619] Bluetooth: hci3: command tx timeout [ 848.698181][T28029] nbd3: unable to read partition table [ 848.753746][T28029] ldm_validate_partition_table(): Disk read failed. [ 848.796985][T28029] Dev nbd3: unable to read RDB block 0 [ 848.813040][T28029] nbd3: unable to read partition table [ 848.970076][ T1020] bond3 (unregistering): (slave ip6gre2): Releasing backup interface [ 848.979722][ T1020] ip6gre2 (unregistering): left promiscuous mode [ 849.289655][ T1020] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 849.299083][ T1020] bridge2 (unregistering): left promiscuous mode [ 849.346524][ T1020] bond4 (unregistering): (slave bridge4): Releasing active interface [ 849.400945][ T1020] bond1 (unregistering): Released all slaves [ 849.450105][ T1020] bond0 (unregistering): Released all slaves [ 849.471170][ T1020] bond2 (unregistering): Released all slaves [ 849.493670][ T1020] bond3 (unregistering): Released all slaves [ 849.514794][ T1020] bond4 (unregistering): Released all slaves [ 849.554255][ T1020] bond5 (unregistering): Released all slaves [ 849.574524][ T1020] bond6 (unregistering): Released all slaves [ 849.601472][ T1020] bond7 (unregistering): Released all slaves [ 849.794657][T28004] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.810170][T28004] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.835110][T28004] bridge_slave_0: entered allmulticast mode [ 849.897339][T28004] bridge_slave_0: entered promiscuous mode [ 849.943526][ T1020] tipc: Left network mode [ 849.968079][T28004] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.987374][T28004] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.037361][T28004] bridge_slave_1: entered allmulticast mode [ 850.074129][T28004] bridge_slave_1: entered promiscuous mode [ 850.343370][T28004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.601768][T28004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.765846][T17619] Bluetooth: hci3: command tx timeout [ 850.961589][T28004] team0: Port device team_slave_0 added [ 850.987555][T28264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 850.994998][T28264] IPv6: NLM_F_CREATE should be set when creating new route [ 851.002478][T28264] IPv6: NLM_F_CREATE should be set when creating new route [ 851.009798][T28264] IPv6: NLM_F_CREATE should be set when creating new route [ 851.044702][T28004] team0: Port device team_slave_1 added [ 851.302064][T28271] netlink: 'syz.1.5817': attribute type 21 has an invalid length. [ 851.499267][T28004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.528958][T28004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.641761][T28004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.954285][T28004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.000118][T28004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.110034][T28004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.662051][T28004] hsr_slave_0: entered promiscuous mode [ 852.688217][T28004] hsr_slave_1: entered promiscuous mode [ 852.812496][T28317] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5825'. [ 852.990980][T28329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5826'. [ 853.042944][T28327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5826'. [ 853.264841][T28337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5826'. [ 853.681473][ T1020] hsr_slave_0: left promiscuous mode [ 853.711644][ T1020] hsr_slave_1: left promiscuous mode [ 853.733989][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.755153][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.788332][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.810351][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.811831][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5832'. [ 853.839060][T28349] netlink: 'syz.0.5832': attribute type 10 has an invalid length. [ 853.847746][T28349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5832'. [ 856.114227][T28412] netlink: 'syz.4.5843': attribute type 1 has an invalid length. [ 856.173899][T28412] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5843'. [ 856.222101][T28412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5843'. [ 856.462400][T28422] syzkaller0: entered promiscuous mode [ 856.493593][T28422] syzkaller0: entered allmulticast mode [ 856.667188][T28430] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5847'. [ 856.687997][T28430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5847'. [ 857.162903][T28389] lo speed is unknown, defaulting to 1000 [ 857.222569][T28389] xfrm0 speed is unknown, defaulting to 1000 [ 857.554080][T28452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.048120][T28004] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 858.082359][T28004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 858.112009][T28004] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 858.149187][T28004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 858.183155][T28004] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 858.252985][T28004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 858.278912][T28004] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 858.302594][T28474] netlink: 'syz.4.5857': attribute type 1 has an invalid length. [ 858.353817][T28004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 858.429918][T28479] __nla_validate_parse: 3 callbacks suppressed [ 858.429961][T28479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5858'. [ 858.563304][T28474] 8021q: adding VLAN 0 to HW filter on device bond8 [ 858.850265][T28496] netlink: 'syz.4.5861': attribute type 12 has an invalid length. [ 859.165511][T28496] bond9: option primary_reselect: invalid value (255) [ 859.189633][T28496] bond9 (unregistering): Released all slaves [ 859.254289][T28506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5862'. [ 859.966093][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 863.527633][T28524] netlink: 'syz.4.5863': attribute type 1 has an invalid length. [ 863.681832][T28529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5866'. [ 864.052742][T28004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.084548][T28547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.282680][T28004] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.334772][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.342033][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.474313][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.481581][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.733685][T28566] syzkaller1: entered promiscuous mode [ 864.764032][T28566] syzkaller1: entered allmulticast mode [ 864.826073][T28573] geneve3: entered promiscuous mode [ 864.910848][T28582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5879'. [ 865.553832][T28603] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 866.099454][T28621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5887'. [ 867.586690][T28678] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5899'. [ 867.619367][T28671] veth7: entered allmulticast mode [ 867.629110][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5899'. [ 867.654402][T28674] syzkaller0: entered promiscuous mode [ 867.666443][T28678] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5899'. [ 867.676878][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5899'. [ 867.688941][T28678] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5899'. [ 867.694160][T28674] syzkaller0: entered allmulticast mode [ 867.705458][T28671] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5898'. [ 868.052117][T28694] netlink: 'syz.0.5902': attribute type 1 has an invalid length. [ 868.206167][T28699] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5903'. [ 868.271319][T28703] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 868.286253][T28702] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 868.296081][T28702] netlink: 'syz.4.5904': attribute type 39 has an invalid length. [ 868.331932][T28694] 8021q: adding VLAN 0 to HW filter on device bond8 [ 868.432516][T28697] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 868.490970][T28700] macvlan4: entered promiscuous mode [ 868.503814][T28700] macvlan4: entered allmulticast mode [ 868.513257][T28700] bond8: entered promiscuous mode [ 868.518925][T28700] veth0_to_bond: entered promiscuous mode [ 868.526941][T28700] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 868.547407][T28700] bond8: left promiscuous mode [ 868.552483][T28700] veth0_to_bond: left promiscuous mode [ 868.648537][T28004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.024875][T28004] veth0_vlan: entered promiscuous mode [ 869.118115][T28724] __nla_validate_parse: 1 callbacks suppressed [ 869.118138][T28724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 869.160799][T28724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 869.168283][T28724] IPv6: NLM_F_CREATE should be set when creating new route [ 869.175609][T28724] IPv6: NLM_F_CREATE should be set when creating new route [ 869.289592][T28004] veth1_vlan: entered promiscuous mode [ 869.377535][T28720] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5909'. [ 869.434317][T28720] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5909'. [ 869.481191][T28720] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5909'. [ 869.502762][T28004] veth0_macvtap: entered promiscuous mode [ 869.515842][T28734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5911'. [ 869.544009][T28004] veth1_macvtap: entered promiscuous mode [ 869.620856][T28735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 869.699866][T28734] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 869.767060][T28004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.881749][T28004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.949293][T10205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.002309][T10205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.044579][T10205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.113232][T10205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.199118][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.464116][ T9768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.531509][ T9768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.729864][T28772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5919'. [ 870.742230][T28778] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5920'. [ 870.779926][T10205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.808846][T28778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5920'. [ 870.824361][T10205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.157056][T28788] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5766'. [ 871.191418][T28788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5766'. [ 871.243856][T28789] bond0: option