last executing test programs: 54.298767658s ago: executing program 3 (id=7175): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0, @private0, 0x1, 0x80, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x3, 0xe22d, 0x81, 0x10}, 0x10) 54.112028359s ago: executing program 4 (id=7177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f8343fe0d53db903cbe1e2197e3d", 0x3a}], 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)="0892", 0x2}, {&(0x7f0000000480)="96bc09dc5c62", 0x6}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x34}}], 0x18, 0x1000000}, 0x4) 54.100470541s ago: executing program 2 (id=7178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000006800010000000000fddbdf25020000000000000006000700020000001800088014000500fc00000000000000000000000000000108000500", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x404cc83}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x890d}, @void, @llc={@snap={0x1, 0xab, "91", "880434", 0x88a8, "2ebef9bf90f10632363bebd1e82d62945678d2f84b029ed7ac9db61712287b044a8e80c15d69ee587970ca7685455ba2a486f201c49b7453ae94710b7a9d2e9df308e5ac4a725e86549d1a918d6a6f67f82478552346e71783c911a08e3d0cea0869b60937e9233b63a972e2c87814abc97c577ff7826db28742e9eef4d39f05a5cf096e1d8cf587fb587b798a6d3a80eba161dfe4499ac463bdfe46685b0e14f2ee9d0af965cb17025b56ab88233210e4a7c2a3e513a3118bcb5d252541dec3d95960f23633a8e9c1cbe639209ec54c8a030acdefec747b1d3cfff41a214c7852aa4cfa556ea97269cd707148b28934c9a85486"}}}, 0x100) 54.055884374s ago: executing program 3 (id=7179): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/70, &(0x7f00000000c0)=0x46) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x55, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}}, 0x7f, 0x7}, 0x90) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000200)={0x7, 0x1}) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000280)={&(0x7f0000000240)=[{0x8c16, 0x3, 0x2}, {0xbd3, 0x7f, 0x2}], 0x2, 0x10, 0x1}) socketpair(0x23, 0x6, 0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r3, &(0x7f0000000300)={0x1, @le_conn_update={{0x2013, 0xe}, {0x193, 0x7, 0x8, 0x8, 0x6, 0x6aa4, 0x988}}}, 0x12) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0x0, 0x6, 0x0, 0x10, 0x7, 0x6, 0x81, 0x65f3, 0x2b6, 0x7, 0xf, 0xfffffffffffffffe, 0x4, 0x1b74, 0x6]}, &(0x7f0000000440)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={r4, @in6={{0xa, 0x1, 0xfff, @mcast1, 0x2}}, 0x6, 0x116}, &(0x7f0000000540)=0x90) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000580)) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000005c0)={0x8, 0x7}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000006c0), &(0x7f0000000700)=0x4) syz_80211_inject_frame(&(0x7f0000000740)=@broadcast, &(0x7f0000000780)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x10}, @broadcast, @initial, @broadcast, {0x9, 0x1}, "", @value={0x1, 0x0, 0x0, 0x0, 0xa}}, @random="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"}, 0x490) r7 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000d40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0, 0x0}, &(0x7f0000000dc0)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000e00)={r7, r9, r10}, 0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000e40)={r5, 0x1}, &(0x7f0000000e80)=0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) r11 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000000f40)={0x2, 'macvlan0\x00', {0x5}, 0xfff0}) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r12, 0x0, 0x82, &(0x7f0000000f80)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x101, 0x6, 0x2, 0x2, 0xffff]}, &(0x7f0000001000)=0x78) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000001040)) sendmsg$AUDIT_SET(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, 0x3e9, 0x2, 0x70bd29, 0x25dfdbfe, {0x5509a12ada4bc43b, 0x0, 0xd9ed1ef15a3ce2a9, r7, 0x78a, 0x38c5c5b1, 0x8, 0x0, 0x0, 0x3}, ["", "", "", ""]}, 0x3c}}, 0x88c0) getsockname$netlink(r0, &(0x7f0000001180), &(0x7f00000011c0)=0xc) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), r3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001600)={&(0x7f0000001200), 0xc, &(0x7f00000015c0)={&(0x7f00000013c0)={0x1c4, r13, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x95e851b6dd41bdda}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10}, 0x14) 53.727968197s ago: executing program 4 (id=7183): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600"], 0x44}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 53.652944364s ago: executing program 4 (id=7184): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000100)="a7e4121a2940b2594888447576b85b3f5a8b8a995aa8005058406173a94364be87a37d201518c75a70be553e1124d2b2a52b343673567bfa6389144cb0c16e81b8b53f08a51a6cc29f2aa48de6847299c6aad2824cffc852cac7ecf7847f85bb59db7ae7b79edc5fd36762ae5f1c", 0x6e}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="600700004100070127bd7000fefdffff047c00000800268004000800440701803e07108014"], 0x760}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) 53.649590753s ago: executing program 1 (id=7185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="660a00000200000061114d0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$inet6(r0, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xfffff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3a}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x1}}}], 0x30}}], 0x1, 0x4044800) (async, rerun: 32) sendto$l2tp6(r0, &(0x7f0000000040)="882009f431fbcce576bd6255a7b8da4536e5568fb19020575eaf030bb4f32b51db48a877cd0f41e436b5ad66385bf248e076f6b065b225b2766dfa1e864bc1f88b2c9bc0f9fa04a22225186710300cdfd28367e6a96b7da3866550d134fe1a4557b0f670d21288136ed91ef1943e01592aa110f9237178de784e9d61ab560e2f0c5e6fe30a875a3f46723ab640944de7f2893f746c11493de9e8bb2b73546056917b11cfddcb044c5bba15a5a75d92b2fcf325f3be", 0xb5, 0x4000000, &(0x7f0000000100)={0xa, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x3}, 0x20) (rerun: 32) 53.561658083s ago: executing program 2 (id=7186): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0x16, 0x7, 0x1, 0x0, "033485221a3ffded3b0240b9f7670727e42e"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004854}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0x16, 0x7, 0x1, 0x0, "033485221a3ffded3b0240b9f7670727e42e"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004854}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0xfffffffc, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) 53.481795011s ago: executing program 1 (id=7187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x4000090) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0xfffffffffffffe29, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}}, 0x4040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xffffffffffffffb2, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x2], 0x1, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000000)=0x9fd0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 53.384861221s ago: executing program 1 (id=7189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xa17, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) 53.320943373s ago: executing program 4 (id=7190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) recvmmsg(r1, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/208, 0xd0}], 0x1}, 0xfffffffe}], 0x1, 0x141, 0x0) 53.198977947s ago: executing program 0 (id=7191): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r4, &(0x7f0000000340)}, 0x20) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) 53.198403737s ago: executing program 2 (id=7192): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/75, 0x100000, 0x800, 0x5, 0x3}, 0x20) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002380)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 53.173868771s ago: executing program 1 (id=7193): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x12}, 0x14) syz_emit_ethernet(0x32f, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "1e3f77", 0x2f9, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, @remote, {[@fragment={0x3a, 0x0, 0x40, 0x0, 0x0, 0x7, 0x64}, @hopopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0xdc}]}, @routing={0x3b, 0x2, 0x1, 0x2b, 0x0, [@dev={0xfe, 0x80, '\x00', 0x44}]}, @dstopts={0x6c, 0x1f, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0xb, 0xc, [0xa, 0x10002000, 0xce, 0x4, 0x2, 0x9, 0x80000001]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @pad1, @generic={0x7, 0x8e, "b202e70047be0b306104f44354151e09d62ff97f1306bdc74d2f247fe912db9f1b34ce47432f2deee7f33b91291134fdf67ffc307fce7189ec8b4b235f9c8a7874e557639e81ac174b5057ab4f1d2e37ce6cb7e0b11d0a1873b2c496ea3f401248d5aeaebeba0b60be852bb528c056929741b94c9f5f98a3c17ba1cc47d836acae3d3467ae755637a8a31e37c4e5"}]}, @fragment={0x2, 0x0, 0xfa, 0x1, 0x0, 0x7, 0x68}, @srh={0x0, 0x8, 0x4, 0x4, 0x4, 0x40, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, @empty]}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x66}, @dstopts={0x6, 0x1a, '\x00', [@hao={0xc9, 0x10, @mcast1}, @generic={0x1, 0x76, "cdd6c9be0df472c5d6e73b18608b96b98e2561ddeb6a682e2cd0e388c0c679ce354cb7746cede4dfcd0c4c5b1986e0db598e4b7821eec4a09e94a012f9d39a95f768251d4c08a3a2bbcccf38c6aceb3e0edcf7ebed81d0decdc66cd5e443f841fc491244d9d0bc4ce2c3f6d10d76b4f4ba50fc92797c"}, @calipso={0x7, 0x28, {0x1, 0x8, 0xff, 0x800, [0x5, 0x8000000000000000, 0x5, 0x1]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x400}]}], "6403449af16063f0f2b44a0c7fecbfbdf127dfc765a8a42d2bb10a00b11e834bd6ef9a3d60580ed45297c9e87de9674f8e7ee2766f9124b408867014602341829ea7039bd9ed1e1da5aa7e1c713e70f636a4988fb3aaa6c025dc6b395cd3631d172764c0112d550e6ae61e7123bb555a175e0ad4e80302858a8a171175443afff9be35f6863728e0cc61a9fdec9e69facd"}}}}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 53.112416147s ago: executing program 0 (id=7194): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x8040, 0x1, 0xf, {{0xf, 0x4, 0x2, 0x3d, 0x3c, 0x68, 0x0, 0xf, 0x2b, 0x0, @broadcast, @remote, {[@rr={0x7, 0x17, 0xd9, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2]}, @lsrr={0x83, 0xf, 0x54, [@broadcast, @rand_addr=0x64010101, @broadcast]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xb, 0xffff}, {0x8}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x20040084) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r4, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 53.031405965s ago: executing program 2 (id=7195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f2791", 0x12}], 0x1) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006120a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) 53.03055216s ago: executing program 3 (id=7196): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4}}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) 52.923339967s ago: executing program 4 (id=7197): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) syz_emit_ethernet(0x86, &(0x7f0000000980)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x1c, 0xfc, 0x1, 0x0, [{@rand_addr, 0x4e210000}, {@remote, 0x2}, {@local, 0x3ff}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) (async) r1 = socket$kcm(0xa, 0x3, 0x11) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f0000000700)) (async) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000180)='bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00050000000000001c0012800e00010069703665727370616e000000680002800400120008000a00", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x80108907, 0x0) (async, rerun: 64) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbdd6017010000202b00fe8000000000000000000000000000bb008000000000000000000000000000aa8931850f68ebe9111c48e1da4500000000000000000000000018907804000000bc6eb301a0885b6fe60eb85f07853ff27880c704b5b2d9cc0be5dce02072d67825805467b18f5dd36542fe980fb483d1aa9047e7a8b887e30d67dbd174f8ea32e631092a4ff6b45b71cd8c5ccdaeeff280a76ed0c1efbc89f872000080023cad32e1a0f2045644c0fa9fefdee4aa4f"], 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendto$l2tp6(r0, &(0x7f0000000580)="8c36bd34c7d757ffc92e3fe5d9dd74a93afb09203b0fb3927ab7a612c66e490b31a739cac5c35e406db3b824a7561b96cdda93516f222454331143885e9b0f99f88a773e9e2233c84bdb52089d9b47f15300f3cc4363a03a675ee2d64762825b598d19f7efb00f7b356591ca7c707ad7b0579f0d22db925d0ba283fcb0cede7e8c0df4e078b924d3f053fd7e19014db0564ae638be59c199c02c720b4a01dfc5a058a05b7f85d5820d3a735292475d82ee3a304b6b974d177541104d76738bb6c617ca6b1d9140e7497e1178edaaed7d6636c9bbacac", 0xd6, 0x4000000, &(0x7f0000000680)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x1}, 0x20) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) (rerun: 64) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x3}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x6}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x30}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x2e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) sendfile(r6, r0, &(0x7f0000000000)=0x10, 0x1000) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) (async) r9 = socket$inet6(0xa, 0x6, 0x9) sendto$inet6(r9, &(0x7f0000000740)="387d8930cbd5131cc6fa504a215f7b5e88ed9fa9d4f6ce422f9b45aa25da9b969e2b065cd87d673cf551e6627e76921b347c89ff26a7092ebb45cd19c448812b9a10efbf24188a41fb1d43b5c214f0b0553cd6b9e5b13d1e837a44224e5de35eb8ea4fff5a1910e0c9f0debf29412f5bf6cf876ae44442a7d0a3a6ad4a8daaa2f449deeaa9", 0x85, 0x404c000, 0x0, 0x0) 52.84196139s ago: executing program 3 (id=7198): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080200000d42bea2182d273d8686ec88b8e08ba9eaa3d13ef2a8d5fdaa8ed31611daeea76025c7eaa0f69b0dd77631ba2685d1e043d6688187c20f0", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000003c0), &(0x7f0000000240)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 52.607445411s ago: executing program 1 (id=7199): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a0000000000006911ae00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x7) 52.508624218s ago: executing program 0 (id=7200): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0xd}], 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 52.453078183s ago: executing program 0 (id=7201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 52.243216029s ago: executing program 0 (id=7202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) epoll_create1(0x80000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000040), 0x4) 52.242589853s ago: executing program 2 (id=7203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008002000000000000800060000020000080007"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 52.241481529s ago: executing program 3 (id=7204): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x6a, 0x1, 0x0, 0xc) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f0000000000)) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f5, 0x8, 0x70bd27, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 51.996840317s ago: executing program 1 (id=7205): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="05003901"], 0x44}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002cbd7000fddbdd251200000008000300", @ANYRES32=r14, @ANYBLOB="08001400", @ANYRES32=r15, @ANYBLOB="0a0006000802110000010000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 51.723477985s ago: executing program 0 (id=7206): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000000000000000a28000000000a0101030000005e1affd5020000000900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400"], 0x44}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100fcffffff000000001800000008000300", @ANYRES32=r1, @ANYBLOB="680030802400030072bacb72694bd2c0614cd37ee532bf7be02400030048bcb937a0e49b627d2ac2104b16feba9aa1dcf8e1f12b4ee92bcd235563c777050002000100000005000200ff0000000c00018008000100010000003ff02d7e956db893b87381e7b63c66cf609347dc9cf4e7931641c1a0fbea87ab7b3ee47794b8e2b8b734166c795602a0d5a8e1e8cd0dbbda51fe3bdb25ad84c0e28e843e4a0bd4f1c5ce8535abc16ed5b86e0b71116851fe5dbf63df67d019a008c84d9cc3139958"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) (async) listen(0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r6, 0x1) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r9, 0x0, 0xffffffff004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) 51.579032216s ago: executing program 4 (id=7207): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c4000001a00fbbe00000000000000000a00000000000000000000004947ee29c853495c38b05458f51d1edd6b0b4174dfcada22896121e58c384614294ea4af831613d51c08c872c424b83845ee582c51b4899a4e15fe86401a48ca0900000000000000aba6a109c47f85258ea00a2d47def9c78a99b1ceb7b90a5c7f7c0923a93a7b9d0a8cc552"], 