last executing test programs: 11m2.297599978s ago: executing program 0 (id=1954): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01f3ff000000f3ffff"], 0x2c}, 0x1, 0x40030000000000}, 0x0) read(r0, &(0x7f0000000440)=""/65, 0x41) 11m1.602532241s ago: executing program 0 (id=1958): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newsa={0x160, 0x10, 0x5, 0x0, 0x0, {{@in6=@mcast1, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'cbc(aes)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd27, 0x70bd2d, 0x70bd25, 0x7f}}]}, 0x160}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newsa={0x160, 0x10, 0x5, 0x0, 0x0, {{@in6=@mcast1, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'cbc(aes)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd27, 0x70bd2d, 0x70bd25, 0x7f}}]}, 0x160}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 11m0.89070118s ago: executing program 0 (id=1961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x484000, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)=0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x150, r5, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x48e, 0x8}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb8, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xb0, 0x1, "916018d01b5870cb5ff8bd69eeeb51c63eeb87caaa4ea5d89cc4b147f3552d4f87d7e353cb958ded0fa50e49cb56689f264a34903aa96b4915de4595d9a48462ad6c9cea6f76f32e3c75b6186a711d9ceebf58c19180ca1274e0905eb54191b0216363c0320c32a0cca2b3852b02d08aff34464c137a3f757399c52971d379c0485473d907d5cf58c10469baedc49986e860c59e28e685c754720a4fae733d55a0a5940df61b326ab9b3a0d9"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x60, 0x1, "5f4c11861a9754d6410adcb02fbb8c1ee496d9deaca4f81d2d0a82f80cd6d3bfb1370443afa76d4d02442580efde35217e8f6ae559cac88285c728ca2f452dbac9e0b36de1d147cfe26f9c75ddf67f4b12c02089079b90e40138b7b8"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}]}, 0x150}, 0x1, 0x0, 0x0, 0x840}, 0x40000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000800)={0xf, 0x2, 0x1, 0x590}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbb00000000000000000000000000000080000000000000000000ffff000000004e204e22043190782cc8fd14070ebb69"], 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0xc1d6, 0x3, [0x9f8, 0x5, 0x40]}, &(0x7f0000000380)=0xe) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000003c0)={r8, 0x90}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340000000920800024000000001080004400000000008000140000000140800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x2400c000) 11m0.200183084s ago: executing program 0 (id=1967): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x2c}, 0x44004) 10m58.272871916s ago: executing program 0 (id=1977): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0x401, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4080) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2a, &(0x7f0000000380)}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, 0x0, &(0x7f0000000280)) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYRES64=r4, @ANYBLOB="0da8d576854d2f55c1bf3e1f0c43914c1a7e9e14304f0d2de750c580f47cfdff514498cc56ed66bd50ed19d29b4fe4df4aab4fa573ae794f71dabdc66ff999d97084859eea0c71f51c42ff00bbea5b0d2c0dcfb1af1a9c5ceb9823cd75d41ad5d6c850a2d05763f8fed77dd513cf75a0c06d9c695120b2947afb53f0d772ab78a96531df3111bfaa78eb2871ea2534646ccfb2d7943d6c6d4e39c9a2c66bfe48b3416b88ac70f45cdd7b8251fc6147", @ANYRES64=r7, @ANYBLOB="993458bb288d04569e9b89e65490f06b52e2fc40e35058ce37726a698dcb4b4a636800afa76a7c822dcc45fe28d90fd8c9674c741a71debda70443", @ANYBLOB="60ded1c7d0d5674506617e132267587a4d49e9293cc7547ffff7111973f20bed34a0df44b76a58020480e9763d1215e674a844a4148f2d0e86090c77d07b39e50a11fd04aa1374fb7d2afb547db591702bac060c87e4354ebfb3bc38d9ec02e3582fc24ded88a5cf253a49ca599d157a524e2fd72b42bc0987977091b15633560c0b31da8f307327028dd71043a1ad91b148d4b13493", @ANYRES8=r7], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r8 = socket$kcm(0x11, 0x2, 0x0) getsockopt$sock_timeval(r8, 0x1, 0x42, 0x0, &(0x7f00000001c0)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f00000003c0)='syzkaller\x00', 0xfffffffc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xfffffffffffffcd0, &(0x7f0000001d80)=ANY=[], 0x18a}, 0x44088) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, 0x0, &(0x7f0000000080)) ioctl$XFS_IOC_START_COMMIT(r11, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000280)='bic', 0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r9, r13, 0x18, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=[0x4, 0x7fff, 0x5, 0x401, 0x2, 0xf, 0x6], &(0x7f0000000380)=[0x3, 0x1], 0x8, 0x7}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r13, &(0x7f00000002c0)={0xa, 0x4e21, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0x1c) 10m57.176699303s ago: executing program 0 (id=1984): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x3c}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000002c0)={0x2, 0xd1, "8b8a4091051ca4702bfade581e8e35f4e6e5aa3e6cbe5c48bd1a10cd5b32a6be0392581de52a145739ba5b724e3ba0ded24d9a4c8ade27ac54dbf56436fec6d8974e16c9d940db18146f3dfd354f7d948630f5dd74fa60a270859baaf6edffc3c6ff682ec2f09cc7eb539f081f99549a2d3a2c38c7738a6014defb7ca761d34c3da38d078712bd9c1d2c70ae68c29054d1faae08135898c81e751b821e0087d5531e49122eef600bb053c8c20a506fc8361abacb3b7abde1e912c141fca19aea8797c13253638875e3cf2150a61ea4d988"}) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000006c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0xfffffffa}, 0x50) r5 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r6 = getpid() write$cgroup_pid(r5, &(0x7f0000000100)=r6, 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 10m41.618306137s ago: executing program 32 (id=1984): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x3c}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000002c0)={0x2, 0xd1, "8b8a4091051ca4702bfade581e8e35f4e6e5aa3e6cbe5c48bd1a10cd5b32a6be0392581de52a145739ba5b724e3ba0ded24d9a4c8ade27ac54dbf56436fec6d8974e16c9d940db18146f3dfd354f7d948630f5dd74fa60a270859baaf6edffc3c6ff682ec2f09cc7eb539f081f99549a2d3a2c38c7738a6014defb7ca761d34c3da38d078712bd9c1d2c70ae68c29054d1faae08135898c81e751b821e0087d5531e49122eef600bb053c8c20a506fc8361abacb3b7abde1e912c141fca19aea8797c13253638875e3cf2150a61ea4d988"}) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000006c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0xfffffffa}, 0x50) r5 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r6 = getpid() write$cgroup_pid(r5, &(0x7f0000000100)=r6, 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 1m49.000839707s ago: executing program 1 (id=5334): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={r2, 0x48, "790fd1b08b513410f522a91c1d7fe2ab04b0d4ed904dab516671ef8281fd0f97c0a583eb938e3ccb1745edee89eeadec0d6f46942ec9b2bda7015d636be76b378d2f355090fb455e"}, &(0x7f00000000c0)=0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) 1m47.957795078s ago: executing program 1 (id=5343): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0x9, 0x9}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c070}, 0x4008004) r3 = socket$nl_route(0x10, 0x3, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x31, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipmr_getroute={0x1c, 0x1a, 0x10, 0x70bd2a, 0x25dfdbfc, {0x80, 0x14, 0x80, 0x2, 0xfc, 0x4, 0xc8, 0x1, 0xe00}, [""]}, 0x1c}}, 0x20000000) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000010000850200000000000000020000000000000000000000da0024107b35d0e9a17c2a3472acbd497d22d9eecb9c71c75b5c74441d6cfd33332c6ba1cb230ea061765707d2768c12e0dad9de2957832f41a65d71fc8969922f6f174be7148ae200ff554c800dd134195ce692a5db2763e4686c035a1a96daee68647212bb50b12c90ff18a9edfd233095ddeac1627d7a50d5bceab9101d004db88566275b233540"], &(0x7f0000000340)=""/142, 0x52, 0x2df8cb643540299b, 0x1}, 0x20) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb66514b1c5e45ff1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x48}}], 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000780)={r1, &(0x7f0000000680)='}\x00', 0x42000, &(0x7f00000006c0)={@align=0x1, {0x5, 0xe, 0xe, 0xe6}}, 0x7, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x10000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000640), &(0x7f00000007c0)=r8}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe8}}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x300, 0x0, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}}, {0x22, 0x7d, 0x0, @local}}}}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r12, 0x1, 0x7}, 0x14) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000600)={r13, &(0x7f0000000500)='\x00', 0x4b4401, &(0x7f0000000540)={@align=0x1000, {0x81, 0x1, 0xbedb, 0x4}}, 0x5, &(0x7f0000000580), &(0x7f00000005c0)=0xfffffffb}) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 1m47.323274584s ago: executing program 1 (id=5348): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) writev(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) connect$inet6(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002340)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000104010000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a2c0012801100010062726964676500000000766500000000140005800500190002000000080025000800ff00140003006272696467655f736c6176655f30"], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000104010000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a2c0012801100010062726964676500000000766500000000140005800500190002000000080025000800ff00140003006272696467655f736c6176655f30"], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1m47.116768847s ago: executing program 2 (id=5350): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381"], 0xfdef) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005000)=[{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000023c0)="512c0a8d", 0x4}], 0x1, 0x0, 0x0, 0x10010}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x40}}, 0x4010) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001d80)={'wlan0\x00'}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001e40)={0x0, 0x1, 0x6, @broadcast}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100037042cbd700000000000f2470000d5b26fcc7a22fd89925aae29883b6ad31443cf5c86a522e805562536ff324f5d861bd32a045e031cc5f02993a0a386242aa512bd51da2745689aa6d29f4f3c148c1033c3b4e4365ca56c4da61eaaceb4d98adf0e2e9a232ac2f4316907489cea001a4ad57909e12c40db2e633b61960428adf9540e6897267aa2d8355b0ceeb6cb30547c305ffb3e4242b00d0e0a6f5930bd526c75133e0d5492e50c09a3f9", @ANYRES32=r9, @ANYBLOB="83040500000000001c00128008000100677265001000028006001800ed00000004001200"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendto$packet(r7, &(0x7f0000000080)="8603200081fd140000007e", 0xb, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x62, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b40)={&(0x7f0000002700)={0x14ec, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '**\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/[\'\x00'}]}, {0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfea}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x73cf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^[[\'@!\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x622a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[!\x9e.+\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{\\!\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb6504cda}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "126dbfa08225da9bda398814db27c0dd7b210060f371e3e11878a416333bc4ea74512ab2490ff803bcbd46dd36c68a1a2cb28786433b69d8595bd1756b0ab85c93a93af6a4e5247a8ea9f2bcd6dbfadeea615c6a3df72444944fde79ef552f2beed61c3a3a8ce92bedd1538f5653774704adf3acdc7ac8e81db71346640ba5c6e1b1838fb30bbf23e20662d5594ef84f"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x24ee}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c2f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',:\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+!}\x8d-%#+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x11c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "0da03d0aa671ec90a48102cce06b283788d5930779103b2bf8867f261ce9c99336480815e17c563aef56c0424f364921b5a355f1f90488feec2159f9d96455824b747b279e9e67dbec5e4b372d114992d2a82ab4f89dc8f1fff2ca05daa1bd03a2e7360f85e50f86c2296189532f6ea7dfdbd1ac3e634463f15c07fcce092b84a475da4828a04e82de21fa8501c211472ddf4502b952547dea99a003d62dfe425918f935c7c488c4c64752b751486de8fa3087f3ac3f4662a528b0c67ef5dc3dce61e63f82"}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "2a295e619c63e7277d69ef7d2f88cd1af8a5c8f7e23008cbfafd7c82f14031a989ef2b9db1e9b44636e51beb41f0b5aeaa3bad0443eeef4c6d96750aa0cb64dc73786b1d82694439cc3b01e89b8b5593c75e9553abe139cd01c5824c2cb9f714b5413bbe1f3dab1b05b3dc38acde08a23a01957ab9f3cb99f916363912f3374fecd11fc775fede2ec9321ad74a35afc0f522974ce5e5be81a9ae803d851cb736db724366e1e2ec286e317ab360d361e794f154b4a83c3a70d005313a0ed98ca55680cf7baf217362246211bebafaeac2562371b4644842ac43a18e5f3ed3f4deadb16ab4ff4039"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}]}, 0x14ec}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000000010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r2, &(0x7f0000002380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2988a80c0081004c0086dd6d00200810082fff"], 0x104a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d40)={r10, 0xe0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000001bc0), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000001c00)}}, 0x10) 1m47.116191802s ago: executing program 4 (id=5351): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000140)=0x6, 0x4) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000007c0)={r1, 0x5}, &(0x7f0000001800)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c280080101800401108014000c0000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000001000000000000000000000097000100ffff05ff95"], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x1f00}, 0x94) 1m46.967008357s ago: executing program 4 (id=5352): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={0x0, 0xffbd, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xffffffffffffffb8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='highspeed', 0x9) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x65b1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x15, 0x0, 0x0) 1m46.738593472s ago: executing program 1 (id=5353): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt(r0, 0x84, 0x7c, &(0x7f0000000040)="badd8e37a0feecff", 0x8) 1m46.56548085s ago: executing program 5 (id=5354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 1m46.54159097s ago: executing program 5 (id=5355): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x1c8, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x70, 0xa0, 0x0, {0xff0f000000000000}}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x110, 0xc8, 0x8, 0x0, 0x5803, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x6, 0x3, 0x4, 'syz0\x00', 'syz1\x00', {0x5}}}}, {{@ipv6={@remote, @remote, [0x0, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x0, 0x2, 0x70}, 0x0, 0x138, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@unspec=@physdev={{0x68}, {'veth0_virt_wifi\x00', {}, 'pimreg\x00', {}, 0x1, 0x1}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000004000000000000000061102c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) connect$tipc(r2, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10) 1m46.27713057s ago: executing program 1 (id=5357): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001580)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001180)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf9a207100e69cfa59e8d5751fb9136ec4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x2c}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x63}}, 0x803) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYRESDEC=r2], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg(r3, &(0x7f0000001b00)=[{{&(0x7f00000010c0)=@in={0x2, 0x4e20, @broadcast}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001440)="4039182bdef98d117a55ba948e54c72f7d8529c48dec1ade0d5e210848b8ebfeda3236b447382541271fe6d5d3d4ea16fb0278e755024eb8e597bdf3699804fd973d382165903323e35aa6c902cc655c8dfc351f56ace81bc3ee397e26213fb0e7b4a929e900132074118708e9a8a28ce61eb32e6d28699e059e75cfd110b8c6d3bd938ac10fec4d1b5abdb6f1e1f63f20", 0xcb}, {&(0x7f0000001b40)="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", 0x102}], 0x2, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x428}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x33, 0x5, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x1}, {0x4, 0x4}, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@kprobe_multi=@syms={0x0, 0x2, &(0x7f00000015c0)=[&(0x7f0000001140)='/dev/virtual_nci\x00', &(0x7f0000001600)='(&[+$\'*\'\x00'], 0x0, 0xe}}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) getsockopt$bt_hci(r6, 0x0, 0x2, &(0x7f0000000140)=""/178, &(0x7f0000000200)=0xb2) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x85, 0x0, &(0x7f0000000440)=0x9b) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$nci(r10, &(0x7f0000001500)=ANY=[@ANYRES32=r1], 0x5) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a00d484d91a82dfee0e", 0x32}], 0x1}, 0x0) 1m46.213725897s ago: executing program 2 (id=5358): r0 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044805) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x11, 0x8808, r3, 0x1, 0x85, 0x6, @broadcast}, 0x14) 1m45.981592185s ago: executing program 4 (id=5360): r0 = socket(0x10, 0x3, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x80}]}}]}, 0x40}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="1807000000000000000000000000000071109500000000009500"], &(0x7f0000000100)='GPL\x00', 