ad_select: unable to set because the bond device is up [ 872.100215][T28817] netlink: 'syz.1.5930': attribute type 3 has an invalid length. [ 872.280020][ T4941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 872.294473][ T4941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 872.308616][ T4941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 872.327705][ T4941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 872.347220][ T4941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 872.687583][T28837] "syz.1.5935" (28837) uses obsolete ecb(arc4) skcipher [ 872.862395][T16888] team0: Port device syz_tun removed [ 873.469290][T28867] netlink: 'syz.1.5941': attribute type 2 has an invalid length. [ 874.339151][T28866] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.437059][T17619] Bluetooth: hci5: command tx timeout [ 874.836412][T28866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.168084][T28866] veth0_macvtap: left allmulticast mode [ 875.283489][T28866] veth1_vlan: left allmulticast mode [ 875.758700][T28866] vlan0: left allmulticast mode [ 875.763638][T28866] vlan0: left promiscuous mode [ 875.865200][T28892] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 875.983391][T28900] batadv_slave_1: entered promiscuous mode [ 876.009417][T28901] batadv_slave_1: left promiscuous mode [ 876.021495][ T1339] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.223675][ T1339] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.242102][ T1339] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.253973][ T1339] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.516455][T17619] Bluetooth: hci5: command tx timeout [ 876.936271][T28946] __nla_validate_parse: 5 callbacks suppressed [ 876.936292][T28946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5955'. [ 877.099456][T28947] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5956'. [ 877.152906][T28822] lo speed is unknown, defaulting to 1000 [ 877.154467][T28943] netlink: 83 bytes leftover after parsing attributes in process `syz.4.5955'. [ 877.224202][T28822] xfrm0 speed is unknown, defaulting to 1000 [ 877.627680][ T33] vlan2: left allmulticast mode [ 877.635345][ T33] geneve0: left allmulticast mode [ 877.679515][ T33] vlan2: left promiscuous mode [ 877.736950][ T33] geneve0: left promiscuous mode [ 877.747899][ T33] bridge0: port 3(vlan2) entered disabled state [ 877.961737][ T1339] wlan1: Trigger new scan to find an IBSS to join [ 878.534131][T28995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5963'. [ 878.551491][ T33] bond10 (unregistering): (slave ip6erspan0): Releasing active interface [ 878.595795][T17619] Bluetooth: hci5: command tx timeout [ 878.717724][T29016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5965'. [ 878.772099][T29018] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5965'. [ 878.929709][ T33] bond6 (unregistering): (slave geneve3): Releasing active interface [ 879.064489][ T33] bond11 (unregistering): (slave bridge7): Releasing backup interface [ 879.072917][ T33] bridge7 (unregistering): left promiscuous mode [ 879.123314][ T33] bond0 (unregistering): Released all slaves [ 879.137402][ T33] bond1 (unregistering): Released all slaves [ 879.163086][ T33] bond2 (unregistering): Released all slaves [ 879.183735][ T33] bond3 (unregistering): Released all slaves [ 879.222057][ T33] bond4 (unregistering): Released all slaves [ 879.253149][ T33] bond5 (unregistering): Released all slaves [ 879.279126][ T33] bond6 (unregistering): Released all slaves [ 879.300082][ T33] bond7 (unregistering): Released all slaves [ 879.329990][ T33] bond8 (unregistering): Released all slaves [ 879.354999][ T33] bond9 (unregistering): Released all slaves [ 879.375479][ T33] bond10 (unregistering): Released all slaves [ 879.425753][ T33] bond11 (unregistering): Released all slaves [ 879.452603][ T33] bond12 (unregistering): Released all slaves [ 879.529925][T28985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 879.689459][T28997] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 879.705856][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 879.830340][ T33] tipc: Left network mode [ 880.078469][ T33] IPVS: stopping backup sync thread 26245 ... [ 880.647667][T29043] 8021q: adding VLAN 0 to HW filter on device bond6 [ 880.675873][T17619] Bluetooth: hci5: command tx timeout [ 880.694378][T29043] 8021q: adding VLAN 0 to HW filter on device bond8 [ 880.723004][T29043] 8021q: adding VLAN 0 to HW filter on device bond9 [ 880.925772][T10204] wlan1: Trigger new scan to find an IBSS to join [ 881.384881][T29075] syzkaller0: entered promiscuous mode [ 881.412753][T29075] syzkaller0: entered allmulticast mode [ 881.910214][T29088] bond12: entered promiscuous mode [ 881.916223][T29088] bond12: entered allmulticast mode [ 881.923021][T29088] 8021q: adding VLAN 0 to HW filter on device bond12 [ 881.960150][T29092] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5979'. [ 882.229781][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 882.752993][T29136] xt_hashlimit: size too large, truncated to 1048576 [ 882.901443][T29139] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.5989'. [ 882.987164][T28822] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.999860][ T1020] wlan1: Trigger new scan to find an IBSS to join [ 883.037473][T28822] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.058291][T28822] bridge_slave_0: entered allmulticast mode [ 883.077681][T28822] bridge_slave_0: entered promiscuous mode [ 883.102411][T29139] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 883.142521][T29139] 0ªX¹¦Dö»: entered allmulticast mode [ 883.197414][T28822] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.237052][T28822] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.274393][T28822] bridge_slave_1: entered allmulticast mode [ 883.350923][T28822] bridge_slave_1: entered promiscuous mode [ 883.375304][ T1020] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 883.766083][T29169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 883.774393][T29169] IPv6: NLM_F_CREATE should be set when creating new route [ 883.794063][T29169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 883.800193][T29143] bond3: left allmulticast mode [ 883.840066][T29143] bridge2: left allmulticast mode [ 883.850597][T29143] gtp0: left allmulticast mode [ 883.874357][T29143] veth7: left allmulticast mode [ 883.884465][T29143] bond12: left allmulticast mode [ 883.942966][T29149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.957821][ T1020] wlan1: Trigger new scan to find an IBSS to join [ 884.181811][T28822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.292088][ T33] hsr_slave_0: left promiscuous mode [ 884.324794][ T33] hsr_slave_1: left promiscuous mode [ 884.662084][T29191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6000'. [ 884.905464][ T37] wlan1: Creating new IBSS network, BSSID 62:88:e3:54:c2:89 [ 885.522651][ T1020] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.540539][ T1020] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.570217][T16740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.575705][T28822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.676569][T29186] vlan1: entered allmulticast mode [ 885.691791][T29186] bond0: entered allmulticast mode [ 885.756227][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 885.881652][T28876] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.955393][T10204] wlan1: Trigger new scan to find an IBSS to join [ 885.972755][T28822] team0: Port device team_slave_0 added [ 886.008914][T28822] team0: Port device team_slave_1 added [ 886.021676][ T1020] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 886.030993][ T1020] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 886.051487][ T6325] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 886.145281][ T6325] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 886.186587][ T6325] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 886.219995][T29221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6003'. [ 886.257665][T29221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6003'. [ 886.337075][T29224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6005'. [ 886.363156][ T6325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.469106][T28822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.507977][T28822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.625136][T28822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.778610][T29236] netlink: 'syz.1.6006': attribute type 1 has an invalid length. [ 886.804164][T28822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.811602][T29236] netlink: 'syz.1.6006': attribute type 1 has an invalid length. [ 886.811641][T29236] netlink: 'syz.1.6006': attribute type 1 has an invalid length. [ 886.811655][T29236] netlink: 'syz.1.6006': attribute type 2 has an invalid length. [ 886.811670][T29236] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6006'. [ 886.825935][T29239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6008'. [ 886.873598][T28822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.982940][T28822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.031044][T29236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 887.096727][T29246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6007'. [ 887.198081][ T33] IPVS: stop unused estimator thread 0... [ 887.238482][T29239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6008'. [ 887.542424][T29171] lo speed is unknown, defaulting to 1000 [ 887.686091][T28822] hsr_slave_0: entered promiscuous mode [ 887.707883][T28822] hsr_slave_1: entered promiscuous mode [ 887.737606][T28822] debugfs: 'hsr0' already exists in 'hsr' [ 887.763027][T28822] Cannot create hsr debugfs directory [ 887.785427][T29171] xfrm0 speed is unknown, defaulting to 1000 [ 888.185886][T29276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6013'. [ 888.251302][T29280] tipc: Enabling of bearer rejected, failed to enable media [ 888.670519][T29299] netlink: 'syz.4.6016': attribute type 11 has an invalid length. [ 888.696126][T29299] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6016'. [ 888.893068][T29307] nbd: couldn't find device at index 0 [ 888.997657][ T9768] wlan1: Trigger new scan to find an IBSS to join [ 889.326901][T29322] x_tables: ip_tables: udp match: only valid for protocol 17 [ 889.466396][T29325] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6021'. [ 889.938988][ T1339] wlan1: Creating new IBSS network, BSSID 0a:5c:17:bd:62:20 [ 890.112306][T29348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6026'. [ 890.153711][T29348] openvswitch: netlink: Missing key (keys=40, expected=100) [ 890.360654][T29354] openvswitch: netlink: Message has 12 unknown bytes. [ 