last executing test programs: 4.815842265s ago: executing program 1 (id=3682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x10}]}, 0x5c}}, 0x0) 4.550784265s ago: executing program 1 (id=3688): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xfffffffa, 0x4b, &(0x7f0000000000)="a0c4678a43f407c0c0af9f788810ba5e8570b79884f018c75c4fe6211a9de3b3ee20d2956c6d3b0b1e828075f14949156ce9bfa09a2ecdcfa728ec826108fe9100234706ce2fe0da77be37", 0x0, 0x1}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000004100010026bd700f040000000100000004004880100001920c00108004000880040008800c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_newvlan={0x30, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x44014) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) 4.448706088s ago: executing program 4 (id=3690): sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x8890) 4.228119165s ago: executing program 0 (id=3692): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffffff00000000b3010008be691200", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018660000060000000000000041000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xf968, 0x10, &(0x7f0000000280)=""/16, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x6, 0x403}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300), &(0x7f0000000340)=[{0x0, 0x5, 0xd, 0x6}], 0x10, 0xffff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x11, 0xa, 0x0) sendto$x25(r1, 0x0, 0x0, 0x85, &(0x7f0000000f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xd928, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) unshare(0x22020400) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r7, &(0x7f0000000200)=""/196, 0xc4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xffffffff, 0x1}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRESDEC=r4, @ANYRES32=r3, @ANYRES16=r5, @ANYRESHEX=r8], 0x120}}, 0x4048841) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, 0x37, 0x0, 0xffffffff, 0x5a}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0xfe33) recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.095952634s ago: executing program 4 (id=3694): socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2a0140, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)=ANY=[@ANYBLOB="14000000070a01010000ffffffe7000000005e9e"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r5 = socket(0x1f, 0x1, 0x7) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e28, @loopback}, 0x148, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x5}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 3.838361786s ago: executing program 2 (id=3695): unshare(0x6060600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000100000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.589204053s ago: executing program 2 (id=3696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x38, r1, 0x87898b830c7bd19d, 0x3, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff0, 0x67}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 3.228779509s ago: executing program 3 (id=3698): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x200000000000000) 3.172823636s ago: executing program 2 (id=3699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x98, 0x138, 0x428, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x11000000, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 3.172591115s ago: executing program 4 (id=3700): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000013000500010000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@delchain={0xc8, 0x65, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x1}, {0xffff, 0xfff1}, {0xfff1, 0xed043873686a56b8}}, [@TCA_CHAIN={0x8, 0xb, 0xf53}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0xd}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_POLICE={0x50, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000005, 0x4, 0x6c, 0x6, {0x5, 0x1, 0x3, 0x6e9, 0x81, 0x1f6}, {0x41, 0x1, 0x100, 0x0, 0x6, 0x8}, 0x7, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_MODE={0x8}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x30040880) 3.061464992s ago: executing program 1 (id=3701): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r14 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r14, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r14, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r14, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0xfffff96d, 0x4) bind$inet6(r13, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) bind$inet6(r13, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0xffffffffffffff62, 0x1, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0xffffffffffffff62, 0x1, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRESOCT=r0], 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x1) 2.895739318s ago: executing program 0 (id=3702): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b36, &(0x7f0000000240)={'wlan1\x00', @random="8dffffffebff"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.761102174s ago: executing program 3 (id=3703): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r1, 0x3, 0x9}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2.76078159s ago: executing program 2 (id=3704): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}}], {0x95, 0x0, 0x0, 0x10000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.934939562s ago: executing program 0 (id=3705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001900)=ANY=[@ANYBLOB="400000001000030428bd70000000000000ffffff", @ANYRES32=0x0, @ANYBLOB="0800000000000000140012800b0001006772657461700000040002a00a0001"], 0x40}}, 0x0) 1.879657524s ago: executing program 2 (id=3706): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRESHEX=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0x10}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000f80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000b0fffd000000119078ac1e0001e0000001000017c1009c90780100000003000000fdca797c16a778cbd5c03a444dc3191ce5fdaea5b5b26e3f838d51c2af0e7bf8cd4540f41d4413b3fb9d523c694c7d69e3106d5c285fc4bf7a662d1634b60e9358bf291754a1f73514d857a0193b0011bee967aaa43d3a793c99dfc9549f5254dc03edd75fb6e5992c489f7bf51ed681bf8344b829099446c31273fd7ec60f852bdbf775ec59036644ec9202"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@ipv6_newnexthop={0x3c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x46}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd25, 0x25dfdbff, {0x80, 0x14, 0x80, 0x7, 0xfc, 0x3, 0xff, 0xb, 0x100}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x80) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000005c0)={r1, &(0x7f00000004c0)='-^\x00', 0x648080, &(0x7f0000000500)={@align, {0xd5, 0x8, 0x10001, 0xfffffffffffff8ba}}, 0x6, &(0x7f0000000540), &(0x7f0000000580)=0x1}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000640)={'pimreg\x00', 0x20}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000740)={0x81, 0xf52, 0x0, 0x2}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140006000400000003000000ff7f0000ff1a2cff"], 0x2c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x5, 0x0, &(0x7f00000009c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f0000001480)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001440)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc030000", @ANYRES16=r10, @ANYBLOB="000429bd7000fbdbdf254b0000000c009900080000002a0000000400ff000500f6000700000014002c80080000000004000008000000830300000600f7000f0700005b002a000602ff030446080e80b0726508e5388d6f536bd2849032144709e5f9e03619e0960e1f978832f163b364de5388af0c8c751486a0a623de74622edf6dd90509afaf51e039d18409cc95dcf5693c04008074ff250300ab05005954b1730401000008007700070000001c0384803c0000800a000500169d0bb07c030000240006800800030003000000080002000100000008000200000000000800020006000000080002801f0f0000680000800a00010002020202020200000a00010002020202020200000a000500505050505050000034000680080003007f00000008000000fbffffff080005000800000008000200ff0f0000080000000400000008000300000100000a00010002020202020200002000008008000200080000000a0005002e3b391fd58a00000800020006000000800000803c0006800800010071510000080003000700000008000100fa00000008000200080000000800000011db000008000000faab000008000300070000000a0001000101010101010000080002000400000017000100a75cc93b6c427a7d311c27397e8f0a9d32252e001400068008000200000020000800030008000008640000800a000100010101010101000008000200f7ffffff08000200180200000a00050061568868f85c00000a000500ffffffffffff000008000200830900000a000500b34d55361d2b00000a00010002020202020200000a0001000202020202020000b00000800a00050050505050505000003400068008000200fdffffff0800010000000000080005000100000008000000ff070000080003003e8f000008000100090000000a000500ffffffffffff00000a00010001010101010100005400068008000200faffffff080003000002000008000300010000800800020004000000080005000500000008000200010000000800020001000000080001000300000008000000faffffff0800000000020000100000800a00010002020202020200001800008008000200070000000a0005005050505050500000300000800800020035f100000a00010001010101010100000a0005004bb0c146ef6e00000a0005005050505050500000680000800a000100020202020202000034000680080003000800000008000500f80300000800010001000000080001000400000008000300f9ffffff08000300070000100800020000100000080002000000000008000200070000000a00050037ceb08dc7b80000040087000800dc00787effff"], 0x3dc}, 0x1, 0x0, 0x0, 0x800}, 0x400c010) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r11, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="5701000000000000000000000000080008000000000008000200010000000800091501000000060006000200000008000100", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000229bd7000fedbdf25000000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom$x25(r0, &(0x7f0000000180)=""/21, 0x15, 0x10, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) 1.806370227s ago: executing program 3 (id=3707): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @remote}, {0x2, 0x4e27, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x4, 0x700000000000000, 0x0, 0x44000}, 0x4004000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 1.789351939s ago: executing program 4 (id=3708): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x6c, &(0x7f0000000200), &(0x7f0000000280)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0xffffffffffffff6c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@empty, @in6=@remote, 0x4e24, 0x2, 0x4e22, 0x0, 0xa}, 0x0, 0x426d722e34e63eff}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x3}, 0x8) sendto$inet(r8, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000000000000a00000000000000000000000c001400", @ANYRES16], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x20008000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x8, 0xc5a, {{0x29, 0x4, 0x2, 0x0, 0xa4, 0x64, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x63, [@empty]}, @cipso={0x86, 0x41, 0x1, [{0x6, 0xc, "4987224c1f4f62d8770a"}, {0x1, 0xf, "d6654de9d024fe2457cd364cd6"}, {0x0, 0x10, "1c4dd9120cba7a62155872541fc4"}, {0x7, 0x10, "d3ae6efa6c30716cdf000aee1e11"}]}, @cipso={0x86, 0x9, 0x3, [{0x7, 0x3, 'i'}]}, @timestamp={0x44, 0x10, 0xcb, 0x0, 0xa, [0x8, 0x6, 0x7]}, @end, @generic={0x94, 0x11, "1cd7d934be273c5357c32da5831073"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}, @ssrr={0x89, 0xf, 0xf1, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x48, r2, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_SPEED={0xfffffffffffffca0, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x800) 1.73795073s ago: executing program 1 (id=3709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000160a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c00030073797a30"], 0x120}}, 0x0) 1.317261724s ago: executing program 3 (id=3710): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="620ac4ff00000000711019000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) listen(r0, 0x5bc) (async) listen(r0, 0x5bc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000a4abb533557c8a3d04ac6d0010f0e0b3422938893d150c9c313e52c0001fff00b1c34431bc79474ec1cdb56a49a781b996089b5d0f70b9d855e70389395f0ee09a999f", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 1.243481821s ago: executing program 1 (id=3711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000040000000800000040"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) shutdown(r4, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0xcc, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x64, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xce}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x4d}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x61}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xd0}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x51}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x50) 1.18099742s ago: executing program 4 (id=3712): unshare(0x6060600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000170000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.029411465s ago: executing program 2 (id=3713): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r2, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r3, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1, 0x2, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x3) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) 837.765626ms ago: executing program 0 (id=3714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x700000000000000) 719.050045ms ago: executing program 4 (id=3715): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101f3ffffffffffffff010000030900010073797a310000000040000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000050900010073797a310000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008800c000140fffffffffffffffc0c000240000000000000000a0c0002400000000000007fff4c0008800c00024000000000000079530c00024000000000000000010c00014080000000000000000c00024000000000000000060c0001400000000000003e2b0c00014000699fb0fa4024d3fd0008800c00024000000000000000010c00024000000000000009a70c00014000000000000000060c000240ffffffffffffffff0c0001400000000000000eb90c00014000000000000000040900010073797a300000000014000000110001"], 