0x1c}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c010000", @ANYBLOB="2e3f7e1f70a0638c33e04864eccf432ee8b2eb6ef263875a1ef857aed7fca1d407f3e16c5afb4c2baa7a518385f17378764f1c3dbbe8a15cf96c39e48233e3a384d2ca1eeee21746da7d26177f3cd4de395291c5cd9813447ff88063b84960c7fea70839937091ab8cc07a839e179e5676141344cf28a4310c606176ba3c0d8a6ddd452a31c3b8967f9f29e1fc4dcee62cd92e5206f9ac52b8998663b34e287fe9771a76242341dae4614094aec8648f3e694d91c27d757d54d600b35cef1086", @ANYRES8=r1], 0x10c}, 0x1, 0x0, 0x0, 0x20004014}, 0x24004044) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet(0x2, 0x800, 0x401) write$bt_hci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0xa, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r8, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x90}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r12, @ANYBLOB='8\x00/'], 0x54}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x80, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x80}, 0x1, 0x0, 0x0, 0x200488d1}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 51.389961463s ago: executing program 2 (id=7208): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4008044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0xe8b}, 0x8) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f0000000000080001000000000008004b00130080000800150000000000080003"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r4, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2040005}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) connect$nfc_raw(r8, &(0x7f0000000080)={0x27, r9, 0xffffffffffffffff, 0x4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000011000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a050000000000000000000200ffff0900010073797a300000000008000340000000010c0006400000000000000002140000001400010000000000000000000000000a"], 0x98}}, 0x0) 51.334020338s ago: executing program 3 (id=7209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES64], 0x48}}, 0x400400c0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 0s ago: executing program 32 (id=7206): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000000000000000a28000000000a0101030000005e1affd5020000000900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400"], 0x44}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100fcffffff000000001800000008000300", @ANYRES32=r1, @ANYBLOB="680030802400030072bacb72694bd2c0614cd37ee532bf7be02400030048bcb937a0e49b627d2ac2104b16feba9aa1dcf8e1f12b4ee92bcd235563c777050002000100000005000200ff0000000c00018008000100010000003ff02d7e956db893b87381e7b63c66cf609347dc9cf4e7931641c1a0fbea87ab7b3ee47794b8e2b8b734166c795602a0d5a8e1e8cd0dbbda51fe3bdb25ad84c0e28e843e4a0bd4f1c5ce8535abc16ed5b86e0b71116851fe5dbf63df67d019a008c84d9cc3139958"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) (async) listen(0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r6, 0x1) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r9, 0x0, 0xffffffff004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) kernel console output (not intermixed with test programs): MB/128 MiB) [ 797.984269][T13895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.984313][T13895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.069345][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.069389][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.895620][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 798.905903][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 798.913880][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 798.924271][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 798.934304][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 799.369009][T30289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6116'. [ 799.418090][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6117'. [ 799.420796][T30294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6118'. [ 799.432732][T30294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6118'. [ 799.464950][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6117'. [ 799.475538][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6117'. [ 799.906148][T30274] C speed is unknown, defaulting to 1000 [ 800.166258][T30328] netlink: 'syz.2.6123': attribute type 10 has an invalid length. [ 800.279287][T30328] team0: Device veth0_macvtap failed to register rx_handler [ 800.409519][T30347] IPVS: length: 239 != 24 [ 800.855095][T30367] netlink: 'syz.3.6130': attribute type 3 has an invalid length. [ 800.944188][T30274] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.953544][ T4932] Bluetooth: hci0: command tx timeout [ 800.964646][T30274] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.972476][T30274] bridge_slave_0: entered allmulticast mode [ 800.984015][T30274] bridge_slave_0: entered promiscuous mode [ 800.995118][T30274] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.002706][T30274] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.012105][T30274] bridge_slave_1: entered allmulticast mode [ 801.020236][T30274] bridge_slave_1: entered promiscuous mode [ 801.094419][T30274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.120800][T30274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.332956][T30387] netlink: 'syz.1.6137': attribute type 7 has an invalid length. [ 801.333009][T30387] netlink: 'syz.1.6137': attribute type 8 has an invalid length. [ 801.350619][T30388] netlink: 'syz.1.6137': attribute type 7 has an invalid length. [ 801.350657][T30388] netlink: 'syz.1.6137': attribute type 8 has an invalid length. [ 801.372417][T30376] veth5: entered promiscuous mode [ 801.410383][T30274] team0: Port device team_slave_0 added [ 801.447074][T30387] veth1_to_bridge: entered promiscuous mode [ 801.457067][T30387] veth0_to_bridge: entered promiscuous mode [ 801.470566][T30387] gretap0: entered promiscuous mode [ 801.487670][T30387] gretap0: left promiscuous mode [ 801.495088][T30387] veth1_to_bridge: left promiscuous mode [ 801.505948][T30387] veth0_to_bridge: left promiscuous mode [ 801.621294][T30388] veth1_to_bridge: entered promiscuous mode [ 801.631794][T30388] veth0_to_bridge: entered promiscuous mode [ 801.643600][T30388] gretap0: entered promiscuous mode [ 801.658775][T30388] gretap0: left promiscuous mode [ 801.694340][T30388] veth1_to_bridge: left promiscuous mode [ 801.720112][T30388] veth0_to_bridge: left promiscuous mode [ 801.789981][T30274] team0: Port device team_slave_1 added [ 801.949209][T30274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.949243][T30274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.949294][T30274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.996698][T30274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.003975][T30274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.004023][T30274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.093323][T30404] __nla_validate_parse: 44 callbacks suppressed [ 802.099768][T30404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6142'. [ 802.147430][T30274] hsr_slave_0: entered promiscuous mode [ 802.158855][T30274] hsr_slave_1: entered promiscuous mode [ 802.167207][T30274] debugfs: 'hsr0' already exists in 'hsr' [ 802.176508][T30274] Cannot create hsr debugfs directory [ 802.477921][T30413] bond5: Unable to set up delay as MII monitoring is disabled [ 802.510210][T30413] bond5 (unregistering): Released all slaves [ 802.519177][T30422] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6147'. [ 802.519860][T30416] netlink: 'syz.4.6145': attribute type 1 has an invalid length. [ 802.536812][T30422] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6147'. [ 802.546505][T30422] netlink: 'syz.2.6147': attribute type 5 has an invalid length. [ 802.554985][T30422] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6147'. [ 802.567703][T30417] bond0: entered allmulticast mode [ 802.567810][T30417] bond_slave_0: entered allmulticast mode [ 802.568183][T30417] bond_slave_1: entered allmulticast mode [ 802.635445][T30274] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.645949][T30274] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.656261][T30274] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 802.794760][T30274] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.805216][T30274] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.815905][T30274] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 802.892834][T30274] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.913617][T30274] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.913694][T30274] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 803.034924][ T4932] Bluetooth: hci0: command tx timeout [ 803.054809][T30274] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.077052][T30274] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.087387][T30274] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 803.342602][T30451] ip6t_hbh: too many supported opts specified [ 803.342862][T30452] ip6t_hbh: too many supported opts specified [ 803.349254][T30451] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6155'. [ 803.499296][T30274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 803.509260][T30458] IPv6: Can't replace route, no match found [ 803.523708][T30274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 803.531886][T30274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 803.539174][T30458] IPv6: Can't replace route, no match found [ 803.584555][T30274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 803.594526][T30274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 803.610156][T30274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 803.618814][T30274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 803.638544][T30274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 803.720664][T30471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 803.813511][T30471] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6159'. [ 803.813583][T30471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6159'. [ 803.814172][T30471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6159'. [ 803.942271][T30274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.055099][T30274] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.103627][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.103740][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.143542][T28479] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.143699][T28479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.607759][T30494] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6166'. [ 804.827572][T30511] netlink: 'syz.3.6165': attribute type 8 has an invalid length. [ 804.827616][T30511] sch_fq: defrate 0 ignored. [ 804.888880][T30511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6165'. [ 804.967381][T30518] Bluetooth: MGMT ver 1.23 [ 805.111778][ T4932] Bluetooth: hci0: command tx timeout [ 805.368102][T30535] pim6reg: entered allmulticast mode [ 805.382575][T30542] pim6reg: left allmulticast mode [ 805.663011][T30553] ip_tables: iptables: counters copy to user failed while replacing table [ 805.839650][T30274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.094270][T30570] C speed is unknown, defaulting to 1000 [ 806.146430][T30274] veth0_vlan: entered promiscuous mode [ 806.367678][T30274] veth1_vlan: entered promiscuous mode [ 806.910739][T30274] veth0_macvtap: entered promiscuous mode [ 806.932981][T30274] veth1_macvtap: entered promiscuous mode [ 807.055407][T30274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.064229][T30601] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 807.098462][T30274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.168558][ T1020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.183962][ T1020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.194283][ T4932] Bluetooth: hci0: command tx timeout [ 807.343052][T30606] x_tables: duplicate underflow at hook 4 [ 807.373177][T13901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.373253][T13901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.474280][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.476642][T30611] __nla_validate_parse: 3 callbacks suppressed [ 807.476658][T30611] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6199'. [ 807.499082][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.545398][T13894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.555232][T13894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.582436][T30615] ip_tables: iptables: counters copy to user failed while replacing table [ 807.825603][T30625] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6109'. [ 807.855562][T30622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6109'. [ 807.964394][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 807.980647][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 807.990815][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 807.999708][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 808.008595][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.446477][T30649] syzkaller0: entered promiscuous mode [ 808.446526][T30649] syzkaller0: entered allmulticast mode [ 808.867152][T30666] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 808.896610][T30670] sctp: [Deprecated]: syz.1.6215 (pid 30670) Use of int in maxseg socket option. [ 808.896610][T30670] Use struct sctp_assoc_value instead [ 808.933400][T30666] bond0: left allmulticast mode [ 808.933447][T30666] bond_slave_0: left allmulticast mode [ 808.933488][T30666] bond_slave_1: left allmulticast mode [ 809.120695][T30629] C speed is unknown, defaulting to 1000 [ 809.660440][T30692] pim6reg: entered allmulticast mode [ 809.666448][T30704] tipc: Started in network mode [ 809.666502][T30704] tipc: Node identity 66d4eda2b74, cluster identity 4711 [ 809.666669][T30704] tipc: Enabled bearer , priority 0 [ 809.666884][T30629] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.666995][T30629] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.667154][T30629] bridge_slave_0: entered allmulticast mode [ 809.707537][T30629] bridge_slave_0: entered promiscuous mode [ 809.744093][T30629] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.744285][T30629] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.744455][T30629] bridge_slave_1: entered allmulticast mode [ 809.750918][T30629] bridge_slave_1: entered promiscuous mode [ 809.927412][T30720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6226'. [ 809.948308][T30710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6224'. [ 809.967825][T30700] tipc: Disabling bearer [ 810.072058][ T5621] Bluetooth: hci1: command tx timeout [ 810.124013][T30629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.136645][T30629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.256591][T30629] team0: Port device team_slave_0 added [ 810.266190][T30629] team0: Port device team_slave_1 added [ 810.266841][T30727] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6230'. [ 810.444672][T30747] netlink: 'syz.0.6232': attribute type 12 has an invalid length. [ 810.444733][T30747] netlink: 'syz.0.6232': attribute type 29 has an invalid length. [ 810.444764][T30747] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6232'. [ 810.444785][T30747] netlink: 35 bytes leftover after parsing attributes in process `syz.0.6232'. [ 810.445077][T30747] netlink: 'syz.0.6232': attribute type 12 has an invalid length. [ 810.445095][T30747] netlink: 'syz.0.6232': attribute type 29 has an invalid length. [ 810.445110][T30747] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6232'. [ 810.445127][T30747] netlink: 35 bytes leftover after parsing attributes in process `syz.0.6232'. [ 810.445384][T30747] netlink: 'syz.0.6232': attribute type 12 has an invalid length. [ 810.445402][T30747] netlink: 'syz.0.6232': attribute type 29 has an invalid length. [ 810.445646][T30747] netlink: 'syz.0.6232': attribute type 12 has an invalid length. [ 810.445662][T30747] netlink: 'syz.0.6232': attribute type 29 has an invalid length. [ 810.445902][T30747] netlink: 'syz.0.6232': attribute type 12 has an invalid length. [ 810.445919][T30747] netlink: 'syz.0.6232': attribute type 29 has an