last executing test programs: 57.60120459s ago: executing program 2 (id=921): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x20010, 0xffffffffffffffff, 0x440000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 57.422823617s ago: executing program 2 (id=922): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x3c}, 0xb, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0x4}]}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x1}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r1, @ANYRES64=0x0, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="4d9b7f58c81d27e6b2a8aa58df5622841554"], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000280)={0x6, {{0xa, 0x4e20, 0x5, @remote, 0x4}}}, 0x88) 57.109015134s ago: executing program 2 (id=927): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910486b59717900e40088000000610400000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@enum64={0x6, 0x3, 0x0, 0x13, 0x0, 0x12, [{0x2, 0x9}, {0x7, 0x9, 0x2}, {0x6, 0x0, 0x8}]}]}, {0x0, [0x61]}}, &(0x7f0000000600)=""/207, 0x4b, 0xcf, 0x1, 0x4}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c1000000000000000000000071013e000000000000000000000000000000008468c0af7a34a9c61e36d4c47762d4574e3e4409a46b65bfbffc8ed92f3844bc50991b49b9027181d7a6f7b701974cc11e0b08e9fa5a1336b205bee4811c41e1b36b6d54f75d8b08d9ef36b135f63d753a0960b4bc300a60fe94f1bc608800000000d958eed733734fb2f8d8a8400ead98"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r5, 0x1, 0x7800, 0x8, 0x9, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x6a, 0x0, 0x1, 0x4, 0x0, @multicast2, @remote}}}}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, 0xffffffffffffffff, 0x21, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001640)={r6, r8, 0x25, 0x4, @val=@tcx={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000001680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "659b78", 0xd47, 0x2f, 0x0, @empty, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc42, 0x2, [], "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"}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8f], "5ffecb5355a3f86d4bacc83f3e9a9ee4e47ae3cede6f3f54a97b36cf2c73a57f356e541cf2e271b8cd7edf7fb88a13cd0298d1810e78794dd8b71f594e3bd17f0b1bfb991ca745a037"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, 0x5}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x3, 0x3, 0x1, 0x3, 0x1, 0x6}, 0x2, {0x9, 0x6, 0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "090b48410100000000000000d8f505d7e11abce6d372df33a546b823641e47d483b455aaca8bc14ae0b7e0fbbf0fee27f2d934bb6d93467008c6ef5571fcccf2d961b489c65c8c3c8023759f19a2b126dbbbb1e14c95a0f3e53b86f8f2b4cdd6e5145248cb79a15859d5f445c8b4863a0fbee319029b"}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@map=r1, r2, 0x5}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = socket(0x1d, 0x2, 0x6) recvfrom$packet(r10, 0x0, 0x0, 0x4001, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x10448) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000419ffac60900000000000000000000000024c3236ae4ec272d9dd20529e927c5cdcd055eefe1ec530c962f7241e8ef4d4efe9c7db687866eb0574eb6c69ea014ae563e45be582b02101afa7c692d3f34860fd257d6219038860c6efec88d9a4d485d753b569fac9628a555a58934a0829321d9f53dd993b9"], 0x0, 0x26, 0x0, 0x1}, 0x28) close(r11) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r9}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8030, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 56.770991952s ago: executing program 2 (id=932): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) 56.56912942s ago: executing program 2 (id=935): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r7, &(0x7f00000025c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000013000000000000e9ffff004f194e20146e7e87"], 0x4b) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) r9 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r9, 0x618e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000001000000000000005b8af8ff00000000bfa2000000000000070200ca9a2e6895153381de065c18000000000000ffffb703000008000000b704000008", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.082701798s ago: executing program 2 (id=942): r0 = socket$inet6(0xa, 0x80003, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 55.80433273s ago: executing program 32 (id=942): r0 = socket$inet6(0xa, 0x80003, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 38.042795788s ago: executing program 1 (id=1190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) 37.975648891s ago: executing program 1 (id=1192): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x11, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185500000d0000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000050000000000ac1e00010000000000000000000000fe9c00000000000000000000000000aa00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x4000140) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r3, @ANYBLOB="00000000a8880000203936db0cb30536c8acba9cb6cfce0001000000000000007370616e000010000280060100000000000004001200"], 0x40}}, 0x0) (async) pipe(&(0x7f0000000000)) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, 0x0, 0x0, 0x20000890) close(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x20) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x3cc, 0x2c, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc04438ec8a7c2e62, 0x5}, {0xffff, 0xfff2}, {0xe, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x3a0, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x90}, @TCA_U32_MARK={0x10, 0xa, {0xff, 0x5}}, @TCA_U32_SEL={0x364, 0x5, {0xe, 0x3, 0x1, 0x0, 0x3, 0x2, 0x6, 0xbe4b, [{0x4, 0x6}, {0x8, 0x4f, 0x1, 0xfff}, {0x6, 0x8, 0x8000, 0x7}, {0xffff, 0x8e, 0x3d, 0x7}, {0x4, 0x1, 0xc8d9, 0x1}, {0xffffffff, 0x80, 0xf, 0xb29}, {0x1, 0x7f, 0x0, 0xa}, {0x4, 0x2, 0xa, 0x7a}, {0x1, 0x6, 0x5, 0xfffffffa}, {0xc8d, 0xfffffffb, 0x4}, {0x8, 0x80, 0x400}, {0x5, 0x293c7b5a, 0x1, 0x2}, {0xdc, 0x1, 0x4, 0x9}, {0x200, 0x9, 0x2, 0xe998}, {0x6, 0x5, 0x0, 0x1}, {0x3, 0x4, 0x1, 0x7ff}, {0x1, 0x7f, 0x6, 0x8}, {0x3, 0x2, 0x2, 0x10000}, {0x2, 0x8, 0x1, 0xc}, {0x4, 0xd5e, 0x4, 0x800}, {0x2, 0x6, 0x1, 0x8}, {0x7, 0x1, 0x6, 0x9f}, {0x8, 0x2, 0x450c7cec, 0x260b}, {0x6, 0xb9fc, 0x3, 0x1}, {0x7fffffff, 0xffffffff, 0x4, 0x1f05733f}, {0x7, 0xd0, 0x10, 0x7}, {0xeb8f, 0x6e2, 0x7, 0x3}, {0xfffff800, 0xe243, 0x8, 0x8}, {0x4, 0x3e6, 0x7, 0x1f9}, {0xfffffff7, 0x5cc3, 0x0, 0xdca}, {0x1, 0x3, 0x5}, {0x9, 0xfffffffa, 0x1, 0xa0b5}, {0x5, 0x7, 0x3}, {0x6, 0x7, 0x4, 0x9247}, {0x0, 0x1, 0x5a, 0x6}, {0x7, 0x1000, 0x6ff0124, 0x22}, {0x3, 0x1, 0x0, 0x7}, {0xf, 0x3, 0xa, 0x8}, {0x200, 0x1, 0xe2, 0x9}, {0x1, 0x7fff, 0x7f, 0x6}, {0x3, 0x401, 0x5, 0x74}, {0x0, 0x9, 0x7, 0x8}, {0xeb, 0x8, 0x8f3, 0x8}, {0xffffffff, 0x8001, 0x2}, {0x80, 0x9, 0xffff, 0xffff}, {0x9, 0x5, 0x4, 0x4}, {0x10, 0xb12c, 0x7, 0x9}, {0x6323db30, 0x75b, 0x0, 0x6f8}, {0x7ff, 0x10000, 0x9fc7, 0xffffffff}, {0x8001, 0x7fffffff, 0x1, 0x1ff}, {0x6, 0x8, 0x80, 0x9}, {0x5, 0x9, 0x2df4, 0x2}, {0x9915, 0xd, 0x81, 0xffff8001}]}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x5b}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0xb}]}}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) socket$netlink(0x10, 0x3, 0x8000000004) 37.857679784s ago: executing program 0 (id=1194): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89ec, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x28}}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x22804c1bfe3ef233, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xb77e8ef6c6efdddb}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) 37.848303114s ago: executing program 1 (id=1195): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0x5}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 37.607538633s ago: executing program 1 (id=1199): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbdc198d3d3fc320f0c000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r6, 0x0, 0x0, 0x40002020, 0x0, 0x0) (async) recvfrom(r6, 0x0, 0x0, 0x40002020, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) preadv(r6, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8}], 0x1, 0x4, 0x3) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0xe) shutdown(r7, 0x0) (async) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000000c0)={r8, 0x9, 0x1, "cd"}, 0x9) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000440)=""/206, 0xce}], 0x1, 0x81e, 0x1) (async) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000440)=""/206, 0xce}], 0x1, 0x81e, 0x1) syz_emit_ethernet(0x58, &(0x7f0000000780)={@link_local, @remote, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x0, "6738f888"}]}}}}}}, 0x0) r9 = socket(0x10, 0x803, 0x100) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) socket(0x21, 0x80000, 0x7) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000200)=@ethtool_channels={0x3c, 0x0, 0x0, 0x20000, 0x9, 0x0, 0x1, 0x0, 0x3}}) socket$inet6_udplite(0xa, 0x2, 0x88) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) setsockopt$inet6_int(r10, 0x29, 0xa, &(0x7f00000002c0)=0x6, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r9) 37.605562932s ago: executing program 4 (id=1200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='io_uring_queue_async_work\x00', r0, 0x0, 0xcd6}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0xf00, 0x2c000011) 36.802941285s ago: executing program 3 (id=1204): r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xff, [{0x80000005, 0x4, 0x40}]}]}}, &(0x7f0000000340)=""/5, 0x32, 0x5, 0x1}, 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x8000) 36.650916857s ago: executing program 4 (id=1206): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0x6, [@float={0x1, 0x0, 0x0, 0x10, 0x2}, @fwd={0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x5}}, @datasec={0x6, 0x4, 0x0, 0xf, 0x1, [{0x2, 0x4, 0x7f}, {0x4, 0x4, 0x7fff}, {0x1, 0x0, 0x57}, {0x4, 0x1, 0x1}], '%'}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x31, 0x4}, @func={0xa, 0x0, 0x0, 0xc, 0x5}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb}]}]}, {0x0, [0x0, 0x0, 0x30, 0x2e]}}, &(0x7f00000003c0)=""/255, 0xd6, 0xff, 0x0, 0x9}, 0x28) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000040), 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x7}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0xffffff}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x25, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x158bd5e9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x7, 0x8, 0x9, 0x7, 0x8}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x7, 0x1, 0xfffffffffffffffe}, @alu={0x4, 0x0, 0xd, 0x7, 0x7, 0x20, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0xd, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x10, &(0x7f0000000700)=""/16, 0x41000, 0xc, '\x00', r8, @fallback=0x14, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r10], &(0x7f0000000840)=[{0x3, 0x4, 0x0, 0x6}, {0x1, 0x4, 0xb, 0xb}, {0x2, 0x3, 0xe, 0xa}, {0x5, 0x5, 0x5, 0x1}], 0x10, 0x5}, 0x94) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000086da009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 36.645488637s ago: executing program 0 (id=1207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) getpeername$netrom(r2, 0x0, &(0x7f0000000300)) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000010901010000000000000000073f60090900010073797a30000000000800064000000011"], 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000054) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) 36.527045428s ago: executing program 3 (id=1208): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400448c9, &(0x7f0000000080)={'wlan0\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) 36.316898834s ago: executing program 3 (id=1209): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect(r1, &(0x7f0000000440)=@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'veth0_to_bond\x00'}}, 0x80) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r8, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00{\t\x00\x00\x00', 0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf252800000008000300", @ANYRES32=r7, @ANYBLOB="0a000600080211000000000006003600800000001000340039d9132e99c2e8d9ac57ff2f"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', r10, 0x1, 0x8, 0x5, 0x80000001, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}, {[@rr={0x7, 0x7, 0xd0, [@dev={0xac, 0x14, 0x14, 0x22}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x3c, 0x26, 0x210, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xf, 0xa}, {0x10, 0xc}, {0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000095}, 0x84) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r12, 0x0, 0x484, 0x0, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r9], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x15, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) 35.473902968s ago: executing program 4 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x52}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044014) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x52}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044014) r1 = socket$key(0xf, 0x3, 0x2) accept(r1, 0x0, 0x0) 35.21676892s ago: executing program 4 (id=1212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000276131cad7d25303d700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x88dd895beaa99965, 0x12, r0, 0xe352a000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xa, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010229bd7000fedbdf25060000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 35.059801355s ago: executing program 5 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r0, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 34.995039375s ago: executing program 3 (id=1214): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) 34.868571726s ago: executing program 1 (id=1215): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00 \x00'}) 34.818157572s ago: executing program 5 (id=1216): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x5}}}}]}]}, 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x178, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x150, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b275f69a71b7ffdd9c7ea531fe8b1c99"}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffd}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffff001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e4e36850c282416566d83f7a72094fc84124610c58ea18bae9bd3b621411041c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bfdc677c8ecc399cdd185d6de3d83790"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "923e973788df940e1bf6d84bd90540afc3ab9481d07c7d8b9011512d583f8c0d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "57abd67f9b7fc2cf042f509846b20d93b68753e6a642e9274ac6c8e4fdf16604"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d6edc2bcdb17c01e516daccd5c655813e7094504087830edfcd8fd865bd10b58"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d20072ff0f73791578264b9f7f118b27"}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 34.742860616s ago: executing program 0 (id=1217): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 34.741950823s ago: executing program 3 (id=1218): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x2020) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x58}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400260000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044804) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r6, 