0x160}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="3db5f189b8755517e0c704a9faa7b6160dd6c849a7936e3512a90b5aff61bc302a44155c1d28eb4c264dde323550e71c31aa515f9b67a9bd2249380a97e03022e6308fc03a96dfd26c7ddd9fa3211a2b33c2aff6fff2993e9df1e3edc31bd6d0f3aa01d74c4a557472c6a4e1eab37105041d71e542a34342"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xd040f3530de7926b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004500fde100002000fd06907864010101ac1414aa00004edd1314505bb496039922", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c20000290780000"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 569.110448ms ago: executing program 1 (id=3716): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@remote}, 0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x7ffffffe, 0x1e8, 0x0, 0x11, 0x148, 0x1d0, 0x0, 0x2c8, 0x2a8, 0x2a8, 0x2c8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001082f00fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088be"], 0xfdef) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty, r3}, 0x14) close(r0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 313.251791ms ago: executing program 3 (id=3717): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}}], {0x95, 0x0, 0x0, 0x11000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 312.681943ms ago: executing program 0 (id=3718): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0xffffffffffffff3a) close(r0) 49.022025ms ago: executing program 3 (id=3719): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="40bf3cf4c481ba9a559e69b3315a252651f836077362df85a53fd933ba30a2eaa08b888e9a8b86770efdb08ecb830d6ca9af4e4641145acd703d86beb6e1cd551c31f830c269213e80bf1bdcc1535a20c2d92d8c7d9e69be9f6a29e0defb958ecd8394ccc9c3a2cda39cd185eab958c817c9d442d0066524ee0af2245f1492046087d0ae7e3445c1815931e0dee22b0a356f97afc864525e62cef6c88d7caa9990bba9385c32ac602bdf2fd0a533e7a9820cc68b78b28c6696e5fbaa69eaf8", 0xbf}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x10}}, 0x28}}, 0x0) 0s ago: executing program 0 (id=3720): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): _nfacct: accounting object `syz0' does not exist [ 410.970614][T16267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.970634][T16267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.970664][T16267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.022217][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.056467][T16267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.056488][T16267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.056517][T16267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.269517][ T9791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.269835][ T9791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.274033][T16267] hsr_slave_0: entered promiscuous mode [ 411.277000][T16267] hsr_slave_1: entered promiscuous mode [ 411.285930][T16267] debugfs: 'hsr0' already exists in 'hsr' [ 411.286005][T16267] Cannot create hsr debugfs directory [ 411.959043][T16522] __nla_validate_parse: 9 callbacks suppressed [ 411.959070][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 412.054607][ T5626] Bluetooth: hci1: command tx timeout [ 412.232033][T16267] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.232075][T16267] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.382368][T16548] x_tables: unsorted entry at hook 1 [ 412.383069][T16548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 412.397255][ T1008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.541611][T16550] nbd: must specify a device to reconfigure [ 412.568613][T16267] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.568655][T16267] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.706704][T16267] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.706746][T16267] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.831966][T16267] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.831996][T16267] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.906932][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3117'. [ 412.971919][T16565] xt_nfacct: accounting object `syz0' does not exist [ 413.120777][T16567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3120'. [ 413.262381][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3124'. [ 413.369211][T16267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.374082][T16267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.375061][T16267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.406020][T16267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.406977][T16267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.429020][T16267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.430113][T16267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.436987][T16267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.609364][T16267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.665470][T16267] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.695777][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.695894][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.724960][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.725192][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.040262][T16605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3130'. [ 414.130211][ T5626] Bluetooth: hci1: command tx timeout [ 414.396795][ T50] IPVS: starting estimator thread 0... [ 414.479821][T16625] IPVS: using max 26 ests per chain, 62400 per kthread [ 414.480014][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 414.514553][T16628] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 415.138581][T16639] net_ratelimit: 9 callbacks suppressed [ 415.138603][T16639] ip_tables: iptables: counters copy to user failed while replacing table [ 415.139006][T16639] ip_tables: iptables: counters copy to user failed while replacing table [ 415.158745][T16639] ip_tables: iptables: counters copy to user failed while replacing table [ 415.173737][T16639] ip_tables: iptables: counters copy to user failed while replacing table [ 415.174106][T16639] ip_tables: iptables: counters copy to user failed while replacing table [ 415.174471][T16639] ip_tables: iptables: counters copy to user failed while replacing table [ 415.185932][T16639] ip_tables: iptables: counters copy to user failed while replacing table [ 415.186279][T16639] ip_tables: iptables: counters copy to user failed while replacing table [ 415.186782][T16639] ip_tables: iptables: counters copy to user failed while replacing table [ 415.233062][T16639] ip_tables: iptables: counters copy to user failed while replacing table [ 415.443032][T16645] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3137'. [ 415.556127][T16267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.610548][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 415.752291][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 415.752333][T16661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3138'. [ 415.852411][T16656] batadv_slave_0: entered promiscuous mode [ 415.857652][T16660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.901248][T16660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.054071][T16267] veth0_vlan: entered promiscuous mode [ 416.068451][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.068513][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.068550][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.068587][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.143322][T16267] veth1_vlan: entered promiscuous mode [ 416.317526][T16267] veth0_macvtap: entered promiscuous mode [ 416.345822][T16267] veth1_macvtap: entered promiscuous mode [ 416.412420][T16267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.450577][T16267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.493100][ T9791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.493176][ T9791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.493217][ T9791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.654882][ T1008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.761211][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.761235][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.810210][T16686] netlink: 'syz.1.3145': attribute type 2 has an invalid length. [ 416.856479][T16686] : entered promiscuous mode [ 416.863312][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.863334][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.051313][T16700] __nla_validate_parse: 6 callbacks suppressed [ 417.051337][T16700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3050'. [ 417.300405][T16708] netlink: 'syz.2.3153': attribute type 49 has an invalid length. [ 417.507580][T16708] ip6gretap0: entered promiscuous mode [ 417.507609][T16708] ip6gretap0: entered allmulticast mode [ 417.596810][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3155'. [ 417.811277][T16724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 417.873527][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.896766][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.906364][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.916551][T16730] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 417.919620][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.935651][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.264358][T16740] netlink: 'syz.2.3160': attribute type 1 has an invalid length. [ 418.311091][ T5622] tipc: Resetting bearer [ 418.414289][ T5622] tipc: Disabling bearer [ 418.920584][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3168'. [ 419.144010][T16775] netlink: 'syz.2.3169': attribute type 9 has an invalid length. [ 419.339456][ T5626] Bluetooth: hci3: unexpected cc 0x2003 length: 0 < 9 [ 419.416493][T16784] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3171'. [ 419.416775][T16784] unsupported nlmsg_type 40 [ 419.559206][T16789] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3172'. [ 419.664674][T16797] FAULT_INJECTION: forcing a failure. [ 419.664674][T16797] name failslab, interval 1, probability 0, space 0, times 0 [ 419.664711][T16797] CPU: 1 UID: 0 PID: 16797 Comm: syz.4.3176 Not tainted syzkaller #0 PREEMPT(full) [ 419.664737][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.664751][T16797] Call Trace: [ 419.664761][T16797] [ 419.664771][T16797] dump_stack_lvl+0xe8/0x150 [ 419.664809][T16797] should_fail_ex+0x410/0x560 [ 419.664841][T16797] should_failslab+0xa8/0x100 [ 419.664870][T16797] __kmalloc_noprof+0xfe/0x720 [ 419.664894][T16797] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 419.665000][T16797] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 419.665036][T16797] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 419.665072][T16797] genl_family_rcv_msg_doit+0xda/0x340 [ 419.665106][T16797] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 419.665142][T16797] ? apparmor_capable+0x126/0x170 [ 419.665179][T16797] ? bpf_lsm_capable+0x9/0x20 [ 419.665199][T16797] ? security_capable+0x7e/0x2c0 [ 419.665264][T16797] genl_rcv_msg+0x614/0x7a0 [ 419.665299][T16797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.665323][T16797] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 419.665421][T16797] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 419.665444][T16797] ? __pfx_nl80211_post_doit+0x10/0x10 [ 419.665490][T16797] netlink_rcv_skb+0x226/0x4a0 [ 419.665525][T16797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.665552][T16797] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.665601][T16797] ? down_read+0x2be/0x330 [ 419.665635][T16797] genl_rcv+0x28/0x40 [ 419.665658][T16797] netlink_unicast+0x7bd/0x940 [ 419.665700][T16797] netlink_sendmsg+0x813/0xb40 [ 419.665744][T16797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.665787][T16797] ? apparmor_socket_sendmsg+0x98/0x360 [ 419.665814][T16797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.665847][T16797] sock_sendmsg_nosec+0x13a/0x180 [ 419.665887][T16797] ____sys_sendmsg+0x54e/0x850 [ 419.665924][T16797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.665967][T16797] ? import_iovec+0x73/0xa0 [ 419.666000][T16797] ___sys_sendmsg+0x2a5/0x360 [ 419.666028][T16797] ? __lock_acquire+0x747/0x2de0 [ 419.666056][T16797] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.666126][T16797] ? __fget_files+0x2a/0x420 [ 419.666156][T16797] ? __fget_files+0x3a2/0x420 [ 419.666199][T16797] __x64_sys_sendmsg+0x1b1/0x290 [ 419.666232][T16797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.666286][T16797] do_syscall_64+0x166/0x520 [ 419.666312][T16797] ? trace_irq_disable+0x3b/0x140 [ 419.666334][T16797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.666366][T16797] ? clear_bhb_loop+0x70/0xc0 [ 419.666395][T16797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.666418][T16797] RIP: 0033:0x7feea9d9e159 [ 419.666438][T16797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.666457][T16797] RSP: 002b:00007feeaabdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.666482][T16797] RAX: ffffffffffffffda RBX: 00007feeaa025fa0 RCX: 00007feea9d9e159 [ 419.666500][T16797] RDX: 0000000004000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 419.666515][T16797] RBP: 00007feeaabdd090 R08: 0000000000000000 R09: 0000000000000000 [ 419.666529][T16797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.666543][T16797] R13: 00007feeaa026038 R14: 00007feeaa025fa0 R15: 00007ffc690d6998 [ 419.666579][T16797] [ 420.069601][ T5626] Bluetooth: hci0: command tx timeout [ 420.295368][ T997] net_ratelimit: 74 callbacks suppressed [ 