invalid length. [ 810.552342][T30629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.552362][T30629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.552386][T30629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.560802][T30629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.560820][T30629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.560845][T30629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.738793][T30629] hsr_slave_0: entered promiscuous mode [ 810.746601][T30629] hsr_slave_1: entered promiscuous mode [ 810.753192][T30629] debugfs: 'hsr0' already exists in 'hsr' [ 810.759079][T30629] Cannot create hsr debugfs directory [ 810.971942][T11459] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.972893][T11459] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.972953][T11459] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.972991][T11459] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.407916][T30785] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 811.413346][T30629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.413379][T30629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.413403][T30629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 811.694007][T30795] sctp: [Deprecated]: syz.1.6245 (pid 30795) Use of int in max_burst socket option. [ 811.694007][T30795] Use struct sctp_assoc_value instead [ 811.868924][T30803] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 811.935195][T30629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.935229][T30629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.937721][T30629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 812.151753][ T5621] Bluetooth: hci1: command tx timeout [ 812.213974][T30629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.214030][T30629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.214052][T30629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 812.581782][T30629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.581833][T30629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.582169][T30629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 812.630713][T30840] __nla_validate_parse: 136 callbacks suppressed [ 812.632645][T30840] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6253'. [ 812.645003][T30840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.764143][T30812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6247'. [ 812.848299][T30840] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6253'. [ 812.867501][T30840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.093642][T30859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6255'. [ 814.001619][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6260'. [ 814.074608][T30873] syzkaller0: entered promiscuous mode [ 814.074658][T30873] syzkaller0: entered allmulticast mode [ 814.234789][ T5621] Bluetooth: hci1: command tx timeout [ 814.315738][T30629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 814.359347][T30629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 814.367781][T30629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 814.400086][T30629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.438503][T30888] erspan0: entered promiscuous mode [ 814.450996][T30888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6262'. [ 814.465136][T30629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 814.496694][T30629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.505608][T30629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 814.521018][T30629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.529640][T30899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6266'. [ 814.993213][T30629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.027741][T30629] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.064468][T28479] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.064580][T28479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.105063][T28479] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.105225][T28479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.214007][T30939] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6275'. [ 815.244593][T30937] syzkaller0: entered promiscuous mode [ 815.244638][T30937] syzkaller0: entered allmulticast mode [ 815.778298][T30970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6280'. [ 815.936411][T30975] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6282'. [ 816.078906][T30975] bond1: entered promiscuous mode [ 816.078954][T30975] bond1: entered allmulticast mode [ 816.126580][T30978] sctp: [Deprecated]: syz.1.6284 (pid 30978) Use of int in maxseg socket option. [ 816.126580][T30978] Use struct sctp_assoc_value instead [ 816.208452][T30629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.312062][ T5621] Bluetooth: hci1: command tx timeout [ 816.529603][T31002] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 816.973282][T30629] veth0_vlan: entered promiscuous mode [ 817.018124][T30629] veth1_vlan: entered promiscuous mode [ 817.154925][T30629] veth0_macvtap: entered promiscuous mode [ 817.187077][T30629] veth1_macvtap: entered promiscuous mode [ 817.222960][T31024] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 817.277354][T30629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.322779][T30629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.362419][T13894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.369810][T13894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.369857][T13894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.369888][T13894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.539093][T31048] ip6t_srh: unknown srh invflags 4000 [ 817.547938][T31048] validate_nla: 122 callbacks suppressed [ 817.554275][T31048] netlink: 'syz.3.6299': attribute type 10 has an invalid length. [ 817.562852][T31048] dummy0: entered promiscuous mode [ 817.576538][T31048] dummy0: entered allmulticast mode [ 817.577144][T31048] bridge0: port 3(dummy0) entered blocking state [ 817.577237][T31048] bridge0: port 3(dummy0) entered disabled state [ 817.608425][T31048] bridge0: port 3(dummy0) entered blocking state [ 817.608549][T31048] bridge0: port 3(dummy0) entered forwarding state [ 817.634626][T31050] __nla_validate_parse: 3 callbacks suppressed [ 817.634687][T31050] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6299'. [ 817.703556][T28479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.703596][T28479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.766371][T31053] netlink: 'syz.0.6300': attribute type 1 has an invalid length. [ 817.766498][ T1381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.766515][ T1381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.227052][T31069] ip_tables: iptables: counters copy to user failed while replacing table [ 818.449466][ T4932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 818.464979][ T4932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.473788][T31086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6307'. [ 818.487414][ T4932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 818.495959][ T4932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 818.503411][ T4932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 818.774690][T31096] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 819.045062][T31106] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6311'. [ 819.114280][T31111] netlink: 'syz.3.6312': attribute type 1 has an invalid length. [ 819.114330][T31111] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6312'. [ 819.265302][T31099] bond2: (slave veth0_to_bond): making interface the new active one [ 819.282679][T31099] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 819.415149][T31119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6314'. [ 819.659586][T31128] ip_tables: iptables: counters copy to user failed while replacing table [ 819.659899][T31128] ip_tables: iptables: counters copy to user failed while replacing table [ 819.660210][T31128] ip_tables: iptables: counters copy to user failed while replacing table [ 819.660495][T31128] ip_tables: iptables: counters copy to user failed while replacing table [ 819.707880][T31128] ip_tables: iptables: counters copy to user failed while replacing table [ 819.708218][T31128] ip_tables: iptables: counters copy to user failed while replacing table [ 819.708543][T31128] ip_tables: iptables: counters copy to user failed while replacing table [ 819.708865][T31128] ip_tables: iptables: counters copy to user failed while replacing table [ 819.854624][T31083] C speed is unknown, defaulting to 1000 [ 820.456607][T31163] netlink: 3964 bytes leftover after parsing attributes in process `syz.4.6324'. [ 820.611944][T31176] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6328'. [ 820.630388][T31083] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.630502][T31083] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.630689][T31083] bridge_slave_0: entered allmulticast mode [ 820.633401][ T4932] Bluetooth: hci4: command tx timeout [ 820.641844][T31083] bridge_slave_0: entered promiscuous mode [ 820.650527][T31083] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.650647][T31083] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.650787][T31083] bridge_slave_1: entered allmulticast mode [ 820.664138][T31083] bridge_slave_1: entered promiscuous mode [ 820.818760][T31083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.847316][T31083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.850164][T31176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6328'. [ 820.852664][T31176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6328'. [ 820.968879][T31083] team0: Port device team_slave_0 added [ 820.978223][T31083] team0: Port device team_slave_1 added [ 821.033878][T31083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.041048][T31083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.070359][T31083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.086364][T31083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.086381][T31083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.086405][T31083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.216509][T31083] hsr_slave_0: entered promiscuous mode [ 821.224392][T31083] hsr_slave_1: entered promiscuous mode [ 821.230874][T31083] debugfs: 'hsr0' already exists in 'hsr' [ 821.237526][T31083] Cannot create hsr debugfs directory [ 821.839013][T31226] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6341'. [ 821.894680][T31083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.078094][T31083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.136589][T31234] net_ratelimit: 26 callbacks suppressed [ 822.137474][T31234] openvswitch: netlink: ct_state flags ffffffff unsupported [ 822.415104][T31083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.613929][T31083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.713058][T13899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.713388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.722791][ T4932] Bluetooth: hci4: command tx timeout [ 822.743636][T31243] tipc: Started in network mode [ 822.743683][T31243] tipc: Node identity c6138c6e5c74, cluster identity 4711 [ 822.743837][T31243] tipc: Enabled bearer , priority 0 [ 822.750494][T31245] syzkaller0: entered promiscuous mode [ 822.750515][T31245] syzkaller0: entered allmulticast mode [ 822.758626][T31257] xt_HMARK: spi-set and port-set can't be combined [ 823.033826][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.238099][T31242] tipc: Resetting bearer [ 823.263213][T31242] tipc: Disabling bearer [ 823.345120][T31287] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20002 [ 823.825867][T31295] __nla_validate_parse: 1 callbacks suppressed [ 823.825911][T31295] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6359'. [ 824.079477][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.791751][ T4932] Bluetooth: hci4: command tx timeout [ 825.117187][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.755046][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.755247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.069739][T31274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.100032][T31083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 826.119745][T31083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 826.120601][T31083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 826.159172][T31083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 826.189200][T31083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 826.202908][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.264077][T31083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 826.264966][T31083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 826.294301][T31083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 826.479489][T31310] syzkaller0: entered promiscuous mode [ 826.479538][T31310] syzkaller0: entered allmulticast mode [ 826.488565][T31313] netlink: 'syz.2.6365': attribute type 1 has an invalid length. [ 826.488585][T31313] netlink: 'syz.2.6365': attribute type 4 has an invalid length. [ 826.488599][T31313] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6365'. [ 826.489338][T31313] netlink: 'syz.2.6365': attribute type 1 has an invalid length. [ 826.489353][T31313] netlink: 'syz.2.6365': attribute type 4 has an invalid length. [ 826.489365][T31313] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6365'. [ 826.669268][T31083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.758469][T31325] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6367'. [ 826.769739][T31083] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.777392][T13899] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.777505][T13899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.788145][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.788285][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.873173][ T4932] Bluetooth: hci4: command tx timeout [ 827.115381][T31339] ip6t_rt: unknown flags 36 [ 827.149808][T31340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6370'. [ 827.194442][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.194718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.255455][T31349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.280756][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.482200][T31363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6375'. [ 827.587682][T31369] netdevsim netdevsim2 : renamed from netdevsim0 [ 827.628987][T31083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.703896][T31083] veth0_vlan: entered promiscuous mode [ 827.720963][T31083] veth1_vlan: entered promiscuous mode [ 827.802305][T31083] veth0_macvtap: entered promiscuous mode [ 827.825671][T31083] veth1_macvtap: entered promiscuous mode [ 827.851506][T31083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.867897][T31083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.932412][T13899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.933238][T13899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.933295][T13899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.933329][T13899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.323209][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.473408][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.473636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.355916][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.431879][ T4932] Bluetooth: hci4: command tx timeout [ 830.107607][T31340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 830.224768][T13899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.224807][T13899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.321897][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.321947][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.434666][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.466802][T31387] ip6gretap0: entered promiscuous mode [ 830.489226][T31392] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 830.519470][T31392] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 830.745572][T31410] atomic_op ffff88805a8a59e0 conn xmit_atomic 0000000000000000 [ 830.834173][T31411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6387'. [ 