890.409799][T29354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.519150][T29363] netlink: 'syz.0.6031': attribute type 1 has an invalid length. [ 890.549304][T29363] netlink: 756 bytes leftover after parsing attributes in process `syz.0.6031'. [ 891.058916][T29385] netlink: 'syz.1.6035': attribute type 24 has an invalid length. [ 891.144468][T29381] bridge0: port 1(ipvlan3) entered blocking state [ 891.185371][T29381] bridge0: port 1(ipvlan3) entered disabled state [ 891.210973][T29381] ipvlan3: entered allmulticast mode [ 891.218286][T29381] bridge0: entered allmulticast mode [ 891.243291][T29381] ipvlan3: left allmulticast mode [ 891.250762][T29381] bridge0: left allmulticast mode [ 891.293506][T29383] netlink: 'syz.2.6034': attribute type 5 has an invalid length. [ 891.901613][T29398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6038'. [ 891.927352][T28822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 891.967480][T29398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6038'. [ 891.986266][T28822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 892.007731][T28822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 892.027534][T28822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 892.043958][T28822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 892.082303][T28822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 892.152069][T29403] syz_tun: entered allmulticast mode [ 892.168737][T28822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 892.223929][T28822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.246905][T29403] lo: entered allmulticast mode [ 892.256736][T29401] lo: left allmulticast mode [ 892.391872][T29401] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 892.434598][T29401] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 892.453911][T29401] gretap0: entered promiscuous mode [ 892.472054][T29401] gretap0: entered allmulticast mode [ 892.552954][T29400] syz_tun: left allmulticast mode [ 892.884054][T29440] netlink: 'syz.2.6047': attribute type 16 has an invalid length. [ 892.931784][T29440] netlink: 'syz.2.6047': attribute type 3 has an invalid length. [ 892.981339][T29440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6047'. [ 893.039134][T28822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.191608][T28822] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.310195][T29452] netlink: 'syz.4.6051': attribute type 1 has an invalid length. [ 893.312642][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.326801][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.563102][T29452] 8021q: adding VLAN 0 to HW filter on device bond9 [ 893.627534][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.637542][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.869902][T29472] syzkaller0: entered promiscuous mode [ 893.889995][T29472] syzkaller0: entered allmulticast mode [ 893.944651][T29471] netlink: 'syz.2.6054': attribute type 1 has an invalid length. [ 894.185524][T29471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 894.332222][T29477] bond1: (slave gretap1): making interface the new active one [ 894.397899][T29477] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 895.175856][T29477] syz.2.6054 (29477) used greatest stack depth: 18144 bytes left [ 895.729021][T10204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.767728][T10204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.054419][T29535] bridge3: entered promiscuous mode [ 896.094440][T29535] bridge3: entered allmulticast mode [ 896.741265][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6068'. [ 896.758231][T29553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6067'. [ 896.790821][T29553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6067'. [ 896.825665][T29553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6067'. [ 897.164734][T28822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.218674][T29553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6067'. [ 897.255718][T29553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6067'. [ 897.296893][T29553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6067'. [ 897.470538][T28822] veth0_vlan: entered promiscuous mode [ 897.609573][T28822] veth1_vlan: entered promiscuous mode [ 897.715153][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 897.715174][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 897.840260][T28822] veth0_macvtap: entered promiscuous mode [ 897.910417][T28822] veth1_macvtap: entered promiscuous mode [ 898.059221][T28822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.220303][T28822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.427159][ T33] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.482447][ T33] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.539136][ T33] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.590016][ T33] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.735587][T29616] netlink: 'syz.4.6077': attribute type 1 has an invalid length. [ 898.942819][T29616] bond10: entered promiscuous mode [ 898.949566][T29616] 8021q: adding VLAN 0 to HW filter on device bond10 [ 899.005037][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 899.053144][T29628] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6079'. [ 899.288235][T29616] bond10: (slave bridge4): making interface the new active one [ 899.325612][T29616] bridge4: entered promiscuous mode [ 899.392016][T29616] bridge4: left promiscuous mode [ 899.475773][T29633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6080'. [ 899.976666][T29641] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6082'. [ 900.196419][T29641] vlan8: entered allmulticast mode [ 900.226992][T29641] gretap0: entered allmulticast mode [ 900.741262][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.795546][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.078972][ T9766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.118769][ T9766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.194174][T29678] mac80211_hwsim hwsim43 ÿ: renamed from wlan1 (while UP) [ 901.299416][T29680] openvswitch: netlink: Missing key (keys=40, expected=100) [ 902.131743][T29707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6096'. [ 902.177077][T29709] netlink: 'syz.2.6097': attribute type 2 has an invalid length. [ 902.240795][T29707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6096'. [ 902.282400][T29707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6096'. [ 902.802085][T29728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6101'. [ 903.438233][T29747] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 903.447488][T29742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 903.927056][T29771] netlink: 'syz.2.6107': attribute type 32 has an invalid length. [ 903.973659][T29771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6107'. [ 903.983934][T29775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6111'. [ 903.991327][T29772] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 904.132172][T29789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6110'. [ 904.168293][T29771] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 904.435902][T29716] Bluetooth: hci5: command 0x0405 tx timeout [ 904.467908][T29795] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6113'. [ 905.039956][T29820] netlink: 'syz.1.6120': attribute type 2 has an invalid length. [ 905.767060][T29853] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6129'. [ 906.521247][T29881] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 906.552149][T29881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6134'. [ 906.599239][T29881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6134'. [ 906.792018][T29891] xt_l2tp: v2 doesn't support IP mode [ 906.975950][T29902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6140'. [ 907.129305][T29907] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 907.186602][T29910] netlink: 'syz.4.6142': attribute type 23 has an invalid length. [ 907.508619][T29923] macvlan0: entered promiscuous mode [ 907.916004][T29938] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6150'. [ 907.981034][T29940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6151'. [ 908.233522][T29950] netlink: 'syz.1.6150': attribute type 1 has an invalid length. [ 908.493279][T29950] bond13: entered promiscuous mode [ 908.501845][T29950] 8021q: adding VLAN 0 to HW filter on device bond13 [ 908.530203][T29966] 8021q: adding VLAN 0 to HW filter on device bond13 [ 908.554366][T29966] bond13: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 908.599752][T29966] bond13: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 908.647018][T29966] bond13: (slave ip6gre2): making interface the new active one [ 908.661092][T29966] ip6gre2: entered promiscuous mode [ 908.674420][T29966] bond13: (slave ip6gre2): Enslaving as an active interface with an up link [ 910.853269][T29943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.906560][T29987] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6158'. [ 911.441483][T30017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 911.682534][T30035] ipt_REJECT: ECHOREPLY no longer supported. [ 911.710972][T30037] netlink: 'syz.1.6167': attribute type 2 has an invalid length. [ 911.784173][T30037] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6167'. [ 911.847030][T30037] openvswitch: netlink: Message has 4 unknown bytes. [ 912.229309][T30061] SET target dimension over the limit! [ 912.260494][T30061] x_tables: duplicate underflow at hook 2 [ 912.277108][T30052] nftables ruleset with unbound chain [ 912.356688][T30065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6173'. [ 912.584663][T30068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6174'. [ 912.626861][T30068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6174'. [ 912.716077][T30079] netlink: 'syz.4.6177': attribute type 1 has an invalid length. [ 912.760609][T30079] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6177'. [ 912.853603][T30083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6178'. [ 912.857871][T30075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6177'. [ 912.905441][T30075] netlink: 'syz.4.6177': attribute type 7 has an invalid length. [ 912.937410][T30075] netlink: 'syz.4.6177': attribute type 8 has an invalid length. [ 912.969430][T30075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'. [ 913.470427][T30099] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 914.355230][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 914.392494][T30135] xt_nat: multiple ranges no longer supported [ 914.534323][T30142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.593241][T30143] netlink: 'syz.1.6197': attribute type 14 has an invalid length. [ 914.770866][T30137] xt_CT: No such helper "snmp" [ 914.796762][T30147] atomic_op