0x6, 0x3d}, 0x90) syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0002ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 1m45.881266895s ago: executing program 2 (id=5361): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9c638bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7bfa0f000000000000c346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf701627825be61e036c9eae11b300b3ec832a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f60d8000000053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563ebbe1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270106181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e687098295d6a66bff091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea264fcfb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac000000000000000000000072b043a07864ef74028bd9ac8c169da129bf1f6776d2e5884cebc50666d334417ddafcc381b0cfbd65d6036d3a15bc680f424efff16edc05758d5be24f42b8dbe920e7823cb0ce62afb1246dc9d4c6b56e391c30e7ef3c1b9b3a9cb202dac5a2eb2516ee891b3e6f23fa95a2d86fd65c02476321b830c4ae1c0a414420dbd16ca220"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4044800) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040c10}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r4, 0x1, 0xfffffffe, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x24, 0x19, 0x103, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x24}}, 0x4040000) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000002c0)={0xc8, 0xffffffff, 0xf18, 0x9}, 0x10) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x3, 0x0, &(0x7f00000004c0)=0x29) bind$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x7e, 0x2, 0x0, 0x0, 0x3a}, {0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x8}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1m45.808503234s ago: executing program 3 (id=5362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1m45.632530896s ago: executing program 3 (id=5363): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) sendmmsg$inet(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}], 0x4, 0x40480c0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10e, 0x10e, 0xc, [@enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0x8, [{0x2, 0x3, 0xc25}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x2}, @ptr={0xb, 0x0, 0x0, 0x2, 0x1}, @volatile={0x6, 0x0, 0x0, 0x9, 0x2}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4, 0xb000000}]}, @union={0xd, 0x4, 0x0, 0x5, 0x0, 0x3, [{0x4, 0x1, 0x7}, {0x2, 0x1, 0x3}, {0x10, 0x5, 0x7ff}, {0x0, 0x1, 0xff}]}, @datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x1, 0x3}], "1120"}, @enum={0x10, 0x9, 0x0, 0x6, 0x4, [{0x8, 0x4}, {0x6, 0x8}, {0xd, 0xc930}, {0xa}, {0xf, 0x101}, {0xc, 0x401}, {0xc, 0x80000001}, {0x6, 0xc}, {0x4, 0x889}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x7c, 0x5}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x30]}}, &(0x7f00000003c0)=""/213, 0x134, 0xd5, 0x0, 0xe3c, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x20, &(0x7f0000000580)={&(0x7f0000000500)=""/57, 0x39, 0x0, &(0x7f0000000540)=""/12, 0xc}}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m45.376185406s ago: executing program 5 (id=5364): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xd964, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r2, 0x8, 0x7, &(0x7f00000002c0)="c1841d67", 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000080)="1451b2ce85d03103d1b325299d904a5207a85b9f38b877fe12b426b661b0b326922e9ed483e179bb80822694044b2eacdfd0de1545348beab975d61499ed758320b27c824ac9d47a6e667b4024e9c7d1611da7240f782611f3bf881af09cf630ca59416b80366f465773590aafbda48a985d22b2ae4d19d420c7fd") sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000100013040000000100000000200063000f83a0335862e9fb500e00517f8c1c23d21320fe81927764e3bd13efc61400d1a5f757f03bb2070e00cb2a392af1354856c01c3c6ffca2f768633e390adc5ce2fbe908296c47980aecc59ee9f1cf1774fc9137bff874f1837da38620fe309994cf347d78557513a1528e28b205000ab174438ad4f5594f93a54b7063b63ebb0000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010067656e65766500002c00028005000900010000000400060014000700fc02000000000000000000000000000108000b4000000007"], 0x5c}}, 0x0) 1m45.250687541s ago: executing program 4 (id=5365): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0xf8, 0x5, 0x4, 0x42, @local, @remote, 0xf815, 0x8000, 0x4, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x40, 0xc50, {{0x3e, 0x4, 0x3, 0x1, 0xf8, 0x68, 0x0, 0x6d, 0x4, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x13, 0xc6, [@local, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0xd0, 0x3, 0xe, [{@local, 0x94}, {@empty, 0x3}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x22}}, {@multicast2, 0x80000001}, {@local, 0x9}]}, @lsrr={0x83, 0x13, 0xc0, [@multicast2, @remote, @remote, @empty]}, @ssrr={0x89, 0x7, 0xa7, [@dev={0xac, 0x14, 0x14, 0x24}]}, @ssrr={0x89, 0x17, 0x3c, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @private=0xa010102]}, @lsrr={0x83, 0x2b, 0x73, [@loopback, @local, @private=0xa010100, @remote, @private=0xa010101, @broadcast, @broadcast, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}]}, @timestamp_prespec={0x44, 0x1c, 0xe1, 0x3, 0x1, [{@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102, 0x7}]}, @cipso={0x86, 0x1a, 0x0, [{0x7, 0x3, "a4"}, {0x0, 0x11, "11e94daa1c16ff9e20d6536d253d5d"}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x14c, r3, 0x22c, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) ioctl$SIOCX25SCALLUSERDATA(r10, 0x89e5, &(0x7f0000000180)={0x74, "927239bfac2fc7d210ed4a33090446a71c4c564ca8f8b354b0a1854976160c06823683485db3736a6284954301b7bea349b353b3deda4fbeacbd34fc2b3a1ceedfba8f1be4bfe4f143e7e41a7a40442334edf8e16d1942eb4d62a3790463f5e2836bfbf9f29d3beb6a6d87894e1289f48d21540b50a1a768126213555a890848"}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x32, r11, 0x3e995000) openat$cgroup_ro(r11, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r12, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="080026bd7000fcdbdf2507000000580001801400020070696d7265673100000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002007663616e30000000001a24514804000008c879d37f798a8654a047000100", @ANYRES32=r8, @ANYBLOB="1400020063616966300000000000000000000000340001801400020076657468305f746f5f6873720000000008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468305f746f5f626f6e640000001c000180080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000300030000001400018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) r13 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000800)={'veth1_to_batadv\x00', 0x400}) getsockopt$MRT(r13, 0x0, 0xd0, 0x0, &(0x7f0000000080)) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r14, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) 1m45.068752463s ago: executing program 3 (id=5366): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1401000029000100000000000000000003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@broadcast, @random="8ad4598f326f", @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x3, 0x1, 0x78, 0x65, 0x0, 0x0, 0x1, 0x0, @loopback, @remote, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0x2}, @ra={0x94, 0x4}, @generic={0x82, 0xc, "e89029ce7af3cd790967"}, @cipso={0x86, 0x13, 0x2, [{0x5, 0xd, "23bc6d26ab9a93183cf10c"}]}, @timestamp_addr={0x44, 0x1c, 0x75, 0x1, 0x3, [{@multicast1, 0x2}, {@empty, 0x2}, {@multicast1, 0x4}]}, @generic={0x88, 0xa, "7b30d58aba79f9a9"}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x1, 0x5, 0x9, 0x0, 0x6}}}}}, &(0x7f00000001c0)={0x1, 0x2, [0xb27, 0xe57, 0xaee, 0x2aa]}) 1m45.068238055s ago: executing program 2 (id=5367): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 1m44.501557092s ago: executing program 2 (id=5368): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 1m44.478693052s ago: executing program 4 (id=5369): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) 1m44.35307966s ago: executing program 3 (id=5370): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (fail_nth: 35) 1m43.786711311s ago: executing program 5 (id=5371): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twmr'], 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x24, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m43.516494612s ago: executing program 4 (id=5372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002238030008000a00", @ANYRES32=r2, @ANYBLOB="2400128009000100626f6e64000000001400028005000d0002"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m42.764016451s ago: executing program 2 (id=5373): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)={'a', ' *:* ', 'm\x00'}, 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) 1m42.684061396s ago: executing program 3 (id=5374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) 1m42.38835199s ago: executing program 5 (id=5375): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x3, 0xddc0}}], 0x18}, 0x0) 1m41.931540317s ago: executing program 1 (id=5376): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x2c, 0x68, 0x1, 0x70bd26, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0xb}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmmsg$unix(r1, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x8001}}], 0x2, 0x80) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sendto$packet(r4, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4, 0x80, &(0x7f0000000080)={0x11, 0x8100, r5}, 0x14) 1m41.892431592s ago: executing program 3 (id=5377): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r5, 0x0, {0x1, 0xf0, 0x1}}, 0x18) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r10, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x101}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xa8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xfffffe01}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xfffffffd}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) (async, rerun: 64) sendmmsg(r3, 0x0, 0x0, 0x20040891) (async, rerun: 64) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x0, 0x230, 0xffffffff, 0x230, 0x348, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000400), {[{{@ipv6={@local, @private2, [0xffffff00, 0x0, 0x0, 0xffffff00], [0xffffffff, 0x0, 0x0, 0xffffff00], 'bridge_slave_1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x29, 0x9, 0x2, 0x55}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x1, 0x3, 0x5}}}, @common=@hl={{0x28}, {0x2, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xd, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @gre_key=0x7aa4, @icmp_id=0x68}}}, {{@ipv6={@mcast2, @local, [0xffffffff, 0xffffffff, 0xff, 0xff], [0x0, 0xffffffff, 0xff, 0xffffffff], 'wg2\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x2f, 0x2b, 0x1, 0x32}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv4=@local, @ipv6=@loopback, @gre_key, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "f5ab", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv6=@remote, @ipv4=@multicast1, @port=0x4e21, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@broadcast, @icmp_id=0x67, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) (async) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) connect$can_j1939(r3, &(0x7f0000001040)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x3}, 0x1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r2, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xb1, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000e80)={r12}, 0x4) 1m41.421709183s ago: executing program 5 (id=5378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad4c90c200"/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0xc804) (async) poll(&(0x7f0000000440)=[{r2, 0x84}], 0x1, 0xf0b) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xfffc}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbc", 0xf}], 0x1}, 0x80) 0s ago: executing program 33 (id=5378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad4c90c200"/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0xc804) (async) poll(&(0x7f0000000440)=[{r2, 0x84}], 0x1, 0xf0b) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xfffc}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbc", 0xf}], 0x1}, 0x80) kernel console output (not intermixed with test programs): T23652] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 746.991296][T23655] team0: Mode changed to "loadbalance" [ 747.114662][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.114957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.117441][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.118112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.738721][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.909616][T18203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.913601][T23698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4285'. [ 748.004073][T23700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4286'. [ 748.004534][T23700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4286'. [ 748.586300][T23719] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4293'. [ 748.606263][T23721] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4294'. [ 748.839310][T23727] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 748.840197][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.123940][T23737] tipc: Enabling of bearer rejected, failed to enable media [ 749.471225][T23748] netlink: 'syz.3.4304': attribute type 10 has an invalid length. [ 749.532593][ T253] IPVS: starting estimator thread 0... [ 749.620475][T23755] IPVS: using max 28 ests per chain, 67200 per kthread [ 749.655986][T23752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4305'. [ 749.656048][T23752] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4305'. [ 749.656080][T23752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4305'. [ 749.800352][T23760] sctp: [Deprecated]: syz.3.4306 (pid 23760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 749.800352][T23760] Use struct sctp_sack_info instead [ 749.983328][T23764] netlink: 'syz.5.4308': attribute type 1 has an invalid length. [ 750.025187][T23773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4311'. [ 750.062435][T23769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4310'. [ 750.073089][T23769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4310'. [ 750.958903][T18203] net_ratelimit: 1 callbacks suppressed [ 750.958970][T18203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.089066][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.166247][T23802] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4318'. [ 751.465093][T23814] xt_NETMAP: bad rangesize 37. [ 751.892097][T15533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.892170][T15533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.087599][T23824] netlink: 'syz.2.4324': attribute type 29 has an invalid length. [ 752.151012][T23843] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4326'. [ 752.151067][T23843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4326'. [ 752.151101][T23843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4326'. [ 752.203662][T23843] IPVS: set_ctl: invalid protocol: 108 100.1.1.2:20001 [ 752.213238][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.493472][T23851] syzkaller1: entered promiscuous mode [ 752.500262][T23851] syzkaller1: entered allmulticast mode [ 752.875890][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.876308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.987457][T23855] netlink: 'syz.4.4329': attribute type 1 has an invalid length. [ 753.031896][T23857] netlink: 'syz.5.4330': attribute type 1 has an invalid length. [ 753.142340][T23855] 8021q: adding VLAN 0 to HW filter on device bond5 [ 753.176954][T23861] bond5: (slave geneve2): making interface the new active one [ 753.187460][T23861] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 753.304006][T23870] netlink: 'syz.5.4334': attribute type 1 has an invalid length. [ 753.349115][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.609119][T23870] Bluetooth: hci0: unsupported parameter 5161 [ 753.616968][T23870] Bluetooth: hci0: unsupported parameter 8192 [ 753.624644][T23870] Bluetooth: hci0: unsupported parameter 5161 [ 753.631890][T23870] Bluetooth: hci0: unsupported parameter 8192 [ 753.671834][T23872] 8021q: adding VLAN 0 to HW filter on device bond10 [ 753.686992][T23872] bond9: (slave bond10): making interface the new active one [ 753.696637][T23872] bond9: (slave bond10): Enslaving as an active interface with an up link [ 753.715116][T23881] can: request_module (can-proto-3) failed. [ 753.729901][T15533] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 753.770662][T23879] bond9: (slave gretap3): Enslaving as a backup interface with an up link [ 753.999088][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.080208][T23907] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 754.436846][T23916] netlink: 'syz.3.4345': attribute type 1 has an invalid length. [ 754.436943][T23916] netlink: 'syz.3.4345': attribute type 2 has an invalid length. [ 754.468796][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.919190][T23926] __nla_validate_parse: 4 callbacks suppressed [ 754.919264][T23926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4348'. [ 755.601512][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.740194][T23937] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 755.759353][T23937] : entered promiscuous mode [ 755.764728][T23937] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 755.774626][T23937] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 755.786513][T23937] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 755.796887][T23937] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 