830.834228][T31411] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 830.903671][T31421] netlink: 'syz.2.6388': attribute type 21 has an invalid length. [ 830.903721][T31421] IPv6: NLM_F_CREATE should be specified when creating new route [ 830.903795][T31421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 830.903805][T31421] IPv6: NLM_F_CREATE should be set when creating new route [ 830.903843][T31421] IPv6: NLM_F_CREATE should be set when creating new route [ 830.903866][T31421] IPv6: NLM_F_CREATE should be set when creating new route [ 830.917722][T31411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 831.128828][T31429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6394'. [ 831.150600][T31429] netlink: 'syz.1.6394': attribute type 2 has an invalid length. [ 831.153069][T31429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6394'. [ 831.176180][T31429] netlink: 'syz.1.6394': attribute type 1 has an invalid length. [ 831.176236][T31429] netlink: 'syz.1.6394': attribute type 2 has an invalid length. [ 831.215528][T31437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6396'. [ 831.223366][T31438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6396'. [ 831.223857][T31429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6394'. [ 831.228496][T31430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6394'. [ 831.453002][T31445] netlink: 'syz.4.6399': attribute type 14 has an invalid length. [ 831.461819][T31445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6399'. [ 831.483467][T31445] netlink: 'syz.4.6399': attribute type 14 has an invalid length. [ 831.491887][T31445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6399'. [ 831.501429][T13900] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.501491][T13900] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.501523][T13900] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.501553][T13900] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.648443][T31453] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6402'. [ 832.558819][T18499] net_ratelimit: 7 callbacks suppressed [ 832.558866][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.658567][T31469] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 832.965229][T13895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.965426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.604186][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.717947][T31410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 834.241067][T13895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.242476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.340225][T31507] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 834.534602][T31514] netlink: 'syz.4.6421': attribute type 10 has an invalid length. [ 834.602623][T31514] team0: Port device dummy0 added [ 834.639143][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.871589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.935811][T31533] syzkaller1: entered promiscuous mode [ 834.935855][T31533] syzkaller1: entered allmulticast mode [ 834.999717][T31546] netlink: 'syz.0.6427': attribute type 9 has an invalid length. [ 834.999764][T31546] netlink: 'syz.0.6427': attribute type 4 has an invalid length. [ 835.386762][T31564] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 835.395420][T31564] 0ªî{X¹¦: entered allmulticast mode [ 835.410786][T31564] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 835.616886][T31572] openvswitch: netlink: Geneve option length err (len 5996, max 255). [ 835.995716][T31578] __nla_validate_parse: 7 callbacks suppressed [ 835.995763][T31578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6439'. [ 836.145705][T31585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6441'. [ 836.413364][T31584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6440'. [ 836.445561][T31582] tipc: Started in network mode [ 836.450560][T31582] tipc: Node identity d2568db3d89d, cluster identity 4711 [ 836.458408][T31582] tipc: Enabled bearer , priority 0 [ 836.709239][T31586] syzkaller0: entered promiscuous mode [ 836.709280][T31586] syzkaller0: entered allmulticast mode [ 836.765068][T31581] tipc: Resetting bearer [ 836.970463][T31581] tipc: Disabling bearer [ 837.125145][T31599] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6445'. [ 837.169297][T31606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6447'. [ 837.408130][T31612] netlink: 'syz.3.6448': attribute type 4 has an invalid length. [ 837.782847][T31627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6454'. [ 837.950902][T31638] net_ratelimit: 8 callbacks suppressed [ 837.950950][T31638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.107712][T31646] syzkaller0: entered promiscuous mode [ 838.113772][T31646] syzkaller0: entered allmulticast mode [ 838.138224][T31647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6460'. [ 838.138289][T31647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6460'. [ 838.277052][T31661] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 838.378285][T18072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.715443][T13900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.715650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.007292][T31703] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6470'. [ 839.246863][T31709] netlink: 'syz.4.6476': attribute type 1 has an invalid length. [ 839.259639][T31709] xt_hashlimit: size too large, truncated to 1048576 [ 839.363162][T31713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.363453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.463692][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.577543][T31725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6480'. [ 839.776459][T31734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.827715][T31736] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 839.827772][T31736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.923088][T31738] macvtap1: entered promiscuous mode [ 839.923297][T31738] macvtap1: entered allmulticast mode [ 839.923312][T31738] veth1_vlan: entered allmulticast mode [ 839.969810][T31740] syzkaller1: entered promiscuous mode [ 839.969957][T31740] syzkaller1: entered allmulticast mode [ 840.060708][T31753] syzkaller1: left promiscuous mode [ 840.060763][T31753] syzkaller1: left allmulticast mode [ 840.408532][T31763] netlink: 'syz.4.6490': attribute type 21 has an invalid length. [ 840.512510][T11459] IPVS: starting estimator thread 0... [ 840.601313][T31773] IPVS: using max 29 ests per chain, 69600 per kthread [ 841.230000][T31813] netlink: 'syz.4.6507': attribute type 26 has an invalid length. [ 841.230046][T31813] __nla_validate_parse: 3 callbacks suppressed [ 841.230058][T31813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6507'. [ 841.230318][T31813] netlink: 'syz.4.6507': attribute type 26 has an invalid length. [ 841.230333][T31813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6507'. [ 841.438422][T31822] netlink: 'syz.4.6509': attribute type 1 has an invalid length. [ 841.723689][T31834] xt_hashlimit: size too large, truncated to 1048576 [ 841.791450][T31840] netlink: 'syz.2.6511': attribute type 10 has an invalid length. [ 841.888022][T31840] team0: Port device dummy0 added [ 841.958503][T31848] syzkaller0: entered promiscuous mode [ 841.958546][T31848] syzkaller0: entered allmulticast mode [ 842.313505][T31867] pimreg3: entered allmulticast mode [ 842.369423][T31872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6522'. [ 842.378933][T31872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6522'. [ 842.442803][T31880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6523'. [ 842.452232][T31880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6523'. [ 842.474556][T31880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6523'. [ 842.483642][T31880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6523'. [ 843.035466][ T5606] net_ratelimit: 7 callbacks suppressed [ 843.035521][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.035680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.100826][T13899] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.113556][T13899] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.122790][T13899] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.132160][T13899] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 843.508293][T31904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.508765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.513538][T31904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.595792][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.622879][T31910] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 843.646655][T31907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.649249][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.668996][T31907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.976273][T31919] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6533'. [ 844.199614][T31937] netlink: 'syz.3.6537': attribute type 1 has an invalid length. [ 844.253641][T31938] tipc: Enabling of bearer rejected, failed to enable media [ 844.280818][T31937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6537'. [ 844.389496][T31940] bond1: (slave veth0_to_bond): making interface the new active one [ 844.397670][T31940] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 844.436418][T31946] tipc: Enabling of bearer rejected, failed to enable media [ 844.676879][T31957] netlink: 'syz.4.6542': attribute type 1 has an invalid length. [ 844.768994][T31963] netlink: 'syz.3.6547': attribute type 30 has an invalid length. [ 845.299144][T31997] batman_adv: batadv0: Adding interface: wlan1 [ 845.301912][T31997] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.301946][T31997] batman_adv: batadv0: Interface activated: wlan1 [ 845.344055][T31999] tcpmss_tg4_check: 23 callbacks suppressed [ 845.344112][T31999] xt_TCPMSS: Only works on TCP SYN packets [ 846.565844][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 846.610104][T32010] netlink: 'syz.2.6562': attribute type 3 has an invalid length. [ 848.791833][T18072] net_ratelimit: 21 callbacks suppressed [ 848.791887][T18072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.805941][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.806132][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.806289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.951954][T13895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.952180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.606433][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.668492][T32027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 849.831891][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.832135][T18072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.863395][T32053] netlink: 'syz.3.6574': attribute type 1 has an invalid length. [ 849.871487][T32053] __nla_validate_parse: 1 callbacks suppressed [ 849.877935][T32053] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6574'. [ 849.888010][T32053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6574'. [ 849.905828][T28479] IPVS: starting estimator thread 0... [ 849.937704][T32059] netlink: Unknown conntrack attr (0) [ 849.999612][T32058] IPVS: using max 38 ests per chain, 91200 per kthread [ 850.089654][T32064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 850.108563][T32072] x_tables: duplicate underflow at hook 1 [ 850.127138][T32069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6576'. [ 850.142610][T32064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6576'. [ 850.161352][T32064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6576'. [ 850.182163][T32064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.194577][T32069] netlink: 'syz.3.6576': attribute type 4 has an invalid length. [ 850.194617][T32069] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6576'. [ 850.229617][T32064] bond2: (slave bond0): making interface the new active one [ 850.270556][T32064] bond2: (slave bond0): Enslaving as an active interface with an up link [ 850.286830][T32069] .`: renamed from bond0 (while UP) [ 850.355636][T11459] bond2: (slave .`): link status definitely down, disabling slave [ 850.368643][T11459] bond2: now running without any active interface! [ 850.523279][T32088] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6584'. [ 850.546765][T32090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6582'. [ 850.546802][T32090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6582'. [ 850.664580][T32088] gretap0: entered promiscuous mode [ 850.674567][T32088] vlan1: entered promiscuous mode [ 851.387506][T32120] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 853.620933][T32105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 853.832644][T30229] net_ratelimit: 21 callbacks suppressed [ 853.832696][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.832848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.864614][T32128] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 853.885556][T32128] bond1 (unregistering): Released all slaves [ 853.992552][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.992848][T18072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.338888][T32150] syzkaller0: entered promiscuous mode [ 854.339008][T32150] syzkaller0: entered allmulticast mode [ 854.574606][T32167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6605'. [ 854.722529][T28479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.722761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.840061][T32178] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 854.856878][T32181] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 854.914413][T32188] batadv_slave_0: entered promiscuous mode [ 854.917100][T32188] __nla_validate_parse: 2 callbacks suppressed [ 854.917116][T32188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6611'. [ 854.917241][T32188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.958562][T28479] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 854.964799][T32181] netlink: 'syz.4.6608': attribute type 21 has an invalid length. [ 854.964819][T32181] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6608'. [ 855.003860][T32188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.032880][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.034033][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.044272][T32194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6612'. [ 855.092409][T32194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6612'. [ 855.125414][T32194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6612'. [ 855.138884][T32194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6612'. [ 855.149538][T32199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6612'. [ 855.160428][T32199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6612'. [ 855.484596][T18499] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 855.486896][T18499] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 855.528043][T32223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6619'. [ 855.795212][T32233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6623'. [ 855.955931][T32242] syzkaller1: entered promiscuous mode [ 855.955969][T32242] syzkaller1: entered allmulticast mode [ 855.995196][T13894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.995409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.767295][T32182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.037610][T32263] sch_fq: defrate 0 ignored. [ 858.525188][T32294] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 858.557384][T32303] syzkaller1: entered promiscuous mode [ 858.557424][T32303] syzkaller1: entered allmulticast mode [ 858.780511][T32314] tipc: Enabled bearer , priority 10 [ 858.907082][T32317] gretap1: entered promiscuous mode [ 858.917127][T32317] batman_adv: batadv0: Adding interface: gretap1 [ 858.917175][T32317] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 858.917202][T32317] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 858.936802][T32320] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 858.936828][T32320] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 859.036820][T30229] net_ratelimit: 8 callbacks suppressed [ 859.036867][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.037041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.152763][T32328] x_tables: duplicate entry at hook 3 [ 859.193820][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.195353][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.195520][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.233339][T32337] netlink: 'syz.2.6650': attribute type 1 has an invalid length. [ 859.358127][T32337] bond4: entered promiscuous mode [ 859.387971][T32337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 859.597326][T32348] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 859.915476][T19101] tipc: Node number set to 2590477422 [ 860.030546][T32369] ip_tables: iptables: counters copy to user failed while replacing table [ 860.057362][T32369] netlink: 'syz.2.6660': attribute type 20 has an invalid length. [ 860.057422][T32369] IPv6: NLM_F_CREATE should be specified when creating new route [ 860.080654][T32369] ip_tables: iptables: counters copy to user failed while replacing table [ 860.092446][T32373] netlink: 'syz.2.6660': attribute type 20 has an invalid length. [ 860.198068][T13899] IPVS: starting estimator thread 0... [ 860.225292][T32379] ip_tables: iptables: counters copy to user failed while replacing table [ 860.234263][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.294003][T32385] IPVS: using max 34 ests per chain, 81600 per kthread [ 860.365153][T32392] __nla_validate_parse: 5 callbacks suppressed [ 860.368561][T32392] netlink: 3080 bytes leftover after parsing attributes in process `syz.2.6664'. [ 860.368583][T32392] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.6664'. [ 860.515300][T32397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6666'. [ 860.537419][T32397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6666'. [ 860.556200][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.558782][T28479] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.558820][T28479] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.558878][T28479] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.640319][T32399] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6667'. [ 860.658762][T32402] x_tables: duplicate underflow at hook 1 [ 860.676388][T32399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6667'. [ 860.974430][T32412] vlan1: entered allmulticast mode [ 860.979796][T32412] veth0_vlan: entered allmulticast mode [ 861.042720][T32416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6674'. [ 861.104403][T32423] netlink: 'syz.2.6675': attribute type 10 has an invalid length. [ 861.115209][T32423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6675'. [ 861.193070][T32416] hsr_slave_1 (unregistering): left promiscuous mode [ 861.231728][T32438] IPVS: ip_vs_add_dest(): server weight less than zero [ 861.237575][T32431] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 861.709104][T32465] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6682'. [ 862.209410][T32502] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 862.209466][T32502] bond1: entered allmulticast mode [ 862.221068][T32502] bridge1: entered promiscuous mode [ 862.228951][T32502] bridge1: entered allmulticast mode [ 862.229600][T32502] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 862.385825][T32515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6693'. [ 862.385979][T32515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.408427][T32515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.748301][T32521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 862.780313][T32521] bond0: (slave bond2): Enslaving as an active interface with a down link [ 864.240070][T32628] IPv6: NLM_F_REPLACE set, but no existing node found! [ 864.252372][T32624] IPVS: set_ctl: invalid protocol: 26721 0.0.0.0:0 [ 864.472531][T19101] net_ratelimit: 19 callbacks suppressed [ 864.472578][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.490472][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.626502][T32649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.626728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.722835][T32649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.723112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.723349][T31949] block nbd10: Receive control failed (result -32) [ 864.792002][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.792174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.847354][T32656] Cannot find del_set index 3 as target [ 864.875442][T32658] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 864.887149][T32656] openvswitch: netlink: IPv4 tunnel dst address is zero [ 864.952497][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 865.379488][T32678] bond5: Removing last ns target with arp_interval on [ 865.399464][T32683] __nla_validate_parse: 8 callbacks suppressed [ 865.400882][T32683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6740'. [ 865.400915][T32683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6740'. [ 865.481786][T32683] erspan0: entered promiscuous mode [ 865.487124][T32688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6741'. [ 865.499983][T32683] erspan0: left promiscuous mode [ 865.512011][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.535441][T32690] Bluetooth: MGMT ver 1.23 [ 865.627728][T32696] IPVS: length: 207 != 24 [ 865.672602][T32696] sctp: [Deprecated]: syz.0.6743 (pid 32696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 865.672602][T32696] Use struct sctp_sack_info instead [ 865.744431][T32704] netlink: 'syz.1.6746': attribute type 3 has an invalid length. [ 865.794836][T32711] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6748'. [ 865.849651][T32708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6747'. [ 865.980285][T32720] gretap0: entered promiscuous mode [ 865.987540][T32720] vlan2: entered promiscuous mode [ 866.431719][T32747] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6757'. [ 866.759084][T32761] syzkaller1: entered promiscuous mode [ 866.759130][T32761] syzkaller1: entered allmulticast mode [ 867.033421][T32765] team0: Port device dummy0 removed [ 867.079146][T32765] bridge_slave_0: left allmulticast mode [ 867.079192][T32765] bridge_slave_0: left promiscuous mode [ 867.079445][T32765] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.269283][T32765] bridge_slave_1: left allmulticast mode [ 867.269316][T32765] bridge_slave_1: left promiscuous mode [ 867.269529][T32765] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.524168][T32765] bond0: (slave bond_slave_0): Releasing backup interface [ 867.753738][T32765] bond0: (slave bond_slave_1): Releasing backup interface [ 868.022177][T32765] team0: Port device team_slave_0 removed [ 868.646853][T32765] team0: Port device team_slave_1 removed [ 868.650754][T32765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.650797][T32765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.896801][T32765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.896840][T32765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.421629][ T305] team0: Mode "roundr¨bin" not found [ 869.477002][ T313] vlan0: entered promiscuous mode [ 869.545516][ T313] team0: Port device vlan0 added [ 869.671777][ T5814] net_ratelimit: 15 callbacks suppressed [ 869.671826][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.674453][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.780689][ T315] tipc: Started in network mode [ 869.780741][ T315] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 869.780901][ T315] tipc: Enabled bearer , priority 0 [ 869.787566][ T324] netlink: 'syz.2.6766': attribute type 11 has an invalid length. [ 869.787584][ T324] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6766'. [ 869.790963][ T325] netlink: 'syz.2.6766': attribute type 11 has an invalid length. [ 869.790978][ T325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6766'. [ 869.912052][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.912348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.054257][ T338] netlink: 'syz.3.6770': attribute type 10 has an invalid length. [ 870.062627][ T338] .`: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 870.077582][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.090755][ T338] .`: (slave virt_wifi0): Error -95 calling set_mac_address [ 870.144528][ T338] netlink: Failed to add  helper -22 [ 870.150110][ T338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.214077][ T339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6768'. [ 870.375291][ T351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6774'. [ 870.450843][ T362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6774'. [ 870.577264][ T365] bridge0: port 3(ipvlan2) entered blocking state [ 870.580071][ T365] bridge0: port 3(ipvlan2) entered disabled state [ 870.580232][ T365] ipvlan2: entered allmulticast mode [ 870.580247][ T365] bridge0: entered allmulticast mode [ 870.618720][ T365] ipvlan2: left allmulticast mode [ 870.618771][ T365] bridge0: left allmulticast mode [ 870.713692][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.718677][T10817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.718888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.826977][ T369] bridge0: port 3(ipvlan2) entered blocking state [ 870.827247][ T369] bridge0: port 3(ipvlan2) entered disabled state [ 870.827416][ T369] ipvlan2: entered allmulticast mode [ 870.827432][ T369] bridge0: entered allmulticast mode [ 870.837127][ T369] ipvlan2: left allmulticast mode [ 870.837148][ T369] bridge0: left allmulticast mode [ 870.928221][ T378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6784'. [ 870.938279][ T378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6784'. [ 870.965806][ T385] x_tables: duplicate underflow at hook 2 [ 870.979637][T30229] tipc: Node number set to 11578026 [ 871.040003][ T379] sch_tbf: burst 7 is lower than device ip6gre0 mtu (1448) ! [ 871.160675][ T394] tipc: Cannot configure node identity twice [ 871.182747][ T390] sctp: [Deprecated]: syz.4.6787 (pid 390) Use of int in max_burst socket option deprecated. [ 871.182747][ T390] Use struct sctp_assoc_value instead [ 871.308650][ T401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6792'. [ 871.308650][ T399] syz.0.6789 (399) used obsolete PPPIOCDETACH ioctl [ 871.308675][ T401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6792'. [ 871.335974][ T402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 871.558737][ T412] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6795'. [ 872.160815][ T439] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6802'. [ 874.875188][ T971] net_ratelimit: 20 callbacks suppressed [ 874.875253][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.929636][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.027142][ T493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6812'. [ 875.036956][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.037179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.056406][ T493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6812'. [ 875.500200][ T504] bridge_slave_0: left allmulticast mode [ 875.500245][ T504] bridge_slave_0: left promiscuous mode [ 875.503639][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.545432][ T504] bridge_slave_1: left allmulticast mode [ 875.545484][ T504] bridge_slave_1: left promiscuous mode [ 875.545683][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.615703][ T504] bond0: (slave bond_slave_0): Releasing backup interface [ 875.697005][ T504] bond0: (slave bond_slave_1): Releasing backup interface [ 875.776344][ T521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.800927][ T504] team0: Port device team_slave_0 removed [ 875.832451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.850486][ T504] team0: Port device team_slave_1 removed [ 875.857996][ T504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.858038][ T504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.880498][ T504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.880542][ T504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.898880][ T504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 875.917112][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.991786][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.023621][ T513] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 876.052424][ T513] bond6 (unregistering): Released all slaves [ 876.139542][ T515] team0: Mode "roundr¨bin" not found [ 876.142436][ T527] netlink: 'syz.4.6818': attribute type 1 has an invalid length. [ 876.142458][ T527] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6818'. [ 876.170290][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.436136][ T549] x_tables: duplicate underflow at hook 3 [ 876.747830][ T562] xt_hashlimit: size too large, truncated to 1048576 [ 876.847885][ T569] geneve2: entered promiscuous mode [ 876.848564][ T569] geneve2: entered allmulticast mode [ 877.114283][ T423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 877.114326][ T423] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 877.256930][ T591] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6830'. [ 877.367668][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6830'. [ 877.378584][ T423] batman_adv: batadv0: Interface deactivated: wlan1 [ 877.382640][ T562] xt_hashlimit: size too large, truncated to 1048576 [ 877.433221][ T423] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 877.442689][ T423] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 877.915505][ T613] team0: No ports can be present during mode change [ 878.008678][ T423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 878.019166][ T423] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 878.134293][ T617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6836'. [ 878.234420][ T423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 878.252337][ T423] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 878.433514][ T639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6840'. [ 878.530912][ T639] netlink: 308 bytes leftover after parsing attributes in process `syz.2.6840'. [ 879.022427][ T661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6846'. [ 879.073802][T13894] IPVS: starting estimator thread 0... [ 879.171802][ T673] IPVS: using max 31 ests per chain, 74400 per kthread [ 879.610518][ T677] team0: No ports can be present during mode change [ 879.832319][ T689] netlink: 'syz.4.6850': attribute type 11 has an invalid length. [ 880.071708][ T971] net_ratelimit: 18 callbacks suppressed [ 880.071750][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.152622][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.211440][ T703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6853'. [ 880.472529][ T716] Bluetooth: hci1: too big key_count value 32778 [ 880.492141][ T716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6857'. [ 880.507022][ T716] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6857'. [ 880.524155][ T716] IPVS: Unknown mcast interface: pim6reg0 [ 880.530327][ T716] netlink: 'syz.4.6857': attribute type 2 has an invalid length. [ 880.774255][ T727] team0: No ports can be present during mode change [ 880.810758][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.810953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.113888][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.195394][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.353644][ T762] netlink: 'syz.1.6870': attribute type 11 has an invalid length. [ 881.762378][ T784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6874'. [ 881.855841][ T785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 882.081480][ T801] netlink: 'syz.2.6879': attribute type 2 has an invalid length. [ 882.152294][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.199480][ T807] openvswitch: netlink: Duplicate key (type 0). [ 882.244750][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.275368][ T809] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6885'. [ 882.295854][ T809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6885'. [ 882.310226][ T803] sctp: [Deprecated]: syz.3.6881 (pid 803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 882.310226][ T803] Use struct sctp_sack_info instead [ 882.570664][T13894] IPVS: starting estimator thread 0... [ 882.662692][ T817] IPVS: using max 32 ests per chain, 76800 per kthread [ 882.691466][ T821] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6889'. [ 882.742898][ T821] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 882.776893][ T821] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6889'. [ 882.819845][ T821] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 882.864599][ T839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6892'. [ 882.978704][ T846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6895'. [ 882.995598][ T846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6895'. [ 883.088234][ T848] netlink: 'syz.3.6888': attribute type 15 has an invalid length. [ 883.829683][ T885] bond2: option mode: unable to set because the bond device has slaves [ 884.043765][ T898] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6905'. [ 884.147064][ T909] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6909'. [ 884.272999][ T903] bond2: (slave .