0x34de5000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7040000f1ffffff8500000095002fbb09a78e95c8655076"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x3b, @remote, 0x0, 0x0, 'lblcr\x00', 0x15, 0x84, 0xc000067}, 0x2c) 34.499902657s ago: executing program 1 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r10, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r10) write$tun(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000000711"], 0x9e) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff8}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x50}}, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 34.499231677s ago: executing program 0 (id=1220): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) close(r1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x21, 0x0, &(0x7f0000003c00)) (async, rerun: 32) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x3) (async, rerun: 32) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r4, &(0x7f0000000280)=0x4) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r5, 0x5f2bc000) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r7, 0xfffffffc}, 0x10) (async) ppoll(&(0x7f00000000c0)=[{r2, 0x420}], 0x1, &(0x7f0000000180), 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="83003800496cb1e60d3d1c1394e4d73170674c219b164c9fad165c4f5c28b298346a61591029d0e81b5a3dd59b64693fed9c98609ae4de82892693839e98818b1ca0475daaf492316baffe4ad29cf9808ecf6182e24caa0639a69bfa56d6c39548bc66a6bfae5a3a302197391a209be6f8e8d8d6bf341562673b21885e8986e340515100"], 0x16c}], 0x2}, 0x80) r8 = socket(0x28, 0x5, 0x0) (async) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r6, 0x2) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) (async) accept4$unix(r9, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f00000005c0)=""/252, 0xfffffffffffffd47, 0x40000040, 0x0, 0x0) 34.406476523s ago: executing program 5 (id=1221): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xffff, @remote, 'geneve0\x00'}}, 0x1e) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000100)) r4 = accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x800) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) 34.216545104s ago: executing program 5 (id=1222): syz_emit_ethernet(0x49d, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x467, 0x3a, 0xff, @local, @loopback, {[], @ndisc_na={0x88, 0x0, 0x0, 0xb2, '\x00', @dev={0xfe, 0x80, '\x00', 0x23}, [{0x2d, 0x9, "e1b0fc3c20b47261fc62c01878edbfe8189b9b83ce5dd4396606a97112e8a1d8c93f7243056bff7b982d86b36f56a79dbd728a696ca6aa75071f0d171b5f16cd8a416ba4cd9c"}, {0x5, 0x16, "3330a61f41f86885961043f81c638e771bbcf5a6dd487837b58c10bb91bc6c27672d5625b15a515dcaeacaacc2edf173bb6f081e130a62e7810a2179203196dba172aa8120cb87849709b0f4bc53be83ac17b81e2da619cf8f5fa28612fa603a6a7e4777416433b90b611973f9fd17c3301e98032fc5d87d08458f5a35d95fe790b2e00f7d23ebfc288e1ec38d4ff4fe5cd60b0696bca7085b6cec5850f0f578e73aa7dc4b5a63b88705787708fc"}, {0x11, 0x5, "03ff173f0a92ab1cf37dab50b3d0be8ae8306c884eb11ccfe77d6f357ac43653adf7d49b303313dd89d98ef2ff642e52caf77dbb5f43f7935278b823e33af3f7f26ae4ac1b20a1b905e665da61c620c13152"}, {0x4, 0x7, "022d99977f8690ac026b8c318df85cb8424e5102008780070000007a7bf80563082bcb49bd9366171c36a3d9ec820b8186495c56c74fc9ddd913"}, {0xe, 0xc, "a36bc437ad9f534d48e56651f87d0da45a50e08815b3856f777678ba4df94126aa3cbd49e12f44a6cab554465451af757f493f973ebd6a5640df4c462ea92166f69f4cad71826beaed71774ab92a05430b2b4d629185fe4eba50d70c944fecf4"}, {0x22, 0x14, "92335ae73cdf82f91269f8844eae0028069b4066f72b203fba8a5d5a5fa78511dd594946408b7300ca9ed96e24dad96fc4e86acbe46727da890805faa013a700b59a080746107ec8263eef491b945fb9268c3f65c2bd4b942a757845a6abbb12c25de1e5c4e3178ef916b2f0ed81af1a21137b603fc59893a1cdcb2af02aa223fac443fe7ab813a97fb8d25fd268072f1ed083c2e118e10c90229ce56029e009bb6eab"}, {0x1, 0x9, "3b94d311e479a507d9e359285e6e5c0c84bf174586665e2cbd240386344b0965698ed893e3fb3b81a271b47f010841432230ee515eab482051d74a00c666603ffc07694acdcd3d0af081f722"}, {0x2, 0x1f, "22e46c8f389ecede19f25d1e8faf275ef39ee3064ed64c3f441310ae5ae67cbfbcc52b06ba4f3609bc01afd98011d599161d52dec60084a385f55161f99fa11b0f3a6f25a9fcda82d764039615b1bc00185eeaf60b18c2f5c8faaf792b719616cd43d7b73db818d002f040a27c5e02646d220e80be197adfbdac1f19b8d00f0c2a8c56a5cd50f6b01df323955a7c799dab8e4d6d1395335de09422256746e66ece0ad0fc70f9ab712ba75a1def8fd076c4bbc1b9d9fc0b3cd1318b83b6a3fa26103b676ffc3982c5950902bfc2f001caecc12d9095ce88444f692d6b916b09520a446f8ab657ca144ed211ef2a0ee69bc038617e022d516d6e"}, {0xe, 0xe, "26f96533d7cdb7f3c1e267cca1f76d218a52d5e8491aea15b143d9d0abf92014a8154457d3405760b65a631c3d80134bf5a1029402550188f5901ed9ae5b10481c4163efcb24fb8260964168bcacf29093ea4cfa221e2e1d0600f448120bb070e5d01d1ae44c8ca40d45595c058c20f135bf555eee"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 34.193057654s ago: executing program 5 (id=1223): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r0, 0x0, 0x0, 0x180c2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008f8054000000021100011800c000100636f756e74657200400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001400038010000080080003400000000204000b80140000001000010000000000000000000084000a"], 0xd4}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000700000000000019078ac1e0001ac1414aa0c00907803000000450000000000000000890000000000000a010100441c0001ac1414aa000000007f000001000000007f00000100001d00861e00000000001200000000000000963d096612e35232da00044e040002890300000000d27be5d26073afe0683e718e5150b3"], 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 34.104033788s ago: executing program 3 (id=1224): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000800)=@ethtool_rxnfc={0x2f, 0x0, 0x0, {0x0, @udp_ip4_spec={@private, @dev}, {0x0, @link_local}, @usr_ip4_spec={@multicast1, @remote}, {0x0, @remote}}}}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) getsockopt$ax25_int(r1, 0x101, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "040088beffff0200"}}}}}, 0x0) 33.871954625s ago: executing program 4 (id=1225): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x88}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x88}}, &(0x7f0000000480)='GPL\x00'}, 0x80) unshare(0x28000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000bb7c7bf364ff0700007ea900"/28], 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0)="20532b9b558a0b814e7beaa316f8551f876817fa52547f051ce7b21cdb0bc1ea77288895af06a653889b363302008d656c6f559dc5471ea9303d9e3533d2a42f324ecc833db59ca3fe910f3cc6d209ddbaa324f475eabc7f254d0cc6247dcbc2ead196202ec8c8f301eb7af45d3eed78bc11", 0x72, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0x2, 0x3, 0xa69f, 0x4, 0x2, {0x0, @in6={{0xa, 0x4e23, 0x1, @mcast1, 0x101}}, 0x7fffffff, 0x3, 0x1, 0x5, 0xf}}, &(0x7f0000000140)=0xb0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20006841}, 0x4004011) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1}, 0x3}], 0x0, 0x40000060, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xcf, &(0x7f00000006c0)=""/207, 0x0, 0x1a, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2}}) r8 = socket(0x28, 0x800, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x6c, r9, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xfe}, @broadcast, @broadcast, @initial, {0x8, 0x8}, @value=@ver_80211n={0x0, 0x21, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x18, @val={0x8c, 0x10, {0x965, "e4340b367933", @short="dc1f051af02a1f48"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x2, 0x10, 0x5, 0x77f, 0x4, 0x6]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xfe00, 0x4, 0xffff]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11d4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 33.839422175s ago: executing program 5 (id=1226): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, 0x0, 0x0, 0xffde, 0x0, 0x0, 0x4400046}) syz_emit_ethernet(0x42, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x2}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @multicast, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @private2}}}}, 0x0) r1 = socket(0x9, 0x4, 0xffffffff) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7e2438dd}]}}]}, 0x40}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0x3f, 0xa9, &(0x7f00000000c0)="20edcad6ad7b0a56fdc81562cfe3bf16fe2e667a42d1caa82813a8edc0febecb52420ef9a6a4e8b304c8a4b15fb7b696ec8c96dab2fca3b4f665fd9a2c51a9", &(0x7f0000000100)=""/169, 0x40, 0x0, 0xbe, 0xe6, &(0x7f00000002c0)="04a9a7c2d666b4a9e0781aa30116a2afbfebd969c3738a2d08b104b74163557b767795a2fb1f430a69386fe5b329104d0ea91b4b17afd765c7231b92763853de6ba8aa342148728fa97f37ec3a57cccb0bc044479e2298dd19b56f25089413597e4c4592070431bfd2f64a572f6c6e50d7824f63039fc5a48dd07e2fd02b7a1201620fb57edb595647f4b94e0b06ccdebec7cec2f1a9283e17d0b03836eacaad0b0ccb42343e002b0662523388ffbb989c1d35dd4ab04b1eefc0f0f967e4", &(0x7f0000000800)="c1c77567fab79087e278d3a1681bca00d575a93661f398fa70edefc7e35cfbac89f0a09b2107b028e93037671fc587a1bd5e3dd26995fc62e1a95f20a9e2f3fca996497866c1afa51dc2b01980a54a23560d27a96506e35f8c841bafaaf668a31055c055f4ba37b5cdd1cc2911980e2688c34de250979d0759d67ca307746ee7dad7f80ab1030e3667e74348c36c75d2d178a8ad85cceb43fefca071f15c617bb19df934d3877a23cb289157681aa41295d68239c1b774cc11400dee83c39ba3f1c98d0113bcf4dde47edae1dbe4d3c0f81bcbaba9e5595ef318493f37b8dd5350e871a4c73a", 0x5, 0x0, 0x8}, 0x50) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x11e, 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 33.755349242s ago: executing program 0 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001400000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x138, 0x138, 0x3, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @struct={0x6, 0x4, 0x0, 0x4, 0x1, 0xb8, [{0x4, 0x0, 0xa1}, {0x4, 0x5, 0x81}, {0x5, 0x4, 0x1}, {0xe, 0x2, 0x8}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @float={0x2, 0x0, 0x0, 0x10, 0x2}, @enum64={0x5, 0x9, 0x0, 0x13, 0x0, 0x5, [{0xd, 0x9, 0x1000}, {0xa, 0x1, 0x10000}, {0x6, 0x6, 0x401}, {0x10, 0x5, 0xc24b}, {0x9, 0x7, 0xe3}, {0xf}, {0x6, 0x80000000, 0x2400000}, {0x1, 0x4, 0x1}, {0xc, 0x401}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0x5, 0x5}, {0x7, 0x2}, {0x5, 0x1}, {0x6}, {0x6, 0x4}, {0xd, 0x2}, {0xa, 0x2}, {0xe, 0x3}]}, @float={0x2, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000000)=""/123, 0x153, 0x7b, 0x1, 0x5, 0x10000, @value=r1}, 0x28) 29.16001657s ago: executing program 0 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x45}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ifreq(r8, 0x8916, &(0x7f0000000240)={'veth1_to_hsr\x00', @ifru_flags=0x200}) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a000000000000001800088014000100a432634e00000000870004004848a2f5060007000600000008000500", @ANYRES32=r7, @ANYBLOB="65cc60a5cbcf69c7d78a"], 0x40}, 0x1, 0x0, 0x0, 0x64084}, 0x40040d0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000a1e38cad274750e901f42d2efc0000000079ccaa8100e387d1c182580bb0a9db79da6a8a256517ad75be6170a055a413c476e1c616c59f4a1d8da3d1326da4e23a782b4c7a9b65b6d23390c8fd4a148cde82cd40a1b313981cf6d952665a1cf02142fd8eb0954894634be81e80f2fbafbedd31048e08e277d9011f2a685bd71404ffc092f3358f730f5b5fafa5c8e3297cfaf7a373ba0fe850dacc0623be6bde5e95e16028737d2beb23b267385886a9c0b8d48784eb0ec9b42e0a5f8643f0f40c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r9, 0x0, &(0x7f0000000580)=""/186}, 0x20) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'lo\x00'}) 22.067527004s ago: executing program 4 (id=1229): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "34d8d327540cbe97", "7ff7f9eca9fee0c3a90f3d674fefa206b13fb9b86142bef1c593270a7da8edd2", "4bfce799", "3f7cfe03f3a63391"}, 0x38) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000980000000000000000010062726964676500000c000280080008008100000008000100aaaaaaaaaa000000"], 0x48}}, 0x0) 0s ago: executing program 33 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r10, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r10) write$tun(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000000711"], 0x9e) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff8}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x50}}, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 67.344021][ T5847] cgroup: Unknown subsys name 'net' [ 67.512347][ T5847] cgroup: Unknown subsys name 'cpuset' [ 67.521107][ T5847] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.891009][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.009230][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.017819][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.025831][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.034002][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.041876][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.192328][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.208932][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.217364][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.226749][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.236517][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.245384][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.292542][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.300386][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.308983][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.316677][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.410149][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.416658][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.424746][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.434921][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.443055][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.451672][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.459628][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.478958][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.487424][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.495996][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.510375][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.518992][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.629925][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 71.873931][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.881353][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.889707][ T5857] bridge_slave_0: entered allmulticast mode [ 71.896929][ T5857] bridge_slave_0: entered promiscuous mode [ 71.970753][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.978245][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.985693][ T5857] bridge_slave_1: entered allmulticast mode [ 71.992866][ T5857] bridge_slave_1: entered promiscuous mode [ 72.064591][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.098529][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.133773][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 72.222958][ T5857] team0: Port device team_slave_0 added [ 72.273247][ T5857] team0: Port device team_slave_1 added [ 72.378303][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.386169][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.413916][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.445689][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 72.457313][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.464617][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.491174][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.524809][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 72.603516][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 72.614708][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.622053][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.629944][ T5865] bridge_slave_0: entered allmulticast mode [ 72.637018][ T5865] bridge_slave_0: entered promiscuous mode [ 72.693923][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.701219][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.708389][ T5865] bridge_slave_1: entered allmulticast mode [ 72.716333][ T5865] bridge_slave_1: entered promiscuous mode [ 72.744398][ T5857] hsr_slave_0: entered promiscuous mode [ 72.754644][ T5857] hsr_slave_1: entered promiscuous mode [ 72.878073][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.900480][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.907642][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.915335][ T5862] bridge_slave_0: entered allmulticast mode [ 72.922443][ T5862] bridge_slave_0: entered promiscuous mode [ 72.931431][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.938703][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.945948][ T5862] bridge_slave_1: entered allmulticast mode [ 72.953164][ T5862] bridge_slave_1: entered promiscuous mode [ 72.974086][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.997677][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.004908][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.012411][ T5871] bridge_slave_0: entered allmulticast mode [ 73.021094][ T5871] bridge_slave_0: entered promiscuous mode [ 73.074191][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.083513][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.091147][ T5871] bridge_slave_1: entered allmulticast mode [ 73.098324][ T5871] bridge_slave_1: entered promiscuous mode [ 73.123814][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.149266][ T51] Bluetooth: hci0: command tx timeout [ 73.183607][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.220942][ T5865] team0: Port device team_slave_0 added [ 73.227197][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.234504][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.243459][ T5874] bridge_slave_0: entered allmulticast mode [ 73.250753][ T5874] bridge_slave_0: entered promiscuous mode [ 73.261086][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.274055][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.305005][ T5865] team0: Port device team_slave_1 added [ 73.310804][ T51] Bluetooth: hci1: command tx timeout [ 73.325189][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.332854][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.340639][ T5874] bridge_slave_1: entered allmulticast mode [ 73.347710][ T5874] bridge_slave_1: entered promiscuous mode [ 73.402360][ T51] Bluetooth: hci2: command tx timeout [ 73.404856][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.415189][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.442555][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.499894][ T5862] team0: Port device team_slave_0 added [ 73.507657][ T5871] team0: Port device team_slave_0 added [ 73.521801][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.529673][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.556918][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.559331][ T51] Bluetooth: hci4: command tx timeout [ 73.571953][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.573797][ T5868] Bluetooth: hci3: command tx timeout [ 73.586242][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.601251][ T5871] team0: Port device team_slave_1 added [ 73.608996][ T5862] team0: Port device team_slave_1 added [ 73.682136][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.689264][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.716344][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.762684][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.769778][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.795864][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.826474][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.834145][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.860216][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.873333][ T5874] team0: Port device team_slave_0 added [ 73.884146][ T5874] team0: Port device team_slave_1 added [ 73.891739][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.899174][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.925241][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.989707][ T5865] hsr_slave_0: entered promiscuous mode [ 73.996724][ T5865] hsr_slave_1: entered promiscuous mode [ 74.004773][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 74.010805][ T5865] Cannot create hsr debugfs directory [ 74.028756][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.035731][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.062394][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.095731][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.103233][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.129855][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.191421][ T5862] hsr_slave_0: entered promiscuous mode [ 74.197842][ T5862] hsr_slave_1: entered promiscuous mode [ 74.204626][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 74.210454][ T5862] Cannot create hsr debugfs directory [ 74.292573][ T5871] hsr_slave_0: entered promiscuous mode [ 74.299003][ T5871] hsr_slave_1: entered promiscuous mode [ 74.305066][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 74.311045][ T5871] Cannot create hsr debugfs directory [ 74.317057][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.330994][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.345844][ T5874] hsr_slave_0: entered promiscuous mode [ 74.352792][ T5874] hsr_slave_1: entered promiscuous mode [ 74.359265][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 74.365006][ T5874] Cannot create hsr debugfs directory [ 74.404576][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.416902][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.899698][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.920165][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.932233][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.953609][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.025714][ T5874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.049776][ T5874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.071635][ T5874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.104769][ T5874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.120672][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.173182][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.195201][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.211870][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.229496][ T5868] Bluetooth: hci0: command tx timeout [ 75.236103][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.243474][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.260384][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.272234][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.321267][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.328507][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.389269][ T5868] Bluetooth: hci1: command tx timeout [ 75.426986][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.458182][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.468854][ T5868] Bluetooth: hci2: command tx timeout [ 75.493963][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.504891][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.530592][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.582039][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.645242][ T5868] Bluetooth: hci3: command tx timeout [ 75.651371][ T5868] Bluetooth: hci4: command tx timeout [ 75.668076][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.675368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.690110][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.697394][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.765149][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.811235][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.867226][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.874406][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.890495][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.897607][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.962031][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.993143][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.065466][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.091855][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.111325][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.118452][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.147249][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.154464][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.211517][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.262899][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.270163][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.324367][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.331530][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.371356][ T5857] veth0_vlan: entered promiscuous mode [ 76.406244][ T5857] veth1_vlan: entered promiscuous mode [ 76.535770][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.605565][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.682355][ T5857] veth0_macvtap: entered promiscuous mode [ 76.723007][ T5857] veth1_macvtap: entered promiscuous mode [ 76.753038][ T5865] veth0_vlan: entered promiscuous mode [ 76.824401][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.847101][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.872545][ T5865] veth1_vlan: entered promiscuous mode [ 76.903381][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.968899][ T3008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.014142][ T3008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.037292][ T3008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.046202][ T3008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.100500][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.131828][ T5865] veth0_macvtap: entered promiscuous mode [ 77.157077][ T5865] veth1_macvtap: entered promiscuous mode [ 77.170362][ T5871] veth0_vlan: entered promiscuous mode [ 77.222337][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.238174][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.247508][ T5871] veth1_vlan: entered promiscuous mode [ 77.276592][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.301850][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.319525][ T5868] Bluetooth: hci0: command tx timeout [ 77.367721][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.368006][ T3008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.377252][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.389719][ T3008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.402720][ T3008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.421999][ T5874] veth0_vlan: entered promiscuous mode [ 77.432623][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.456169][ T5871] veth0_macvtap: entered promiscuous mode [ 77.469696][ T5868] Bluetooth: hci1: command tx timeout [ 77.492591][ T5862] veth0_vlan: entered promiscuous mode [ 77.500379][ T5874] veth1_vlan: entered promiscuous mode [ 77.525796][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.537431][ T5862] veth1_vlan: entered promiscuous mode [ 77.548696][ T5868] Bluetooth: hci2: command tx timeout [ 77.561900][ T5871] veth1_macvtap: entered promiscuous mode [ 77.667196][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.687587][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.701798][ T5874] veth0_macvtap: entered promiscuous mode [ 77.710589][ T5868] Bluetooth: hci3: command tx timeout [ 77.713488][ T51] Bluetooth: hci4: command tx timeout [ 77.725845][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.750312][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.758379][ T5862] veth0_macvtap: entered promiscuous mode [ 77.779770][ T5874] veth1_macvtap: entered promiscuous mode [ 77.814972][ T78] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.842934][ T5862] veth1_macvtap: entered promiscuous mode [ 77.852473][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.859804][ T78] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.871370][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.871373][ T78] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.871406][ T78] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.898835][ T5972] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.934120][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.961587][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.990020][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.023827][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.057898][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.074776][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.104507][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.125371][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.210814][ T3008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.220274][ T3008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.252164][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.265413][ T3008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.275022][ T3008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.356049][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.386060][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.726498][ T5992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.399247][ T51] Bluetooth: hci0: command tx timeout [ 79.460385][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.469033][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.549026][ T51] Bluetooth: hci1: command tx timeout [ 79.628760][ T51] Bluetooth: hci2: command tx timeout [ 79.635153][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.652825][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.749161][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.757025][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.789105][ T51] Bluetooth: hci4: command tx timeout [ 79.789454][ T5868] Bluetooth: hci3: command tx timeout [ 79.809020][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.817361][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.820312][ T5999] tipc: Started in network mode [ 79.850012][ T5999] tipc: Node identity 2207d396e25d, cluster identity 4711 [ 79.859000][ T5999] tipc: Enabled bearer , priority 0 [ 79.890056][ T6002] syzkaller0: entered promiscuous mode [ 79.907224][ T6002] syzkaller0: entered allmulticast mode [ 80.010752][ T5999] tipc: Resetting bearer [ 80.080270][ T5997] tipc: Resetting bearer [ 80.103829][ T5997] tipc: Disabling bearer [ 80.134335][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.142542][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.160667][ T6014] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 80.169482][ T6014] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10'. [ 80.198442][ T6014] `: renamed from bond0 (while UP) [ 80.392363][ T6023] Bluetooth: MGMT ver 1.23 [ 80.533280][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 80.791872][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 80.839112][ T6043] netlink: 92 bytes leftover after parsing attributes in process `syz.4.17'. [ 80.908481][ T6044] netlink: 156 bytes leftover