755.811747][T23937] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 755.822416][T23937] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 755.835811][T23937] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 755.858935][T23937] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 755.869004][T23937] netlink: 'syz.2.4351': attribute type 2 has an invalid length. [ 756.577116][T23891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.593169][T23905] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4341'. [ 756.615461][T23905] ksmbd: Unknown IPC event: 11, ignore. [ 756.757282][T15533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.030694][T18203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.124218][T23962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4356'. [ 757.233065][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4358'. [ 757.344305][T23963] sctp: [Deprecated]: syz.3.4357 (pid 23963) Use of int in max_burst socket option deprecated. [ 757.344305][T23963] Use struct sctp_assoc_value instead [ 757.387668][T23967] hsr_slave_1 (unregistering): left promiscuous mode [ 757.820570][T23981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4362'. [ 757.872527][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.979273][T23990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4365'. [ 758.365317][T24006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.391145][T24009] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4370'. [ 758.641228][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.641408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.881751][T24026] xt_nat: multiple ranges no longer supported [ 758.912844][T24022] xt_nat: multiple ranges no longer supported [ 758.925115][T24021] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4373'. [ 759.013458][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.045692][T24031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4376'. [ 759.056802][T24031] tipc: Invalid UDP bearer configuration [ 759.056883][T24031] tipc: Enabling of bearer rejected, failed to enable media [ 759.284654][T24036] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4377'. [ 759.402465][T24042] veth5: entered allmulticast mode [ 759.704745][T24053] geneve2: entered promiscuous mode [ 759.704848][T24053] geneve2: entered allmulticast mode [ 760.070213][T18203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.129641][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.261637][T24070] __nla_validate_parse: 3 callbacks suppressed [ 760.261754][T24070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4386'. [ 760.597528][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4390'. [ 760.608277][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4390'. [ 760.619062][T24088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4390'. [ 760.630402][T24088] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4390'. [ 760.687757][T24088] veth3: entered promiscuous mode [ 760.905717][T24098] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4392'. [ 761.220480][T24102] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4393'. [ 761.233167][T24102] ip6gre0: Caught tx_queue_len zero misconfig [ 761.248534][T15539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.360523][T24107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4394'. [ 761.371533][T24107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4394'. [ 762.362883][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.700264][T10119] IPVS: starting estimator thread 0... [ 762.706595][T24154] validate_nla: 27 callbacks suppressed [ 762.718210][T24154] netlink: 'syz.3.4405': attribute type 30 has an invalid length. [ 762.790504][T24157] IPVS: using max 32 ests per chain, 76800 per kthread [ 762.884503][T24154] bond3: option arp_missed_max: invalid value (0) [ 762.896329][T24154] bond3: option arp_missed_max: allowed values 1 - 255 [ 762.916658][T24154] bond3 (unregistering): Released all slaves [ 763.120256][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.469749][T15539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.781593][T24188] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4413'. [ 763.835480][T24193] netlink: 'syz.5.4415': attribute type 6 has an invalid length. [ 763.846503][T24193] tunl0: entered promiscuous mode [ 763.864856][T24193] netlink: 'syz.5.4415': attribute type 4 has an invalid length. [ 763.968971][T24196] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 764.061392][T24179] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20002 [ 764.391902][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.392105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.591169][T15533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.834977][T24232] xt_policy: output policy not valid in PREROUTING and INPUT [ 765.131849][T24236] netlink: 'syz.2.4426': attribute type 1 has an invalid length. [ 765.282200][T24238] lo: Caught tx_queue_len zero misconfig [ 765.698947][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.762363][T24259] FAULT_INJECTION: forcing a failure. [ 765.762363][T24259] name failslab, interval 1, probability 0, space 0, times 0 [ 765.762588][T24259] CPU: 0 UID: 0 PID: 24259 Comm: syz.4.4433 Not tainted syzkaller #0 PREEMPT(full) [ 765.762700][T24259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 765.762744][T24259] Call Trace: [ 765.762771][T24259] [ 765.762791][T24259] dump_stack_lvl+0xe8/0x150 [ 765.763005][T24259] should_fail_ex+0x410/0x560 [ 765.763229][T24259] should_failslab+0xa8/0x100 [ 765.763337][T24259] __kmalloc_noprof+0xfe/0x720 [ 765.763446][T24259] ? nf_queue+0x41f/0x1520 [ 765.763617][T24259] ? nf_queue+0x41f/0x1520 [ 765.763688][T24259] nf_queue+0x41f/0x1520 [ 765.763749][T24259] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 765.763971][T24259] ? __pfx_nf_queue+0x10/0x10 [ 765.764038][T24259] ? iptable_mangle_hook+0x18a/0x4c0 [ 765.764149][T24259] ? nf_nat_ipv4_pre_routing+0x230/0x3a0 [ 765.764264][T24259] nf_hook_slow+0x109/0x220 [ 765.764382][T24259] NF_HOOK+0x21f/0x3c0 [ 765.764496][T24259] ? __pfx_ip_rcv_finish+0x10/0x10 [ 765.764566][T24259] ? NF_HOOK+0x9e/0x3c0 [ 765.764630][T24259] ? __pfx_NF_HOOK+0x10/0x10 [ 765.764690][T24259] ? __pfx_ip_rcv_finish+0x10/0x10 [ 765.764791][T24259] ? netif_receive_skb+0x102/0xbf0 [ 765.764968][T24259] ? __pfx_ip_rcv+0x10/0x10 [ 765.765029][T24259] netif_receive_skb+0x45b/0xbf0 [ 765.765124][T24259] ? __pfx_netif_receive_skb+0x10/0x10 [ 765.765219][T24259] ? rcu_is_watching+0x16/0xb0 [ 765.765321][T24259] ? tun_rx_batched+0x185/0x790 [ 765.765513][T24259] tun_rx_batched+0x1de/0x790 [ 765.765623][T24259] ? __pfx_tun_rx_batched+0x10/0x10 [ 765.765709][T24259] ? lock_acquire+0x115/0x350 [ 765.765809][T24259] ? tun_get_user+0x23ba/0x44d0 [ 765.765905][T24259] ? __local_bh_enable_ip+0xd6/0x140 [ 765.765999][T24259] ? tun_get_user+0x27b0/0x44d0 [ 765.766083][T24259] tun_get_user+0x2be0/0x44d0 [ 765.766215][T24259] ? tun_get_user+0x27b0/0x44d0 [ 765.766303][T24259] ? aa_file_perm+0x4ed/0x15f0 [ 765.766452][T24259] ? __pfx_tun_get_user+0x10/0x10 [ 765.766528][T24259] ? __lock_acquire+0x6df/0x2e50 [ 765.766615][T24259] ? ref_tracker_alloc+0x341/0x4b0 [ 765.766709][T24259] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 765.766780][T24259] ? lock_acquire+0x115/0x350 [ 765.766842][T24259] ? tun_get+0x1c/0x2f0 [ 765.766930][T24259] ? tun_get+0x1c/0x2f0 [ 765.767007][T24259] ? tun_get+0x1c/0x2f0 [ 765.767095][T24259] tun_chr_write_iter+0x113/0x200 [ 765.767174][T24259] vfs_write+0x612/0xba0 [ 765.767280][T24259] ? __pfx_vfs_write+0x10/0x10 [ 765.767382][T24259] ? __fget_files+0x2a/0x420 [ 765.767498][T24259] ksys_write+0x150/0x270 [ 765.767577][T24259] ? __pfx_ksys_write+0x10/0x10 [ 765.767673][T24259] do_syscall_64+0x166/0x520 [ 765.767840][T24259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.767923][T24259] ? clear_bhb_loop+0x70/0xc0 [ 765.767983][T24259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.768042][T24259] RIP: 0033:0x7f35efb5e98e [ 765.768115][T24259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 765.768165][T24259] RSP: 002b:00007f35eddf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 765.768230][T24259] RAX: ffffffffffffffda RBX: 00007f35eddf66c0 RCX: 00007f35efb5e98e [ 765.768290][T24259] RDX: 000000000000002a RSI: 0000200000000080 RDI: 00000000000000c8 [ 765.768325][T24259] RBP: 00007f35eddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 765.768370][T24259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.768406][T24259] R13: 00007f35efe26038 R14: 00007f35efe25fa0 R15: 00007ffebaca63d8 [ 765.768493][T24259] [ 766.154136][T18203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.319029][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.319463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.959198][T10120] net_ratelimit: 1 callbacks suppressed [ 767.959245][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.022233][T24313] netlink: 'syz.5.4444': attribute type 11 has an invalid length. [ 768.105055][T24315] FAULT_INJECTION: forcing a failure. [ 768.105055][T24315] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 768.121126][T24315] CPU: 1 UID: 0 PID: 24315 Comm: syz.5.4446 Not tainted syzkaller #0 PREEMPT(full) [ 768.121153][T24315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 768.121166][T24315] Call Trace: [ 768.121175][T24315] [ 768.121183][T24315] dump_stack_lvl+0xe8/0x150 [ 768.121217][T24315] should_fail_ex+0x410/0x560 [ 768.121263][T24315] _copy_from_user+0x2d/0xb0 [ 768.121393][T24315] kstrtouint_from_user+0xd6/0x180 [ 768.121425][T24315] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 768.121464][T24315] ? lock_acquire+0x115/0x350 [ 768.121489][T24315] proc_fail_nth_write+0x8e/0x210 [ 768.121533][T24315] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 768.121573][T24315] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 768.121602][T24315] vfs_write+0x296/0xba0 [ 768.121639][T24315] ? __pfx_vfs_write+0x10/0x10 [ 768.121669][T24315] ? __fget_files+0x2a/0x420 [ 768.121700][T24315] ? __fget_files+0x3a2/0x420 [ 768.121725][T24315] ? __fget_files+0x2a/0x420 [ 768.121764][T24315] ksys_write+0x150/0x270 [ 768.121801][T24315] ? __pfx_ksys_write+0x10/0x10 [ 768.121841][T24315] do_syscall_64+0x166/0x520 [ 768.121871][T24315] ? trace_irq_disable+0x3b/0x140 [ 768.121907][T24315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.121928][T24315] ? clear_bhb_loop+0x70/0xc0 [ 768.121953][T24315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.121973][T24315] RIP: 0033:0x7f681e55e98e [ 768.121992][T24315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 768.122009][T24315] RSP: 002b:00007f681f4eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.122031][T24315] RAX: ffffffffffffffda RBX: 00007f681f4ef6c0 RCX: 00007f681e55e98e [ 768.122046][T24315] RDX: 0000000000000001 RSI: 00007f681f4ef0a0 RDI: 0000000000000004 [ 768.122059][T24315] RBP: 00007f681f4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 768.122072][T24315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.122085][T24315] R13: 00007f681e826038 R14: 00007f681e825fa0 R15: 00007ffc42ed17a8 [ 768.122118][T24315] [ 769.098764][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.200841][T18203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.433528][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.433996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.558665][T24369] netlink: get zone limit has 8 unknown bytes [ 769.617655][T24372] __nla_validate_parse: 4 callbacks suppressed [ 769.617719][T24372] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4456'. [ 769.763917][T24382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4459'. [ 769.874224][T24384] netlink: 'syz.2.4459': attribute type 11 has an invalid length. [ 769.874265][T24384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4459'. [ 770.240409][T15533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.386986][T24403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4464'. [ 770.636385][T24408] tap0: tun_chr_ioctl cmd 2148553947 [ 770.647472][T24408] tap0: tun_chr_ioctl cmd 2147767517 [ 770.783347][T24412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4465'. [ 770.829819][T24415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4468'. [ 770.858230][ T5278] veth0_vlan: left promiscuous mode [ 770.948067][T23290] veth0_vlan: entered promiscuous mode [ 770.960813][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4469'. [ 771.347693][T24429] netlink: 'syz.3.4471': attribute type 21 has an invalid length. [ 771.348172][T24429] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4471'. [ 771.369417][ T7054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.382565][T24429] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.4471'. [ 771.628857][T24441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4474'. [ 771.744574][T24441] gretap0: entered promiscuous mode [ 771.779548][T24441] gretap0: left promiscuous mode [ 772.073109][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.081494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.379885][T24465] bridge_slave_0: left allmulticast mode [ 772.381873][T24465] bridge_slave_0: left promiscuous mode [ 772.396833][T24465] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.494483][T24465] bridge_slave_1: left allmulticast mode [ 772.494556][T24465] bridge_slave_1: left promiscuous mode [ 772.496459][T24465] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.606941][T24465] : (slave bond_slave_0): Releasing backup interface [ 772.622478][T24465] : (slave bond_slave_1): Releasing backup interface [ 772.661677][T24465] team0: Port device team_slave_0 removed [ 772.675204][T24465] team0: Port device team_slave_1 removed [ 772.683664][T24465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.730918][T24465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.796470][T24472] team0: No ports can be present during mode change [ 772.805164][T24481] tipc: Enabled bearer , priority 0 [ 772.862709][T24479] vlan0: entered promiscuous mode [ 773.618427][ T253] net_ratelimit: 70 callbacks suppressed [ 773.618656][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.971618][T24535] batadv_slave_0: Caught tx_queue_len zero misconfig [ 774.479233][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.485041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.505983][T24556] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 774.506678][T24556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 774.531110][T24552] tipc: Enabling of bearer rejected, failed to enable media [ 774.762261][ T7054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.269425][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.400745][T24593] __nla_validate_parse: 2 callbacks suppressed [ 775.407484][T24593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4510'. [ 775.870594][T15539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.045243][T24617] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4516'. [ 776.435606][T24644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4522'. [ 776.435655][T24644] openvswitch: netlink: Flow actions attr not present in new flow. [ 776.493587][T24646] xt_LOG: level 8 >= 8 [ 776.616810][T24648] openvswitch: netlink: Duplicate or invalid key (type 0). [ 777.072906][T24631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 777.648946][T24664] bond0: Caught tx_queue_len zero misconfig [ 777.865478][T24682] netlink: 81 bytes leftover after parsing attributes in process `syz.2.4531'. [ 778.715502][T24707] net_ratelimit: 5 callbacks suppressed [ 778.722024][T24707] netlink: Conntrack attr has 4 unknown bytes [ 778.729615][T24708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4538'. [ 778.742684][T24707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.119953][T24720] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4543'. [ 779.132073][T24720] veth0_to_bridge: entered promiscuous mode [ 779.132167][T24720] veth0_to_bridge: entered allmulticast mode [ 779.159079][T24721] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4544'. [ 779.205808][T15533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.217982][T24729] netlink: 'syz.1.4547': attribute type 1 has an invalid length. [ 779.226026][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4547'. [ 779.236431][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4547'. [ 779.710720][T24752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4552'. [ 779.751637][ T7054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.756751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.184938][T24762] sctp: [Deprecated]: syz.5.4555 (pid 24762) Use of int in max_burst socket option deprecated. [ 780.184938][T24762] Use struct sctp_assoc_value instead [ 780.343554][T24772] netlink: 'syz.4.4557': attribute type 1 has an invalid length. [ 780.352323][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.551358][T24767] __nla_validate_parse: 5 callbacks suppressed [ 780.551412][T24767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4556'. [ 780.669340][T24780] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4559'. [ 780.754897][T24789] : renamed from bond0 (while UP) [ 780.773735][T24782] Bluetooth: MGMT ver 1.23 [ 781.286506][T24800] bridge_slave_0: left allmulticast mode [ 781.286550][T24800] bridge_slave_0: left promiscuous mode [ 781.286831][T24800] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.349023][T20427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.364093][T24800] bridge_slave_1: left allmulticast mode [ 781.364193][T24800] bridge_slave_1: left promiscuous mode [ 