ffff88807a4df998 conn xmit_atomic 0000000000000000 [ 914.990268][T28066] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 914.995390][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 915.452475][T30166] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6205'. [ 915.571586][T30173] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 915.591414][T30171] tipc: Enabled bearer , priority 0 [ 915.668177][T30174] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 915.763550][T30171] syzkaller0: entered promiscuous mode [ 915.791860][T30171] syzkaller0: entered allmulticast mode [ 915.831000][T30171] tipc: Resetting bearer [ 915.898208][T30170] tipc: Resetting bearer [ 916.072459][T30184] netlink: 'syz.4.6210': attribute type 1 has an invalid length. [ 916.836967][T30208] __nla_validate_parse: 1 callbacks suppressed [ 916.836991][T30208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6216'. [ 916.924565][T30201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6215'. [ 916.933923][T30201] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6215'. [ 916.944432][T30201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6215'. [ 916.955713][T30201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6215'. [ 917.011965][T30203] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.6215'. [ 918.766265][T29716] Bluetooth: hci5: command 0x0405 tx timeout [ 920.277644][T30170] tipc: Disabling bearer [ 920.290109][T30184] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 920.293295][T30190] : renamed from dummy0 [ 920.329099][T30198] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 920.635790][T30219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6218'. [ 921.053112][T30231] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6221'. [ 921.112523][T30235] netlink: 388 bytes leftover after parsing attributes in process `syz.1.6222'. [ 921.164586][T30231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6221'. [ 921.269041][T30243] netlink: 'syz.3.6224': attribute type 1 has an invalid length. [ 921.409748][T30253] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 921.439317][T30247] syzkaller0: entered promiscuous mode [ 921.456921][T30247] syzkaller0: entered allmulticast mode [ 921.491722][T30247] Cannot find set identified by id 65534 to match [ 921.854667][T30262] 0ªX¹¦Dö»: left allmulticast mode [ 921.958260][T30272] xt_hashlimit: size too large, truncated to 1048576 [ 922.010741][T30262] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.018455][T30262] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.039397][ T33] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 922.512159][T30262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.592210][T30262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.719752][T17619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 922.739703][T17619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 922.761843][T17619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 922.778055][T17619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 922.791296][T17619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 922.828204][T30289] __nla_validate_parse: 2 callbacks suppressed [ 922.828225][T30289] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6239'. [ 922.892571][T30262] macvlan0: left promiscuous mode [ 922.900421][T30289] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6239'. [ 923.151410][T30262] gretap0: left promiscuous mode [ 923.163420][T30262] gretap0: left allmulticast mode [ 923.199544][T30266] netlink: 'syz.4.6229': attribute type 1 has an invalid length. [ 923.218789][ T33] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.255638][ T33] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.448584][ T33] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.466150][ T33] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.495402][T30297] netlink: 'syz.3.6242': attribute type 3 has an invalid length. [ 923.521312][T30297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6242'. [ 923.939813][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.952162][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.003373][T30312] IPVS: set_ctl: invalid protocol: 115 100.1.1.2:20001 [ 924.294674][T30323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6247'. [ 924.367923][T30323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6247'. [ 924.392477][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.436067][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.525895][T30330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6248'. [ 924.681694][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.725144][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.835213][T17619] Bluetooth: hci0: command tx timeout [ 925.190426][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.202737][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.220226][T30352] Unsupported ieee802154 address type: 0 [ 925.243356][T30286] lo speed is unknown, defaulting to 1000 [ 925.409718][T30286] xfrm0 speed is unknown, defaulting to 1000 [ 925.463888][T30360] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000 [ 925.490223][T30359] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000 [ 926.149169][T30382] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 926.189005][T30382] bond14: (slave lo): Enslaving as an active interface with an up link [ 926.224022][T30382] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 926.871473][ T33] bond2: left allmulticast mode [ 926.916178][T17619] Bluetooth: hci0: command tx timeout [ 926.920536][ T33] bond2: left promiscuous mode [ 926.958175][ T33] bridge0: port 3(bond2) entered disabled state [ 926.991429][T30411] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6266'. [ 927.140947][ T33] pim6reg: left allmulticast mode [ 927.227430][T30420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6269'. [ 927.240484][T30423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6268'. [ 927.807502][ T9768] smbdirect: ib_dev[syz2] removed [ 928.184464][ T33] bond0 (unregistering): Released all slaves [ 928.201440][ T33] bond1 (unregistering): Released all slaves [ 928.234058][ T33] bond2 (unregistering): Released all slaves [ 928.263750][ T33] bond3 (unregistering): Released all slaves [ 928.296698][ T33] bond4 (unregistering): Released all slaves [ 928.321563][ T33] bond5 (unregistering): Released all slaves [ 928.354878][ T33] bond6 (unregistering): Released all slaves [ 928.388308][ T33] bond7 (unregistering): Released all slaves [ 928.411728][ T33] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 928.427967][ T33] bond8 (unregistering): Released all slaves [ 928.453211][ T33] bond9 (unregistering): Released all slaves [ 928.474028][T30409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6268'. [ 928.547416][T30420] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 928.555351][ T5630] xfrm0 speed is unknown, defaulting to 1000 [ 928.571709][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 928.628788][ T5630] infiniband syz2: ib_query_port failed (-19) [ 928.999294][T17619] Bluetooth: hci0: command tx timeout [ 929.021634][T30457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6275'. [ 929.031343][T30457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6275'. [ 929.039544][ T33] : left promiscuous mode [ 929.379971][ T33] tipc: Left network mode [ 929.422152][T30286] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.430224][T30286] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.437707][T30286] bridge_slave_0: entered allmulticast mode [ 929.446099][T30286] bridge_slave_0: entered promiscuous mode [ 929.455402][T30286] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.462811][T30286] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.470391][T30286] bridge_slave_1: entered allmulticast mode [ 929.481275][T30286] bridge_slave_1: entered promiscuous mode [ 929.651248][T30286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.749108][T30286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.997978][T30475] IPv6: NLM_F_CREATE should be specified when creating new route [ 930.004816][T30286] team0: Port device team_slave_0 added [ 930.098674][T30286] team0: Port device team_slave_1 added [ 930.201610][T30487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.281006][T30286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.329279][T30286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.486218][T30286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.608608][T30499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6286'. [ 930.717658][T30286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.753267][T30286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.893838][T30286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.063715][T30517] syzkaller0: entered promiscuous mode [ 931.077702][T17619] Bluetooth: hci0: command tx timeout [ 931.087277][T30517] syzkaller0: entered allmulticast mode [ 931.432170][T30532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6294'. [ 931.461292][T30532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6294'. [ 931.500971][T30286] hsr_slave_0: entered promiscuous mode [ 931.512939][T30286] hsr_slave_1: entered promiscuous mode [ 931.521916][T30286] debugfs: 'hsr0' already exists in 'hsr' [ 931.534747][T30286] Cannot create hsr debugfs directory [ 931.558762][T30536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6293'. [ 931.574501][T30536] netlink: 'syz.3.6293': attribute type 7 has an invalid length. [ 931.595710][T30536] netlink: 'syz.3.6293': attribute type 8 has an invalid length. [ 931.611794][T30536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6293'. [ 931.639902][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.045089][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 932.569034][T30553] openvswitch: netlink: Duplicate or invalid key (type 0). [ 932.584001][T30553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.622838][ T33] hsr_slave_0: left promiscuous mode [ 932.636690][ T33] veth1_macvtap: left promiscuous mode [ 932.642337][ T33] veth0_macvtap: left promiscuous mode [ 932.649011][ T33] veth1_vlan: left promiscuous mode [ 933.190878][ T5736] lo speed is unknown, defaulting to 1000 [ 933.197263][T10204] smbdirect: ib_dev[syú2] removed [ 933.209880][ T5736] syú2: Port: 1 Link DOWN [ 933.764013][ T33] IPVS: stop unused estimator thread 0... [ 934.354038][T30530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 934.419097][T30286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 934.476951][T30286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 934.536731][T30286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 934.611242][T30286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 