420.295394][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.295907][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.330743][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.931363][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.144484][T16725] wlan0 speed is unknown, defaulting to 1000 [ 421.283528][T16860] FAULT_INJECTION: forcing a failure. [ 421.283528][T16860] name failslab, interval 1, probability 0, space 0, times 0 [ 421.283568][T16860] CPU: 0 UID: 0 PID: 16860 Comm: syz.2.3186 Not tainted syzkaller #0 PREEMPT(full) [ 421.283597][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.283613][T16860] Call Trace: [ 421.283623][T16860] [ 421.283634][T16860] dump_stack_lvl+0xe8/0x150 [ 421.283677][T16860] should_fail_ex+0x410/0x560 [ 421.283713][T16860] should_failslab+0xa8/0x100 [ 421.283758][T16860] __kmalloc_noprof+0xfe/0x720 [ 421.283785][T16860] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 421.283818][T16860] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 421.283859][T16860] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 421.283899][T16860] genl_family_rcv_msg_doit+0xda/0x340 [ 421.283938][T16860] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 421.283979][T16860] ? apparmor_capable+0x126/0x170 [ 421.284031][T16860] ? bpf_lsm_capable+0x9/0x20 [ 421.284053][T16860] ? security_capable+0x7e/0x2c0 [ 421.284094][T16860] genl_rcv_msg+0x614/0x7a0 [ 421.284130][T16860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.284157][T16860] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 421.284191][T16860] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 421.284216][T16860] ? __pfx_nl80211_post_doit+0x10/0x10 [ 421.284268][T16860] netlink_rcv_skb+0x226/0x4a0 [ 421.284308][T16860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.284339][T16860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.284396][T16860] ? down_read+0x2be/0x330 [ 421.284436][T16860] genl_rcv+0x28/0x40 [ 421.284462][T16860] netlink_unicast+0x7bd/0x940 [ 421.284511][T16860] netlink_sendmsg+0x813/0xb40 [ 421.284561][T16860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.284610][T16860] ? apparmor_socket_sendmsg+0x98/0x360 [ 421.284641][T16860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.284678][T16860] sock_sendmsg_nosec+0x13a/0x180 [ 421.284723][T16860] ____sys_sendmsg+0x54e/0x850 [ 421.284775][T16860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.284820][T16860] ? import_iovec+0x73/0xa0 [ 421.284858][T16860] ___sys_sendmsg+0x2a5/0x360 [ 421.284896][T16860] ? __lock_acquire+0x747/0x2de0 [ 421.284929][T16860] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.285007][T16860] ? __fget_files+0x2a/0x420 [ 421.285043][T16860] ? __fget_files+0x3a2/0x420 [ 421.285092][T16860] __x64_sys_sendmsg+0x1b1/0x290 [ 421.285130][T16860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.285189][T16860] do_syscall_64+0x166/0x520 [ 421.285217][T16860] ? trace_irq_disable+0x3b/0x140 [ 421.285241][T16860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.285265][T16860] ? clear_bhb_loop+0x70/0xc0 [ 421.285296][T16860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.285321][T16860] RIP: 0033:0x7fe3a5f9e159 [ 421.285345][T16860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.285368][T16860] RSP: 002b:00007fe3a6e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.285396][T16860] RAX: ffffffffffffffda RBX: 00007fe3a6225fa0 RCX: 00007fe3a5f9e159 [ 421.285415][T16860] RDX: 0000000004000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 421.285432][T16860] RBP: 00007fe3a6e67090 R08: 0000000000000000 R09: 0000000000000000 [ 421.285448][T16860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.285464][T16860] R13: 00007fe3a6226038 R14: 00007fe3a6225fa0 R15: 00007ffd355d9438 [ 421.285504][T16860] [ 421.313674][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3185'. [ 421.313773][T16859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.394582][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.395615][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.511978][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.050563][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.095636][T16880] syzkaller0: entered promiscuous mode [ 422.095664][T16880] syzkaller0: entered allmulticast mode [ 422.129094][ T5637] Bluetooth: hci0: command tx timeout [ 422.150126][T16885] IPv6: NLM_F_CREATE should be specified when creating new route [ 422.387129][T16891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3193'. [ 422.387170][T16891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3193'. [ 422.490638][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.491008][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.756734][T16901] netlink: 'syz.4.3195': attribute type 21 has an invalid length. [ 422.843121][T16725] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.843243][T16725] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.843451][T16725] bridge_slave_0: entered allmulticast mode [ 422.849161][T16725] bridge_slave_0: entered promiscuous mode [ 422.882319][T16901] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3195'. [ 422.884070][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.885780][T16725] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.885964][T16725] bridge_slave_1: entered allmulticast mode [ 422.887898][T16725] bridge_slave_1: entered promiscuous mode [ 422.968857][T16725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.974842][T16725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.153083][T16725] team0: Port device team_slave_0 added [ 423.156105][T16725] team0: Port device team_slave_1 added [ 423.281494][T16725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.281514][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.281543][T16725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.283877][T16725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.283894][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.283920][T16725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.534457][T16725] hsr_slave_0: entered promiscuous mode [ 423.537386][T16725] hsr_slave_1: entered promiscuous mode [ 423.550481][T16725] debugfs: 'hsr0' already exists in 'hsr' [ 423.550507][T16725] Cannot create hsr debugfs directory [ 423.553858][T16901] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3195'. [ 423.634993][T16933] netlink: 'syz.0.3200': attribute type 1 has an invalid length. [ 423.999273][T16949] netlink: 'syz.0.3205': attribute type 10 has an invalid length. [ 424.076082][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.076715][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.110465][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 424.135107][T16949] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.135286][T16949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.135726][T16949] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.135877][T16949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.177109][T16949] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 424.209565][ T5637] Bluetooth: hci0: command 0x040f tx timeout [ 424.293031][T16958] tipc: Started in network mode [ 424.293067][T16958] tipc: Node identity 7e8801d7b6f7, cluster identity 4711 [ 424.293307][T16958] tipc: Enabled bearer , priority 0 [ 424.324691][T16960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3209'. [ 424.401903][T16958] syzkaller0: entered promiscuous mode [ 424.401926][T16958] syzkaller0: entered allmulticast mode [ 424.402822][T16958] tipc: Resetting bearer [ 424.402983][T16960] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3209'. [ 424.455163][T16957] tipc: Resetting bearer [ 425.655484][ T5627] net_ratelimit: 15 callbacks suppressed [ 425.655508][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.788734][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.789072][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.225467][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.298479][ T5637] Bluetooth: hci0: command 0x040f tx timeout [ 426.695963][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.716492][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.928857][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.929185][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.275166][T16957] tipc: Disabling bearer [ 427.335683][ T2235] tipc: Node number set to 3363766743 [ 427.452710][T16725] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 427.452752][T16725] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 427.753384][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.788970][T16993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3217'. [ 427.813753][T16725] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 427.813793][T16725] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 427.816374][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 427.828766][T16994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3217'. [ 427.926669][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 427.931771][T16998] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.972049][T16992] tap0: tun_chr_ioctl cmd 2148553947 [ 427.987086][T16725] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 427.987124][T16725] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 427.994265][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.041599][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3219'. [ 428.135803][T16725] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 428.135833][T16725] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 428.165792][T17010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3220'. [ 428.369869][ T5637] Bluetooth: hci0: command 0x040f tx timeout [ 428.529449][T16725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.549836][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.551289][T16725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.579924][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.583608][T16725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.655550][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.664526][T16725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.720897][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.839972][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'. [ 428.840071][T17036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.065905][T17046] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 429.109703][T17047] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 429.139057][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'. [ 429.139090][T17045] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3230'. [ 429.139109][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'. [ 429.189350][T17047] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 429.189527][T17047] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 429.201001][T17047] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 429.244971][T16725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.247270][T17047] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 429.247413][T17047] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 429.247553][T17047] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 429.247684][T17047] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 429.247814][T17047] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 429.312251][ T5722] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.346420][T16725] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.370949][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.371071][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.404109][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.404219][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.764345][T17059] syzkaller0: entered promiscuous mode [ 429.764372][T17059] syzkaller0: entered allmulticast mode [ 430.013863][T17070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.013884][T17070] IPv6: NLM_F_CREATE should be set when creating new route [ 430.013923][T17070] IPv6: NLM_F_CREATE should be set when creating new route [ 430.208903][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 430.230848][T17077] Bluetooth: MGMT ver 1.23 [ 430.773217][T17073] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.773375][T17073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.774303][T17073] net_ratelimit: 13 callbacks suppressed [ 430.774322][T17073] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 430.841374][T17101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.841594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.858425][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.076648][T16725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.159384][T17110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.323604][T16725] veth0_vlan: entered promiscuous mode [ 431.399988][T16725] veth1_vlan: entered promiscuous mode [ 431.423775][T17118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.438654][ T9791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.439017][ T9791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.671314][T16725] veth0_macvtap: entered promiscuous mode [ 431.710408][T16725] veth1_macvtap: entered promiscuous mode [ 431.835637][T16725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.883183][T16725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.890672][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.062266][T17150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 432.119162][ T991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.119215][ T991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.170692][ T271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.171100][ T271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.650482][T17167] sctp: [Deprecated]: syz.4.3259 (pid 17167) Use of int in max_burst socket option. [ 432.650482][T17167] Use