after parsing attributes in process `syz.4.17'. [ 80.972371][ T6044] netlink: 156 bytes leftover after parsing attributes in process `syz.4.17'. [ 81.048425][ T6056] Zero length message leads to an empty skb [ 81.061147][ T6058] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 81.100740][ T6059] netlink: 'syz.3.20': attribute type 11 has an invalid length. [ 81.108545][ T6059] netlink: 'syz.3.20': attribute type 11 has an invalid length. [ 81.110417][ T6058] netlink: 'syz.1.22': attribute type 4 has an invalid length. [ 81.134189][ T6059] netlink: 224 bytes leftover after parsing attributes in process `syz.3.20'. [ 81.159368][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 81.331693][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.373715][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.640439][ T6080] nbd0: detected capacity change from 0 to 127 [ 81.680055][ T5868] block nbd0: Receive control failed (result -104) [ 81.938120][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 81.969365][ T6100] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 82.016702][ T6100] Bluetooth: MGMT ver 1.23 [ 82.282178][ T6115] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 82.733554][ T6142] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 82.878652][ T6138] batadv_slave_0: entered promiscuous mode [ 83.116471][ T6137] batadv_slave_0: left promiscuous mode [ 83.345277][ T6162] netlink: 'syz.1.50': attribute type 12 has an invalid length. [ 83.424416][ T6166] __nla_validate_parse: 4 callbacks suppressed [ 83.424432][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 83.475120][ T6167] netlink: 152 bytes leftover after parsing attributes in process `syz.0.52'. [ 83.557979][ T6174] Bluetooth: MGMT ver 1.23 [ 83.649791][ T6176] bridge1: entered promiscuous mode [ 83.655037][ T6176] bridge1: entered allmulticast mode [ 83.772110][ T6186] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 84.050457][ T2151] IPVS: starting estimator thread 0... [ 84.104485][ T6199] tipc: Started in network mode [ 84.117007][ T6199] tipc: Node identity 3e96525d543c, cluster identity 4711 [ 84.150164][ T6199] tipc: Enabled bearer , priority 0 [ 84.161853][ T6203] IPVS: using max 27 ests per chain, 64800 per kthread [ 84.213267][ T6204] syzkaller0: entered promiscuous mode [ 84.225216][ T6204] syzkaller0: entered allmulticast mode [ 84.285272][ T6199] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 84.325418][ T6199] tipc: Resetting bearer [ 84.355463][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 84.373108][ T6214] tipc: Enabled bearer , priority 0 [ 84.380559][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'. [ 84.389713][ T6198] tipc: Resetting bearer [ 84.404071][ T6198] tipc: Disabling bearer [ 84.412888][ T6214] syzkaller0: entered promiscuous mode [ 84.418386][ T6214] syzkaller0: entered allmulticast mode [ 84.436128][ T3013] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.437638][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 84.455344][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'. [ 84.470040][ T6214] tipc: Resetting bearer [ 84.476249][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.484862][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.493899][ T3013] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.526335][ T3013] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.579006][ T6213] tipc: Resetting bearer [ 84.626224][ T6213] tipc: Disabling bearer [ 84.666041][ T3013] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.696908][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 84.764832][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 84.862139][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 84.896541][ T6234] netlink: 'syz.3.73': attribute type 3 has an invalid length. [ 85.041102][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.050257][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.086410][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.159201][ T5868] Bluetooth: hci4: command tx timeout [ 85.180986][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.207346][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.210788][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 85.338139][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.368672][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.398840][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.424003][ T6220] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.660525][ T6267] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 85.700869][ T6267] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.85'. [ 86.114125][ T6291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.240930][ T6298] netlink: 'syz.2.94': attribute type 1 has an invalid length. [ 86.343383][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 86.403429][ T6302] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 86.440863][ T6302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.543959][ T6311] netlink: 'syz.4.99': attribute type 2 has an invalid length. [ 86.569385][ T6311] netlink: 244 bytes leftover after parsing attributes in process `syz.4.99'. [ 86.754539][ T43] cfg80211: failed to load regulatory.db [ 87.079652][ T6313] netlink: 'syz.3.100': attribute type 4 has an invalid length. [ 87.280553][ T6333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.572147][ T6354] netlink: 'syz.4.108': attribute type 1 has an invalid length. [ 87.895649][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.919612][ T5932] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.936183][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.118811][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.211050][ T6385] veth0: entered promiscuous mode [ 88.219025][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.262256][ T6379] team0: Device gtp0 is of different type [ 88.438289][ T6385] veth0: left promiscuous mode [ 88.577406][ T6403] __nla_validate_parse: 5 callbacks suppressed [ 88.577424][ T6403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 88.811701][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 88.938369][ T6422] netlink: 224 bytes leftover after parsing attributes in process `syz.4.128'. [ 88.981308][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 89.206419][ T6444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.279390][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.132'. [ 89.434193][ T6426] team0 (unregistering): Port device team_slave_0 removed [ 89.454332][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 89.483034][ T6426] team0 (unregistering): Port device team_slave_1 removed [ 89.527044][ T6457] tipc: Enabling of bearer rejected, failed to enable media [ 89.767745][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 89.823903][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 90.130561][ T6481] tipc: Started in network mode [ 90.135460][ T6481] tipc: Node identity 1e468b7e6fbb, cluster identity 4711 [ 90.152581][ T6481] tipc: Enabled bearer , priority 0 [ 90.173780][ T6490] syzkaller0: entered promiscuous mode [ 90.191481][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 90.207478][ T6490] syzkaller0: entered allmulticast mode [ 90.242024][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.440595][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.503353][ T6490] tipc: Resetting bearer [ 90.520129][ T6490] tipc: Disabling bearer [ 90.675365][ T6517] validate_nla: 4 callbacks suppressed [ 90.675383][ T6517] netlink: 'syz.0.153': attribute type 4 has an invalid length. [ 90.948499][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'. [ 91.107788][ T6540] netlink: 'syz.4.160': attribute type 12 has an invalid length. [ 91.628822][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.186610][ T6602] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 92.256897][ T6592] syz.1.176 (6592) used greatest stack depth: 17864 bytes left [ 92.334132][ T6602] team0: Port device dummy0 added [ 92.574656][ T6624] netlink: 'syz.3.184': attribute type 4 has an invalid length. [ 92.668465][ T6627] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 92.696551][ T6632] syzkaller1: entered promiscuous mode [ 92.726780][ T6632] syzkaller1: entered allmulticast mode [ 93.169513][ T6651] syzkaller1: entered promiscuous mode [ 93.175032][ T6651] syzkaller1: entered allmulticast mode [ 93.512350][ T6675] netlink: 'syz.0.196': attribute type 30 has an invalid length. [ 93.755779][ T6687] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 93.768956][ T6687] __nla_validate_parse: 6 callbacks suppressed [ 93.768974][ T6687] netlink: 224 bytes leftover after parsing attributes in process `syz.1.201'. [ 93.804096][ T6687] nbd: illegal input index 1048576 [ 93.852372][ T6691] netlink: 100 bytes leftover after parsing attributes in process `syz.2.202'. [ 93.865601][ T6691] trusted_key: syz.2.202 sent an empty control message without MSG_MORE. [ 94.036173][ T6698] netlink: 212148 bytes leftover after parsing attributes in process `syz.2.204'. [ 94.227893][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 94.284008][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'. [ 94.514604][ T6715] gtp0: entered promiscuous mode [ 94.519860][ T6715] gtp0: entered allmulticast mode [ 94.767042][ T6729] warning: `syz.1.212' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.026432][ T6737] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 95.051142][ T9] IPVS: starting estimator thread 0... [ 95.130464][ T6754] netlink: 312 bytes leftover after parsing attributes in process `syz.0.219'. [ 95.142476][ T6755] netlink: 312 bytes leftover after parsing attributes in process `syz.0.219'. [ 95.160421][ T6744] IPVS: using max 29 ests per chain, 69600 per kthread [ 95.185815][ T6737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.244042][ T6743] lo speed is unknown, defaulting to 1000 [ 95.275809][ T6749] bond1: (slave geneve2): making interface the new active one [ 95.292546][ T6749] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 95.342404][ T6743] lo speed is unknown, defaulting to 1000 [ 95.350903][ T6743] lo speed is unknown, defaulting to 1000 [ 95.365038][ T6743] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.445481][ T6743] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.596008][ T6743] lo speed is unknown, defaulting to 1000 [ 95.607167][ T6767] netlink: 576 bytes leftover after parsing attributes in process `syz.2.222'. [ 95.647893][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.225'. [ 95.658172][ T6743] lo speed is unknown, defaulting to 1000 [ 95.685323][ T6743] lo speed is unknown, defaulting to 1000 [ 95.744179][ T6743] lo speed is unknown, defaulting to 1000 [ 95.766297][ T6743] lo speed is unknown, defaulting to 1000 [ 95.784123][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 96.036870][ T6787] netlink: 'syz.4.229': attribute type 30 has an invalid length. [ 96.054466][ T6786] netlink: 'syz.4.229': attribute type 30 has an invalid length. [ 96.767403][ T6820] netlink: 'syz.4.238': attribute type 1 has an invalid length. [ 96.960534][ T6820] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 97.017061][ T6820] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 97.327043][ T6844] syzkaller1: entered promiscuous mode [ 97.363040][ T6844] syzkaller1: entered allmulticast mode [ 97.936566][ T6869] netlink: 'syz.0.247': attribute type 2 has an invalid length. [ 98.207983][ T6879] netlink: 'syz.1.251': attribute type 1 has an invalid length. [ 98.279065][ T6881] netlink: 'syz.4.253': attribute type 10 has an invalid length. [ 98.381653][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.409029][ T6881] bridge_slave_1: left allmulticast mode [ 98.419392][ T6881] bridge_slave_1: left promiscuous mode [ 98.435798][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.461388][ T6881] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 98.908821][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.956461][ T6914] netlink: 'syz.2.266': attribute type 10 has an invalid length. [ 99.033887][ T6919] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 99.246919][ T6929] vlan3: entered promiscuous mode [ 99.252378][ T6929] bridge0: entered promiscuous mode [ 99.618360][ T6950] __nla_validate_parse: 11 callbacks suppressed [ 99.618378][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 99.634950][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 99.683977][ T6954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.733758][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 99.804261][ T6959] lo speed is unknown, defaulting to 1000 [ 99.804451][ T6958] netlink: 192 bytes leftover after parsing attributes in process `syz.3.279'. [ 100.162506][ T6983] veth1_macvtap: left promiscuous mode [ 100.339481][ T6996] IPv6: Can't replace route, no match found [ 100.515478][ T6993] tipc: Started in network mode [ 100.534768][ T6993] tipc: Node identity f69b468af3ab, cluster identity 4711 [ 100.554312][ T6993] tipc: Enabled bearer , priority 0 [ 100.602894][ T7005] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 100.627301][ T7005] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 100.737790][ T6993] tipc: Disabling bearer [ 100.782280][ T7012] tipc: Enabled bearer , priority 0 [ 100.795850][ T7007] syzkaller0: entered promiscuous mode [ 100.801537][ T7007] syzkaller0: entered allmulticast mode [ 100.808281][ T7011] syzkaller0: entered promiscuous mode [ 100.814335][ T7011] syzkaller0: entered allmulticast mode [ 100.823070][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 101.056019][ T7026] tipc: Resetting bearer [ 101.128866][ T7010] tipc: Resetting bearer [ 101.158280][ T7010] tipc: Disabling bearer [ 101.207546][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 101.237740][ T7041] lo speed is unknown, defaulting to 1000 [ 101.369106][ T7053] netlink: 'syz.0.302': attribute type 4 has an invalid length. [ 101.384092][ T7049] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 101.410488][ T7049] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 101.503421][ T7059] netem: incorrect ge model size [ 101.508799][ T7059] netem: change failed [ 101.565737][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 101.786540][ T7070] delete_channel: no stack [ 101.809594][ T7070] delete_channel: no stack [ 101.816330][ T7070] netlink: 36 bytes leftover after parsing attributes in process `syz.4.308'. [ 102.219186][ T7088] netlink: 36 bytes leftover after parsing attributes in process `syz.3.314'. [ 102.344010][ T7104] tipc: New replicast peer: 255.255.255.255 [ 102.369901][ T7104] tipc: Enabled bearer , priority 10 [ 102.496409][ T7109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.589438][ T7117] netlink: 'syz.4.321': attribute type 1 has an invalid length. [ 102.607522][ T7113] lo: entered promiscuous mode [ 102.626661][ T7113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.704256][ T7123] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 102.887340][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 103.204119][ T7149] openvswitch: netlink: Key type 14116 is out of range max 32 [ 103.507933][ T9] tipc: Node number set to 3227177878 [ 103.592193][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.600066][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.897147][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.250539][ T7204] netlink: 'syz.1.340': attribute type 6 has an invalid length. [ 104.644473][ T7159] gtp0: left promiscuous mode [ 104.704932][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.720275][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.775519][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.827297][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.886746][ T7209] syzkaller0: entered allmulticast mode [ 105.117531][ T7224] __nla_validate_parse: 6 callbacks suppressed [ 105.117550][ T7224] netlink: 192 bytes leftover after parsing attributes in process `syz.1.347'. [ 105.190463][ T7229] netlink: 192 bytes leftover after parsing attributes in process `syz.1.347'. [ 105.235044][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 105.274089][ T7237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 105.384487][ T7241] vlan2: entered promiscuous mode [ 105.395349][ T7243] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 105.429353][ T7241] bridge0: entered promiscuous mode [ 105.452239][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 105.475429][ T7252] bridge_slave_1: left allmulticast mode [ 105.488009][ T7252] bridge_slave_1: left promiscuous mode [ 105.501422][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.543590][ T7252] bridge_slave_0: left allmulticast mode [ 105.568754][ T7252] bridge_slave_0: left promiscuous mode [ 105.574594][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.606143][ T7262] netlink: 116 bytes leftover after parsing attributes in process `syz.3.354'. [ 106.180645][ T7286] netlink: 'syz.0.364': attribute type 21 has an invalid length. [ 106.213396][ T7286] netlink: 'syz.0.364': attribute type 6 has an invalid length. [ 106.222043][ T7286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.364'. [ 106.321103][ T7291] ieee802154 phy0 wpan0: encryption failed: -90 [ 106.331432][ T7282] syz_tun: entered allmulticast mode [ 106.360054][ T7295] ieee802154 phy0 wpan0: encryption failed: -90 [ 106.408041][ T7299] openvswitch: netlink: Flow key attribute not present in set flow. [ 106.466359][ T7302] netlink: 248 bytes leftover after parsing attributes in process `syz.3.370'. [ 106.476902][ T7281] syz_tun: left allmulticast mode [ 106.521643][ T7305] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 106.905213][ T7329] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 107.174256][ T7342] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 107.917210][ T7388] syzkaller0: entered promiscuous mode [ 107.942269][ T7388] syzkaller0: entered allmulticast mode [ 107.985429][ T7385] netlink: 'syz.2.392': attribute type 9 has an invalid length. [ 108.116844][ T7397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.396'. [ 108.427903][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 108.837787][ T7434] nbd: must specify a device to reconfigure [ 108.916511][ T7439] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 108.989578][ T7442] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.402835][ T7479] netlink: 'syz.2.419': attribute type 12 has an invalid length. [ 109.570394][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805675dc00: rx timeout, send abort [ 109.653914][ T7494] lo: left promiscuous mode [ 109.689365][ T7494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.742268][ T7496] xfrm1: entered promiscuous mode [ 109.747898][ T7496] xfrm1: entered allmulticast mode [ 109.799883][ T7503] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 109.869807][ T12] wlan1: Trigger new scan to find an IBSS to join [ 110.069382][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805675c400: rx timeout, send abort [ 110.079054][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805675dc00: abort rx timeout. Force session deactivation [ 110.180641][ T7522] __nla_validate_parse: 7 callbacks suppressed [ 110.180657][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 110.308259][ T7521] lo speed is unknown, defaulting to 1000 [ 110.577610][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805675c400: abort rx timeout. Force session deactivation [ 110.801112][ T7555] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 111.023704][ T7570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.443'. [ 111.042737][ T7521] netlink: 'syz.4.431': attribute type 12 has an invalid length. [ 111.282532][ T7577] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 111.522548][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 111.713243][ T55] block nbd0: Possible stuck request ffff8880255be000: control (read@0,1024B). Runtime 30 seconds [ 111.725258][ T55] block nbd0: Possible stuck request ffff8880255be1c0: control (read@1024,1024B). Runtime 30 seconds [ 111.736816][ T55] block nbd0: Possible stuck request ffff8880255be380: control (read@2048,1024B). Runtime 30 seconds [ 111.749829][ T55] block nbd0: Possible stuck request ffff8880255be540: control (read@3072,1024B). Runtime 30 seconds [ 111.782913][ T7597] can: request_module (can-proto-0) failed. [ 111.802676][ T7607] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 111.855479][ T7607] netlink: 48 bytes leftover after parsing attributes in process `syz.2.456'. [ 112.042493][ T7614] lo speed is unknown, defaulting to 1000 [ 112.061372][ T7617] nbd: must specify a device to reconfigure [ 112.118054][ T7614] lo speed is unknown, defaulting to 1000 [ 112.194522][ T7614] lo speed is unknown, defaulting to 1000 [ 112.371972][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.463'. [ 112.392448][ T7632] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 112.480536][ T7632] tipc: Enabled bearer , priority 0 [ 112.502114][ T7632] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 112.541898][ T7632] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 112.605548][ T7632] tipc: Resetting bearer [ 112.613560][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 112.656744][ T7632] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 112.802490][ T7614] infiniband syz0: set down [ 112.808433][ T7173] lo speed is unknown, defaulting to 1000 [ 112.815038][ T7614] infiniband syz0: added lo [ 112.900675][ T7614] RDS/IB: syz0: added [ 112.912012][ T7614] smc: adding ib device syz0 with port count 1 [ 112.917161][ T12] wlan1: Trigger new scan to find an IBSS to join [ 112.922879][ T7649] vlan4: entered allmulticast mode [ 112.930811][ T7614] smc: ib device syz0 port 1 has pnetid [ 112.936886][ T7649] hsr0: entered allmulticast mode [ 112.943339][ T7649] hsr_slave_0: entered allmulticast mode [ 112.949219][ T7649] hsr_slave_1: entered allmulticast mode [ 112.958085][ T6015] lo speed is unknown, defaulting to 1000 [ 112.985527][ T7614] lo speed is unknown, defaulting to 1000 [ 112.989162][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.229892][ T7658] lo speed is unknown, defaulting to 1000 [ 113.489176][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 113.805742][ T7614] lo speed is unknown, defaulting to 1000 [ 114.218365][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 114.231559][ T7704] netlink: 'syz.2.486': attribute type 1 has an invalid length. [ 114.273389][ T7702] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 114.288089][ T7702] netlink: 184 bytes leftover after parsing attributes in process `syz.0.485'. [ 114.527244][ T7658] lo speed is unknown, defaulting to 1000 [ 114.612421][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 114.892981][ T7728] delete_channel: no stack [ 114.933582][ T7726] lo speed is unknown, defaulting to 1000 [ 115.171640][ T7614] lo speed is unknown, defaulting to 1000 [ 115.232078][ T3013] wlan1: Creating new IBSS network, BSSID 52:91:53:aa:03:c1 [ 115.750551][ T7750] netlink: 'syz.0.501': attribute type 2 has an invalid length. [ 115.829301][ T7726] lo speed is unknown, defaulting to 1000 [ 116.267895][ T7614] lo speed is unknown, defaulting to 1000 [ 117.098772][ T7614] lo speed is unknown, defaulting to 1000 [ 117.307846][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 117.328416][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 117.343205][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 117.353086][ T7790] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 117.363241][ T7791] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 117.390913][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 117.403483][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 117.413640][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 117.556523][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'. [ 117.580414][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 117.608700][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 118.267575][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 118.614376][ T7831] netlink: 'syz.3.526': attribute type 3 has an invalid length. [ 119.346193][ T7872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.382429][ T7873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.430755][ T7883] tc_dump_action: action bad kind [ 119.737696][ T7897] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 119.777223][ T7897] 0ªî{X¹¦: entered allmulticast mode [ 119.785667][ T7897] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 119.804212][ T7892] lo speed is unknown, defaulting to 1000 [ 119.812225][ T7892] lo speed is unknown, defaulting to 1000 [ 119.964819][ T7910] pim6reg1: entered promiscuous mode [ 120.004217][ T7910] pim6reg1: entered allmulticast mode [ 120.065247][ T7915] openvswitch: netlink: Flow key attr not present in new flow. [ 120.243068][ T7917] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 120.281046][ T7917] netlink: 'syz.4.554': attribute type 16 has an invalid length. [ 120.289148][ T7917] netlink: 'syz.4.554': attribute type 3 has an invalid length. [ 120.731065][ T7938] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 122.531480][ T8049] __nla_validate_parse: 14 callbacks suppressed [ 122.531499][ T8049] netlink: 132 bytes leftover after parsing attributes in process `syz.2.586'. [ 122.600705][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.609912][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'. [ 122.625862][ T8052] syzkaller1: entered promiscuous mode [ 122.631784][ T8052] syzkaller1: entered allmulticast mode [ 122.637430][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'. [ 122.667434][ T8052] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 122.709191][ T8049] bridge0: port 3(vlan1) entered blocking state [ 122.738328][ T8049] bridge0: port 3(vlan1) entered disabled state [ 122.774895][ T8049] vlan1: entered allmulticast mode [ 122.792398][ T8049] bridge0: entered allmulticast mode [ 122.811249][ T8049] vlan1: left allmulticast mode [ 122.822352][ T8049] bridge0: left allmulticast mode [ 122.955126][ T8072] lo: entered promiscuous mode [ 122.975301][ T8072] netlink: 'syz.1.593': attribute type 2 has an invalid length. [ 122.996073][ T8072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.089809][ T8072] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 123.159637][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 123.187912][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 123.213507][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 123.249327][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 123.270248][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 123.368837][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 123.387979][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 123.440117][ T8105] netlink: 'syz.2.604': attribute type 11 has an invalid length. [ 123.471851][ T8105] netlink: 'syz.2.604': attribute type 5 has an invalid length. [ 123.774183][ T8131] netlink: 'syz.2.608': attribute type 4 has an invalid length. [ 124.187811][ T8155] vxcan1: entered promiscuous mode [ 124.270917][ T8164] netlink: 'syz.3.620': attribute type 2 has an invalid length. [ 124.987143][ T8200] syzkaller0: entered promiscuous mode [ 124.993180][ T8200] syzkaller0: entered allmulticast mode [ 125.050171][ T8199] tipc: Enabled bearer , priority 0 [ 125.147620][ T8201] syzkaller0: entered promiscuous mode [ 125.154536][ T8201] syzkaller0: entered allmulticast mode [ 125.281314][ T8198] tipc: Resetting bearer [ 125.343936][ T8198] tipc: Disabling bearer [ 125.667829][ T8239] netem: change failed [ 125.917147][ T8251] openvswitch: netlink: Missing key (keys=40, expected=100) [ 126.237337][ T8269] sctp: [Deprecated]: syz.2.655 (pid 8269) Use of int in max_burst socket option. [ 126.237337][ T8269] Use struct sctp_assoc_value instead [ 126.608337][ T8296] sctp: [Deprecated]: syz.1.661 (pid 8296) Use of int in max_burst socket option. [ 126.608337][ T8296] Use struct sctp_assoc_value instead [ 126.976590][ T8298] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 127.082499][ T8320] dvmrp0: entered allmulticast mode [ 127.348798][ T8340] netlink: 'syz.3.673': attribute type 2 has an invalid length. [ 127.406272][ T8343] netlink: 'syz.2.675': attribute type 11 has an invalid length. [ 127.955232][ T8383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.001560][ T8374] __nla_validate_parse: 18 callbacks suppressed [ 128.001580][ T8374] netlink: 60 bytes leftover after parsing attributes in process `syz.1.681'. [ 128.037646][ T8382] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.237808][ T8395] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 128.328283][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 128.374049][ T8401] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 128.400177][ T8401] netlink: 'syz.1.693': attribute type 2 has an invalid length. [ 128.471821][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'. [ 128.607957][ T8413] lo speed is unknown, defaulting to 1000 [ 128.624717][ T8413] lo speed is unknown, defaulting to 1000 [ 128.649709][ T8416] dvmrp0: entered allmulticast mode [ 128.813378][ T8429] netlink: 196 bytes leftover after parsing attributes in process `syz.0.700'. [ 128.944960][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 129.001288][ T8451] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 129.015802][ T8451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.244613][ T8460] tipc: Enabling of bearer rejected, media not registered [ 129.505206][ T8471] netlink: 48 bytes leftover after parsing attributes in process `syz.1.706'. [ 129.542139][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 129.576507][ T8476] pim6reg: entered allmulticast mode [ 129.609965][ T8474] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 129.624321][ T8474] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 129.654856][ T8479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.796602][ T8485] tunl0: entered promiscuous mode [ 129.808898][ T8485] netlink: 'syz.2.711': attribute type 3 has an invalid length. [ 129.822067][ T8485] netlink: 9 bytes leftover after parsing attributes in process `syz.2.711'. [ 129.839450][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 129.848355][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 129.963283][ T8493] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 130.005787][ T8493] netlink: 'syz.0.713': attribute type 2 has an invalid length. [ 130.146815][ T8501] tipc: Enabling of bearer rejected, already enabled [ 130.348824][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 130.473555][ T8517] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 130.514287][ T8517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.586322][ T8517] veth3: entered promiscuous mode [ 130.631091][ T8517] bond1: entered allmulticast mode [ 131.280944][ T8559] tipc: Enabling