781.388300][T24800] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.466965][T24800] : (slave bond_slave_0): Releasing backup interface [ 781.481799][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.515337][T24812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4567'. [ 781.529629][T24800] : (slave bond_slave_1): Releasing backup interface [ 781.564448][T24800] team0: Port device team_slave_0 removed [ 781.596005][T24800] team0: Port device team_slave_1 removed [ 781.606859][T24800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 782.003678][T24833] tipc: Started in network mode [ 782.010828][T24833] tipc: Node identity 7e6ef90c4dd4, cluster identity 4711 [ 782.019903][T24833] tipc: Enabled bearer , priority 0 [ 782.030520][T24833] syzkaller0: entered promiscuous mode [ 782.036215][T24833] syzkaller0: entered allmulticast mode [ 782.059354][T24833] syzkaller0: Caught tx_queue_len zero misconfig [ 782.098807][T24838] IPv4: Oversized IP packet from 127.202.26.0 [ 782.116372][T24833] tipc: Resetting bearer [ 782.572138][T24853] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4575'. [ 782.582215][T24853] veth0_to_bond: default FDB implementation only supports local addresses [ 783.108912][T18203] tipc: Node number set to 867891468 [ 783.294939][T24873] bridge_slave_0: left allmulticast mode [ 783.294985][T24873] bridge_slave_0: left promiscuous mode [ 783.295245][T24873] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.421690][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4581'. [ 783.434840][T24873] bridge_slave_1: left allmulticast mode [ 783.434904][T24873] bridge_slave_1: left promiscuous mode [ 783.435397][T24873] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.576123][T24873] bond0: (slave bond_slave_0): Releasing backup interface [ 783.622058][T24873] bond_slave_0: left promiscuous mode [ 783.628173][T24873] bond_slave_0: left allmulticast mode [ 783.654260][T24873] bond0: (slave bond_slave_1): Releasing backup interface [ 783.664130][T24873] bond_slave_1: left promiscuous mode [ 783.672650][T24873] bond_slave_1: left allmulticast mode [ 783.683935][T24873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.693941][T24873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.704209][T24897] x_tables: duplicate underflow at hook 2 [ 783.718354][T10120] net_ratelimit: 3 callbacks suppressed [ 783.718391][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.736626][T24873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 784.191369][T24910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4586'. [ 784.390241][T18203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.627114][T24915] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4589'. [ 784.627191][T24915] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4589'. [ 784.742462][T24925] x_tables: duplicate underflow at hook 1 [ 784.748670][T24925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4589'. [ 784.838931][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.890171][T24930] tunl0: left promiscuous mode [ 785.510488][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.510714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.512633][T24930] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 785.545251][T20435] lo speed is unknown, defaulting to 1000 [ 785.545734][T20435] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 785.980522][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.126218][T24969] bond0: (slave syz_tun): Releasing backup interface [ 786.296355][T24969] bridge_slave_1: left allmulticast mode [ 786.296652][T24969] bridge_slave_1: left promiscuous mode [ 786.299740][T24969] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.356135][T24969] bond0: (slave bond_slave_0): Releasing backup interface [ 786.422579][T24969] bond0: (slave bond_slave_1): Releasing backup interface [ 786.461959][T24969] team0: Port device team_slave_0 removed [ 786.468080][T24989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4600'. [ 786.514874][T24969] team0: Port device team_slave_1 removed [ 786.529905][T24969] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 786.656830][T24993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.126842][T24999] syzkaller0: entered promiscuous mode [ 787.126884][T24999] syzkaller0: entered allmulticast mode [ 787.156608][T25007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4605'. [ 787.179549][T24999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4602'. [ 787.726175][T25031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'. [ 788.943827][T25055] netlink: 'syz.3.4614': attribute type 21 has an invalid length. [ 788.943917][T25055] netlink: 'syz.3.4614': attribute type 22 has an invalid length. [ 788.952700][T25055] netlink: 'syz.3.4614': attribute type 23 has an invalid length. [ 788.952737][T25055] netlink: 'syz.3.4614': attribute type 25 has an invalid length. [ 788.952770][T25055] netlink: 'syz.3.4614': attribute type 26 has an invalid length. [ 788.952802][T25055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4614'. [ 789.114306][T25058] net_ratelimit: 8 callbacks suppressed [ 789.120889][T25058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 789.349970][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.889804][T25091] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 790.091270][T25096] sctp: [Deprecated]: syz.1.4623 (pid 25096) Use of int in maxseg socket option. [ 790.091270][T25096] Use struct sctp_assoc_value instead [ 790.405308][T25114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.452077][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.469317][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.504285][T25115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 791.180094][T25141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'. [ 791.268285][T25138] syzkaller1: entered promiscuous mode [ 791.268364][T25138] syzkaller1: entered allmulticast mode [ 791.287231][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.287436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.500264][T25143] syzkaller1: left promiscuous mode [ 791.500358][T25143] syzkaller1: left allmulticast mode [ 791.578408][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.296091][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4648'. [ 792.296132][T25183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4648'. [ 792.323356][T25182] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4648'. [ 792.371872][T25180] IPv6: NLM_F_CREATE should be specified when creating new route [ 792.506452][T25188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 792.565981][T25195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4650'. [ 792.576015][T25195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4650'. [ 792.717379][T25199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4651'. [ 792.729203][T25199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4651'. [ 792.738738][T25199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4651'. [ 792.756866][T25199] xt_IDLETIMER: label is empty or not nul-terminated [ 793.158862][T25207] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 793.177579][T25207] bond3 (unregistering): Released all slaves [ 793.517138][T25221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4655'. [ 793.571302][T25221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4655'. [ 793.886397][T25223] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 793.903974][T25223] bond3 (unregistering): Released all slaves [ 794.330723][T25245] tipc: Enabled bearer , priority 0 [ 794.345541][T25245] syzkaller0: entered promiscuous mode [ 794.345598][T25245] syzkaller0: entered allmulticast mode [ 794.398673][T25245] tipc: Resetting bearer [ 794.418671][T25243] tipc: Resetting bearer [ 794.493706][T25243] tipc: Disabling bearer [ 794.531540][T25251] vcan0: tx address claim with different name [ 794.535851][T25255] vcan0: tx address claim with different name [ 794.556057][T25251] netlink: 'syz.2.4664': attribute type 1 has an invalid length. [ 794.930920][ T1500] net_ratelimit: 6 callbacks suppressed [ 794.931007][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.343969][T25279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.673953][T25291] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 795.985426][T25299] netlink: 'syz.3.4678': attribute type 11 has an invalid length. [ 796.038729][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.200571][T25318] netlink: 'syz.5.4681': attribute type 5 has an invalid length. [ 796.629667][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.030169][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.030396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.148522][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.313257][T25359] __nla_validate_parse: 7 callbacks suppressed [ 797.313971][T25359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4689'. [ 797.338971][T25359] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4689'. [ 797.339102][T25359] 0·: renamed from hsr0 (while UP) [ 797.358500][T25359] 0·: failed to rename [ 797.363464][T25359] 0·: entered allmulticast mode [ 797.368969][T25359] hsr_slave_0: entered allmulticast mode [ 797.375442][T25359] hsr_slave_1: entered allmulticast mode [ 797.383250][T25359] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 797.405789][T25359] netlink: 'syz.5.4689': attribute type 11 has an invalid length. [ 797.405893][T25359] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4689'. [ 797.593790][T25378] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 797.694553][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4694'. [ 798.051330][T25390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4698'. [ 798.250163][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.308025][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 798.327390][T25399] netlink: 'syz.2.4701': attribute type 1 has an invalid length. [ 798.383748][T25401] netlink: zone id is out of range [ 798.449592][T25405] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4702'. [ 798.525831][T25399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.190240][T23292] wg0 speed is unknown, defaulting to 1000 [ 799.534597][T25450] netlink: 580 bytes leftover after parsing attributes in process `syz.3.4712'. [ 799.551182][T25441] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.4711'. [ 800.208680][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4720'. [ 800.276414][T25472] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 800.322264][T25475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4719'. [ 800.454990][T25482] netlink: 'syz.3.4723': attribute type 3 has an invalid length. [ 800.455031][T25482] netlink: 'syz.3.4723': attribute type 1 has an invalid length. [ 800.455239][T25482] netlink: 'syz.3.4723': attribute type 3 has an invalid length. [ 800.455258][T25482] netlink: 'syz.3.4723': attribute type 1 has an invalid length. [ 800.482001][T14494] net_ratelimit: 14 callbacks suppressed [ 800.482021][T14494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.508182][T25482] netlink: 'syz.3.4723': attribute type 3 has an invalid length. [ 800.508217][T25482] netlink: 'syz.3.4723': attribute type 1 has an invalid length. [ 801.395616][T25505] xt_CT: No such helper "snmp_trap" [ 801.611495][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.474761][T25579] __nla_validate_parse: 3 callbacks suppressed [ 802.483521][T25579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 802.713315][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.736256][T25582] netlink: 'syz.3.4749': attribute type 1 has an invalid length. [ 802.747001][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.793581][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.793884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.907049][T25582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 802.943464][T25584] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 803.021411][T25588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4750'. [ 803.046457][T25582] macvlan2: entered promiscuous mode [ 803.046553][T25582] macvlan2: entered allmulticast mode [ 803.073223][T25582] bond3: entered promiscuous mode [ 803.110217][T25582] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 803.117733][T25582] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 803.175957][T25582] bond3: left promiscuous mode [ 803.212374][T25590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4751'. [ 803.423355][T25585] bond3: entered promiscuous mode [ 803.423431][T25585] bond3: entered allmulticast mode [ 803.858562][T14494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.868695][T25604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.927199][T25602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4755'. [ 803.957270][T25610] wireguard1: entered promiscuous mode [ 804.106571][T25611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4756'. [ 804.636465][T25641] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4764'. [ 804.650306][T25641] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4764'. [ 804.662868][T25641] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4764'. [ 804.663051][T25641] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4764'. [ 804.663203][T25641] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4764'. [ 804.714292][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.718151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.339561][T25655] xt_TPROXY: Can be used only with -p tcp or -p udp [ 805.749266][T20429] net_ratelimit: 1 callbacks suppressed [ 805.749361][T20429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.952625][T25681] netlink: 'syz.2.4777': attribute type 1 has an invalid length. [ 806.055971][T25678] syzkaller1: entered promiscuous mode [ 806.056023][T25678] syzkaller1: entered allmulticast mode [ 806.088825][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.204083][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.516305][T25746] __nla_validate_parse: 66 callbacks suppressed [ 807.525080][T25746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4790'. [ 808.299388][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.387950][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 808.464350][T25779] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4799'. [ 808.562403][T14494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.562590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.607247][T25783] netlink: 'syz.5.4800': attribute type 29 has an invalid length. [ 808.794469][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.845278][ T5618] Bluetooth: hci4: unexpected cc 0x2003 length: 10 > 9 [ 808.845331][ T5618] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 808.866268][ T5618] Bluetooth: hci4: unexpected cc 0x2003 length: 10 > 9 [ 808.866313][ T5618] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 809.216032][T25781] netlink: 'syz.5.4800': attribute type 29 has an invalid length. [ 809.242054][T25805] netlink: 'syz.5.4800': attribute type 29 has an invalid length. [ 809.390030][T25815] netlink: 'syz.3.4806': attribute type 1 has an invalid length. [ 809.439616][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.467960][T25812] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4806'. [ 809.661854][T25822] IPVS: length: 24 != 6840 [ 809.895099][T25812] veth5: entered allmulticast mode [ 810.015466][T25812] bond4: (slave veth5): Enslaving as an active interface with a down link [ 810.161164][T25815] bond3: (slave veth0_to_bond): Releasing active interface [ 810.227446][T25832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4812'. [ 810.237620][T25815] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 810.332642][T25826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4815'. [ 810.469156][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.469402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.849656][T25856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4818'. [ 810.946686][T25856] ipvlan2: entered allmulticast mode [ 810.952602][T25856] syz_tun: entered allmulticast mode [ 811.045660][T25865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4820'. [ 811.223534][T25865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4820'. [ 811.286415][T25879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4825'. [ 811.385703][T25876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4824'. [ 811.678361][ T253] net_ratelimit: 1 callbacks suppressed [ 811.678426][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.830332][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.933532][T25883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.187170][T25908] netlink: 'syz.2.4832': attribute type 3 has an invalid length. [ 812.187211][T25908] netlink: 'syz.2.4832': attribute type 1 has an invalid length. [ 812.809678][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.905860][T25926] ÿÿ¬ª: renamed from bond0 (while UP) [ 813.008980][T25928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 813.026690][T25928] __nla_validate_parse: 3 callbacks suppressed [ 813.035120][T25928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4841'. [ 813.273413][T25942] xt_l2tp: v2 tid > 0xffff: 1114244 [ 813.373798][T25946] xt_l2tp: v2 tid > 0xffff: 1114244 [ 813.482025][T25952] syzkaller0: entered promiscuous mode [ 813.488885][T25952] syzkaller0: entered allmulticast mode [ 813.578564][T25952] ªªªªª»: renamed from bond_slave_0 [ 813.647640][T25960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4850'. [ 813.660650][T25961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4850'. [ 