struct sctp_assoc_value instead [ 432.885899][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.885927][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.105260][T17182] __nla_validate_parse: 13 callbacks suppressed [ 433.105284][T17182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3262'. [ 433.146031][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.146056][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.191303][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 433.332787][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3266'. [ 433.604183][T17213] macvlan0: entered promiscuous mode [ 433.659067][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 434.302724][T17235] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 434.346355][T17236] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 434.679440][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 434.835287][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.857481][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.870586][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.872514][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.875174][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 435.166862][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'. [ 435.333433][ T5634] tipc: Resetting bearer [ 435.439123][ T5634] tipc: Disabling bearer [ 435.832090][ T9791] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.832144][ T9791] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.871797][T17292] validate_nla: 57 callbacks suppressed [ 435.871822][T17292] netlink: 'syz.3.3281': attribute type 1 has an invalid length. [ 435.908537][ T271] net_ratelimit: 19 callbacks suppressed [ 435.908567][ T271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.908774][ T271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.916193][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3280'. [ 435.988403][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3280'. [ 436.048703][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.141171][T17292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.223446][T17294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.289567][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.307210][T17294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.307728][T17319] xt_limit: Overflow, try lower: 536871034/127 [ 436.340140][T17294] bond0 (unregistering): Released all slaves [ 436.490755][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 436.570975][ T9791] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.571018][ T9791] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.646738][ T5280] veth0_vlan: left promiscuous mode [ 436.781720][ T5742] veth0_vlan: entered promiscuous mode [ 436.901622][ T9791] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.901664][ T9791] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.932585][ T5626] Bluetooth: hci2: command tx timeout [ 437.028850][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.029151][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.100574][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.574472][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.129060][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.148702][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.009136][ T5626] Bluetooth: hci2: command tx timeout [ 439.972232][T17345] vlan2: entered promiscuous mode [ 439.972262][T17345] hsr0: entered promiscuous mode [ 439.972674][T17345] vlan2: entered allmulticast mode [ 439.972694][T17345] hsr0: entered allmulticast mode [ 439.972711][T17345] hsr_slave_0: entered allmulticast mode [ 439.972730][T17345] hsr_slave_1: entered allmulticast mode [ 440.199595][ T9791] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.199638][ T9791] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.206398][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3292'. [ 440.206429][T17355] block nbd0: Unsupported socket: should be TCP or UNIX. [ 440.419045][T17363] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3293'. [ 440.559099][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3295'. [ 441.088667][ T5626] Bluetooth: hci2: command tx timeout [ 441.248738][ T981] net_ratelimit: 10 callbacks suppressed [ 441.248761][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.394172][T17401] netlink: 'syz.2.3305': attribute type 1 has an invalid length. [ 441.437383][T17253] wlan0 speed is unknown, defaulting to 1000 [ 441.473928][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.474174][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.476066][ T9791] bond1: left allmulticast mode [ 441.501543][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.527796][ T9791] bond1: left promiscuous mode [ 441.534511][ T9791] bridge0: port 3(bond1) entered disabled state [ 441.594863][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.641675][ T9791] bridge_slave_0: left allmulticast mode [ 441.641755][ T9791] bridge_slave_0: left promiscuous mode [ 441.645761][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.737196][ T9791] pim6reg: left allmulticast mode [ 441.737362][ T9791] dvmrp0: left allmulticast mode [ 441.737459][ T9791] hsr0: left allmulticast mode [ 441.737475][ T9791] hsr_slave_0: left allmulticast mode [ 441.737492][ T9791] hsr_slave_1: left allmulticast mode [ 442.293917][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.452047][ T9791] bond2 (unregistering): (slave geneve2): Releasing active interface [ 442.557836][ T9791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.571886][ T9791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.573141][ T9791] bond0 (unregistering): Released all slaves [ 442.585045][ T9791] bond1 (unregistering): Released all slaves [ 442.617001][ T9791] bond2 (unregistering): Released all slaves [ 442.637880][ T9791] bond3 (unregistering): Released all slaves [ 442.653251][ T9791] bond4 (unregistering): Released all slaves [ 442.672205][ T9791] bond5 (unregistering): Released all slaves [ 442.705915][ T9791] bond6 (unregistering): Released all slaves [ 442.913348][ T9791] tipc: Left network mode [ 442.986169][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 443.131253][ T9791] IPVS: stopping master sync thread 16730 ... [ 443.170894][ T5626] Bluetooth: hci2: command tx timeout [ 443.333763][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.609767][T17438] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 443.814809][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3312'. [ 443.814828][T17450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3312'. [ 443.856661][T17450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3312'. [ 443.883604][T17454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3312'. [ 443.972969][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.345418][T17474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3314'. [ 444.369828][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.395204][T17479] netlink: 'syz.3.3316': attribute type 17 has an invalid length. [ 444.395230][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3316'. [ 444.502891][T17479] gretap0: entered promiscuous mode [ 444.529814][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.548985][T17479] gretap0: left promiscuous mode [ 445.364246][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 445.772975][T17519] bond1: Unable to set up delay as MII monitoring is disabled [ 445.774765][T17519] bond1 (unregistering): Released all slaves [ 445.903044][ T9791] hsr_slave_0: left promiscuous mode [ 445.905581][ T9791] hsr_slave_1: left promiscuous mode [ 445.906833][ T9791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.906858][ T9791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.937128][ T9791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.937153][ T9791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.967136][ T9791] veth0_macvtap: left promiscuous mode [ 445.967307][ T9791] veth1_vlan: left promiscuous mode [ 446.450359][ T981] net_ratelimit: 1 callbacks suppressed [ 446.450382][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.685776][T17253] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.685932][T17253] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.686062][T17253] bridge_slave_0: entered allmulticast mode [ 446.700443][T17253] bridge_slave_0: entered promiscuous mode [ 446.756376][T17253] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.756542][T17253] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.756802][T17253] bridge_slave_1: entered allmulticast mode [ 446.775668][T17253] bridge_slave_1: entered promiscuous mode [ 446.977018][T17253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.047393][T17253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.235275][T17253] team0: Port device team_slave_0 added [ 447.255550][T17253] team0: Port device team_slave_1 added [ 447.302927][T17253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.302948][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.302979][T17253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.368352][T17565] xt_nfacct: accounting object `syz0' does not exist [ 447.382949][T17253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.382969][T17253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.383000][T17253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.486584][T17568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.488605][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.572888][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.722781][ T9791] IPVS: stop unused estimator thread 0... [ 447.924370][T17253] hsr_slave_0: entered promiscuous mode [ 447.939070][T17253] hsr_slave_1: entered promiscuous mode [ 447.939840][T17253] debugfs: 'hsr0' already exists in 'hsr' [ 447.939862][T17253] Cannot create hsr debugfs directory [ 448.033022][T17591] FAULT_INJECTION: forcing a failure. [ 448.033022][T17591] name failslab, interval 1, probability 0, space 0, times 0 [ 448.033060][T17591] CPU: 0 UID: 0 PID: 17591 Comm: syz.0.3339 Not tainted syzkaller #0 PREEMPT(full) [ 448.033084][T17591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.033098][T17591] Call Trace: [ 448.033106][T17591] [ 448.033116][T17591] dump_stack_lvl+0xe8/0x150 [ 448.033157][T17591] should_fail_ex+0x410/0x560 [ 448.033186][T17591] ? __alloc_skb+0x1db/0x7a0 [ 448.033211][T17591] should_failslab+0xa8/0x100 [ 448.033240][T17591] ? __alloc_skb+0x1db/0x7a0 [ 448.033262][T17591] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 448.033298][T17591] ? __alloc_skb+0x18d/0x7a0 [ 448.033324][T17591] ? __alloc_skb+0x1db/0x7a0 [ 448.033356][T17591] __alloc_skb+0x1db/0x7a0 [ 448.033385][T17591] ? __inet6_rt_notify+0xb0/0x470 [ 448.033529][T17591] __inet6_rt_notify+0x172/0x470 [ 448.033557][T17591] ? atomic_notifier_call_chain+0x26/0x180 [ 448.033616][T17591] fib6_del+0x10a7/0x15a0 [ 448.033669][T17591] ? fib6_del+0x1151/0x15a0 [ 448.033713][T17591] ? __pfx_fib6_del+0x10/0x10 [ 448.033742][T17591] ? do_raw_spin_lock+0x12b/0x2f0 [ 448.033780][T17591] ? kvfree_call_rcu+0xa1/0x430 [ 448.033829][T17591] ? __ip6_del_rt+0x8e/0x180 [ 448.033859][T17591] __ip6_del_rt+0x9b/0x180 [ 448.033889][T17591] ip6_del_rt+0xc3/0x120 [ 448.033914][T17591] ? __pfx_ip6_del_rt+0x10/0x10 [ 448.033938][T17591] ? addrconf_leave_solict+0x11c/0x1a0 [ 448.034028][T17591] ? __local_bh_enable_ip+0xd6/0x140 [ 448.034069][T17591] __ipv6_dev_ac_dec+0x57f/0x660 [ 448.034105][T17591] __ipv6_sock_ac_close+0x23f/0x420 [ 448.034171][T17591] inet6_release+0x4f/0x70 [ 448.034203][T17591] __sock_release+0xa0/0x1f0 [ 448.034268][T17591] ? __pfx_sock_close+0x10/0x10 [ 448.034302][T17591] sock_close+0x1c/0x30 [ 448.034335][T17591] __fput+0x418/0xa50 [ 448.034374][T17591] fput_close_sync+0x11f/0x240 [ 448.034412][T17591] ? __pfx_fput_close_sync+0x10/0x10 [ 448.034456][T17591] __x64_sys_close+0x7e/0x110 [ 448.034488][T17591] do_syscall_64+0x166/0x520 [ 448.034515][T17591] ? trace_irq_disable+0x3b/0x140 [ 448.034538][T17591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.034562][T17591] ? clear_bhb_loop+0x70/0xc0 [ 448.034592][T17591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.034615][T17591] RIP: 0033:0x7f4a73f9e159 [ 448.034638][T17591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.034658][T17591] RSP: 002b:00007f4a74e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 448.034684][T17591] RAX: ffffffffffffffda RBX: 00007f4a74225fa0 RCX: 00007f4a73f9e159 [ 448.034702][T17591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 448.034715][T17591] RBP: 00007f4a74e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 448.034729][T17591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.034743][T17591] R13: 00007f4a74226038 R14: 00007f4a74225fa0 R15: 00007ffd7336b2f8 [ 448.034781][T17591] [ 448.448917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.528216][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.686158][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 448.834788][T17614] xt_nfacct: accounting object `syz0' does not exist [ 449.195530][T17622] tipc: Enabling of bearer rejected, failed to enable media [ 449.574043][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.625317][T17639] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 449.892395][T17649] sctp: [Deprecated]: syz.2.3353 (pid 17649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.892395][T17649] Use struct sctp_sack_info instead [ 449.981042][T17658] xt_nfacct: accounting object `syz0' does not exist [ 450.598888][T17677] veth0_macvtap: entered allmulticast mode [ 450.599019][T17677] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 450.608970][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.667488][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.738682][T17682] __nla_validate_parse: 