`): Releasing active interface [ 884.308624][ T903] bridge0: port 3(dummy0) entered disabled state [ 884.329899][ T903] bridge_slave_0: left allmulticast mode [ 884.338036][ T903] bridge_slave_0: left promiscuous mode [ 884.338336][ T903] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.363336][ T903] bridge_slave_1: left allmulticast mode [ 884.369244][ T903] bridge_slave_1: left promiscuous mode [ 884.375673][ T903] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.399293][ T903] bond1: (slave veth0_to_bond): Releasing active interface [ 884.419639][ T903] .`: (slave bond_slave_0): Releasing backup interface [ 884.435195][ T903] .`: (slave bond_slave_1): Releasing backup interface [ 884.458582][ T903] team0: Port device team_slave_0 removed [ 884.470587][ T903] team0: Port device team_slave_1 removed [ 884.473946][ T903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.473967][ T903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.480508][ T903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.480531][ T903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.505447][ T907] netlink: 'syz.2.6909': attribute type 12 has an invalid length. [ 885.110682][ T962] netlink: 'syz.3.6918': attribute type 3 has an invalid length. [ 885.284028][T30229] net_ratelimit: 27 callbacks suppressed [ 885.284077][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.325253][ T967] x_tables: duplicate underflow at hook 2 [ 885.356266][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.433799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.689917][ T983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 885.806135][ T992] vlan2: entered promiscuous mode [ 885.811844][ T992] bridge0: entered promiscuous mode [ 885.820041][ T992] netlink: 'syz.4.6927': attribute type 1 has an invalid length. [ 885.912836][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.913023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.950671][ T986] netlink: 'syz.2.6926': attribute type 10 has an invalid length. [ 886.006538][ T986] bond2: (slave veth0_to_bond): Releasing active interface [ 886.073172][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.079997][ T986] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 886.110769][ T1002] netlink: 'syz.0.6930': attribute type 1 has an invalid length. [ 886.152660][ T1002] erspan1: entered allmulticast mode [ 886.314018][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.384320][ T1015] netlink: 'syz.0.6936': attribute type 4 has an invalid length. [ 886.552808][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.626274][ T1029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 887.216350][ T1052] __nla_validate_parse: 9 callbacks suppressed [ 887.224207][ T1052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6946'. [ 887.234786][ T1069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6946'. [ 887.638617][ T1099] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6958'. [ 887.755480][ T1102] wg0 speed is unknown, defaulting to 1000 [ 887.804219][ T1102] wg0 speed is unknown, defaulting to 1000 [ 887.805096][ T1102] wg0 speed is unknown, defaulting to 1000 [ 887.806133][ T1102] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 887.806161][ T1102] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 887.806190][ T1102] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 887.839649][ T1102] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 887.923812][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.017470][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.038676][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.045910][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.050689][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.059942][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.112258][ T1126] batman_adv: batadv0: Removing interface: wlan1 [ 888.173460][ T1131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6966'. [ 888.174638][ T1131] netlink: 'syz.0.6966': attribute type 2 has an invalid length. [ 888.178710][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.183182][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.230280][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.238694][ T1133] bridge_slave_1: default FDB implementation only supports local addresses [ 888.249313][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.255776][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.266780][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.273841][ T1102] wg0 speed is unknown, defaulting to 1000 [ 888.411736][ T1140] netlink: 'syz.1.6971': attribute type 17 has an invalid length. [ 888.419926][ T1140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6971'. [ 888.429761][ T1140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6971'. [ 888.490797][ T1145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6973'. [ 888.500155][ T1145] nbd: must specify a size in bytes for the device [ 888.512808][ T1145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6973'. [ 888.528675][ T1145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6973'. [ 888.528721][ T1145] nbd: must specify a size in bytes for the device [ 888.547409][ T1145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6973'. [ 888.836476][ T1165] netlink: 'syz.4.6977': attribute type 10 has an invalid length. [ 888.958888][ T1160] team0: Mode "roundr¨bin" not found [ 889.663672][ T1205] team0: Mode "roundr¨bin" not found [ 889.999852][ T1222] syzkaller0: entered promiscuous mode [ 889.999893][ T1222] syzkaller0: entered allmulticast mode [ 890.065519][ T1222] tipc: Enabled bearer , priority 0 [ 890.436712][ T1223] tipc: Resetting bearer [ 890.467267][ T1219] tipc: Resetting bearer [ 890.474105][ T971] net_ratelimit: 13 callbacks suppressed [ 890.474126][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.567748][ T1219] tipc: Disabling bearer [ 890.623133][ T1251] IPVS: Unknown mcast interface: rose0 [ 890.633871][ T1251] x_tables: duplicate underflow at hook 2 [ 890.694284][ T1248] x_tables: duplicate underflow at hook 2 [ 891.228533][ T1275] netlink: 'syz.0.7003': attribute type 1 has an invalid length. [ 891.428373][ T1285] ipvlan2: entered allmulticast mode [ 891.428409][ T1285] virt_wifi0: entered allmulticast mode [ 891.446895][ T1285] batman_adv: batadv0: Adding interface: ipvlan2 [ 891.446929][ T1285] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.447268][ T1285] batman_adv: batadv0: Interface activated: ipvlan2 [ 891.514190][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.547755][ T1289] bridge_slave_0: left allmulticast mode [ 891.553886][ T1289] bridge_slave_0: left promiscuous mode [ 891.560046][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.583204][ T1289] bridge_slave_1: left allmulticast mode [ 891.591334][ T1289] bridge_slave_1: left promiscuous mode [ 891.597453][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.643456][ T1289] bond0: (slave bond_slave_0): Releasing backup interface [ 891.672924][ T1289] bond0: (slave bond_slave_1): Releasing backup interface [ 891.691762][ T1300] netlink: 'syz.3.7010': attribute type 3 has an invalid length. [ 891.720702][ T1289] team0: Port device team_slave_0 removed [ 891.734416][ T1303] netlink: 'syz.4.7009': attribute type 5 has an invalid length. [ 891.747565][ T1289] team0: Port device team_slave_1 removed [ 891.756972][ T1289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.764869][ T1289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.774335][ T1289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.783846][ T1289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.802551][ T1289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 891.863500][ T1285] ipvlan3: entered allmulticast mode [ 891.870608][ T1285] batman_adv: batadv0: Adding interface: ipvlan3 [ 891.878347][ T1285] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.907111][ T1285] batman_adv: The newly added mac address (c2:ca:6f:c6:b5:d4) already exists on: ipvlan2 [ 891.907135][ T1285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.907149][ T1285] batman_adv: batadv0: Interface activated: ipvlan3 [ 891.985281][ T1295] team0: Mode "roundr¨bin" not found [ 892.424768][ T1330] __nla_validate_parse: 14 callbacks suppressed [ 892.424826][ T1330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7017'. [ 892.552001][T29464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.591918][ T1342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.592167][ T1342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.592381][ T1342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.592599][ T1342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.592795][ T1342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.592991][ T1342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.650544][ T1338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7019'. [ 893.024560][ T1362] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7024'. [ 893.102989][ T1368] syzkaller1: entered promiscuous mode [ 893.103045][ T1368] syzkaller1: entered allmulticast mode [ 893.172552][ T1374] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.7028'. [ 893.418159][ T1377] team0: Mode "roundr¨bin" not found [ 893.707705][ T1398] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.7033'. [ 893.707834][ T1398] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 893.733105][ T1398] 0ªX¹¦Dö»: entered allmulticast mode [ 893.774330][ T1396] netlink: 'syz.3.7032': attribute type 21 has an invalid length. [ 893.826392][ T1398] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7033'. [ 894.173519][ T1414] bridge0: port 3(veth1_to_bridge) entered blocking state [ 894.183801][ T1414] bridge0: port 3(veth1_to_bridge) entered disabled state [ 894.183982][ T1414] veth1_to_bridge: entered allmulticast mode [ 894.202085][ T1414] veth1_to_bridge: entered promiscuous mode [ 894.202245][ T1414] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 894.202647][ T1414] bridge0: port 3(veth1_to_bridge) entered blocking state [ 894.202744][ T1414] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 894.449800][ T1414] bridge2: entered allmulticast mode [ 894.668366][ T1427] team0: No ports can be present during mode change [ 894.702142][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7046'. [ 894.903931][ T1444] syzkaller0: entered promiscuous mode [ 894.911974][ T1444] syzkaller0: entered allmulticast mode [ 895.081118][ T1453] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7052'. [ 895.144062][ T1453] team0: Device veth1_macvtap failed to register rx_handler [ 895.392171][ T1457] syzkaller1: entered promiscuous mode [ 895.392210][ T1457] syzkaller1: entered allmulticast mode [ 895.674417][T19101] net_ratelimit: 68 callbacks suppressed [ 895.674486][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.675424][T29464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.862899][ T1483] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 896.019586][ T1488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 896.138151][ T1488] team0: Mode "roundr¨bin" not found [ 896.157674][ T1495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7060'. [ 896.176784][ T1496] netlink: 'syz.3.7061': attribute type 1 has an invalid length. [ 896.186580][ T1496] netlink: 'syz.3.7061': attribute type 4 has an invalid length. [ 896.537192][ T1515] netlink: 'syz.1.7066': attribute type 12 has an invalid length. [ 896.716688][T29464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.802258][T19101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.160760][ T1520] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 897.319205][ T1527] netlink: 'syz.3.7068': attribute type 1 has an invalid length. [ 897.331628][ T1527] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7068'. [ 897.331680][ T1527] netlink: 'syz.3.7068': attribute type 2 has an invalid length. [ 897.464248][ T1537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 897.588536][ T1547] netlink: 'syz.0.7076': attribute type 1 has an invalid length. [ 897.627068][ T1538] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 897.650921][ T1538] __nla_validate_parse: 1 callbacks suppressed [ 897.650969][ T1538] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7073'. [ 897.754691][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.945557][ T1560] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 897.959245][ T1560] bond3: (slave lo): Enslaving as an active interface with an up link [ 897.977682][ T1560] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 897.989611][ T1573] xt_socket: unknown flags 0x50 [ 898.310635][ T1581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7084'. [ 898.326477][ T1582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7084'. [ 898.442968][ T1584] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7086'. [ 898.466384][ T1584] gretap0: entered promiscuous mode [ 898.533170][ T1595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 898.608979][ T1593] netlink: 33 bytes leftover after parsing attributes in process `syz.1.7089'. [ 898.609029][ T1593] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7089'. [ 898.609063][ T1593] netlink: 33 bytes leftover after parsing attributes in process `syz.1.7089'. [ 898.666877][ T1593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7089'. [ 898.855989][ T1602] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7093'. [ 898.881777][ T1604] netlink: 'syz.2.7091': attribute type 10 has an invalid length. [ 898.889764][ T1602] 0·: renamed from hsr0 (while UP) [ 898.908218][ T1602] 0·: entered allmulticast mode [ 898.908256][ T1602] hsr_slave_0: entered allmulticast mode [ 898.908293][ T1602] hsr_slave_1: entered allmulticast mode [ 898.973542][ T1611] netlink: 'syz.0.7095': attribute type 6 has an invalid length. [ 899.153714][ T1613] dvmrp8: entered allmulticast mode [ 899.400450][ T1638] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7103'. [ 899.559104][ T1651] netlink: 'syz.3.7106': attribute type 1 has an invalid length. [ 899.604647][ T1651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.351489][ T1694] tc_dump_action: action bad kind [ 900.689343][ T1716] net_ratelimit: 8 callbacks suppressed [ 900.689398][ T1716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.692239][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.704775][ T1713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.705201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.872076][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.930808][ T1699] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 901.412792][ T1737] netlink: 'syz.4.7127': attribute type 2 has an invalid length. [ 901.911815][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.441435][ T1791] x_tables: duplicate entry at hook 2 [ 902.505530][ T1789] netlink: 'syz.2.7141': attribute type 1 has an invalid length. [ 902.662233][ T1803] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 902.874997][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.907039][ T1811] __nla_validate_parse: 78 callbacks suppressed [ 902.907103][ T1811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7151'. [ 902.941636][ T1820] netlink: 