934.666370][T30286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 934.734423][T30286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 934.789862][T30286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 934.810738][T30574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6300'. [ 934.860088][T30286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 934.954393][T30578] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 934.979675][T30572] team0: Port device vlan0 added [ 935.058927][T30586] netlink: 'syz.3.6305': attribute type 2 has an invalid length. [ 935.601598][T30286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.669741][T30605] Cannot find set identified by id 0 to match [ 935.693020][T30602] syzkaller1: entered promiscuous mode [ 935.729240][T30602] syzkaller1: entered allmulticast mode [ 935.894414][T30286] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.952502][T28066] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.959845][T28066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.151095][T28066] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.158612][T28066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.046932][T30682] netlink: 'syz.4.6324': attribute type 7 has an invalid length. [ 938.094293][T30682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6324'. [ 938.169977][T30687] netlink: 'syz.3.6326': attribute type 4 has an invalid length. [ 938.199986][T30687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6326'. [ 938.213025][T30682] netlink: 'syz.4.6324': attribute type 7 has an invalid length. [ 938.228254][T10205] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.276163][T30682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6324'. [ 938.277014][T10205] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.553495][T30697] syzkaller0: entered promiscuous mode [ 938.577054][T30697] syzkaller0: entered allmulticast mode [ 938.600328][T10205] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 938.635522][ T9768] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.199176][T30729] x_tables: duplicate underflow at hook 3 [ 943.034737][T30286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.243167][T30777] bridge0: port 3(veth1_to_bridge) entered blocking state [ 943.253687][T30773] rdma_rxe: rxe_newlink: failed to add wlan1 [ 943.266558][T30777] bridge0: port 3(veth1_to_bridge) entered disabled state [ 943.288622][T30777] veth1_to_bridge: entered allmulticast mode [ 943.297475][T30772] sctp: [Deprecated]: syz.4.6334 (pid 30772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 943.297475][T30772] Use struct sctp_sack_info instead [ 943.299869][T30777] veth1_to_bridge: entered promiscuous mode [ 943.324477][T30777] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 943.343052][T30777] bridge0: port 3(veth1_to_bridge) entered blocking state [ 943.351258][T30777] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 943.563239][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6339'. [ 943.633677][T30793] hsr_slave_1 (unregistering): left promiscuous mode [ 943.710650][T30797] bond1: option lp_interval: invalid value (0) [ 943.724368][T30797] bond1: option lp_interval: allowed values 1 - 2147483647 [ 943.745954][T30797] bond1 (unregistering): Released all slaves [ 944.084133][T30286] veth0_vlan: entered promiscuous mode [ 944.300105][T30816] x_tables: duplicate underflow at hook 3 [ 944.362611][T30818] netlink: 546 bytes leftover after parsing attributes in process `syz.4.6344'. [ 944.578614][T30286] veth1_vlan: entered promiscuous mode [ 944.690214][T30826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6345'. [ 944.799845][T30286] veth0_macvtap: entered promiscuous mode [ 944.819913][T30830] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6347'. [ 944.838989][T30830] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6347'. [ 944.898796][T30286] veth1_macvtap: entered promiscuous mode [ 945.148829][T30286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.266986][T30286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.322849][ T1020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.344147][ T1020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.380138][ T1020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.431770][ T1020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.759794][T30852] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 945.884607][T30862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6351'. [ 945.942424][T30848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6351'. [ 946.018956][T30858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.052081][T30858] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.105512][T30858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.210444][T30858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.250754][T30858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.301469][T30858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 946.328912][T30858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.355200][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 946.410009][T30858] veth1_vlan: left promiscuous mode [ 946.439194][T30858] veth0_vlan: left promiscuous mode [ 946.454095][T30858] veth0_vlan: entered promiscuous mode [ 946.481688][T30858] veth1_vlan: entered promiscuous mode [ 946.530621][T30858] veth1_macvtap: left promiscuous mode [ 946.567137][T30858] veth0_macvtap: left promiscuous mode [ 946.583978][T30858] veth0_macvtap: entered promiscuous mode [ 946.598213][T30858] veth1_macvtap: entered promiscuous mode [ 946.612968][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.627961][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.641452][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 946.654531][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 946.673662][T30858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 946.686586][T30858] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 946.736384][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.744684][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.806684][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.814685][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.123231][ T9768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.180258][ T9768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.226811][ T9768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.288216][T10204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.333363][T10204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.444786][ T9768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.636124][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 947.647756][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.696744][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.040223][T30910] syzkaller0: entered allmulticast mode [ 948.204812][T30916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6236'. [ 948.918954][T10203] wlan1: Trigger new scan to find an IBSS to join [ 948.945435][T29716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 948.970010][T29716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 948.983281][T29716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 948.999563][T29716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 949.012139][T29716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 949.592848][T19089] syz_tun (unregistering): left allmulticast mode [ 949.609054][T19089] syz_tun (unregistering): left promiscuous mode [ 949.646895][T19089] bridge0: port 3(syz_tun) entered disabled state [ 949.856426][T30950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6375'. [ 950.079502][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.359337][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.552357][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.759590][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.077263][T29716] Bluetooth: hci4: command tx timeout [ 951.151542][T30919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 951.667293][T30974] geneve2: entered promiscuous mode [ 951.997477][ T37] bridge_slave_1: left allmulticast mode [ 952.029938][ T37] bridge_slave_1: left promiscuous mode [ 952.053559][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.117842][ T37] bridge_slave_0: left promiscuous mode [ 952.142840][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.232708][ T37] vlan1: left allmulticast mode [ 952.256799][ T37] v: left allmulticast mode [ 952.474428][ T37] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 952.992254][ T37] bond2 (unregistering): (slave gretap1): Releasing active interface [ 953.070086][ T37] bond6 (unregistering): (slave gretap2): Releasing active interface [ 953.156214][T29716] Bluetooth: hci4: command tx timeout [ 953.222452][ T37] bond5 (unregistering): (slave geneve2): Releasing active interface [ 953.400709][T30809] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 953.444492][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.472628][ T37] bond0 (unregistering): Released all slaves [ 953.495821][ T37] bond1 (unregistering): Released all slaves [ 953.538175][ T37] bond2 (unregistering): Released all slaves [ 953.593121][ T37] bond3 (unregistering): Released all slaves [ 953.652429][ T37] bond4 (unregistering): Released all slaves [ 953.697453][ T37] bond5 (unregistering): Released all slaves [ 953.723257][ T37] bond6 (unregistering): Released all slaves [ 953.752842][ T37] bond7 (unregistering): Released all slaves [ 953.783531][ T37] bond8 (unregistering): Released all slaves [ 953.819788][ T37] bond9 (unregistering): Released all slaves [ 953.841715][ T37] bond10 (unregistering): Released all slaves [ 953.959230][T10204] wlan1: Trigger new scan to find an IBSS to join [ 954.036181][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 954.050143][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 954.064594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 954.078887][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 954.094889][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 954.108779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 954.123110][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 954.137397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 954.151499][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 954.167678][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 954.370047][T31024] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 954.482136][T31028] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6386'. [ 954.606597][T30992] bond15 (unregistering): Released all slaves [ 954.748632][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 954.965860][T10204] wlan1: Creating new IBSS network, BSSID da:97:df:4c:f8:f3 [ 955.236836][T29716] Bluetooth: hci4: command tx timeout [ 957.447095][T29716] Bluetooth: hci4: command tx timeout [ 959.014941][ C0] sched: DL replenish lagged too much [ 959.045003][ C0] net_ratelimit: 15746 callbacks suppressed [ 959.045026][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 959.045100][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 959.051355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 959.051737][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 959.065421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 959.076112][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 959.076513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 959.076985][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 959.090560][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 959.101105][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 964.054978][ C0] net_ratelimit: 15288 callbacks suppressed [ 964.055003][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 964.055466][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 964.062234][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 964.075247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.086910][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 964.100309][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.111880][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 964.125263][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 964.137973][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 964.150332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.065029][ C1] net_ratelimit: 9239 callbacks suppressed [ 969.065075][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.065171][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.072410][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.084530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.098085][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 969.109619][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.123156][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.135178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.148228][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.159834][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 970.650520][T17619] Bluetooth: hci3: command 0x0406 tx timeout [ 974.075012][ C0] net_ratelimit: 9585 callbacks suppressed [ 974.075036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.075433][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 974.082158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.095582][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.106987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.120413][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.131820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.145398][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 974.156809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.170041][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.085348][ C0] net_ratelimit: 10082 callbacks suppressed [ 979.085373][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.085546][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.092697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.105541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 979.117255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.130536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.142321][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.155341][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.167272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.180655][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 984.095232][ C0] net_ratelimit: 10376 callbacks suppressed [ 984.095234][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.095255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.095818][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 984.102634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.115498][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.127197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.140537][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.152259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.165400][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 984.177112][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.105125][ C0] net_ratelimit: 10468 callbacks suppressed [ 989.105152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.105309][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.112379][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.125385][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 989.137094][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.150410][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.162127][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.175478][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.186944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.200163][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 989.445800][ T1339] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 994.115058][ C1] net_ratelimit: 10367 callbacks suppressed [ 994.115109][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.115183][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.122270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.134334][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.147779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 994.159393][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.172732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.184492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.197711][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.209414][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.125150][ C1] net_ratelimit: 10461 callbacks suppressed [ 999.125194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.126004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.132337][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.144500][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.157775][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 999.169527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.182849][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.194612][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.207579][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.219688][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1000.563364][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.047153][ T1339] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1004.135147][ C1] net_ratelimit: 9443 callbacks suppressed [ 1004.135190][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1004.135984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1004.142443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.154602][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1004.167741][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.179501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1004.193162][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1004.205014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1004.217920][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.229572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1008.446964][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1009.145617][ C1] net_ratelimit: 10383 callbacks suppressed [ 1009.145644][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.145941][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1009.152844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1009.165152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1009.178297][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.190419][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1009.203808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.215426][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1009.228696][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1009.240402][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1014.155000][ C1] net_ratelimit: 10636 callbacks suppressed [ 1014.155045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.155856][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1014.162169][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1014.174385][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1014.187814][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.199422][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1014.213160][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.224391][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1014.237330][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1014.249284][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1018.679793][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1019.165031][ C1] net_ratelimit: 10815 callbacks suppressed [ 1019.165090][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1019.165824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1019.172198][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.183501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1019.184784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1019.197825][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.208597][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1019.209827][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1019.222834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1019.233490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1024.175070][ C1] net_ratelimit: 12759 callbacks suppressed [ 1024.175115][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.175755][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1024.182281][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1024.193582][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1024.195259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1024.207926][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1024.218701][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1024.219938][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1024.232982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.243684][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.184934][ C0] net_ratelimit: 12711 callbacks suppressed [ 1029.184960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.185155][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.192146][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.205150][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1029.215954][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.217185][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.230098][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1029.240858][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.242147][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.255121][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.195037][ C1] net_ratelimit: 12476 callbacks suppressed [ 1034.195096][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.195626][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1034.202170][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.214442][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1034.227801][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.239739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1034.252754][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1034.264536][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1034.277892][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1034.289775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1039.205424][ C0] net_ratelimit: 10635 callbacks suppressed [ 1039.205450][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1039.205561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.212867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1039.225555][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.237394][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1039.250772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.262680][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1039.275973][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.288140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1039.301308][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1044.215288][ C1] net_ratelimit: 10641 callbacks suppressed [ 1044.215331][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.215867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1044.222550][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1044.234843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1044.248186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1044.259917][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1044.273225][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.285032][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1044.298237][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.309807][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1047.043555][T17619] Bluetooth: hci5: command 0x0405 tx timeout [ 1049.224994][ C0] net_ratelimit: 10382 callbacks suppressed [ 1049.225017][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.225027][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1049.226151][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1049.232123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1049.244347][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1049.257767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1049.269407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1049.282796][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.294312][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1049.307776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.235350][ C1] net_ratelimit: 10483 callbacks suppressed [ 1054.235392][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.235964][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1054.242515][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.254636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1054.268127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1054.280220][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1054.293320][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1054.305009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1054.318315][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.329915][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1054.672691][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.245023][ C1] net_ratelimit: 10539 callbacks suppressed [ 1059.245069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.245228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.252208][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.264414][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.277774][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.289541][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.302834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1059.314412][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.327707][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1059.339413][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.255294][ C1] net_ratelimit: 10494 callbacks suppressed [ 1064.255302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.255349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.262495][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.275258][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.287292][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.300671][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.312229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.325540][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1064.337270][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.350628][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1069.265480][ C1] net_ratelimit: 10565 callbacks suppressed [ 1069.265524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1069.265720][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.273355][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.285492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.299208][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.310684][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.323991][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.335585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.348934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.360524][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1074.275135][ C0] net_ratelimit: 9846 callbacks suppressed [ 1074.275160][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1074.275245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1074.282348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1074.295256][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1074.306937][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1074.320242][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.331963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1074.345348][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.356856][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1074.370210][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.285312][ C0] net_ratelimit: 10464 callbacks suppressed [ 1079.285338][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1079.285517][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.292588][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1079.305573][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.317166][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1079.330279][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.342123][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1079.355377][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1079.367288][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1079.380573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1084.294949][ C0] net_ratelimit: 9826 callbacks suppressed [ 1084.294974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1084.295230][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1084.302180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1084.315216][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.326852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1084.340143][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.351709][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1084.364981][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.376799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1084.389925][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.305272][ C1] net_ratelimit: 10178 callbacks suppressed [ 1089.305323][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.305424][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1089.312352][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.324892][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1089.337830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1089.349600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1089.362864][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1089.374557][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1089.387760][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.399677][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1094.315371][ C1] net_ratelimit: 10587 callbacks suppressed [ 1094.315416][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.316043][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1094.322601][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1094.334760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1094.347883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1094.360477][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1094.373260][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.385015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1094.398652][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.409941][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1099.324895][ C1] net_ratelimit: 10678 callbacks suppressed [ 1099.324938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1099.325877][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1099.332049][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1099.344276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1099.357642][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.369367][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1099.382589][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.394190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1099.407413][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.419799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1104.335233][ C1] net_ratelimit: 10727 callbacks suppressed [ 1104.335273][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.335870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1104.342406][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.354539][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1104.367885][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.379745][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1104.393039][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.404560][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1104.417844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1104.429606][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1105.964846][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1105.971854][ C1] rcu: (detected by 1, t=10502 jiffies, g=194577, q=1460 ncpus=2) [ 