3 callbacks suppressed [ 450.738706][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'. [ 450.780259][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'. [ 450.835174][T17253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 450.870984][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.903111][T17253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 450.977175][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.985812][T17253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 451.006754][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.016186][T17253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 451.039741][T17693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3365'. [ 451.061990][T17253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.160282][T17693] vlan4: entered promiscuous mode [ 451.160312][T17693] gretap0: entered promiscuous mode [ 451.609973][T17253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.648707][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.650663][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.701388][T17253] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.752045][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.752140][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.832823][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.832987][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.174838][T17698] netlink: 'syz.3.3365': attribute type 1 has an invalid length. [ 452.297107][T17698] erspan1: entered allmulticast mode [ 452.651329][T17750] netlink: 'syz.1.3374': attribute type 1 has an invalid length. [ 452.651355][T17750] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3374'. [ 452.688855][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.598926][T17783] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 453.618752][T17783] tipc: Started in network mode [ 453.618792][T17783] tipc: Node identity 4aa526ce81e7, cluster identity 4711 [ 453.624390][T17783] tipc: Enabled bearer , priority 0 [ 453.734786][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.736655][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.945875][T17253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.013812][T17805] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3384'. [ 454.382215][T17828] sctp: [Deprecated]: syz.2.3388 (pid 17828) Use of int in maxseg socket option. [ 454.382215][T17828] Use struct sctp_assoc_value instead [ 454.406109][T17826] geneve2: entered promiscuous mode [ 454.406133][T17826] geneve2: entered allmulticast mode [ 454.438596][ T50] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 454.438663][ T50] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 454.464419][T17832] netlink: 'syz.3.3391': attribute type 2 has an invalid length. [ 454.527888][ T50] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 454.531678][ T1008] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 454.725075][T17843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3393'. [ 454.768963][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.799963][T17851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.800689][T17851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.804715][T17839] syzkaller0: entered promiscuous mode [ 454.804742][T17839] syzkaller0: entered allmulticast mode [ 454.835449][T17851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.837659][T17851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.879501][ T5742] tipc: Node number set to 3410110158 [ 454.883208][T17852] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 456.848851][ T25] net_ratelimit: 6 callbacks suppressed [ 456.848883][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.890257][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.897721][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.691734][T17253] veth0_vlan: entered promiscuous mode [ 458.729846][T17253] veth1_vlan: entered promiscuous mode [ 458.802467][T17891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.805893][T17253] veth0_macvtap: entered promiscuous mode [ 458.844427][T17253] veth1_macvtap: entered promiscuous mode [ 458.877618][T17253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.890395][T17253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.895654][T17899] netlink: NAT attribute has 5 unknown bytes [ 458.895679][T17899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.931252][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.019755][ T271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.020128][ T271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.028442][ T271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.043178][ T997] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.465580][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.465605][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.613682][T17921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.614020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.614290][T17921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.705272][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.705297][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.791002][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 459.816915][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 459.878595][T17930] netlink: 'syz.4.3270': attribute type 21 has an invalid length. [ 459.878622][T17930] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3270'. [ 459.878700][T17930] netlink: 'syz.4.3270': attribute type 5 has an invalid length. [ 459.878716][T17930] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3270'. [ 459.922933][T17925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3409'. [ 460.383233][T17950] sctp: [Deprecated]: syz.4.3414 (pid 17950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.383233][T17950] Use struct sctp_sack_info instead [ 460.895512][T17964] bridge_slave_0: left allmulticast mode [ 460.895540][T17964] bridge_slave_0: left promiscuous mode [ 460.895816][T17964] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.960195][T17964] bridge_slave_1: left allmulticast mode [ 460.960226][T17964] bridge_slave_1: left promiscuous mode [ 460.980386][T17964] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.047035][T17964] bond0: (slave bond_slave_0): Releasing backup interface [ 461.085921][T17964] bond0: (slave bond_slave_1): Releasing backup interface [ 461.136419][T17964] team0: Port device team_slave_0 removed [ 461.187045][T17964] team0: Port device team_slave_1 removed [ 461.201669][T17964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.201700][T17964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.207651][T17964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.207680][T17964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.322506][T17965] team0: Port device xfrm0 added [ 461.403134][T17973] tipc: Started in network mode [ 461.403171][T17973] tipc: Node identity c24e070b29af, cluster identity 4711 [ 461.403403][T17973] tipc: Enabled bearer , priority 0 [ 461.475385][T17984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3425'. [ 461.589417][T17991] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3426'. [ 461.880824][ T2235] net_ratelimit: 43 callbacks suppressed [ 461.880847][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.881043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.887650][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.889690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.967549][T18004] netlink: 'syz.4.3431': attribute type 11 has an invalid length. [ 462.003030][T18000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3428'. [ 462.048870][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.527256][T18018] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 462.544731][T18020] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 462.563635][ T5742] tipc: Node number set to 3957393163 [ 463.094316][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.954316][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 463.969472][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.137012][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.282320][T18103] ip6t_hbh: unknown flags 38 [ 464.285393][T18103] x_tables: duplicate underflow at hook 2 [ 464.286304][T18103] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3455'. [ 464.324114][T18099] bridge0: port 3(syz_tun) entered blocking state [ 464.324221][T18099] bridge0: port 3(syz_tun) entered disabled state [ 464.324397][T18099] syz_tun: entered allmulticast mode [ 464.361455][T18099] syz_tun: entered promiscuous mode [ 464.370594][T18099] bridge0: port 3(syz_tun) entered blocking state [ 464.371041][T18099] bridge0: port 3(syz_tun) entered forwarding state [ 464.705464][T18117] vlan2: entered allmulticast mode [ 464.705496][T18117] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 464.860893][T18126] __nla_validate_parse: 1 callbacks suppressed [ 464.860920][T18126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3459'. [ 464.943785][T18133] FAULT_INJECTION: forcing a failure. [ 464.943785][T18133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.943823][T18133] CPU: 1 UID: 0 PID: 18133 Comm: syz.2.3462 Not tainted syzkaller #0 PREEMPT(full) [ 464.943848][T18133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.943862][T18133] Call Trace: [ 464.943871][T18133] [ 464.943881][T18133] dump_stack_lvl+0xe8/0x150 [ 464.943924][T18133] should_fail_ex+0x410/0x560 [ 464.943958][T18133] _copy_from_user+0x2d/0xb0 [ 464.943990][T18133] __sys_sendto+0x2a9/0x5a0 [ 464.944020][T18133] ? ksys_write+0x1e6/0x270 [ 464.944057][T18133] ? __pfx___sys_sendto+0x10/0x10 [ 464.944081][T18133] ? __mutex_unlock_slowpath+0x731/0x900 [ 464.944140][T18133] ? __pfx_ksys_write+0x10/0x10 [ 464.944179][T18133] __x64_sys_sendto+0xde/0x100 [ 464.944209][T18133] do_syscall_64+0x166/0x520 [ 464.944233][T18133] ? trace_irq_disable+0x3b/0x140 [ 464.944258][T18133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.944283][T18133] ? clear_bhb_loop+0x70/0xc0 [ 464.944312][T18133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.944336][T18133] RIP: 0033:0x7fe3a5f9e159 [ 464.944357][T18133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.944376][T18133] RSP: 002b:00007fe3a6e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 464.944400][T18133] RAX: ffffffffffffffda RBX: 00007fe3a6225fa0 RCX: 00007fe3a5f9e159 [ 464.944418][T18133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 464.944433][T18133] RBP: 00007fe3a6e67090 R08: 0000200000000200 R09: 0000000000000014 [ 464.944449][T18133] R10: 0000000000040804 R11: 0000000000000246 R12: 0000000000000001 [ 464.944469][T18133] R13: 00007fe3a6226038 R14: 00007fe3a6225fa0 R15: 00007ffd355d9438 [ 464.944504][T18133] [ 465.094348][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.170748][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.496657][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3466'. [ 465.496756][T18151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.496770][T18151] IPv6: NLM_F_CREATE should be set when creating new route [ 465.496802][T18151] IPv6: NLM_F_CREATE should be set when creating new route [ 466.247465][T18183] xt_SECMARK: invalid mode: 9 [ 466.918645][T18214] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3487'. [ 467.233682][T18237] xt_SECMARK: invalid mode: 9 [ 467.250569][ T25] net_ratelimit: 1 callbacks suppressed [ 467.250592][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.353820][T18242] netlink: 380 bytes leftover after parsing attributes in process `syz.1.3492'. [ 467.353919][T18242] netlink: 159 bytes leftover after parsing attributes in process `syz.1.3492'. [ 467.466405][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.467103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.473641][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.475458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.526833][T18240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.527401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.554800][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.136675][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.292263][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.637019][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'. [ 468.637043][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3499'. [ 470.990202][T18300] xt_SECMARK: invalid mode: 9 [ 471.283348][T18315] xt_nfacct: accounting object `syz0' does not exist [ 471.796469][T18341] netlink: 'syz.0.3512': attribute type 64 has an invalid length. [ 471.796494][T18341] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.818417][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.818643][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.818838][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.819032][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.819215][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.819403][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.819598][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.819781][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.827235][T18341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'. [ 471.931666][T18349] xt_SECMARK: invalid mode: 9 [ 472.136897][T18354] netlink: 'syz.2.3516': attribute type 2 has an invalid length. [ 472.450720][ T30] net_ratelimit: 5 callbacks suppressed [ 472.450760][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.130623][T18391] openvswitch: netlink: Flow key attr not present in new flow. [ 473.178901][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.259562][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.430965][T18408] netlink: 'syz.2.3530': attribute type 6 has an invalid length. [ 473.465475][T18408] netlink: 