813.786456][T25964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4851'. [ 813.797932][T25964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4851'. [ 813.807460][T25964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4851'. [ 813.817662][T25964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4851'. [ 813.934166][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.024113][T25971] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4855'. [ 814.049660][T25970] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4853'. [ 814.049752][T25970] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4853'. [ 814.049786][T25970] netlink: 'syz.3.4853': attribute type 5 has an invalid length. [ 814.185626][T25975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.253170][T25975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.323594][T25975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.344539][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.348158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.881598][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.050452][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.366342][T26010] syzkaller0: entered promiscuous mode [ 815.366437][T26010] syzkaller0: entered allmulticast mode [ 815.426071][T26010] 0: reclassify loop, rule prio 0, protocol 800 [ 816.168474][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.066811][T26073] syz_tun: entered allmulticast mode [ 817.094511][T26073] dvmrp8: entered allmulticast mode [ 817.106747][T26071] syz_tun: left allmulticast mode [ 817.281325][ T1500] net_ratelimit: 2 callbacks suppressed [ 817.281391][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.910820][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.222562][T26114] syzkaller0: entered promiscuous mode [ 818.222601][T26114] syzkaller0: entered allmulticast mode [ 818.391879][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.526375][T26127] netlink: 'syz.5.4903': attribute type 11 has an invalid length. [ 818.526414][T26127] __nla_validate_parse: 13 callbacks suppressed [ 818.526441][T26127] netlink: 4320 bytes leftover after parsing attributes in process `syz.5.4903'. [ 819.499852][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.912650][T26172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4916'. [ 819.936477][T26173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4915'. [ 820.028400][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4917'. [ 820.038768][T26178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4915'. [ 820.056580][T26180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4917'. [ 820.071512][ T253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.071770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.408944][T26132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4900'. [ 820.608497][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.660008][T26199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4919'. [ 820.680559][T26197] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4920'. [ 820.962724][T20429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.052320][T26204] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4922'. [ 821.076938][T26203] Cannot find add_set index 65532 as target [ 821.281860][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.282110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.694670][T26235] x_tables: duplicate underflow at hook 1 [ 822.851779][T15544] net_ratelimit: 1 callbacks suppressed [ 822.851824][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.117160][T26280] bridge_slave_1: entered allmulticast mode [ 823.206588][T26283] netlink: 'syz.2.4939': attribute type 2 has an invalid length. [ 823.741575][T26296] __nla_validate_parse: 2 callbacks suppressed [ 823.741620][T26296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4943'. [ 823.905145][T26294] vlan1: entered promiscuous mode [ 823.921422][T26294] bridge0: entered promiscuous mode [ 823.921619][T26294] vlan1: entered allmulticast mode [ 823.921638][T26294] bridge0: entered allmulticast mode [ 823.959349][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.988583][T20429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.073745][T26301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4946'. [ 824.232719][T26297] smc: net device team0 applied user defined pnetid SYZ2 [ 824.789540][T26325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4951'. [ 824.789594][T26325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.016823][T26331] bridge0: port 1(veth1_to_bridge) entered blocking state [ 825.016944][T26331] bridge0: port 1(veth1_to_bridge) entered disabled state [ 825.017149][T26331] veth1_to_bridge: entered allmulticast mode [ 825.049668][T26331] veth1_to_bridge: entered promiscuous mode [ 825.095524][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.118627][T26333] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 825.118717][T26333] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 825.259006][T26341] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 825.271131][T26341] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 825.831528][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.925818][T26356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4959'. [ 826.287629][T26310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4948'. [ 826.666415][T26382] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4962'. [ 826.835769][T26388] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 826.892777][T26388] xt_hashlimit: size too large, truncated to 1048576 [ 827.448536][T26395] vlan2: entered allmulticast mode [ 827.448604][T26395] bond0: entered allmulticast mode [ 827.548568][T26410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4969'. [ 827.793956][T26415] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 828.054712][T26432] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4975'. [ 828.158255][T26435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4975'. [ 828.421015][T10120] net_ratelimit: 6 callbacks suppressed [ 828.421086][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.518916][T26442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4976'. [ 828.635485][T26451] smc: net device lo erased user defined pnetid SYZ0 [ 828.651208][T26451] smc: smcd device lo erased user defined pnetid SYZ0 [ 828.751231][T26456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4978'. [ 828.751336][T26456] netlink: 'syz.2.4978': attribute type 10 has an invalid length. [ 828.770207][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4978'. [ 829.551834][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.774875][T26491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.909362][T26491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.078248][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.540874][T26513] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4995'. [ 830.661181][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.976993][T26522] netlink: 'syz.4.4996': attribute type 1 has an invalid length. [ 830.977100][T26522] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4996'. [ 831.014287][T26522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4996'. [ 831.028249][T26524] netlink: 'syz.4.4996': attribute type 1 has an invalid length. [ 831.028322][T26524] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4996'. [ 831.029132][T26524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4996'. [ 831.602033][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.606184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.731904][T26560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5006'. [ 831.789770][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.187175][T26579] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 832.187230][T26579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.230153][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.450385][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5011'. [ 832.461488][T26589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5011'. [ 832.955033][T26610] xt_hashlimit: size too large, truncated to 1048576 [ 832.964670][T26610] xt_hashlimit: max too large, truncated to 1048576 [ 832.964971][T26610] xt_hashlimit: overflow, rate too high: 0 [ 833.419994][T26594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 833.446636][T26629] veth7: entered allmulticast mode [ 833.499063][T26628] netlink: 'syz.3.5021': attribute type 1 has an invalid length. [ 833.879954][T26640] __nla_validate_parse: 3 callbacks suppressed [ 833.880013][T26640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5025'. [ 833.941900][T26642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5026'. [ 834.010581][ T1500] net_ratelimit: 3 callbacks suppressed [ 834.010653][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.111997][T26655] openvswitch: netlink: Multiple metadata blocks provided [ 834.286796][T26660] netlink: 'syz.5.5031': attribute type 1 has an invalid length. [ 834.385452][T26660] 8021q: adding VLAN 0 to HW filter on device bond11 [ 834.957478][T26665] bond11: (slave veth11): Enslaving as an active interface with a down link [ 835.020820][T26660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.029668][T26660] bond11: (slave batadv0): making interface the new active one [ 835.038609][T26660] batadv0: entered promiscuous mode [ 835.039071][T26660] bond11: (slave batadv0): Enslaving as an active interface with an up link [ 835.099620][T26670] bond11: (slave veth13): Enslaving as an active interface with a down link [ 835.172177][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.214448][T26685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5036'. [ 835.234116][T26686] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5035'. [ 835.244007][T26686] openvswitch: netlink: Message has 4 unknown bytes. [ 835.259280][T26686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5035'. [ 835.259316][T26686] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5035'. [ 835.259355][T26686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5035'. [ 835.401402][ T32] audit: type=1804 audit(1788721750.847:15): pid=26695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5037" name="/newroot/444/cgroup.controllers" dev="tmpfs" ino=2276 res=1 errno=0 [ 835.410826][ T32] audit: type=1800 audit(1788721750.847:16): pid=26695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5037" name="cgroup.controllers" dev="tmpfs" ino=2276 res=0 errno=0 [ 835.548495][T26692] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 835.661951][T26700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5038'. [ 835.790959][T26703] syzkaller0: entered promiscuous mode [ 835.796839][T26703] syzkaller0: entered allmulticast mode [ 836.164228][T20429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.249194][T26714] : renamed from bond0 (while UP) [ 836.298016][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.622200][T26739] syzkaller0: entered promiscuous mode [ 836.622236][T26739] syzkaller0: entered allmulticast mode [ 836.860207][T26752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5049'. [ 836.885531][T26752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5049'. [ 836.946728][T26752] veth0_macvtap: left promiscuous mode [ 837.220737][T26759] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 837.355382][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.362664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.430259][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.000188][T26789] syzkaller0: left promiscuous mode [ 838.006645][T26789] syzkaller0: left allmulticast mode [ 838.012564][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.563255][T26817] x_tables: duplicate underflow at hook 2 [ 839.102275][T26827] netlink: 'syz.4.5067': attribute type 1 has an invalid length. [ 839.102367][T26827] __nla_validate_parse: 4 callbacks suppressed [ 839.102571][T26827] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5067'. [ 839.112096][T26827] netlink: 'syz.4.5067': attribute type 1 has an invalid length. [ 839.191760][T20429] net_ratelimit: 2 callbacks suppressed [ 839.191850][T20429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.590075][T26840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 839.699735][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.753067][ T4933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 839.778482][ T4933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 839.792012][ T4933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 839.809693][ T4933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 839.826224][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 839.870202][T26848] netlink: 'syz.4.5071': attribute type 2 has an invalid length. [ 840.406583][T26864] netlink: 'syz.3.5074': attribute type 1 has an invalid length. [ 840.590952][T26868] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 840.798856][T14493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.887177][T26857] ip_tables: iptables: counters copy to user failed while replacing table [ 841.334631][T26886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5079'. [ 841.722519][T26839] hsr0 speed is unknown, defaulting to 1000 [ 841.790596][T26839] lo speed is unknown, defaulting to 1000 [ 841.816886][T26904] netlink: Unknown conntrack attr (0) [ 841.816920][T26839] wg0 speed is unknown, defaulting to 1000 [ 841.900126][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.908938][ T5618] Bluetooth: hci1: command tx timeout [ 842.003636][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5083'. [ 842.003764][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5083'. [ 842.229641][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.463247][T26927] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5094'. [ 842.590169][T26925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.635028][T26928] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5091'. [ 842.998566][T26945] netlink: 'syz.4.5099': attribute type 1 has an invalid length. [ 843.033664][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.180605][T26934] syzkaller0: entered promiscuous mode [ 843.186352][T26934] syzkaller0: entered allmulticast mode [ 843.195519][T26949] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5098'. [ 843.232872][T26945] bond0: entered promiscuous mode [ 843.238656][T26945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.274146][T26952] bond0: (slave bridge7): making interface the new active one [ 843.282572][T26952] bridge7: entered promiscuous mode [ 843.293273][T26952] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 843.505609][T26961] netlink: 512 bytes leftover after parsing attributes in process `syz.3.5100'. [ 843.988746][ T5618] Bluetooth: hci1: command tx timeout [ 845.284850][T20429] net_ratelimit: 5 callbacks suppressed [ 845.284945][T20429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.293897][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.068072][ T5618] Bluetooth: hci1: command tx timeout [ 846.404254][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.451151][T26985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5104'. [ 846.829789][T26991] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5107'. [ 847.436415][T27016] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5110'. [ 847.452523][T26839] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.452660][T26839] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.452878][T26839] bridge_slave_0: entered allmulticast mode [ 847.480650][T26839] bridge_slave_0: entered promiscuous mode [ 847.499618][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.633689][T26839] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.641476][T26839] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.649310][T26839] bridge_slave_1: entered allmulticast mode [ 847.661202][T26839] bridge_slave_1: entered promiscuous mode [ 847.740815][T27031] netlink: 'syz.4.5112': attribute type 1 has an invalid length. [ 847.897584][T27048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5114'. [ 847.946150][T27031] 8021q: adding VLAN 0 to HW filter on device bond7 [ 848.148314][ T4933] Bluetooth: hci1: command tx timeout [ 848.172645][T27036] bond7: (slave veth7): Enslaving as an active interface with a down link [ 848.190038][T26839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.305360][T26839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.322669][T20429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.521967][T27072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5116'. [ 848.539612][T26839] team0: Port device team_slave_0 added [ 848.552263][T26839] team0: Port device team_slave_1 added [ 848.613993][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.762937][T26839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.762971][T26839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.763016][T26839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.814884][T26839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.822465][T26839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.852094][T26839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.879215][T27081] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5119'. [ 848.889411][T27081] netlink: 'syz.3.5119': attribute type 1 has an invalid length. [ 848.897318][T27081] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5119'. [ 848.898416][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.898990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.135080][T27090] netlink: 'syz.2.5117': attribute