'syz.4.7152': attribute type 1 has an invalid length. [ 902.956463][T30229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.046220][ T1825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7155'. [ 903.089464][ T1828] netlink: 'syz.3.7156': attribute type 1 has an invalid length. [ 903.118654][ T1829] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7154'. [ 903.130225][ T1830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.132392][ T1830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.150326][ T1830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7155'. [ 903.193728][ T1833] netlink: 'syz.2.7157': attribute type 18 has an invalid length. [ 903.242537][T13894] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.242805][T13894] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.242840][T13894] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.242893][T13894] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 903.285695][ T1837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7158'. [ 903.300609][ T1829] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7154'. [ 903.459412][ T1847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7161'. [ 903.473093][ T1846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7161'. [ 903.545438][ T1851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7163'. [ 903.619544][ T1857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7164'. [ 903.687942][ T1861] sit2: entered promiscuous mode [ 903.687970][ T1861] sit2: entered allmulticast mode [ 904.031646][ T64] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 904.031700][ T64] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.236049][ T1883] netlink: 'syz.1.7170': attribute type 5 has an invalid length. [ 904.528712][ T1894] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 904.538922][ T1894] gretap1: entered promiscuous mode [ 904.538969][ T1894] gretap1: entered allmulticast mode [ 904.707990][ T1908] ksmbd: Daemon and kernel module version mismatch. ksmbd: 92, kernel module: 1. User-space ksmbd should terminate. [ 904.818447][ T1910] netlink: 'syz.2.7178': attribute type 5 has an invalid length. [ 904.913745][ T1919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.915272][ C1] net_ratelimit: 13 callbacks suppressed [ 905.915319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:75:31:be:98:0e, vlan:0) [ 905.915818][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:75:31:be:98:0e, vlan:0) [ 905.916207][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:75:31:be:98:0e, vlan:0) [ 905.916584][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:75:31:be:98:0e, vlan:0) [ 905.917011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:75:31:be:98:0e, vlan:0) [ 905.917380][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:75:31:be:98:0e, vlan:0) [ 905.917766][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:75:31:be:98:0e, vlan:0) [ 905.918123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:75:31:be:98:0e, vlan:0) [ 905.918484][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:75:31:be:98:0e, vlan:0) [ 905.918867][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:75:31:be:98:0e, vlan:0) [ 906.294321][ T1980] Cannot find set identified by id 0 to match [ 907.071128][ T1994] bridge0: port 3(veth1_to_bridge) entered disabled state [ 907.071370][ T1994] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.071913][ T1994] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.147186][ T2000] bridge0: port 3(veth1_to_bridge) entered blocking state [ 907.147322][ T2000] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 907.147660][ T2000] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.147782][ T2000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.148032][ T2000] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.148164][ T2000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.210024][ T2000] bridge0: entered promiscuous mode [ 907.210067][ T2000] bridge0: entered allmulticast mode [ 907.313635][ T2010] netlink: 'syz.0.7206': attribute type 16 has an invalid length. [ 907.313684][ T2010] netlink: 'syz.0.7206': attribute type 17 has an invalid length. [ 910.078554][ T1999] __nla_validate_parse: 13 callbacks suppressed [ 910.091819][ T1999] netlink: 81 bytes leftover after parsing attributes in process `syz.1.7205'. [ 910.921180][ C0] net_ratelimit: 22657 callbacks suppressed [ 910.921205][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.921406][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.921611][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.921790][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.922026][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.922184][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.922319][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.922574][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.922671][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.922995][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.299930][ C0] sched: DL replenish lagged too much [ 915.931329][ C1] net_ratelimit: 27002 callbacks suppressed [ 915.931369][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.931670][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.931761][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.931974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.932192][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.932321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.932575][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.932660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.932963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.932967][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.941213][ C0] net_ratelimit: 20624 callbacks suppressed [ 920.941261][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.941287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.941736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.942073][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.942392][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.942561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.942711][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.943007][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.943429][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.943611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.951334][ C0] net_ratelimit: 20120 callbacks suppressed [ 925.951339][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.951377][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.951768][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.952168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.952561][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.952610][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.953018][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.953038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.953542][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.953913][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.961175][ C0] net_ratelimit: 21501 callbacks suppressed [ 930.961216][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.961233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.961563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 930.961699][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.961984][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.962318][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.962733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.962741][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.963164][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.963232][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.971481][ C0] net_ratelimit: 22150 callbacks suppressed [ 935.971535][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.971581][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.971861][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.972021][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.972261][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.972691][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.972854][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.972992][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.973234][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.974037][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.981305][ C0] net_ratelimit: 22305 callbacks suppressed [ 940.981328][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.981362][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.981710][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 940.981735][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.982137][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.982493][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.982569][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.982929][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.982965][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.983339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.991347][ C0] net_ratelimit: 22158 callbacks suppressed [ 945.991352][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.991414][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.991753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.992057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 945.992211][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.992486][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.992606][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.992786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.993276][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.993471][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.001289][ C0] net_ratelimit: 22295 callbacks suppressed [ 951.001337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.001577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.001734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.001959][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.002043][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.002373][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.002697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 951.002812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.003080][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.003177][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.011303][ C0] net_ratelimit: 21974 callbacks suppressed [ 956.011349][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.011652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.011691][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.011979][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.012274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 956.012563][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.012711][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.012961][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.013028][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.013433][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.021092][ C1] net_ratelimit: 22077 callbacks suppressed [ 961.021146][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.021226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 961.021659][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.021954][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.021962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.022325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.022359][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.022788][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.023109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.023343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.031129][ C0] net_ratelimit: 22223 callbacks suppressed [ 966.031186][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.031624][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.031648][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.032036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.032056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.032365][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.032679][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.032883][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 966.032974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 966.033263][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.041313][ C0] net_ratelimit: 22027 callbacks suppressed [ 971.041371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.041385][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.041693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 971.042099][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.042236][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.042448][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.042638][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.042837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.043256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 971.043480][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.051148][ C0] net_ratelimit: 22016 callbacks suppressed [ 976.051213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 976.051627][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.051953][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.052237][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.052360][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.052623][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.052776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.053114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.053491][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 976.053503][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.061089][ C1] net_ratelimit: 21988 callbacks suppressed [ 981.061137][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.061256][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.061530][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.061704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.062053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.062360][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.062362][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.062698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 981.062749][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 981.063077][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.071100][ C1] net_ratelimit: 22139 callbacks suppressed [ 986.071156][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.071226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.071596][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.071701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.072091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.072411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.072508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.072736][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.072910][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 986.073035][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 991.081113][ C0] net_ratelimit: 22070 callbacks suppressed [ 991.081167][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 991.081376][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.081611][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.081773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.081948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.082403][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.082628][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.082829][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.083027][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 991.083154][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.091401][ C1] net_ratelimit: 22262 callbacks suppressed [ 996.091441][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.091455][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.091838][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.092164][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.092251][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.092487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.092623][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.092786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 