'syz.2.3530': attribute type 6 has an invalid length. [ 473.476013][ T1008] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.476062][ T1008] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.476100][ T1008] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.476136][ T1008] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.499343][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.609801][T18410] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 473.881454][T18421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.120562][T18436] ip_tables: iptables: counters copy to user failed while replacing table [ 474.214720][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.250735][T18437] x_tables: duplicate underflow at hook 2 [ 474.307132][T18450] Dead loop on virtual device ip6_vti0 (net 276), fix it urgently! [ 474.342673][T18450] Dead loop on virtual device ip6_vti0 (net 276), fix it urgently! [ 474.354576][T18440] veth3: entered promiscuous mode [ 474.354641][T18440] veth3: entered allmulticast mode [ 474.361360][T18444] bridge0: port 3(veth1_to_bridge) entered blocking state [ 474.361513][T18444] bridge0: port 3(veth1_to_bridge) entered disabled state [ 474.361995][T18444] veth1_to_bridge: entered allmulticast mode [ 474.397211][T18444] veth1_to_bridge: entered promiscuous mode [ 474.397345][T18444] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 474.397724][T18444] bridge0: port 3(veth1_to_bridge) entered blocking state [ 474.397794][T18444] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 474.502843][T18458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.863607][T18473] syz_tun: left allmulticast mode [ 474.863642][T18473] syz_tun: left promiscuous mode [ 474.863897][T18473] bridge0: port 3(syz_tun) entered disabled state [ 474.909651][T18473] bridge_slave_0: left allmulticast mode [ 474.909681][T18473] bridge_slave_0: left promiscuous mode [ 474.909924][T18473] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.951417][T18473] bridge_slave_1: left allmulticast mode [ 474.951448][T18473] bridge_slave_1: left promiscuous mode [ 474.951655][T18473] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.067769][T18473] team0: Port device team_slave_0 removed [ 475.129921][T18473] team0: Port device team_slave_1 removed [ 475.140802][T18473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.140885][T18473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.170190][T18473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.170223][T18473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.246962][T18476] pim6reg: entered allmulticast mode [ 475.263349][T18480] team0: entered allmulticast mode [ 475.263378][T18480] xfrm0: entered allmulticast mode [ 476.133741][T18512] tipc: Enabled bearer , priority 0 [ 476.150304][T18511] tipc: Resetting bearer [ 476.265114][T18511] tipc: Disabling bearer [ 476.471999][T18528] netlink: 'syz.1.3563': attribute type 7 has an invalid length. [ 476.472025][T18528] netlink: 'syz.1.3563': attribute type 8 has an invalid length. [ 476.652351][T18543] netlink: 'syz.2.3567': attribute type 4 has an invalid length. [ 476.656458][T18543] veth0: entered promiscuous mode [ 476.676939][T18542] veth0: left promiscuous mode [ 477.648495][ T30] net_ratelimit: 9 callbacks suppressed [ 477.648520][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.690097][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.739276][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.288539][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.449449][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.768671][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.808483][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.850032][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.329423][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.888808][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.933233][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.978877][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.369277][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.008715][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.058601][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.088652][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.412003][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.050442][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.128367][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.171081][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.208392][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.448929][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.259452][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.288608][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.328714][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.488773][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.378879][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.408800][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.448383][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.528506][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.488623][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.649735][ T2235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.528681][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.570183][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.574178][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.608771][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.942061][T18573] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.041184][T18579] xt_hashlimit: overflow, try lower: 3/0 [ 503.141915][T18580] netlink: 'syz.4.3573': attribute type 7 has an invalid length. [ 503.141940][T18580] netlink: 'syz.4.3573': attribute type 8 has an invalid length. [ 503.310744][T18582] netlink: 'syz.0.3574': attribute type 4 has an invalid length. [ 503.511574][T18599] tipc: Enabled bearer , priority 0 [ 503.532135][T18598] tipc: Resetting bearer [ 503.660201][T18604] __nla_validate_parse: 41 callbacks suppressed [ 503.660225][T18604] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3581'. [ 503.666635][T18598] tipc: Disabling bearer [ 503.892797][T18613] xfrm0: left allmulticast mode [ 503.957083][T18613] team0: Port device xfrm0 removed [ 503.976719][T18613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 503.977435][ T50] tipc: Resetting bearer [ 504.303643][T18623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 504.521168][T18629] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3589'. [ 504.521200][T18629] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3589'. [ 504.662134][T18635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3591'. [ 504.662351][T18635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3591'. [ 504.662545][T18635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3591'. [ 504.662768][T18635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3591'. [ 504.662963][T18635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3591'. [ 504.663158][T18635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3591'. [ 504.663357][T18635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3591'. [ 505.272932][T18657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.302026][T18646] tipc: Started in network mode [ 505.302062][T18646] tipc: Node identity 92d08669632c, cluster identity 4711 [ 505.302435][T18646] tipc: Enabled bearer , priority 0 [ 505.337649][T18640] tipc: Resetting bearer [ 505.437396][T18640] tipc: Disabling bearer [ 505.925890][T18687] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 506.425447][T18712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 506.674662][T18715] bond2: option all_slaves_active: invalid value (179) [ 506.697360][T18715] bond2 (unregistering): Released all slaves [ 506.944014][T18733] sctp: [Deprecated]: syz.3.3618 (pid 18733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.944014][T18733] Use struct sctp_sack_info instead [ 507.173066][T18741] openvswitch: netlink: IPv6 tunnel dst address is zero [ 507.350660][T18728] netlink: 'syz.1.3617': attribute type 4 has an invalid length. [ 507.440225][T18751] FAULT_INJECTION: forcing a failure. [ 507.440225][T18751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.440262][T18751] CPU: 0 UID: 0 PID: 18751 Comm: syz.2.3623 Not tainted syzkaller #0 PREEMPT(full) [ 507.440287][T18751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.440301][T18751] Call Trace: [ 507.440310][T18751] [ 507.440321][T18751] dump_stack_lvl+0xe8/0x150 [ 507.440362][T18751] should_fail_ex+0x410/0x560 [ 507.440395][T18751] _copy_to_user+0x31/0xb0 [ 507.440428][T18751] simple_read_from_buffer+0xe1/0x170 [ 507.440466][T18751] proc_fail_nth_read+0x1bb/0x230 [ 507.440543][T18751] ? common_file_perm+0x20e/0x2b0 [ 507.440584][T18751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.440623][T18751] ? rw_verify_area+0x24a/0x4c0 [ 507.440655][T18751] ? tun_chr_write_iter+0x18a/0x200 [ 507.440768][T18751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.440804][T18751] vfs_read+0x213/0xa80 [ 507.440844][T18751] ? __pfx___mutex_lock+0x10/0x10 [ 507.440874][T18751] ? __pfx_vfs_read+0x10/0x10 [ 507.440909][T18751] ? __fget_files+0x2a/0x420 [ 507.440947][T18751] ? __fget_files+0x3a2/0x420 [ 507.440977][T18751] ? __fget_files+0x2a/0x420 [ 507.441018][T18751] ksys_read+0x150/0x270 [ 507.441055][T18751] ? __pfx_ksys_read+0x10/0x10 [ 507.441102][T18751] do_syscall_64+0x166/0x520 [ 507.441128][T18751] ? trace_irq_disable+0x3b/0x140 [ 507.441153][T18751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.441178][T18751] ? clear_bhb_loop+0x70/0xc0 [ 507.441207][T18751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.441230][T18751] RIP: 0033:0x7fe3a5f5e98e [ 507.441251][T18751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 507.441270][T18751] RSP: 002b:00007fe3a6e66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.441295][T18751] RAX: ffffffffffffffda RBX: 00007fe3a6e676c0 RCX: 00007fe3a5f5e98e [ 507.441312][T18751] RDX: 000000000000000f RSI: 00007fe3a6e670a0 RDI: 0000000000000004 [ 507.441327][T18751] RBP: 00007fe3a6e67090 R08: 0000000000000000 R09: 0000000000000000 [ 507.441342][T18751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.441356][T18751] R13: 00007fe3a6226038 R14: 00007fe3a6225fa0 R15: 00007ffd355d9438 [ 507.441392][T18751] [ 507.739163][T18754] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 507.857633][T18748] netlink: 'syz.3.3624': attribute type 1 has an invalid length. [ 508.703954][T18785] __nla_validate_parse: 55 callbacks suppressed [ 508.703979][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3636'. [ 508.769454][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 508.911877][T18792] erspan0: entered promiscuous mode [ 508.911904][T18792] erspan0: entered allmulticast mode [ 508.914742][T18791] Cannot find del_set index 0 as target [ 508.934939][T18789] netlink: 'syz.4.3639': attribute type 39 has an invalid length. [ 509.024963][T18790] pim6reg1: entered promiscuous mode [ 509.024989][T18790] pim6reg1: entered allmulticast mode [ 509.205691][T18800] sock: sock_set_timeout: `syz.2.3641' (pid 18800) tries to set negative timeout [ 509.245046][T18802] pimreg: entered allmulticast mode [ 509.826994][T18829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3651'. [ 509.923989][T18838] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3653'. [ 510.038789][T18844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3656'. [ 510.151571][T18838] veth5: entered allmulticast mode [ 510.285857][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'. [ 510.285958][T18854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 510.470341][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3664'. [ 510.470370][T18864] netlink: 'syz.2.3664': attribute type 1 has an invalid length. [ 510.470381][T18864] netlink: 'syz.2.3664': attribute type 2 has an invalid length. [ 510.649190][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3661'. [ 511.087441][T18886] netlink: 'syz.1.3671': attribute type 1 has an invalid length. [ 511.184476][T18893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 511.262930][ T5626] block nbd0: Receive control failed (result -107) [ 511.633721][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3674'. [ 511.921992][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3680'. [ 512.411898][T18941] openvswitch: netlink: Flow key attr not present in new flow. [ 512.503926][T18946] tipc: Resetting bearer [ 512.542765][T18946] team0 (unregistering): left allmulticast mode [ 512.547556][T18946] tipc: Disabling bearer [ 512.731709][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.734542][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.735674][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.736168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.736648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.737140][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.737626][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.738204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.061407][T18939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.085268][T18960] syzkaller1: entered promiscuous mode [ 513.085294][T18960] syzkaller1: entered allmulticast mode [ 513.305154][T18945] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 513.771345][T18971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 513.771365][T18971] IPv6: NLM_F_CREATE should be set when creating new route [ 513.771844][T18972] xt_SECMARK: invalid mode: 9 [ 513.951254][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 514.208198][ C0] net_ratelimit: 3118 callbacks suppressed [ 