type 2 has an invalid length. [ 849.160059][T27090] netlink: 'syz.2.5117': attribute type 2 has an invalid length. [ 849.160097][T27090] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.5117'. [ 849.248608][T27086] ªªªªª»`_: renamed from dummy0 [ 849.266425][T27092] netlink: 'syz.3.5120': attribute type 39 has an invalid length. [ 849.396496][T27099] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5122'. [ 849.516565][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.516840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.656367][T26839] hsr_slave_0: entered promiscuous mode [ 849.672391][T26839] hsr_slave_1: entered promiscuous mode [ 849.683082][T26839] debugfs: 'hsr0' already exists in 'hsr' [ 849.683483][T26839] Cannot create hsr debugfs directory [ 849.753293][ T27] batadv0: left promiscuous mode [ 850.225760][T27131] syz_tun: entered allmulticast mode [ 850.294289][T27130] dvmrp8: entered allmulticast mode [ 850.348485][T27133] netlink: 'syz.3.5125': attribute type 25 has an invalid length. [ 850.432526][T27128] syz_tun: left allmulticast mode [ 850.882391][T15544] net_ratelimit: 1 callbacks suppressed [ 850.882449][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.066785][T27151] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.5131'. [ 851.079867][T27151] netlink: 'syz.4.5131': attribute type 1 has an invalid length. [ 851.352458][T20429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.981164][ T9738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.491128][T27192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5136'. [ 852.573521][ T4933] Bluetooth: hci6: unexpected cc 0x2003 length: 0 < 9 [ 852.581666][ T4933] Bluetooth: hci6: unexpected event for opcode 0x2003 [ 852.593877][T27204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5139'. [ 852.787305][T27206] bond0: entered promiscuous mode [ 852.805357][T27206] batadv0: entered promiscuous mode [ 852.812454][T27214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5139'. [ 852.827673][T27206] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 852.827709][T27206] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 852.851913][T27206] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 853.007235][T27209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 853.007469][T27209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 853.007680][T27209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 853.007918][T27209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 853.008088][T27209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 853.008261][T27209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 853.008760][T27209] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 853.461860][T26839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 853.519957][T26839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.530554][T26839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 853.560814][T26839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.569112][T26839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 853.614358][T26839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.625306][T26839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 853.703106][T26839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.829451][T27238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5144'. [ 854.397489][T26839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.487213][T26839] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.541735][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.543119][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.604808][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.607715][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.094881][T27274] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5150'. [ 856.036948][T27304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5159'. [ 856.173928][ T4933] Bluetooth: unknown link type 231 [ 856.179326][ T4933] Bluetooth: hci4: connection err: -111 [ 856.321001][T27307] tipc: Enabled bearer , priority 0 [ 856.397898][T27305] tipc: Disabling bearer [ 856.474648][T10119] net_ratelimit: 55 callbacks suppressed [ 856.474698][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.491009][T27334] netlink: 'syz.1.5161': attribute type 1 has an invalid length. [ 856.666552][T27334] bond0: entered promiscuous mode [ 856.676993][T27334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.752860][T27337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.761388][T27337] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 856.772426][T27337] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 856.796270][T27337] bond0: (slave ip6gre2): making interface the new active one [ 856.806291][T27337] ip6gre2: entered promiscuous mode [ 856.813820][T27337] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 856.866664][T26839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.002389][T27346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5165'. [ 857.290521][T27353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5166'. [ 857.300049][T27353] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5166'. [ 857.433767][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.600940][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.632275][T27353] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5166'. [ 858.541590][T26839] veth0_vlan: entered promiscuous mode [ 858.573397][T27393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5168'. [ 858.586387][T26839] veth1_vlan: entered promiscuous mode [ 858.677636][T26842] udevd[26842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 858.704205][T26839] veth0_macvtap: entered promiscuous mode [ 858.720623][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.732777][T26839] veth1_macvtap: entered promiscuous mode [ 858.757522][T26839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.876830][T26839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.999436][ T1500] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.999791][ T1500] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.999846][ T1500] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.999882][ T1500] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.171755][T15540] IPVS: starting estimator thread 0... [ 859.268225][T27413] IPVS: using max 31 ests per chain, 74400 per kthread [ 859.342036][T10120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.342101][T10120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.451705][T27404] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5171'. [ 859.546041][ T9738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.546121][ T9738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.623269][T27421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5174'. [ 859.634664][T27421] netlink: 'syz.1.5174': attribute type 10 has an invalid length. [ 859.634708][T27421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5174'. [ 859.761826][ T1500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.762152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.902830][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.063753][T27431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5177'. [ 860.189262][T27435] xt_hashlimit: size too large, truncated to 1048576 [ 860.504190][T20426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.516698][T15540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.526421][T23291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.547008][T27453] netlink: 'syz.2.5181': attribute type 5 has an invalid length. [ 860.547082][T27453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5181'. [ 860.578560][T27445] netlink: 'syz.1.5180': attribute type 5 has an invalid length. [ 860.578631][T27445] netlink: 'syz.1.5180': attribute type 9 has an invalid length. [ 860.578696][T27445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5180'. [ 860.995285][T27463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5185'. [ 861.016031][T27464] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5183'. [ 861.276813][T27474] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 861.753642][T27485] team_slave_1: Caught tx_queue_len zero misconfig [ 861.816459][T27489] netlink: 'syz.2.5191': attribute type 26 has an invalid length. [ 861.990617][T27495] macvlan0: entered promiscuous mode [ 862.003305][T27497] netlink: 'syz.5.5190': attribute type 3 has an invalid length. [ 862.116567][T27501] netlink: 'syz.5.5195': attribute type 15 has an invalid length. [ 862.160232][T27501] netlink: 'syz.5.5195': attribute type 15 has an invalid length. [ 862.168948][T24785] net_ratelimit: 4 callbacks suppressed [ 862.168980][T24785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.169379][T24785] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 862.169445][T24785] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 862.169506][T24785] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 862.169570][T24785] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 863.004432][T27543] __nla_validate_parse: 40 callbacks suppressed [ 863.004485][T27543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5205'. [ 863.279824][T24785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.431405][T27558] ip_tables: iptables: counters copy to user failed while replacing table [ 863.561606][T27559] netlink: 'syz.5.5209': attribute type 1 has an invalid length. [ 863.591221][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.621566][T27559] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 863.672477][T27560] bond0: entered promiscuous mode [ 863.672547][T27560] bond_slave_0: entered promiscuous mode [ 863.673369][T27560] bond_slave_1: entered promiscuous mode [ 863.673787][T27560] veth0_to_bond: entered promiscuous mode [ 863.674161][T27560] bond0: entered allmulticast mode [ 863.674197][T27560] bond_slave_0: entered allmulticast mode [ 863.674234][T27560] bond_slave_1: entered allmulticast mode [ 863.674271][T27560] veth0_to_bond: entered allmulticast mode [ 863.904924][T27574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5213'. [ 863.953103][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5213'. [ 864.166863][T27579] netlink: 'syz.5.5214': attribute type 1 has an invalid length. [ 864.458722][T24785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.644680][T27585] hsr0 speed is unknown, defaulting to 1000 [ 864.666064][T27585] lo speed is unknown, defaulting to 1000 [ 864.687210][T27585] wg0 speed is unknown, defaulting to 1000 [ 864.969619][T27600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5219'. [ 865.003093][T27601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5219'. [ 865.441191][ T5618] Bluetooth: hci1: command 0x0405 tx timeout [ 865.540969][T15540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.541191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.600941][T14494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.643336][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.652785][T23283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.656714][T27653] netlink: 'syz.1.5230': attribute type 1 has an invalid length. [ 866.810911][T27655] netlink: 'syz.4.5231': attribute type 14 has an invalid length. [ 866.810955][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5231'. [ 866.851073][T27655] netlink: 'syz.4.5231': attribute type 14 has an invalid length. [ 866.859878][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5231'. [ 867.868191][T27694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5241'. [ 867.966358][T27697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5239'. [ 867.999182][T15544] net_ratelimit: 7 callbacks suppressed [ 867.999225][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.332211][T27708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5243'. [ 868.426395][T27708] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5243'. [ 868.524653][T27712] geneve2: entered promiscuous mode [ 868.524747][T27712] geneve2: entered allmulticast mode [ 868.712348][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.721902][T27715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5246'. [ 869.044592][T27738] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5248'. [ 869.057013][T14494] IPVS: starting estimator thread 0... [ 869.069436][T27735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5252'. [ 869.152726][T15540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.164240][T27739] IPVS: using max 28 ests per chain, 67200 per kthread [ 869.356912][T27744] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5253'. [ 869.372187][T27744] netlink: 'syz.2.5253': attribute type 2 has an invalid length. [ 869.380967][T27744] netlink: 'syz.2.5253': attribute type 2 has an invalid length. [ 869.809633][T27755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5257'. [ 869.873055][T27758] netlink: 'syz.3.5257': attribute type 16 has an invalid length. [ 870.281502][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.921181][T27800] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5265'. [ 871.107269][T27806] bridge0: port 3(veth1_to_bridge) entered blocking state [ 871.107375][T27806] bridge0: port 3(veth1_to_bridge) entered disabled state [ 871.107556][T27806] veth1_to_bridge: entered allmulticast mode [ 871.136025][T27806] veth1_to_bridge: entered promiscuous mode [ 871.145020][T27806] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 871.145559][T27806] bridge0: port 3(veth1_to_bridge) entered blocking state [ 871.145676][T27806] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 871.270397][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.274597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.401259][T15544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.721791][T27825] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5271'. [ 871.721886][T27825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5271'. [ 871.750102][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.927352][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.927812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.489814][T27853] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 873.394579][T27887] netlink: 'syz.3.5287': attribute type 20 has an invalid length. [ 873.402692][T27887] __nla_validate_parse: 13 callbacks suppressed [ 873.409718][T27887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5287'. [ 873.466070][T27887] netlink: 'syz.3.5287': attribute type 20 has an invalid length. [ 873.466116][T27887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5287'. [ 873.515298][T10119] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.516163][T10119] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.592743][T24785] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.604701][T10120] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.673705][T24785] net_ratelimit: 1 callbacks suppressed [ 873.673772][T24785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.856693][T27904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 874.801706][T10120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.852796][T20430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.027691][T27944] batadv_slave_0: entered promiscuous mode [ 875.032219][T27945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5300'. [ 875.346220][T27940] batadv_slave_0: left promiscuous mode [ 875.737301][T27968] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5305'. [ 875.897680][T27983] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5309'. [ 875.948299][T14494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.960325][T27979] bond1: entered promiscuous mode [ 875.960360][T27979] bond1: entered allmulticast mode [ 875.982384][T27990] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 875.987538][T27990] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 876.400097][T27994] netlink: 'syz.4.5313': attribute type 5 has an invalid length. [ 876.608665][T28007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5315'. [ 876.853169][T28007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5315'. [ 876.987305][T28017] v: renamed from veth0_vlan (while UP) [ 877.053668][T10119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.054086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.082493][T15540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.682236][T28042] FAULT_INJECTION: forcing a failure. [ 877.682236][T28042] name failslab, interval 1, probability 0, space 0, times 0 [ 877.696965][T28042] CPU: 1 UID: 0 PID: 28042 Comm: syz.5.5326 Not tainted syzkaller #0 PREEMPT(full) [ 877.696997][T28042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 877.697012][T28042] Call Trace: [ 877.697021][T28042] [ 877.697032][T28042] dump_stack_lvl+0xe8/0x150 [ 877.697072][T28042] should_fail_ex+0x410/0x560 [ 877.697113][T28042] ? __alloc_skb+0x1db/0x7a0 [ 877.697251][T28042] should_failslab+0xa8/0x100 [ 877.697281][T28042] ? __alloc_skb+0x1db/0x7a0 [ 877.697312][T28042] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 877.697346][T28042] ? __alloc_skb+0x18d/0x7a0 [ 877.697388][T28042] ? __alloc_skb+0x1db/0x7a0 [ 877.697426][T28042] __alloc_skb+0x1db/0x7a0 [ 877.697466][T28042] netlink_sendmsg+0x5d4/0xb40 [ 877.697527][T28042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.697562][T28042] ? apparmor_socket_sendmsg+0x98/0x360 [ 877.697628][T28042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.697653][T28042] sock_sendmsg_nosec+0x13a/0x180 [ 877.697714][T28042] ____sys_sendmsg+0x54e/0x850 [ 877.697743][T28042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 