1105.979778][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 5856 (4295047706-4295041850), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1105.993086][ C1] rcu: rcu_preempt kthread starved for 5857 jiffies! g194577 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1106.004314][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1106.014313][ C1] rcu: RCU grace-period kthread stack dump: [ 1106.020227][ C1] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1106.034120][ C1] Call Trace: [ 1106.037432][ C1] [ 1106.040404][ C1] __schedule+0x17d9/0x56c0 [ 1106.045053][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1106.050059][ C1] ? __pfx___schedule+0x10/0x10 [ 1106.054962][ C1] ? schedule+0x90/0x2b0 [ 1106.059244][ C1] schedule+0x164/0x2b0 [ 1106.063434][ C1] schedule_timeout+0x152/0x2c0 [ 1106.068351][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1106.073766][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1106.079091][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1106.084932][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1106.090523][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1106.095442][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1106.100685][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1106.106543][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1106.112735][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1106.118050][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1106.123289][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1106.129131][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1106.133759][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1106.139032][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1106.144039][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1106.149101][ C1] kthread+0x388/0x470 [ 1106.153210][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1106.158441][ C1] ? __pfx_kthread+0x10/0x10 [ 1106.163072][ C1] ret_from_fork+0x514/0xb70 [ 1106.167740][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.172910][ C1] ? __switch_to+0xc89/0x1420 [ 1106.177622][ C1] ? __pfx_kthread+0x10/0x10 [ 1106.182253][ C1] ret_from_fork_asm+0x1a/0x30 [ 1106.187068][ C1] [ 1106.190110][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1106.196460][ C1] CPU: 1 UID: 0 PID: 25096 Comm: kworker/R-bond8 Not tainted syzkaller #0 PREEMPT(full) [ 1106.206307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1106.216387][ C1] Workqueue: 0x0 (bond8) [ 1106.220769][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1106.227218][ C1] Code: f7 e8 ad fc d0 f5 f7 c3 00 02 00 00 74 05 e8 10 e1 fc f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 12 c2 f5 65 8b 05 ad b2 9a 07 85 c0 74 18 5b 41 5e e9 91 48 [ 1106.246855][ C1] RSP: 0018:ffffc90000a07e58 EFLAGS: 00000206 [ 1106.252954][ C1] RAX: 0000000000000006 RBX: 0000000000000286 RCX: 0000000080000102 [ 1106.260954][ C1] RDX: 0000000000000000 RSI: ffffffff8e22a5a0 RDI: 0000000000000001 [ 1106.268970][ C1] RBP: ffff88801e6fc8a8 R08: ffffffff905775f7 R09: 1ffffffff20aeebe [ 1106.276973][ C1] R10: dffffc0000000000 R11: fffffbfff20aeebf R12: 0000000000000000 [ 1106.284976][ C1] R13: ffff8880b29f1000 R14: ffffffff9aa16128 R15: 0000000000000000 [ 1106.292974][ C1] FS: 0000000000000000(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 1106.301931][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1106.308543][ C1] CR2: 00007fdc37beb158 CR3: 000000005447a000 CR4: 00000000003526f0 [ 1106.316554][ C1] Call Trace: [ 1106.319860][ C1] [ 1106.322727][ C1] debug_check_no_obj_freed+0x39e/0x450 [ 1106.328418][ C1] ? ip6_mc_input+0x909/0xbc0 [ 1106.333206][ C1] kmem_cache_free+0xfd/0x650 [ 1106.337927][ C1] ip6_mc_input+0x909/0xbc0 [ 1106.342472][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 1106.347548][ C1] ? ip6_rcv_finish+0x265/0x280 [ 1106.352440][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1106.357690][ C1] ip_sabotage_in+0x1e1/0x270 [ 1106.362538][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1106.367786][ C1] nf_hook_slow+0xc5/0x220 [ 1106.372317][ C1] NF_HOOK+0x21f/0x3c0 [ 1106.376430][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1106.381663][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1106.385851][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1106.390473][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 1106.395194][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1106.400439][ C1] ? netif_receive_skb+0x102/0xbf0 [ 1106.405594][ C1] netif_receive_skb+0x278/0xbf0 [ 1106.410569][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 1106.416064][ C1] ? br_netif_receive_skb+0x126/0x190 [ 1106.421695][ C1] NF_HOOK+0xa4/0x3a0 [ 1106.425733][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1106.431501][ C1] ? NF_HOOK+0xfa/0x3a0 [ 1106.435692][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1106.440353][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1106.446116][ C1] ? br_pass_frame_up+0x275/0x420 [ 1106.451190][ C1] br_handle_frame_finish+0x1192/0x1990 [ 1106.456770][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 1106.462783][ C1] ? lock_acquire+0x106/0x350 [ 1106.467504][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1106.473436][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 1106.478392][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1106.483536][ C1] ? nf_hook_slow+0x176/0x220 [ 1106.488253][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1106.494186][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1106.499163][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1106.504490][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1106.509988][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1106.515923][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1106.521161][ C1] ? lock_acquire+0x106/0x350 [ 1106.525879][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1106.531903][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1106.537850][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1106.543260][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1106.549076][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1106.555038][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1106.561587][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 1106.566836][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1106.572333][ C1] br_handle_frame+0x127f/0x1510 [ 1106.577324][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1106.582659][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1106.588593][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1106.593912][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1106.599148][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1106.604468][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 1106.610150][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 1106.615230][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1106.621347][ C1] ? ip6_rcv_finish+0x265/0x280 [ 1106.626243][ C1] ? NF_HOOK+0x336/0x3c0 [ 1106.630566][ C1] ? process_backlog+0x3c3/0x1860 [ 1106.635633][ C1] ? process_backlog+0x3c3/0x1860 [ 1106.640686][ C1] ? process_backlog+0x3c3/0x1860 [ 1106.645749][ C1] process_backlog+0x706/0x1860 [ 1106.650639][ C1] ? process_backlog+0x3c3/0x1860 [ 1106.655706][ C1] __napi_poll+0xaa/0x330 [ 1106.660070][ C1] net_rx_action+0x61d/0xf50 [ 1106.664704][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1106.669847][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1106.675029][ C1] ? net_tx_action+0xbff/0xc30 [ 1106.679847][ C1] handle_softirqs+0x225/0x840 [ 1106.684645][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1106.689448][ C1] __irq_exit_rcu+0xca/0x220 [ 1106.694076][ C1] irq_exit_rcu+0x9/0x30 [ 1106.698349][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1106.704019][ C1] [ 1106.706969][ C1] [ 1106.709921][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1106.715938][ C1] RIP: 0010:trace_sched_exit_tp+0x0/0x130 [ 1106.721688][ C1] Code: 8d bc 24 e0 0e 00 00 e8 0e f4 9e 00 e9 90 fe ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 53 66 90 65 8b 05 55 75 d7 11 83 f8 08 73 36 89 c3 [ 1106.741325][ C1] RSP: 0018:ffffc90004b9fab8 EFLAGS: 00000206 [ 1106.747438][ C1] RAX: 0000000000000000 RBX: 1ffff92000973f7c RCX: 0000000080000001 [ 1106.755450][ C1] RDX: 0000000000000000 RSI: ffffffff8e22a5a0 RDI: 0000000000000001 [ 1106.763451][ C1] RBP: ffffc90004b9fca8 R08: ffffffff905775f7 R09: 1ffffffff20aeebe [ 1106.771451][ C1] R10: dffffc0000000000 R11: fffffbfff20aeebf R12: ffff888032ac3e00 [ 1106.779448][ C1] R13: dffffc0000000000 R14: ffff8880570e9f00 R15: ffff8880b863b158 [ 1106.787475][ C1] __schedule+0x17ef/0x56c0 [ 1106.792081][ C1] ? rescuer_thread+0xd43/0x10b0 [ 1106.797063][ C1] ? __pfx___schedule+0x10/0x10 [ 1106.801969][ C1] ? schedule+0x90/0x2b0 [ 1106.806256][ C1] schedule+0x164/0x2b0 [ 1106.810451][ C1] rescuer_thread+0xf45/0x10b0 [ 1106.815256][ C1] ? rescuer_thread+0xb8/0x10b0 [ 1106.820163][ C1] kthread+0x388/0x470 [ 1106.824264][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 1106.829499][ C1] ? __pfx_kthread+0x10/0x10 [ 1106.834128][ C1] ret_from_fork+0x514/0xb70 [ 1106.838757][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.843908][ C1] ? __switch_to+0xc89/0x1420 [ 1106.848619][ C1] ? __pfx_kthread+0x10/0x10 [ 1106.853247][ C1] ret_from_fork_asm+0x1a/0x30 [ 1106.858051][ C1] [ 1109.345222][ C1] net_ratelimit: 10701 callbacks suppressed [ 1109.345247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.345872][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1109.351593][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1109.364398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1109.375476][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1109.388526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1109.389859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1109.391245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1109.392604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1109.393936][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1114.355011][ C1] net_ratelimit: 14132 callbacks suppressed [ 1114.355036][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.355164][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1114.361324][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.374120][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1114.394853][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.397998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1114.409159][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.421923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1114.432956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3a:9c:50:ee:c8:1a, vlan:0) [ 1114.446021][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)