514.208222][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.208698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.209132][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.209562][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.209981][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.210413][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.210850][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.211301][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.211808][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.212259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.442905][T18980] __nla_validate_parse: 2 callbacks suppressed [ 514.442928][T18980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3702'. [ 514.442959][T18980] netlink: 'syz.0.3702': attribute type 7 has an invalid length. [ 514.442974][T18980] netlink: 'syz.0.3702': attribute type 8 has an invalid length. [ 514.442987][T18980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'. [ 514.444329][T18990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3702'. [ 514.444361][T18990] netlink: 'syz.0.3702': attribute type 7 has an invalid length. [ 514.444377][T18990] netlink: 'syz.0.3702': attribute type 8 has an invalid length. [ 514.444390][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'. [ 514.534441][ T5629] Bluetooth: hci0: command 0x040f tx timeout [ 515.341591][T19011] netlink: 'syz.1.3709': attribute type 7 has an invalid length. [ 515.530539][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3708'. [ 515.563094][T19009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3708'. [ 515.830512][T19015] netlink: 'syz.3.3710': attribute type 1 has an invalid length. [ 515.833487][T19016] netlink: 'syz.3.3710': attribute type 1 has an invalid length. [ 516.064258][T19015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.135998][T19021] bond3: (slave dummy0): making interface the new active one [ 516.164637][T19021] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 516.356944][T19031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.356967][T19031] IPv6: NLM_F_CREATE should be set when creating new route [ 516.904217][T19042] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3715'. [ 519.217952][ C1] net_ratelimit: 15148 callbacks suppressed [ 519.217973][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.217979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 519.218425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.218445][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 519.218907][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.218973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 519.219354][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.219433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 519.219831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.219925][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 520.615665][ C1] sched: DL replenish lagged too much [ 524.228151][ C1] net_ratelimit: 21111 callbacks suppressed [ 524.228178][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.228264][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.228645][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.228746][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.229136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.229221][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.229597][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.229708][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.230079][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.230178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.238154][ C0] net_ratelimit: 18526 callbacks suppressed [ 529.238180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.238247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 529.238721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.239245][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.239770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.239821][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 529.240281][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 529.240297][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.240816][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.241339][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.512920][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 534.247958][ C0] net_ratelimit: 15254 callbacks suppressed [ 534.247979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 534.247983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.248409][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 534.248484][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.249005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.249474][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.249832][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 534.249950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.250300][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 534.250428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.258093][ C0] net_ratelimit: 15153 callbacks suppressed [ 539.258119][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.258326][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.258555][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.258857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 539.258989][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.259432][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.259863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.260290][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.260410][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.260742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.268387][ C0] net_ratelimit: 15239 callbacks suppressed [ 544.268416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.268976][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.269358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 544.269513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.269828][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 544.270007][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.270497][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.270976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.271305][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 544.271479][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.278325][ C1] net_ratelimit: 15221 callbacks suppressed [ 549.278352][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 549.278399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.278848][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.278878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 549.279285][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.279745][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.280221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.280449][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 549.280682][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.280929][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 554.288145][ C0] net_ratelimit: 15178 callbacks suppressed [ 554.288171][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.288619][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.288642][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 554.289051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.289132][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 554.289509][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.289982][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.290423][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.290695][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 554.291148][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 559.298129][ C0] net_ratelimit: 15272 callbacks suppressed [ 559.298155][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.298614][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.298882][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 559.299078][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.299375][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 559.299586][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.300064][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.300524][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.301017][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.301502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.307938][ C1] net_ratelimit: 15598 callbacks suppressed [ 564.307964][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 564.308026][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.308536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.308586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 564.309054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.309580][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.310108][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.310147][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 564.310611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 564.310638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.318123][ C0] net_ratelimit: 15392 callbacks suppressed [ 569.318149][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.318161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 569.318654][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.318776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 569.319204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.319833][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.320238][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 569.320312][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.320691][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 569.320773][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.328255][ C1] net_ratelimit: 15400 callbacks suppressed [ 574.328279][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.328281][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.328706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.328720][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 574.329170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.330116][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.330133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.330567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.330587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 574.331006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.338225][ C0] net_ratelimit: 14901 callbacks suppressed [ 579.338252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.338263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 579.338714][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.338727][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 579.339150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.339580][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.340013][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.340168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 579.340431][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.340594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 584.348181][ C0] net_ratelimit: 14805 callbacks suppressed [ 584.348207][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.348423][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 584.348649][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.348933][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 584.349092][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.349513][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.350001][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.350442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.350449][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 584.350885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.357965][ C0] net_ratelimit: 15762 callbacks suppressed [ 589.357992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.358432][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.358880][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.358980][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 589.359318][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.359425][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 589.359760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.360218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.360631][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.360936][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.367988][ C0] net_ratelimit: 15482 callbacks suppressed [ 594.368016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.368915][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.368933][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.369336][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 594.369385][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.369841][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.370294][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.370784][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.370799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.371207][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 599.378283][ C0] net_ratelimit: 15492 callbacks suppressed [ 599.378311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.378494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 599.378770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.379049][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 599.379239][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.379756][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.380220][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.381213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.381697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.381820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.388004][ C1] net_ratelimit: 15641 callbacks suppressed [ 604.388031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.388332][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.388499][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 604.388776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.389228][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.389663][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.390099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.390105][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.390544][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.390597][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 609.398090][ C0] net_ratelimit: 15690 callbacks suppressed [ 609.398116][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.398577][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.398720][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.399039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.399175][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 609.399491][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.399926][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.400400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.400577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.400947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.408126][ C0] net_ratelimit: 15805 callbacks suppressed [ 614.408153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.408591][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.409028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.409318][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 614.409488][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.409776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 614.409998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.410458][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.410908][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.411240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 619.418256][ C0] net_ratelimit: 15661 callbacks suppressed [ 619.418289][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.418734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.419160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.419276][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 619.419593][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.419711][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 619.420057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.421087][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 619.421496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 619.421574][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.428006][ C1] net_ratelimit: 15743 callbacks suppressed [ 624.428038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 624.428056][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.428620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.429108][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.429494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 624.429583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.429934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 624.430051][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.430510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.430993][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.437943][ C0] net_ratelimit: 15510 callbacks suppressed [ 629.437971][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.438022][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 629.438448][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.438946][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.439411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.439566][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 629.439869][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.440086][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 629.440359][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.440872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.516335][ T5637] Bluetooth: hci0: command 0x040f tx timeout [ 634.447947][ C1] net_ratelimit: 16219 callbacks suppressed [ 634.447967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.447974][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.448453][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.448962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.449141][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.449421][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.449607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 634.449873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.450352][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.450678][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.741666][T19049] Bluetooth: hci2: command 0x0405 tx timeout [ 639.458084][ C0] net_ratelimit: 16774 callbacks suppressed [ 639.458111][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.458144][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.458593][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.459071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.459124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.459591][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.459600][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 639.460050][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.460515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.460571][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.468198][ C0] net_ratelimit: 16350 callbacks suppressed [ 644.468225][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.468300][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.468681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.469140][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.469270][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.469576][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.469716][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 644.470012][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.470472][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.470653][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.477946][ C0] net_ratelimit: 16765 callbacks suppressed [ 649.477974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.478458][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.478545][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.478959][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.478996][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 649.479440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.479919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.479922][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.480381][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.480847][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.488146][ C0] net_ratelimit: 15702 callbacks suppressed [ 654.488172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.488647][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.489112][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.489168][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 654.489625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.489649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.490089][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.490143][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 654.490579][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.491028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.497964][ C0] net_ratelimit: 15333 callbacks suppressed [ 659.497992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.498029][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 659.498420][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.498907][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.499043][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 659.499355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.499819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.500768][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.501117][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 659.501206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.508294][ C0] net_ratelimit: 15426 callbacks suppressed [ 664.508326][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.508813][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.509337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.509925][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 664.510226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.510440][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.510749][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.511068][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 664.511282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.511759][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.518027][ C0] net_ratelimit: 15517 callbacks suppressed [ 669.518054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.518179][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.518495][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.518983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.519435][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.519883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.519963][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 669.520321][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.520359][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.520759][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.528170][ C0] net_ratelimit: 15809 callbacks suppressed [ 674.528197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.528525][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 674.528683][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.528997][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.529118][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.529472][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 674.529563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.529999][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.530415][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.530566][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.515054][ T32] INFO: task kworker/u8:10:1008 blocked for more than 144 seconds. [ 679.515085][ T32] Not tainted syzkaller #0 [ 679.515099][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.515111][ T32] task:kworker/u8:10 state:D stack:22568 pid:1008 tgid:1008 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 679.515180][ T32] Workqueue: ipv6_addrconf addrconf_dad_work [ 679.515216][ T32] Call Trace: [ 679.515225][ T32] [ 679.515244][ T32] __schedule+0x17db/0x58f0 [ 679.515306][ T32] ? __pfx___schedule+0x10/0x10 [ 679.515343][ T32] ? schedule+0x90/0x2b0 [ 679.515372][ T32] schedule+0x164/0x2b0 [ 679.515400][ T32] schedule_preempt_disabled+0x13/0x30 [ 679.515425][ T32] __mutex_lock+0x7c1/0x1550 [ 679.515460][ T32] ? __mutex_lock+0x5d4/0x1550 [ 679.515493][ T32] ? addrconf_dad_work+0x116/0x15c0 [ 679.515519][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 679.515571][ T32] addrconf_dad_work+0x116/0x15c0 [ 679.531150][ T32] ? __pfx_addrconf_dad_work+0x10/0x10 [ 679.531204][ T32] ? rcu_is_watching+0x16/0xb0 [ 679.531241][ T32] ? process_scheduled_works+0x97a/0x1630 [ 679.531276][ T32] process_scheduled_works+0xc3d/0x1630 [ 679.531344][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 679.531384][ T32] ? assign_work+0x3cf/0x5d0 [ 679.531422][ T32] worker_thread+0xa47/0xfb0 [ 679.531486][ T32] kthread+0x38b/0x480 [ 679.531512][ T32] ? __pfx_worker_thread+0x10/0x10 [ 679.531543][ T32] ? __pfx_kthread+0x10/0x10 [ 679.531568][ T32] ret_from_fork+0x514/0xb70 [ 679.537938][ C0] net_ratelimit: 15922 callbacks suppressed [ 679.537963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.537996][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.538414][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.538846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.539269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.539686][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.540067][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 679.540119][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.540514][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.540601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.547937][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 679.547986][ T32] ? __switch_to+0xc89/0x1420 [ 679.548025][ T32] ? __pfx_kthread+0x10/0x10 [ 679.548052][ T32] ret_from_fork_asm+0x1a/0x30 [ 679.548109][ T32] [ 679.548221][ T32] INFO: task kworker/u8:14:9791 blocked for more than 144 seconds. [ 679.548241][ T32] Not tainted syzkaller #0 [ 679.548254][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.548266][ T32] task:kworker/u8:14 state:D stack:21544 pid:9791 tgid:9791 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 679.548332][ T32] Workqueue: events_unbound linkwatch_event [ 679.548461][ T32] Call Trace: [ 679.548470][ T32] [ 679.548486][ T32] __schedule+0x17db/0x58f0 [ 679.548544][ T32] ? __pfx___schedule+0x10/0x10 [ 679.548581][ T32] ? schedule+0x90/0x2b0 [ 684.548008][ C0] net_ratelimit: 15359 callbacks suppressed [ 684.548035][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.548357][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 684.548471][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.548833][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.548925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.549298][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:72:17:0b:63:0b:3e, vlan:0) [ 684.549340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.549758][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)