877.697776][T28042] ? import_iovec+0x73/0xa0 [ 877.697803][T28042] ___sys_sendmsg+0x2a5/0x360 [ 877.697825][T28042] ? __lock_acquire+0x6df/0x2e50 [ 877.697853][T28042] ? __pfx____sys_sendmsg+0x10/0x10 [ 877.697912][T28042] ? __fget_files+0x2a/0x420 [ 877.697939][T28042] ? __fget_files+0x3a2/0x420 [ 877.697977][T28042] __x64_sys_sendmsg+0x1b1/0x290 [ 877.698003][T28042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 877.698049][T28042] do_syscall_64+0x166/0x520 [ 877.698082][T28042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.698123][T28042] ? clear_bhb_loop+0x70/0xc0 [ 877.698151][T28042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.698174][T28042] RIP: 0033:0x7f872fb9e159 [ 877.698207][T28042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.698226][T28042] RSP: 002b:00007f8730985028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.698249][T28042] RAX: ffffffffffffffda RBX: 00007f872fe25fa0 RCX: 00007f872fb9e159 [ 877.698265][T28042] RDX: 0000000000000110 RSI: 00002000000004c0 RDI: 0000000000000005 [ 877.698279][T28042] RBP: 00007f8730985090 R08: 0000000000000000 R09: 0000000000000000 [ 877.698293][T28042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.698305][T28042] R13: 00007f872fe26038 R14: 00007f872fe25fa0 R15: 00007ffc55f94818 [ 877.698356][T28042] [ 877.930756][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.219284][T24785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.676477][T28073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5332'. [ 878.849602][T28079] netlink: 9152 bytes leftover after parsing attributes in process `syz.4.5335'. [ 878.873808][T28082] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 878.892060][T28082] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 878.917469][T28082] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 878.926973][T24785] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.927027][T24785] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.342194][T28101] FAULT_INJECTION: forcing a failure. [ 879.342194][T28101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.356966][T28101] CPU: 1 UID: 0 PID: 28101 Comm: syz.3.5339 Not tainted syzkaller #0 PREEMPT(full) [ 879.356995][T28101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 879.357010][T28101] Call Trace: [ 879.357019][T28101] [ 879.357029][T28101] dump_stack_lvl+0xe8/0x150 [ 879.357066][T28101] should_fail_ex+0x410/0x560 [ 879.357106][T28101] _copy_from_iter+0x1d3/0x1660 [ 879.357225][T28101] ? __alloc_skb+0x27a/0x7a0 [ 879.357272][T28101] ? __alloc_skb+0x27a/0x7a0 [ 879.357312][T28101] ? __alloc_skb+0x27a/0x7a0 [ 879.357343][T28101] ? __pfx__copy_from_iter+0x10/0x10 [ 879.357374][T28101] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 879.357409][T28101] ? __alloc_skb+0x27a/0x7a0 [ 879.357438][T28101] ? __alloc_skb+0x27a/0x7a0 [ 879.357475][T28101] ? netlink_sendmsg+0x650/0xb40 [ 879.357500][T28101] ? skb_put+0x112/0x210 [ 879.357524][T28101] netlink_sendmsg+0x6c0/0xb40 [ 879.357578][T28101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.357615][T28101] ? apparmor_socket_sendmsg+0x98/0x360 [ 879.357653][T28101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.357680][T28101] sock_sendmsg_nosec+0x13a/0x180 [ 879.357714][T28101] ____sys_sendmsg+0x54e/0x850 [ 879.357745][T28101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.357780][T28101] ? import_iovec+0x73/0xa0 [ 879.357807][T28101] ___sys_sendmsg+0x2a5/0x360 [ 879.357831][T28101] ? __lock_acquire+0x6df/0x2e50 [ 879.357859][T28101] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.357921][T28101] ? __fget_files+0x2a/0x420 [ 879.357950][T28101] ? __fget_files+0x3a2/0x420 [ 879.357990][T28101] __x64_sys_sendmsg+0x1b1/0x290 [ 879.358018][T28101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 879.358066][T28101] do_syscall_64+0x166/0x520 [ 879.358099][T28101] ? trace_irq_disable+0x3b/0x140 [ 879.358121][T28101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.358144][T28101] ? clear_bhb_loop+0x70/0xc0 [ 879.358172][T28101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.358195][T28101] RIP: 0033:0x7f6c0d39e159 [ 879.358216][T28101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.358236][T28101] RSP: 002b:00007f6c0e208028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.358260][T28101] RAX: ffffffffffffffda RBX: 00007f6c0d625fa0 RCX: 00007f6c0d39e159 [ 879.358277][T28101] RDX: 0000000000000110 RSI: 00002000000004c0 RDI: 0000000000000005 [ 879.358292][T28101] RBP: 00007f6c0e208090 R08: 0000000000000000 R09: 0000000000000000 [ 879.358313][T28101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.358327][T28101] R13: 00007f6c0d626038 R14: 00007f6c0d625fa0 R15: 00007ffe51fcf868 [ 879.358363][T28101] [ 879.391533][T15540] net_ratelimit: 1 callbacks suppressed [ 879.391585][T15540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.228819][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 880.570900][T28146] IPVS: starting estimator thread 0... [ 880.584717][T28153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5348'. [ 880.599270][T28145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.660024][T28158] openvswitch: netlink: IPv6 tunnel dst address is zero [ 880.668474][T28156] IPVS: using max 31 ests per chain, 74400 per kthread [ 880.747184][T28162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5352'. [ 880.791536][T28164] syzkaller1: entered promiscuous mode [ 880.797246][T28164] syzkaller1: entered allmulticast mode [ 880.943371][T28168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5350'. [ 880.959230][T20435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.998925][T28168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5350'. [ 881.100670][T28173] xt_recent: Unsupported userspace flags (000000b1) [ 881.178479][T28174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 881.474586][T28184] netlink: 'syz.3.5356': attribute type 33 has an invalid length. [ 881.505043][T28184] x_tables: duplicate underflow at hook 1 [ 881.760136][T28146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.814179][T28193] ip6tnl0: Caught tx_queue_len zero misconfig [ 881.934406][T28193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5360'. [ 882.759531][T28210] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5365'. [ 882.796503][T28146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.800228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.910698][T28144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.954919][T28216] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5366'. [ 883.430219][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.398436][ C1] net_ratelimit: 807 callbacks suppressed [ 884.398493][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.400658][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 884.402679][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.404513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 884.406111][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.408483][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 884.410670][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.412841][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 884.415307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 884.417222][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 885.023811][T28234] xt_cgroup: no path or classid specified [ 885.170943][T28234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5372'. [ 885.911677][T28234] bond8 (unregistering): Released all slaves [ 886.384444][T28250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5377'. [ 886.451348][T28251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5377'. [ 886.611985][T28263] x_tables: duplicate underflow at hook 1 [ 889.407827][ C1] net_ratelimit: 9017 callbacks suppressed [ 889.407882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 889.407956][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.408824][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 889.408821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.409627][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.409719][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 889.410357][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.410581][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 889.411241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 889.411507][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 894.418017][ C0] net_ratelimit: 11428 callbacks suppressed [ 894.418085][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.418524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 894.418842][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.419335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 894.419610][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.420219][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 894.420601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.421113][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 894.421488][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 894.421978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 896.116694][ C1] sched: DL replenish lagged too much [ 899.428400][ C1] net_ratelimit: 11053 callbacks suppressed [ 899.428450][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 899.428562][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.429371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.429411][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 899.430167][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.430267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 899.431021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.431149][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 899.432063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 899.432565][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.437987][ C1] net_ratelimit: 11448 callbacks suppressed [ 904.438031][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 904.438357][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.439193][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.439259][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 904.439978][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.440451][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 904.440742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.441486][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.441591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 904.442270][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.447839][ C0] net_ratelimit: 11880 callbacks suppressed [ 909.447911][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.448203][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 909.448594][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.449031][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 909.449239][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.449865][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.456229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.456657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 909.457008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.457507][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 914.457959][ C0] net_ratelimit: 12430 callbacks suppressed [ 914.458044][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.458774][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.459300][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 914.459455][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.460119][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.460165][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 914.460570][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 914.460869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.461566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.462316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.467906][ C1] net_ratelimit: 11680 callbacks suppressed [ 919.467950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 919.468239][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.468950][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.469483][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 919.469648][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.470336][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 919.470420][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.470766][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 919.471113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.471141][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 924.478065][ C1] net_ratelimit: 11966 callbacks suppressed [ 924.478122][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 924.478485][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 924.478895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 924.479232][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.479995][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.480499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 924.480815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.481342][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 924.481661][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.481792][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 929.487884][ C0] net_ratelimit: 11920 callbacks suppressed [ 929.487968][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.488721][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.489115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 929.489444][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.489907][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 929.490139][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.490264][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 929.490671][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 929.490857][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.491580][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 931.437488][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 934.497878][ C1] net_ratelimit: 12064 callbacks suppressed [ 934.497902][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 934.498314][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.498315][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 934.499103][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.499959][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.500077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 934.500714][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.500953][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 934.501328][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 934.501372][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.508335][ C0] net_ratelimit: 12273 callbacks suppressed [ 939.508375][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.508971][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 939.509322][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.509908][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 939.510178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.510302][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 939.510699][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 939.510987][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.511751][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.512297][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 944.523254][ C1] net_ratelimit: 11779 callbacks suppressed [ 944.523277][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 944.523413][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.523831][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.524182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.524564][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.524884][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 944.524996][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.525442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.525730][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 944.525843][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.527795][ C1] net_ratelimit: 12577 callbacks suppressed [ 949.527820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 949.527852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.528255][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 949.528639][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.528713][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 949.529429][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.530498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.530572][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 949.531222][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.531489][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.538077][ C1] net_ratelimit: 12178 callbacks suppressed [ 954.538100][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.538166][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.538480][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 954.538868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 954.539008][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.539704][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.540364][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.540369][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.541037][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.541133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 959.547827][ C1] net_ratelimit: 11768 callbacks suppressed [ 959.547844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.547849][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 