of bearer rejected, already enabled [ 131.674403][ T8572] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 131.704781][ T8572] bond2: (slave vcan1): Error -95 calling set_mac_address [ 131.793004][ T8579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.424358][ T8611] team_slave_0: entered promiscuous mode [ 132.431029][ T8611] team_slave_1: entered promiscuous mode [ 132.462324][ T8611] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 132.477394][ T8611] team0: Device macvtap1 is already an upper device of the team interface [ 132.495509][ T8611] team_slave_0: left promiscuous mode [ 132.501090][ T8611] team_slave_1: left promiscuous mode [ 132.590784][ T8623] pimreg65560: entered allmulticast mode [ 132.860000][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.050057][ T8645] tipc: Started in network mode [ 133.055003][ T8645] tipc: Node identity 76f6c6646bf6, cluster identity 4711 [ 133.103179][ T8645] tipc: Enabled bearer , priority 0 [ 133.131564][ T8650] syzkaller0: entered promiscuous mode [ 133.149378][ T8650] syzkaller0: entered allmulticast mode [ 133.156165][ T8652] xt_l2tp: v2 tid > 0xffff: 1114244 [ 133.173809][ T8645] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 133.240549][ T8645] tipc: Resetting bearer [ 133.293456][ T8644] tipc: Resetting bearer [ 133.328393][ T8644] tipc: Disabling bearer [ 133.359319][ T8663] __nla_validate_parse: 7 callbacks suppressed [ 133.359337][ T8663] netlink: 212364 bytes leftover after parsing attributes in process `syz.4.763'. [ 133.382081][ T8663] openvswitch: netlink: Message has 5 unknown bytes. [ 133.552814][ T8672] tipc: Enabling of bearer rejected, failed to enable media [ 133.629135][ T8672] syzkaller0: entered promiscuous mode [ 133.652738][ T8672] syzkaller0: entered allmulticast mode [ 133.671429][ T8682] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 133.749946][ T8685] sit0: entered promiscuous mode [ 133.787919][ T8685] netlink: 'syz.1.770': attribute type 1 has an invalid length. [ 133.816244][ T8685] netlink: 1 bytes leftover after parsing attributes in process `syz.1.770'. [ 134.021287][ T8696] netlink: 104 bytes leftover after parsing attributes in process `syz.3.773'. [ 134.356738][ T8711] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 134.374294][ T8710] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 134.385455][ T8714] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 134.587821][ T8727] netlink: 'syz.1.783': attribute type 12 has an invalid length. [ 134.628043][ T8726] veth0_to_bridge: entered promiscuous mode [ 134.680310][ T8728] netlink: 76 bytes leftover after parsing attributes in process `syz.2.782'. [ 134.828221][ T8723] veth0_to_bridge: left promiscuous mode [ 134.938779][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.788'. [ 135.113990][ T8759] netlink: 'syz.0.791': attribute type 10 has an invalid length. [ 135.162007][ T8752] can: request_module (can-proto-0) failed. [ 135.206582][ T8764] tipc: Enabled bearer , priority 0 [ 135.216649][ T8765] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 135.236937][ T8765] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 135.242617][ T8760] syzkaller0: entered promiscuous mode [ 135.263797][ T8760] syzkaller0: entered allmulticast mode [ 135.277654][ T7182] lo speed is unknown, defaulting to 1000 [ 135.291444][ T7182] syz0: Port: 1 Link ACTIVE [ 135.297455][ T7182] lo speed is unknown, defaulting to 1000 [ 135.311955][ T8760] tipc: Resetting bearer [ 135.361057][ T8758] tipc: Resetting bearer [ 135.381656][ T8758] tipc: Disabling bearer [ 135.448473][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.798'. [ 135.490090][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.798'. [ 135.574498][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 135.631339][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 135.801637][ T8791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.918859][ T8796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.005526][ T8816] netlink: 9 bytes leftover after parsing attributes in process `syz.3.808'. [ 136.032016][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 136.051696][ T8816] gretap0: entered promiscuous mode [ 136.062799][ T8816] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 136.203401][ T8822] netlink: 'syz.2.809': attribute type 6 has an invalid length. [ 136.233415][ T8831] netlink: 'syz.1.811': attribute type 6 has an invalid length. [ 136.429920][ T51] Bluetooth: hci0: command tx timeout [ 136.623580][ T8839] 0ªî{X¹¦: renamed from gretap0 [ 136.636613][ T8839] 0ªî{X¹¦: left promiscuous mode [ 136.664048][ T8839] 0ªî{X¹¦: entered allmulticast mode [ 136.702498][ T8839] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 136.937576][ T8871] team_slave_0: entered promiscuous mode [ 136.943371][ T8871] team_slave_1: entered promiscuous mode [ 136.951393][ T8871] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 136.958950][ T8871] team0: Device macvtap1 is already an upper device of the team interface [ 136.981130][ T8879] netlink: 'syz.4.825': attribute type 32 has an invalid length. [ 136.997830][ T8871] team_slave_0: left promiscuous mode [ 137.003437][ T8871] team_slave_1: left promiscuous mode [ 137.406014][ T8895] : entered promiscuous mode [ 137.641971][ T8914] sctp: [Deprecated]: syz.2.834 (pid 8914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.641971][ T8914] Use struct sctp_sack_info instead [ 137.726790][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 137.756786][ T8914] sctp: [Deprecated]: syz.2.834 (pid 8914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.756786][ T8914] Use struct sctp_sack_info instead [ 138.220690][ T8951] netlink: zone id is out of range [ 138.237391][ T8951] netlink: zone id is out of range [ 138.256201][ T8950] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 138.266306][ T8951] netlink: zone id is out of range [ 138.275532][ T8951] netlink: zone id is out of range [ 138.282969][ T8950] openvswitch: netlink: Key 27 has unexpected len 460 expected 40 [ 138.298999][ T8951] netlink: zone id is out of range [ 138.315850][ T8951] netlink: zone id is out of range [ 138.332631][ T8951] netlink: zone id is out of range [ 138.362886][ T8951] netlink: zone id is out of range [ 138.392681][ T8951] netlink: zone id is out of range [ 138.804537][ T8982] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 [ 138.810071][ T8985] __nla_validate_parse: 10 callbacks suppressed [ 138.810089][ T8985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.856'. [ 138.843637][ T8982] netlink: 124 bytes leftover after parsing attributes in process `syz.1.855'. [ 139.129147][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.863'. [ 139.167640][ T9003] geneve2: entered promiscuous mode [ 139.190404][ T9006] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 139.289815][ T9014] netlink: 144 bytes leftover after parsing attributes in process `syz.1.864'. [ 139.462846][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 139.513551][ T9011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'. [ 140.030131][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.204484][ T9043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.225238][ T9043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.395664][ T9043] bridge1: left promiscuous mode [ 140.402142][ T9043] bridge1: left allmulticast mode [ 140.418275][ T9043] vlan2: left promiscuous mode [ 140.423943][ T9043] bridge0: left promiscuous mode [ 140.433203][ T9062] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 140.466068][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 140.532346][ T8446] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.591427][ T8446] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.627810][ T8446] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.655927][ T8446] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.925327][ T9091] netlink: 'syz.1.886': attribute type 12 has an invalid length. [ 140.948725][ T9091] netlink: 'syz.1.886': attribute type 29 has an invalid length. [ 140.999662][ T9091] netlink: 148 bytes leftover after parsing attributes in process `syz.1.886'. [ 141.061160][ T9091] netlink: 59 bytes leftover after parsing attributes in process `syz.1.886'. [ 141.147314][ T9099] lo: left promiscuous mode [ 141.621842][ T9135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.893'. [ 141.790283][ T55] block nbd0: Possible stuck request ffff8880255be000: control (read@0,1024B). Runtime 60 seconds [ 141.801500][ T55] block nbd0: Possible stuck request ffff8880255be1c0: control (read@1024,1024B). Runtime 60 seconds [ 141.812939][ T55] block nbd0: Possible stuck request ffff8880255be380: control (read@2048,1024B). Runtime 60 seconds [ 141.824160][ T55] block nbd0: Possible stuck request ffff8880255be540: control (read@3072,1024B). Runtime 60 seconds [ 141.927283][ T9157] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 141.948505][ T9161] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 142.025826][ T9163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.428747][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.618933][ T9189] IPVS: length: 84 != 24 [ 142.727772][ T9203] ieee802154 phy0 wpan0: encryption failed: -90 [ 142.969158][ T9213] tipc: Enabled bearer , priority 0 [ 143.025400][ T9213] syzkaller0: entered promiscuous mode [ 143.053936][ T9213] syzkaller0: entered allmulticast mode [ 143.236932][ T9246] tipc: Resetting bearer [ 143.382473][ T9254] net_ratelimit: 8 callbacks suppressed [ 143.382490][ T9254] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 143.693011][ T9209] tipc: Resetting bearer [ 143.706688][ T9209] tipc: Disabling bearer [ 143.931926][ T9272] __nla_validate_parse: 6 callbacks suppressed [ 143.931944][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 143.948212][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.923'. [ 143.959417][ T51] Bluetooth: hci0: command tx timeout [ 144.111462][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 144.126373][ T9289] netlink: 'syz.0.929': attribute type 2 has an invalid length. [ 144.310977][ T9296] team0: Device ip6gre1 is of different type [ 144.394877][ T9298] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 144.653301][ T9315] dvmrp0: left allmulticast mode [ 144.779377][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 144.818183][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 144.823294][ T9321] tipc: New replicast peer: 255.255.255.255 [ 144.849858][ T9321] tipc: Enabled bearer , priority 10 [ 144.920791][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 145.269208][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 145.455323][ T9343] netlink: 104 bytes leftover after parsing attributes in process `syz.4.947'. [ 145.574606][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 145.598996][ T9350] hsr_slave_0: left promiscuous mode [ 145.621980][ T9350] hsr_slave_1: left promiscuous mode [ 145.779174][ T9360] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 145.819749][ T9360] netlink: 228 bytes leftover after parsing attributes in process `syz.3.954'. [ 145.834405][ T9364] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 145.849270][ T7176] tipc: Node number set to 1789547101 [ 145.900106][ T9367] netlink: 'syz.1.956': attribute type 42 has an invalid length. [ 145.991900][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.002325][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.010650][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.019314][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.028022][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.096169][ T9376] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 146.108718][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 146.125030][ T9376] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 146.135149][ T9376] gretap1: entered promiscuous mode [ 146.140578][ T9376] gretap1: entered allmulticast mode [ 146.264958][ T9388] netlink: 'syz.4.962': attribute type 1 has an invalid length. [ 146.266349][ T9371] lo speed is unknown, defaulting to 1000 [ 146.296489][ T9371] lo speed is unknown, defaulting to 1000 [ 146.759822][ T9409] netlink: 'syz.4.967': attribute type 4 has an invalid length. [ 147.090274][ T9419] lo speed is unknown, defaulting to 1000 [ 147.183033][ T9419] lo speed is unknown, defaulting to 1000 [ 147.265693][ T9416] lo speed is unknown, defaulting to 1000 [ 147.400051][ T9434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.702327][ T9371] chnl_net:caif_netlink_parms(): no params data found [ 147.814660][ T9416] lo speed is unknown, defaulting to 1000 [ 147.866822][ T9476] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 147.932933][ T9476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.036466][ T9485] nbd: socks must be embedded in a SOCK_ITEM attr [ 148.063399][ T9476] bond2: (slave geneve2): making interface the new active one [ 148.080406][ T9476] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 148.109224][ T51] Bluetooth: hci2: command tx timeout [ 148.211747][ T9488] netlink: 'syz.3.984': attribute type 7 has an invalid length. [ 148.265339][ T9493] netlink: 'syz.3.984': attribute type 10 has an invalid length. [ 148.303264][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.315560][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.333761][ T9371] bridge_slave_0: entered allmulticast mode [ 148.350760][ T9371] bridge_slave_0: entered promiscuous mode [ 148.410260][ T9496] netlink: 'syz.0.986': attribute type 4 has an invalid length. [ 148.428223][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.445757][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.453852][ T9371] bridge_slave_1: entered allmulticast mode [ 148.472951][ T9371] bridge_slave_1: entered promiscuous mode [ 148.834247][ T9514] can: request_module (can-proto-0) failed. [ 148.915033][ T9371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.001600][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.009813][ T9520] __nla_validate_parse: 11 callbacks suppressed [ 149.009830][ T9520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 149.173187][ T9509] clip:clip_setentry: non-CLIP VCC [ 149.266950][ T9371] team0: Port device team_slave_0 added [ 149.326079][ T9371] team0: Port device team_slave_1 added [ 149.552682][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.580583][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.664137][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.715240][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.744960][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.816153][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.837964][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 149.866482][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1002'. [ 149.910624][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 150.146212][ T9371] hsr_slave_0: entered promiscuous mode [ 150.183596][ T9371] hsr_slave_1: entered promiscuous mode [ 150.189021][ T51] Bluetooth: hci2: command tx timeout [ 150.215208][ T9371] debugfs: 'hsr0' already exists in 'hsr' [ 150.224425][ T9371] Cannot create hsr debugfs directory [ 150.237825][ T9566] netlink: 'syz.4.1006': attribute type 21 has an invalid length. [ 150.370990][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 150.386737][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 150.727755][ T9586] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.758184][ T9586] sctp: [Deprecated]: syz.1.1012 (pid 9586) Use of int in max_burst socket option. [ 150.758184][ T9586] Use struct sctp_assoc_value instead [ 151.111200][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 151.213186][ T9607] netlink: 'syz.4.1016': attribute type 6 has an invalid length. [ 151.266301][ T9607] batman_adv: batadv0: Adding interface: geneve2 [ 151.280872][ T9607] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 151.328504][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 151.386503][ T9615] netlink: 'syz.0.1018': attribute type 3 has an invalid length. [ 151.449318][ T9371] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.587982][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1019'. [ 151.597165][ T9371] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.629835][ T9371] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.662396][ T9371] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.933890][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 152.095520][ T9371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.225966][ T9371] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.269002][ T51] Bluetooth: hci2: command tx timeout [ 152.278121][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.286077][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.304346][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.311599][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.443140][ T9673] netlink: 'syz.4.1033': attribute type 21 has an invalid length. [ 152.479041][ T9672] tipc: Enabling of bearer rejected, failed to enable media [ 152.526416][ T9674] tipc: Enabling of bearer rejected, failed to enable media [ 152.732638][ T9687] veth0_to_bond: entered allmulticast mode [ 153.225206][ T9715] netlink: 'syz.4.1045': attribute type 1 has an invalid length. [ 153.308059][ T9371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.584667][ T9733] netlink: 'syz.0.1049': attribute type 2 has an invalid length. [ 154.033792][ T9371] veth0_vlan: entered promiscuous mode [ 154.080606][ T9371] veth1_vlan: entered promiscuous mode [ 154.283940][ T9371] veth0_macvtap: entered promiscuous mode [ 154.307470][ T9371] veth1_macvtap: entered promiscuous mode [ 154.350678][ T51] Bluetooth: hci2: command tx timeout [ 154.375913][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.437033][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.552820][ T8448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.574665][ T8448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.644394][ T8448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.701247][ T8446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.748064][ T9793] __nla_validate_parse: 11 callbacks suppressed [ 154.748080][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1066'. [ 154.908168][ T8446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.927142][ T8446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.962269][ T8446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.971197][ T8446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.201989][ T9814] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1072'. [ 155.271719][ T9819] netlink: 'syz.5.943': attribute type 10 has an invalid length. [ 155.285858][ T9819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.308996][ T9819] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.327307][ T9818] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1074'. [ 155.339564][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 155.463639][ T9830] netlink: 'syz.0.1076': attribute type 8 has an invalid length. [ 155.484511][ T9830] netlink: 'syz.0.1076': attribute type 4 has an invalid length. [ 155.514761][ T9830] netlink: 'syz.0.1076': attribute type 4 has an invalid length. [ 155.549280][ T6186] IPVS: ip_vs_send_async error -101 [ 155.579392][ T9828] lo speed is unknown, defaulting to 1000 [ 155.603970][ T9828] lo speed is unknown, defaulting to 1000 [ 155.645808][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 156.237886][ T9860] tipc: Enabled bearer , priority 0 [ 156.265855][ T9860] syzkaller0: entered promiscuous mode [ 156.276362][ T9860] syzkaller0: entered allmulticast mode [ 156.367867][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1087'. [ 156.379099][ T9860] tipc: Resetting bearer [ 156.477029][ T9858] tipc: Resetting bearer [ 156.512408][ T9858] tipc: Disabling bearer [ 156.869258][ T9893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1093'. [ 157.017586][ T9899] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1094'. [ 157.167991][ T5924] IPVS: starting estimator thread 0... [ 157.174298][ T9901] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.278690][ T9903] IPVS: using max 28 ests per chain, 67200 per kthread [ 157.315328][ T9909] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 157.497034][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 157.516886][ T9914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.581967][ T9914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.707331][ T9925] Illegal XDP return value 1730390722 on prog (id 242) dev N/A, expect packet loss! [ 158.711145][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 158.728193][ T9941] netlink: 'syz.4.1105': attribute type 8 has an invalid length. [ 158.832407][ T9957] tunl0: entered promiscuous mode [ 158.875713][ T9957] netlink: 'syz.1.1108': attribute type 3 has an invalid length. [ 159.013315][ T9959] ip6gre2: entered allmulticast mode [ 159.128385][ T9978] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 159.136817][ T9978] netlink: 'syz.0.1115': attribute type 4 has an invalid length. [ 159.139300][ T9973] netlink: 'syz.1.1114': attribute type 33 has an invalid length. [ 159.680572][ T9998] tipc: Enabling of bearer rejected, failed to enable media [ 159.735035][T10011] team0: Device xfrm2 is of different type [ 159.743755][T10016] netlink: 'syz.1.1129': attribute type 5 has an invalid length. [ 160.018383][T10028] netlink: 'syz.3.1132': attribute type 32 has an invalid length. [ 160.062932][T10033] __nla_validate_parse: 4 callbacks suppressed [ 160.062949][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 160.079626][T10024] netlink: 'syz.3.1132': attribute type 32 has an invalid length. [ 160.085793][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 160.148839][T10033] openvswitch: netlink: Unknown nsh attribute 0 [ 160.155240][T10033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.328981][T10059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1137'. [ 160.388071][T10065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.523134][T10069] netlink: 'syz.4.1141': attribute type 2 has an invalid length. [ 160.550359][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 160.568395][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1143'. [ 160.583551][T10069] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1141'. [ 160.845394][T10084] pim6reg1: entered promiscuous mode [ 160.852594][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1147'. [ 160.868799][T10084] pim6reg1: entered allmulticast mode [ 161.342320][T10119] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1159'. [ 161.355144][T10124] netlink: 'syz.4.1161': attribute type 30 has an invalid length. [ 161.375120][T10121] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1159'. [ 161.479472][T10131] ksmbd: Unknown IPC event: 8, ignore. [ 161.511621][T10138] sctp: [Deprecated]: syz.4.1164 (pid 10138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.511621][T10138] Use struct sctp_sack_info instead [ 161.578058][T10136] sctp: [Deprecated]: syz.4.1164 (pid 10136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.578058][T10136] Use struct sctp_sack_info instead [ 161.581156][T10141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.897695][T10158] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 161.927001][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'. [ 161.959234][T10161] sch_tbf: peakrate 6 is lower than or equals to rate 9983240478389725977 ! [ 162.171725][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.187186][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.236624][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.264610][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.390588][T10186] tipc: Cannot configure node identity twice [ 163.076861][T10227] tipc: Enabling of bearer rejected, already enabled [ 163.107875][T10220] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 163.347315][T10236] lo speed is unknown, defaulting to 1000 [ 163.400250][T10236] lo speed is unknown, defaulting to 1000 [ 163.645128][T10257] netlink: ct family unspecified [ 163.652647][T10257] openvswitch: netlink: Actions may not be safe on all matching packets [ 163.951130][T10262] bridge0: port 3(veth0_to_bridge) entered blocking state [ 163.969944][T10262] bridge0: port 3(veth0_to_bridge) entered disabled state [ 164.004372][T10262] veth0_to_bridge: entered allmulticast mode [ 164.042836][T10262] veth0_to_bridge: entered promiscuous mode [ 164.059081][T10262] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.088960][T10262] bridge0: port 3(veth0_to_bridge) entered blocking state [ 164.096426][T10262] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 164.204803][T10268] validate_nla: 3 callbacks suppressed [ 164.204819][T10268] netlink: 'syz.3.1204': attribute type 10 has an invalid length. [ 164.244596][T10268] team0: Device hsr_slave_0 failed to register rx_handler [ 164.831091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 164.843642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 164.856076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 164.868505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 164.881007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 164.893452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 164.905902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 164.918367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 164.962120][T10288] bond2: entered promiscuous mode [ 165.024213][T10288] bond2: entered allmulticast mode [ 165.088807][T10288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.240644][T10288] __nla_validate_parse: 16 callbacks suppressed [ 165.240663][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 165.297695][ T6128] udevd[6128]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 165.423988][ T6128] udevd[6128]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 165.868950][ T49] wlan1: Trigger new scan to find an IBSS to join [ 165.984824][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1212'. [ 166.039559][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 166.297460][T10311] bridge_slave_0: left allmulticast mode [ 166.304108][T10311] bridge_slave_0: left promiscuous mode [ 166.312221][T10311] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.397363][T10321] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1216'. [ 166.452550][T10325] netlink: 'syz.3.1218': attribute type 4 has an invalid length. [ 166.487764][T10325] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1218'. [ 166.632426][T10332] sctp: [Deprecated]: syz.0.1220 (pid 10332) Use of int in maxseg socket option. [ 166.632426][T10332] Use struct sctp_assoc_value instead [ 166.659439][T10334] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:0 [ 166.957899][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1223'. [ 168.649480][ C1] net_ratelimit: 5491 callbacks suppressed [ 168.649500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.668358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.681381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.694312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.708823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.721811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.734842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.747759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.760848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.773868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.447522][ T8446] wlan1: Trigger new scan to find an IBSS to join [ 172.804110][ T5234] udevd[5234]: worker [5859] /devices/virtual/block/nbd0 is taking a long time [ 172.836464][ T55] block nbd0: Possible stuck request ffff8880255be000: control (read@0,1024B). Runtime 90 seconds [ 172.838590][ C1] sched: DL replenish lagged too much [ 172.884579][ T55] block nbd0: Possible stuck request ffff8880255be1c0: control (read@1024,1024B). Runtime 90 seconds [ 172.938150][ T55] block nbd0: Possible stuck request ffff8880255be380: control (read@2048,1024B). Runtime 90 seconds [ 172.987078][ T55] block nbd0: Possible stuck request ffff8880255be540: control (read@3072,1024B). Runtime 90 seconds [ 173.659189][ C1] net_ratelimit: 6855 callbacks suppressed [ 173.659209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.677868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.690681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.704874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.717668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.730438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.743214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.755999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.769134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.781916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.668673][ C1] net_ratelimit: 6708 callbacks suppressed [ 178.668693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.687266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.699934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.712616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.725734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.739983][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.752807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.765504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.778199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.790995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.679162][ C1] net_ratelimit: 12664 callbacks suppressed [ 183.679183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.679898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 183.685925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.698746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 183.709992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.722625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 183.733964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.746741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 183.758109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.770882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 188.689004][ C0] net_ratelimit: 9584 callbacks suppressed [ 188.689032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 188.689573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.696589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 188.707366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.720864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 188.732244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.744978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 188.755776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.769323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 188.780547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.699165][ C0] net_ratelimit: 9473 callbacks suppressed [ 193.699186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 193.699266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.707064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 193.717678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.731294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 193.742839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.755505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 193.766418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.779909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 193.791232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.492563][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.830008][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 196.836194][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 198.708947][ C1] net_ratelimit: 9372 callbacks suppressed [ 198.708966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.709152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 198.715281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.728634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 198.739935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.752880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 198.763619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.776801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 198.788296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.800970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 199.389484][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.357259][ T8448] wlan1: Creating new IBSS network, BSSID ca:6f:26:4c:b3:a5 [ 203.718933][ C1] net_ratelimit: 9459 callbacks suppressed [ 203.718954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.719319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 203.726362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.740215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 203.751150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.764849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 203.776281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.789337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 203.800073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.813394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 208.729446][ C1] net_ratelimit: 9904 callbacks suppressed [ 208.729468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.730064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 208.736125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.748571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 208.761881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.775212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 208.786079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.798347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 208.811117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.824419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 213.738661][ C1] net_ratelimit: 11139 callbacks suppressed [ 213.738681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.739584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 213.745581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.756959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 213.768971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.782373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 213.793728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.805152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 213.817147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.830598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 218.749062][ C0] net_ratelimit: 11033 callbacks suppressed [ 218.749081][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 218.749219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.755389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 218.767438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.781839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 218.792216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.803712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 218.815626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.830330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 218.840456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.800909][ T6186] IPVS: ip_vs_send_async error -101 [ 223.758725][ C1] net_ratelimit: 10106 callbacks suppressed [ 223.758745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.761305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 223.765635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.777066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 223.788991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.803443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 223.813284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.824988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 223.837659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.851576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 228.769000][ C1] net_ratelimit: 10107 callbacks suppressed [ 228.769019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.770822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 228.775260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.787322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 228.799617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.813725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 228.824022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.835434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 228.847401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.861871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 230.329023][ T55] block nbd0: Possible stuck request ffff8880255be000: control (read@0,1024B). Runtime 120 seconds [ 230.353329][ T55] block nbd0: Possible stuck request ffff8880255be1c0: control (read@1024,1024B). Runtime 120 seconds [ 230.377884][ T55] block nbd0: Possible stuck request ffff8880255be380: control (read@2048,1024B). Runtime 120 seconds [ 230.402528][ T55] block nbd0: Possible stuck request ffff8880255be540: control (read@3072,1024B). Runtime 120 seconds [ 233.779158][ C1] net_ratelimit: 10251 callbacks suppressed [ 233.779180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.779404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 233.785458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.797492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 233.810160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.823891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 233.834028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.845441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 233.857409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.872181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 238.788815][ C1] net_ratelimit: 10318 callbacks suppressed [ 238.788835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.790680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 238.795754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.807478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 238.819274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.833668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 238.843517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.855222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 238.867781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.881816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 243.798627][ C0] net_ratelimit: 10142 callbacks suppressed [ 243.798647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 243.798667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.804924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 243.816989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.831195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 243.841277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.853222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 243.865932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.879413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 243.890337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.808744][ C1] net_ratelimit: 9675 callbacks suppressed [ 248.808764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.809232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 248.815814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.826979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 248.839040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.853554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 248.863508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.875188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 248.888999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.901272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:f9:fb:34:c8:a7, vlan:0) [ 251.282000][ T58] ------------[ cut here ]------------ [ 251.287713][ T58] WARNING: CPU: 1 PID: 58 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440 [ 251.311865][ T58] Modules linked in: [ 251.316022][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/R-cfg80 Not tainted syzkaller #0 PREEMPT(full) [ 251.339627][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.363348][ T58] Workqueue: cfg80211 cfg80211_event_work [ 251.384302][ T58] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 251.405682][ T58] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 06 a4 00 cc e8 72 77 e6 f6 90 0f 0b 90 eb bd e8 67 77 e6 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 57 77 e6 f6 90 0f 0b 90 e9 de fd [ 251.439053][ T58] RSP: 0018:ffffc900015f78c0 EFLAGS: 00010293 [ 251.445155][ T58] RAX: ffffffff8ad93629 RBX: dffffc0000000000 RCX: ffff88801b3c5a00 [ 251.467509][ T58] RDX: 0000000000000000 RSI: ffffffff8d9ba295 RDI: ffffffff8be33f00 [ 251.490287][ T58] RBP: ffffc900015f7990 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6 [ 251.498385][ T58] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: ffff88807a3c4d90 [ 251.520562][ T58] R13: 1ffff920002bef20 R14: ffff88802987b338 R15: 000000000000001f [ 251.542783][ T58] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 251.565622][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.586544][ T58] CR2: 00007f4c033056c0 CR3: 000000007ec68000 CR4: 00000000003526f0 [ 251.609332][ T58] Call Trace: [ 251.612645][ T58] [ 251.615577][ T58] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.634532][ T58] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 251.654249][ T58] ? __pfx___mutex_lock+0x10/0x10 [ 251.673387][ T58] cfg80211_process_wdev_events+0x38a/0x4f0 [ 251.693957][ T58] cfg80211_process_rdev_events+0xa1/0x110 [ 251.713690][ T58] cfg80211_event_work+0x31/0x70 [ 251.732971][ T58] ? process_scheduled_works+0x9ef/0x17b0 [ 251.752582][ T58] process_scheduled_works+0xae1/0x17b0 [ 251.758199][ T58] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.777736][ T58] ? assign_work+0x381/0x410 [ 251.797144][ T58] rescuer_thread+0x53c/0xdd0 [ 251.816103][ T58] ? rescuer_thread+0xbb/0xdd0 [ 251.834356][ T58] kthread+0x70e/0x8a0 [ 251.838467][ T58] ? __pfx_rescuer_thread+0x10/0x10 [ 251.857724][ T58] ? __pfx_kthread+0x10/0x10 [ 251.876108][ T58] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.895584][ T58] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.915347][ T58] ? __pfx_kthread+0x10/0x10 [ 251.933632][ T58] ret_from_fork+0x439/0x7d0 [ 251.938252][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 251.956833][ T58] ? __switch_to_asm+0x39/0x70 [ 251.975670][ T58] ? __switch_to_asm+0x33/0x70 [ 251.994860][ T58] ? __pfx_kthread+0x10/0x10 [ 252.013319][ T58] ret_from_fork_asm+0x1a/0x30 [ 252.018142][ T58] [ 252.035196][ T58] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.042515][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/R-cfg80 Not tainted syzkaller #0 PREEMPT(full) [ 252.052064][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.062237][ T58] Workqueue: cfg80211 cfg80211_event_work [ 252.067992][ T58] Call Trace: [ 252.071276][ T58] [ 252.074206][ T58] dump_stack_lvl+0x99/0x250 [ 252.078825][ T58] ? __asan_memcpy+0x40/0x70 [ 252.083418][ T58] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.088619][ T58] ? __pfx__printk+0x10/0x10 [ 252.093236][ T58] vpanic+0x281/0x750 [ 252.097222][ T58] ? __pfx__printk+0x10/0x10 [ 252.101856][ T58] ? __pfx_vpanic+0x10/0x10 [ 252.106362][ T58] ? is_bpf_text_address+0x26/0x2b0 [ 252.111576][ T58] panic+0xb9/0xc0 [ 252.115299][ T58] ? __pfx_panic+0x10/0x10 [ 252.119729][ T58] __warn+0x31b/0x4b0 [ 252.123707][ T58] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 252.129260][ T58] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 252.134856][ T58] report_bug+0x2be/0x4f0 [ 252.139190][ T58] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 252.144739][ T58] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 252.150323][ T58] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 252.155876][ T58] handle_bug+0x84/0x160 [ 252.160128][ T58] exc_invalid_op+0x1a/0x50 [ 252.164638][ T58] asm_exc_invalid_op+0x1a/0x20 [ 252.169484][ T58] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 252.175643][ T58] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 06 a4 00 cc e8 72 77 e6 f6 90 0f 0b 90 eb bd e8 67 77 e6 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 57 77 e6 f6 90 0f 0b 90 e9 de fd [ 252.195250][ T58] RSP: 0018:ffffc900015f78c0 EFLAGS: 00010293 [ 252.201332][ T58] RAX: ffffffff8ad93629 RBX: dffffc0000000000 RCX: ffff88801b3c5a00 [ 252.209313][ T58] RDX: 0000000000000000 RSI: ffffffff8d9ba295 RDI: ffffffff8be33f00 [ 252.217283][ T58] RBP: ffffc900015f7990 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6 [ 252.225261][ T58] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: ffff88807a3c4d90 [ 252.233234][ T58] R13: 1ffff920002bef20 R14: ffff88802987b338 R15: 000000000000001f [ 252.241224][ T58] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 252.246797][ T58] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.252010][ T58] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 252.257920][ T58] ? __pfx___mutex_lock+0x10/0x10 [ 252.262951][ T58] cfg80211_process_wdev_events+0x38a/0x4f0 [ 252.268863][ T58] cfg80211_process_rdev_events+0xa1/0x110 [ 252.274678][ T58] cfg80211_event_work+0x31/0x70 [ 252.279612][ T58] ? process_scheduled_works+0x9ef/0x17b0 [ 252.285330][ T58] process_scheduled_works+0xae1/0x17b0 [ 252.290904][ T58] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.296894][ T58] ? assign_work+0x381/0x410 [ 252.301491][ T58] rescuer_thread+0x53c/0xdd0 [ 252.306190][ T58] ? rescuer_thread+0xbb/0xdd0 [ 252.310980][ T58] kthread+0x70e/0x8a0 [ 252.315053][ T58] ? __pfx_rescuer_thread+0x10/0x10 [ 252.320260][ T58] ? __pfx_kthread+0x10/0x10 [ 252.324854][ T58] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.330055][ T58] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.335261][ T58] ? __pfx_kthread+0x10/0x10 [ 252.339856][ T58] ret_from_fork+0x439/0x7d0 [ 252.344454][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 252.349575][ T58] ? __switch_to_asm+0x39/0x70 [ 252.354340][ T58] ? __switch_to_asm+0x33/0x70 [ 252.359142][ T58] ? __pfx_kthread+0x10/0x10 [ 252.363735][ T58] ret_from_fork_asm+0x1a/0x30 [ 252.368519][ T58] [ 252.371888][ T58] Kernel Offset: disabled [ 252.376202][ T58] Rebooting in 86400 seconds..