996.093230][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 996.093433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.101274][ C0] net_ratelimit: 22112 callbacks suppressed [ 1001.101337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.101753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.102157][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.102299][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.102466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.102679][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.102749][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.103058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1001.103453][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1001.103482][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.111206][ C1] net_ratelimit: 21846 callbacks suppressed [ 1006.111272][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.111299][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.111643][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.111660][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.111949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.112247][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1006.112488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.112664][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.112877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1006.113036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.121222][ C1] net_ratelimit: 22723 callbacks suppressed [ 1011.121245][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.121348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.121617][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.121729][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.122026][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.122319][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1011.122409][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.122736][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.122785][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1011.123033][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1015.091046][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1015.098027][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1998/1:b..l [ 1015.105957][ C1] rcu: (detected by 1, t=10502 jiffies, g=167077, q=2813 ncpus=2) [ 1015.113947][ C1] task:syz.1.7205 state:R running task stack:24360 pid:1998 tgid:1998 ppid:31083 task_flags:0x400040 flags:0x00080002 [ 1015.127461][ C1] Call Trace: [ 1015.130750][ C1] [ 1015.133697][ C1] __schedule+0x17db/0x58f0 [ 1015.138332][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1015.143322][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1015.148292][ C1] ? __pfx___schedule+0x10/0x10 [ 1015.153164][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1015.158217][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1015.163624][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1015.169012][ C1] preempt_schedule_common+0x7f/0xd0 [ 1015.174327][ C1] ? nl80211_netlink_notify+0x49c/0x860 [ 1015.180002][ C1] preempt_schedule_thunk+0x16/0x40 [ 1015.185222][ C1] __local_bh_enable_ip+0xe9/0x140 [ 1015.190393][ C1] nl80211_netlink_notify+0x49c/0x860 [ 1015.195792][ C1] ? nl80211_netlink_notify+0x75/0x860 [ 1015.201277][ C1] notifier_call_chain+0x1a5/0x3d0 [ 1015.206425][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 1015.212177][ C1] netlink_release+0x11fb/0x1a80 [ 1015.217250][ C1] ? netlink_release+0x106/0x1a80 [ 1015.222296][ C1] ? __pfx_netlink_release+0x10/0x10 [ 1015.227596][ C1] ? down_write+0x16b/0x200 [ 1015.232198][ C1] ? __pfx_down_write+0x10/0x10 [ 1015.237103][ C1] __sock_release+0xa0/0x1f0 [ 1015.241911][ C1] ? __pfx_sock_close+0x10/0x10 [ 1015.246877][ C1] sock_close+0x1c/0x30 [ 1015.251061][ C1] __fput+0x418/0xa50 [ 1015.255098][ C1] task_work_run+0x1d9/0x270 [ 1015.259716][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1015.264942][ C1] exit_to_user_mode_loop+0x204/0x770 [ 1015.270328][ C1] ? rcu_is_watching+0x16/0xb0 [ 1015.275116][ C1] do_syscall_64+0x328/0x520 [ 1015.279743][ C1] ? trace_irq_disable+0x3b/0x140 [ 1015.284770][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.290832][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1015.295500][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.301408][ C1] RIP: 0033:0x7f340e59e159 [ 1015.305823][ C1] RSP: 002b:00007ffd9b2e3e58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1015.314220][ C1] RAX: 0000000000000000 RBX: 00007f340e827da0 RCX: 00007f340e59e159 [ 1015.322194][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1015.330275][ C1] RBP: 00007f340e827da0 R08: 0000000000000006 R09: 0000000000000000 [ 1015.338255][ C1] R10: 00007f340e827cb0 R11: 0000000000000246 R12: 00000000000dda20 [ 1015.346215][ C1] R13: 00007f340e82627c R14: 00000000000dd89e R15: 00007ffd9b2e3f60 [ 1015.354194][ C1] [ 1015.357246][ C1] rcu: rcu_preempt kthread starved for 764 jiffies! g167077 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1015.368179][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1015.378176][ C1] rcu: RCU grace-period kthread stack dump: [ 1015.384076][ C1] task:rcu_preempt state:R running task stack:26112 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1015.397603][ C1] Call Trace: [ 1015.400897][ C1] [ 1015.403845][ C1] __schedule+0x17db/0x58f0 [ 1015.408422][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1015.413391][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1015.418542][ C1] ? __pfx___schedule+0x10/0x10 [ 1015.423410][ C1] ? lock_acquire+0x115/0x350 [ 1015.428117][ C1] ? schedule+0x90/0x2b0 [ 1015.432383][ C1] schedule+0x164/0x2b0 [ 1015.436563][ C1] schedule_timeout+0x152/0x2c0 [ 1015.441443][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1015.446841][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1015.452280][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1015.458115][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1015.463733][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1015.468611][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1015.474802][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1015.480109][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1015.485338][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1015.491179][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1015.495795][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1015.501009][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1015.506012][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1015.511066][ C1] kthread+0x38b/0x480 [ 1015.515149][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1015.520365][ C1] ? __pfx_kthread+0x10/0x10 [ 1015.524970][ C1] ret_from_fork+0x514/0xb70 [ 1015.529620][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1015.534754][ C1] ? __switch_to+0xc89/0x1420 [ 1015.539458][ C1] ? __pfx_kthread+0x10/0x10 [ 1015.544064][ C1] ret_from_fork_asm+0x1a/0x30 [ 1015.548871][ C1] [ 1015.551895][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1015.558237][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1015.563461][ C0] NMI backtrace for cpu 0 [ 1015.563482][ C0] CPU: 0 UID: 0 PID: 2015 Comm: syz.0.7206 Not tainted syzkaller #0 PREEMPT(full) [ 1015.563514][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1015.563526][ C0] RIP: 0010:stack_trace_consume_entry+0x130/0x280 [ 1015.563565][ C0] Code: 49 89 e8 4c 89 e2 48 89 de 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 34 01 00 00 41 3b 1e 0f 92 c0 48 83 c4 18 5b 41 5c <41> 5d 41 5e 41 5f 5d e9 14 d1 34 0a cc 44 89 c1 80 e1 07 80 c1 03 [ 1015.563583][ C0] RSP: 0018:ffffc90000006e80 EFLAGS: 00000292 [ 1015.563600][ C0] RAX: 0000000000000001 RBX: ffffc90000006f60 RCX: 8000000000000100 [ 1015.563615][ C0] RDX: dffffc0000000000 RSI: ffffffff822b9f99 RDI: ffffc90000006f60 [ 1015.563629][ C0] RBP: 1ffff92000000dee R08: ffffc90000006f70 R09: 0000000000000002 [ 1015.563644][ C0] R10: ffffc90000006ef8 R11: ffffffff81b27650 R12: ffff888051258000 [ 1015.563659][ C0] R13: 1ffff92000000ded R14: ffffc90000006f68 R15: ffffc90000006ff0 [ 1015.563674][ C0] FS: 00007f12219516c0(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 1015.563691][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1015.563711][ C0] CR2: 00007f1e17dc6bd2 CR3: 000000005d5da000 CR4: 00000000003526f0 [ 1015.563727][ C0] Call Trace: [ 1015.563735][ C0] [ 1015.563742][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1015.563771][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1015.563802][ C0] arch_stack_walk+0x10f/0x150 [ 1015.563828][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1015.563856][ C0] ? skb_clone+0x212/0x3a0 [ 1015.563963][ C0] stack_trace_save+0xa9/0x100 [ 1015.563992][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1015.564024][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1015.564120][ C0] kasan_save_track+0x3e/0x80 [ 1015.564140][ C0] ? kasan_save_track+0x3e/0x80 [ 1015.564157][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1015.564176][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1015.564233][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1015.564255][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1015.564282][ C0] ? skb_clone+0x212/0x3a0 [ 1015.564302][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1015.564329][ C0] ? skb_clone+0x212/0x3a0 [ 1015.564353][ C0] skb_clone+0x212/0x3a0 [ 1015.564376][ C0] br_flood+0x616/0x8d0 [ 1015.564429][ C0] br_handle_frame_finish+0x1119/0x1950 [ 1015.564460][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1015.564482][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1015.564571][ C0] ? ipt_do_table+0x137f/0x15d0 [ 1015.564598][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1015.564617][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1015.564648][ C0] ? nf_hook_slow+0x176/0x220 [ 1015.564732][ C0] br_nf_pre_routing_finish+0x138a/0x1a10 [ 1015.564765][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1015.564791][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1015.564817][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1015.564838][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1015.564859][ C0] NF_HOOK+0x64e/0x6e0 [ 1015.564879][ C0] ? net_generic+0x1e/0x240 [ 1015.564903][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1015.564926][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1015.564953][ C0] ? setup_pre_routing+0x4d2/0x6e0 [ 1015.564977][ C0] br_nf_pre_routing+0xec2/0x14b0 [ 1015.564999][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1015.565028][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1015.565050][ C0] br_handle_frame+0x127f/0x1510 [ 1015.565078][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1015.565103][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1015.565125][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1015.565154][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1015.565187][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1015.565209][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 1015.565294][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1015.565320][ C0] ? ip6_rcv_finish+0x265/0x280 [ 1015.565372][ C0] ? NF_HOOK+0x336/0x3c0 [ 1015.565402][ C0] ? process_backlog+0x3de/0x18b0 [ 1015.565430][ C0] ? process_backlog+0x3de/0x18b0 [ 1015.565460][ C0] process_backlog+0x727/0x18b0 [ 1015.565491][ C0] ? process_backlog+0x3de/0x18b0 [ 1015.565526][ C0] __napi_poll+0xaa/0x330 [ 1015.565553][ C0] net_rx_action+0x61d/0xf50 [ 1015.565588][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1015.565615][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1015.565681][ C0] ? net_tx_action+0xbff/0xc30 [ 1015.565716][ C0] handle_softirqs+0x226/0x860 [ 1015.565744][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1015.565773][ C0] __irq_exit_rcu+0xcb/0x220 [ 1015.565798][ C0] irq_exit_rcu+0x9/0x30 [ 1015.565821][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1015.565848][ C0] [ 1015.565855][ C0] [ 1015.565863][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1015.565884][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 1015.565903][ C0] Code: ff ff ff e8 20 29 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 54 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 2c 44 0a cc 48 8d 3d f7 34 da [ 1015.565920][ C0] RSP: 0018:ffffc90007137500 EFLAGS: 00000296 [ 1015.565937][ C0] RAX: ce11b8bb236ac500 RBX: 0000000000000000 RCX: 0000000000000046 [ 1015.565951][ C0] RDX: 00000000e2212058 RSI: ffffffff8e6fd59a RDI: ffffffff8c6d9480 [ 1015.565965][ C0] RBP: ffff888051258000 R08: 6b00000000000000 R09: 0000000000000000 [ 1015.565979][ C0] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8ed5c6e0 [ 1015.565993][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1015.566017][ C0] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 1015.566045][ C0] __update_page_owner_free_handle+0x4b/0x4a0 [ 1015.566066][ C0] ? __update_page_owner_free_handle+0x2e/0x4a0 [ 1015.566087][ C0] ? page_ext_put+0x97/0xc0 [ 1015.566110][ C0] __reset_page_owner+0x85/0x1f0 [ 1015.566131][ C0] __free_frozen_pages+0xc93/0xd90 [ 1015.566166][ C0] __slab_free+0x274/0x2c0 [ 1015.566188][ C0] ? qlist_free_all+0x8e/0x100 [ 1015.566207][ C0] qlist_free_all+0x99/0x100 [ 1015.566226][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1015.566258][ C0] __kasan_slab_alloc+0x22/0x80 [ 1015.566279][ C0] kmem_cache_alloc_lru_noprof+0x2a3/0x5f0 [ 1015.566308][ C0] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 1015.566336][ C0] ? __d_alloc+0x37/0x6f0 [ 1015.566362][ C0] ? __d_alloc+0x37/0x6f0 [ 1015.566391][ C0] __d_alloc+0x37/0x6f0 [ 1015.566420][ C0] d_alloc_pseudo+0x21/0xc0 [ 1015.566448][ C0] alloc_path_pseudo+0x107/0x220 [ 1015.566472][ C0] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1015.566501][ C0] alloc_file_pseudo+0xa8/0x1e0 [ 1015.566525][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1015.566553][ C0] anon_inode_getfd+0xc8/0x1f0 [ 1015.566583][ C0] bpf_prog_load+0x1612/0x1c20 [ 1015.566618][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 1015.566651][ C0] ? trace_cgroup_notify_frozen+0x1e0/0x200 [ 1015.566684][ C0] __sys_bpf+0xd0d/0xd90 [ 1015.566712][ C0] ? trace_cgroup_notify_frozen+0x1e0/0x200 [ 1015.566739][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1015.566761][ C0] ? do_futex+0x3e7/0x4e0 [ 1015.566785][ C0] ? trace_cgroup_notify_frozen+0x1e0/0x200 [ 1015.566827][ C0] ? rcu_is_watching+0x16/0xb0 [ 1015.566853][ C0] __x64_sys_bpf+0xba/0xd0 [ 1015.566872][ C0] do_syscall_64+0x166/0x520 [ 1015.566901][ C0] ? trace_irq_disable+0x3b/0x140 [ 1015.566919][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.566937][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1015.566960][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.566978][ C0] RIP: 0033:0x7f122379e159 [ 1015.566996][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.567012][ C0] RSP: 002b:00007f1221951028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1015.567031][ C0] RAX: ffffffffffffffda RBX: 00007f1223a26450 RCX: 00007f122379e159 [ 1015.567045][ C0] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1015.567058][ C0] RBP: 00007f1223835024 R08: 0000000000000000 R09: 0000000000000000 [ 1015.567070][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.567082][ C0] R13: 00007f1223a264e8 R14: 00007f1223a26450 R15: 00007ffee55163e8 [ 1015.567107][ C0] [ 1016.131339][ C0] net_ratelimit: 20845 callbacks suppressed [ 1016.131382][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.131675][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.132054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.132461][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.132742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.133050][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.133340][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1016.133710][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.133981][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1016.134373][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)