959.548214][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.548244][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 959.548571][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.550100][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 959.551088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 959.551521][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 959.551981][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 959.553641][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 964.557805][ C0] net_ratelimit: 12263 callbacks suppressed [ 964.557875][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.558784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.559307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 964.559739][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.560275][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 964.560577][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.560673][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 964.561122][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 964.561405][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.562321][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.567915][ C0] net_ratelimit: 12131 callbacks suppressed [ 969.567951][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.567980][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 969.568668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.569812][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.569817][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 969.570609][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.571462][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.571501][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.572205][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.572342][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.577744][ C0] net_ratelimit: 12381 callbacks suppressed [ 974.577794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.577860][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 974.578396][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.579010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.579059][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.579576][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.579856][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.580225][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.580662][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.580811][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.587721][ C0] net_ratelimit: 12266 callbacks suppressed [ 979.587763][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.588424][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.589009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.589847][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.590345][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.590774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.591261][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.591552][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.591655][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 979.592126][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 984.598023][ C1] net_ratelimit: 11930 callbacks suppressed [ 984.598047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.598403][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.598990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.599145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.599411][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 984.599855][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 984.599877][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.600311][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 984.600913][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.601837][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.608115][ C0] net_ratelimit: 12277 callbacks suppressed [ 989.608151][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.608724][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.608776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.609569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.609648][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.610130][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 989.610382][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.610522][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 989.610910][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:32:1e:e4:54:d4, vlan:0) [ 989.611025][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 992.096833][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 992.228980][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28265/1:b..l P28260/1:b..l [ 992.238251][ C1] rcu: (detected by 1, t=10515 jiffies, g=167377, q=2913 ncpus=2) [ 992.246172][ C1] task:syz.3.5377 state:R running task stack:27784 pid:28260 tgid:28247 ppid:18702 task_flags:0x400140 flags:0x00080000 [ 992.259695][ C1] Call Trace: [ 992.262992][ C1] [ 992.265947][ C1] __schedule+0x17db/0x58f0 [ 992.270578][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 992.275824][ C1] ? __lock_acquire+0x6df/0x2e50 [ 992.280803][ C1] ? __pfx___schedule+0x10/0x10 [ 992.285718][ C1] preempt_schedule_irq+0x4b/0x90 [ 992.290806][ C1] irqentry_exit+0x14f/0x910 [ 992.295452][ C1] ? trace_irq_disable+0x3b/0x140 [ 992.300522][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 992.306528][ C1] RIP: 0010:unwind_next_frame+0x10d/0x2550 [ 992.312404][ C1] Code: 53 03 00 00 48 c7 c2 00 c4 09 8c e8 ad 74 2b 00 48 89 6c 24 38 48 89 5c 24 40 49 8d 5e 50 48 89 d8 48 c1 e8 03 48 89 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 d4 91 bf 00 48 8b 1b 48 85 db 74 [ 992.332035][ C1] RSP: 0018:ffffc9000608f2c0 EFLAGS: 00000a06 [ 992.338169][ C1] RAX: 1ffff92000c11e77 RBX: ffffc9000608f3b8 RCX: 8000000000000001 [ 992.346169][ C1] RDX: 00000000105209fd RSI: ffffffff8c6d9460 RDI: ffffffff8c6d9420 [ 992.354181][ C1] RBP: 1ffff92000c11e74 R08: d700000000000000 R09: 0000000000000000 [ 992.362179][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: dffffc0000000000 [ 992.370170][ C1] R13: ffffffff8177f22f R14: ffffc9000608f368 R15: 1ffff92000c11e6d [ 992.378181][ C1] ? unwind_next_frame+0x8f/0x2550 [ 992.383355][ C1] ? kfree+0x1c5/0x650 [ 992.387462][ C1] ? unwind_next_frame+0x8f/0x2550 [ 992.392600][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 992.398827][ C1] arch_stack_walk+0x11b/0x150 [ 992.403642][ C1] ? kfree+0x1c5/0x650 [ 992.407734][ C1] stack_trace_save+0xa9/0x100 [ 992.412540][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 992.417965][ C1] ? __lock_acquire+0x6df/0x2e50 [ 992.422939][ C1] kasan_save_track+0x3e/0x80 [ 992.427645][ C1] ? kasan_save_track+0x3e/0x80 [ 992.432533][ C1] ? kasan_save_free_info+0x40/0x50 [ 992.437755][ C1] ? __kasan_slab_free+0x5c/0x80 [ 992.442750][ C1] ? kfree+0x1c5/0x650 [ 992.446913][ C1] kasan_save_free_info+0x40/0x50 [ 992.451965][ C1] __kasan_slab_free+0x5c/0x80 [ 992.456778][ C1] kfree+0x1c5/0x650 [ 992.460716][ C1] ? skb_release_data+0x85e/0xab0 [ 992.465760][ C1] skb_release_data+0x85e/0xab0 [ 992.470630][ C1] __kfree_skb+0x5d/0x210 [ 992.474970][ C1] netlink_unicast+0x7c5/0x940 [ 992.479754][ C1] netlink_sendmsg+0x813/0xb40 [ 992.484521][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.489808][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 992.495467][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.500754][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 992.505785][ C1] ____sys_sendmsg+0x54e/0x850 [ 992.510552][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 992.515842][ C1] ? import_iovec+0x73/0xa0 [ 992.520362][ C1] ___sys_sendmsg+0x2a5/0x360 [ 992.525037][ C1] ? __lock_acquire+0x6df/0x2e50 [ 992.529973][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 992.535198][ C1] ? __fget_files+0x2a/0x420 [ 992.539800][ C1] ? __fget_files+0x3a2/0x420 [ 992.544493][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 992.549438][ C1] ? net_tx_action+0x5bb/0xc30 [ 992.554265][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 992.559723][ C1] ? handle_softirqs+0x720/0x860 [ 992.564696][ C1] do_syscall_64+0x166/0x520 [ 992.569290][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.575357][ C1] ? clear_bhb_loop+0x70/0xc0 [ 992.580038][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.585930][ C1] RIP: 0033:0x7f6c0d39e159 [ 992.590341][ C1] RSP: 002b:00007f6c0e184028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.598743][ C1] RAX: ffffffffffffffda RBX: 00007f6c0d626360 RCX: 00007f6c0d39e159 [ 992.606724][ C1] RDX: 0000000004004000 RSI: 0000200000001000 RDI: 0000000000000007 [ 992.614693][ C1] RBP: 00007f6c0d435024 R08: 0000000000000000 R09: 0000000000000000 [ 992.622659][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.630621][ C1] R13: 00007f6c0d6263f8 R14: 00007f6c0d626360 R15: 00007ffe51fcf868 [ 992.638599][ C1] [ 992.641636][ C1] task:syz.5.5378 state:R running task stack:27528 pid:28265 tgid:28253 ppid:26839 task_flags:0x400040 flags:0x00080002 [ 992.655109][ C1] Call Trace: [ 992.658407][ C1] [ 992.661334][ C1] __schedule+0x17db/0x58f0 [ 992.665865][ C1] ? __lock_acquire+0x6df/0x2e50 [ 992.670806][ C1] ? __pfx___schedule+0x10/0x10 [ 992.675681][ C1] ? __lock_acquire+0x6df/0x2e50 [ 992.680629][ C1] preempt_schedule_irq+0x4b/0x90 [ 992.685660][ C1] irqentry_exit+0x14f/0x910 [ 992.690276][ C1] ? trace_irq_disable+0x3b/0x140 [ 992.695305][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 992.701289][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 992.706570][ C1] Code: ff ff ff e8 20 29 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 54 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 2c 44 0a cc 48 8d 3d f7 34 da [ 992.726178][ C1] RSP: 0018:ffffc900060471c0 EFLAGS: 00000296 [ 992.732238][ C1] RAX: 013bbd65d0198300 RBX: 0000000000000000 RCX: 0000000000000046 [ 992.740198][ C1] RDX: 0000000079ece85b RSI: ffffffff8e6fd59a RDI: ffffffff8c6d9480 [ 992.748162][ C1] RBP: ffff888012433e80 R08: 8600000000000000 R09: 0000000000000000 [ 992.756124][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8ed5c6e0 [ 992.764091][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 992.772069][ C1] ? do_sys_openat2+0x115/0x200 [ 992.776917][ C1] ? unwind_next_frame+0x8f/0x2550 [ 992.782030][ C1] unwind_next_frame+0xac/0x2550 [ 992.786965][ C1] ? unwind_next_frame+0x8f/0x2550 [ 992.792081][ C1] ? do_file_open+0x23e/0x4a0 [ 992.796762][ C1] ? unwind_next_frame+0x8f/0x2550 [ 992.801887][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 992.808252][ C1] arch_stack_walk+0x11b/0x150 [ 992.813023][ C1] ? do_sys_openat2+0x115/0x200 [ 992.817875][ C1] stack_trace_save+0xa9/0x100 [ 992.822644][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 992.828040][ C1] ? stack_trace_save+0xa9/0x100 [ 992.832995][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 992.838384][ C1] kasan_save_track+0x3e/0x80 [ 992.843056][ C1] ? kasan_save_track+0x3e/0x80 [ 992.847910][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 992.852671][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 992.857699][ C1] ? tomoyo_encode+0x2ad/0x570 [ 992.862534][ C1] ? tomoyo_realpath_from_path+0x5fa/0x640 [ 992.868348][ C1] ? tomoyo_check_open_permission+0x229/0x470 [ 992.874584][ C1] ? security_file_open+0xa9/0x240 [ 992.879794][ C1] ? do_dentry_open+0x4a0/0x1380 [ 992.884736][ C1] ? vfs_open+0x3b/0x340 [ 992.888984][ C1] ? path_openat+0x1443/0x1d60 [ 992.893760][ C1] ? do_file_open+0x23e/0x4a0 [ 992.898447][ C1] ? do_sys_openat2+0x115/0x200 [ 992.903326][ C1] __kasan_kmalloc+0x93/0xb0 [ 992.907924][ C1] __kmalloc_noprof+0x36b/0x720 [ 992.912799][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 992.917823][ C1] ? tomoyo_encode+0x2ad/0x570 [ 992.922584][ C1] ? tomoyo_encode+0x2ad/0x570 [ 992.927344][ C1] tomoyo_encode+0x2ad/0x570 [ 992.931944][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 992.937605][ C1] tomoyo_check_open_permission+0x229/0x470 [ 992.943497][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 992.949564][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 992.955981][ C1] ? __asan_memset+0x22/0x50 [ 992.960590][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 992.965820][ C1] ? tomoyo_file_open+0x163/0x220 [ 992.970914][ C1] security_file_open+0xa9/0x240 [ 992.975876][ C1] do_dentry_open+0x4a0/0x1380 [ 992.980649][ C1] vfs_open+0x3b/0x340 [ 992.984714][ C1] ? path_openat+0x1428/0x1d60 [ 992.989506][ C1] path_openat+0x1443/0x1d60 [ 992.994115][ C1] do_file_open+0x23e/0x4a0 [ 992.998617][ C1] ? __pfx_do_file_open+0x10/0x10 [ 993.003654][ C1] ? _raw_spin_unlock+0x28/0x50 [ 993.008545][ C1] ? alloc_fd+0x651/0x6c0 [ 993.012877][ C1] do_sys_openat2+0x115/0x200 [ 993.017546][ C1] ? net_tx_action+0x5bb/0xc30 [ 993.022314][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 993.027519][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 993.032281][ C1] ? handle_softirqs+0x720/0x860 [ 993.037213][ C1] __x64_sys_openat+0x138/0x170 [ 993.042068][ C1] do_syscall_64+0x166/0x520 [ 993.046698][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.052763][ C1] ? clear_bhb_loop+0x70/0xc0 [ 993.057430][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.063311][ C1] RIP: 0033:0x7f872fb9e159 [ 993.067747][ C1] RSP: 002b:00007f872dd93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 993.076164][ C1] RAX: ffffffffffffffda RBX: 00007f872fe26360 RCX: 00007f872fb9e159 [ 993.084128][ C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 993.092104][ C1] RBP: 00007f872fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 993.100064][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.108025][ C1] R13: 00007f872fe263f8 R14: 00007f872fe26360 R15: 00007ffc55f94818 [ 993.116008][ C1] [ 993.119069][ C1] rcu: rcu_preempt kthread starved for 1748 jiffies! g167377 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 993.130101][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 993.140077][ C1] rcu: RCU grace-period kthread stack dump: [ 993.145970][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 993.159496][ C1] Call Trace: [ 993.162791][ C1] [ 993.165742][ C1] __schedule+0x17db/0x58f0 [ 993.170280][ C1] ? __lock_acquire+0x6df/0x2e50 [ 993.175248][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 993.180424][ C1] ? __pfx___schedule+0x10/0x10 [ 993.185300][ C1] ? lock_acquire+0x115/0x350 [ 993.190009][ C1] ? schedule+0x90/0x2b0 [ 993.194280][ C1] schedule+0x164/0x2b0 [ 993.198461][ C1] schedule_timeout+0x152/0x2c0 [ 993.203363][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 993.208770][ C1] ? __pfx_process_timeout+0x10/0x10 [ 993.214100][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 993.219958][ C1] ? prepare_to_swait_event+0x322/0x350 [ 993.225561][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 993.230451][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 993.236625][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 993.241922][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 993.247165][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 993.252993][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 993.257601][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 993.262816][ C1] ? __kthread_parkme+0x71/0x1f0 [ 993.267777][ C1] ? __kthread_parkme+0x199/0x1f0 [ 993.272841][ C1] kthread+0x38b/0x480 [ 993.276929][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 993.282147][ C1] ? __pfx_kthread+0x10/0x10 [ 993.286754][ C1] ret_from_fork+0x514/0xb70 [ 993.291366][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 993.296509][ C1] ? __switch_to+0xc89/0x1420 [ 993.301215][ C1] ? __pfx_kthread+0x10/0x10 [ 993.305839][ C1] ret_from_fork_asm+0x1a/0x30 [ 993.310652][ C1] [ 993.313697][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 993.320029][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 993.329003][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 993.339070][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 993.345514][ C1] Code: f7 e8 5d c5 bc f5 f7 c3 00 02 00 00 74 05 e8 50 02 e9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 de ad f5 65 48 8b 05 9c 71 ad 07 48 85 c0 74 18 5b 41 5e c3 [ 993.365149][ C1] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206 [ 993.371268][ C1] RAX: 0000000000000006 RBX: 0000000000000206 RCX: 8000000000000001 [ 993.379267][ C1] RDX: 0000000000000000 RSI: ffffffff8e4749e3 RDI: 0000000000000001 [ 993.387260][ C1] RBP: ffffc90000157e18 R08: ffffffff907a177f R09: 1ffffffff20f42ef [ 993.395251][ C1] R10: dffffc0000000000 R11: fffffbfff20f42f0 R12: 0000000000000002 [ 993.403249][ C1] R13: ffff88801e298000 R14: ffffffff9ad32080 R15: dffffc0000000000 [ 993.411236][ C1] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 993.420182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.426781][ C1] CR2: 00007f1a91800000 CR3: 000000007ef8c000 CR4: 00000000003526f0 [ 993.434786][ C1] Call Trace: [ 993.438087][ C1] [ 993.441046][ C1] nbcon_kthread_func+0x6c4/0x880 [ 993.446108][ C1] ? nbcon_kthread_func+0x163/0x880 [ 993.451342][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 993.456915][ C1] ? __kthread_parkme+0x71/0x1f0 [ 993.461883][ C1] ? __kthread_parkme+0x199/0x1f0 [ 993.466944][ C1] kthread+0x38b/0x480 [ 993.471032][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 993.476602][ C1] ? __pfx_kthread+0x10/0x10 [ 993.481216][ C1] ret_from_fork+0x514/0xb70 [ 993.485843][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 993.491001][ C1] ? __switch_to+0xc89/0x1420 [ 993.495725][ C1] ? __pfx_kthread+0x10/0x10 [ 993.500349][ C1] ret_from_fork_asm+0x1a/0x30 [ 993.505171][ C1]