last executing test programs: 3m18.897519431s ago: executing program 0 (id=7409): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) close(0x4) clock_gettime(0x0, &(0x7f0000003480)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/93, 0x5d}], 0x1, &(0x7f0000000140)=""/166, 0xa6}, 0x38c5}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/43, 0x2b}, {&(0x7f0000001f00)=""/49, 0x31}, {&(0x7f0000001f40)=""/234, 0xea}, {&(0x7f0000002040)=""/236, 0xec}, {&(0x7f0000002140)}], 0x9, &(0x7f0000002240)=""/87, 0x57}, 0x2}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/156, 0x9c}], 0x1, &(0x7f00000023c0)=""/4096, 0x1000}, 0x3}], 0x3, 0x10000, &(0x7f00000034c0)={r2, r3+10000000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) 3m18.783390015s ago: executing program 0 (id=7411): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x20000004}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x35, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040)=0xfffffb6c, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x111}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 3m18.005134423s ago: executing program 0 (id=7419): syz_emit_ethernet(0x83, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000610", 0x4d, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x8, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x78}]}], "983864eee1fe71e030673c5d9f"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}]]}}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000610", 0x4d, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x8, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x78}]}], "983864eee1fe71e030673c5d9f"}}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}]]}}}]}, 0x40}}, 0x0) (async) 3m17.313477114s ago: executing program 0 (id=7427): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0xfd}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x80000001}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x54}}, 0x0) 3m16.001515905s ago: executing program 0 (id=7434): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000040)={r3, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r7, @ANYRES16=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socket$inet6(0xa, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000040)={r3, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r7, @ANYRES16=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) (async) 3m15.69557832s ago: executing program 0 (id=7435): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 3m0.617620463s ago: executing program 32 (id=7435): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 1m28.768675979s ago: executing program 5 (id=8543): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x1, 0x80, 0x5, 0x8, 0xe, 0x26c}, {0x8, 0x4, 0x8, 0xb93, 0x2, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, '\x00', {0x3}, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r7) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x40008000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) write$bt_hci(r7, &(0x7f0000000640)=ANY=[], 0xc) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44040) recvmmsg(r3, &(0x7f0000004200)=[{{&(0x7f00000001c0)=@ax25={{0x3, @bcast}, [@null, @netrom, @netrom, @default, @null, @remote, @null, @null]}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/233, 0xe9}, {&(0x7f0000002b40)=""/144, 0x90}, {&(0x7f0000002c00)=""/72, 0x48}, {&(0x7f0000002c80)=""/17, 0x11}, {&(0x7f0000002cc0)=""/40, 0x28}], 0x6, &(0x7f0000002d80)=""/102, 0x66}, 0x4}, {{&(0x7f0000002e00)=@rc, 0x80, &(0x7f0000004180)=[{&(0x7f0000002e80)=""/11, 0xb}, {&(0x7f0000002ec0)=""/201, 0xc9}, {&(0x7f0000002fc0)=""/83, 0x53}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/236, 0xec}, {&(0x7f0000004140)=""/58, 0x3a}], 0x6}, 0x81}], 0x2, 0x2060, &(0x7f0000004280)={0x77359400}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250800000006001d0008000000050012000600000005002200000000000500220001000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x44) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) 1m28.428588085s ago: executing program 5 (id=8548): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x1a) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@li, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) getsockopt$sock_int(r3, 0x1, 0x2f, 0x0, &(0x7f0000000040)) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) (async) preadv(r0, &(0x7f0000002ec0)=[{&(0x7f0000000240)=""/114, 0x72}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/59, 0x3b}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000002e00)=""/148, 0x94}], 0x5, 0xc4, 0x161) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb4b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) (async) recvmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) 1m27.445123415s ago: executing program 5 (id=8557): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x8c4, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "59fcc376c4ec8109219918e0069365e2d7144a46ae83e2c57d4984f13c424ed7c80ad3c26ed9db6cf269ebb9c5c4cdd55684a4dbdbf93e7ef2"}, @ETHTOOL_A_BITSET_VALUE={0x869, 0x4, "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"}]}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x1}, 0x4010) recvmsg$kcm(r4, &(0x7f0000001700)={&(0x7f00000002c0)=@tipc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/64, 0x40}, {&(0x7f0000000400)=""/128, 0x80}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/84, 0x54}, {&(0x7f0000000540)=""/184, 0xb8}], 0x5, &(0x7f0000000700)=""/4096, 0x1000}, 0x80002020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m27.190609552s ago: executing program 5 (id=8561): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000700), 0x0, 0x40000, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82c", 0xffa0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080) 1m26.7417778s ago: executing program 5 (id=8567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8602, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@delqdisc={0x9c, 0x25, 0x800, 0x78bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0xfff3, 0x9}, {0x9, 0x10}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x4}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, 0x0, 0xfffffc60) r4 = socket(0x10, 0x3, 0x1) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r7, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m22.796431524s ago: executing program 5 (id=8585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES16=r0], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x12) sendmmsg$inet(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="d178", 0x2}], 0x1}}], 0x1, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x0, 0x40, 0x0, 0x0, 0x41000, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="740000001c00020026bd3000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="2000200a08000b00ffffff7f080004000200000034000e800500010002000000050001005e00000005000100ff000000050001000300000004000200050001007e000000040002000a000100051ad8988e8800000800040000000000"], 0x74}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) 1m13.490328468s ago: executing program 4 (id=8691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x101) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1m13.357792058s ago: executing program 1 (id=8693): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) socket$kcm(0xa, 0x3, 0x87) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x54241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket(0x15, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) socket(0x10, 0x800, 0x7) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x10}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) close(r5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0) 1m13.088738457s ago: executing program 1 (id=8695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg(r0, &(0x7f0000001040)={&(0x7f00000001c0)=@caif=@util, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000580)=""/194, 0xc2}], 0x4, &(0x7f0000000f40)=""/210, 0xd2}, 0x40) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f00000000c0)=0xb, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x207, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc02, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x3, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0xf6e, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x2, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x3900e871, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x8, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x50, 0x1, 0x7, 0x2, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0xa, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xf, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x20000002, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x4007f, 0x2da, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={r4, 0x0, 0x80, 0x0, 0x4, &(0x7f0000000100), 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r11) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r12, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000008c0)={'virt_wifi0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "a138fb1f9492db9fe417b3de0dc411f4be81e902cb8ad5ef160c3e91c8864bb7", "c74bc4ef2a0425cefce2c7579110656b869d50da807f8ce7eb61814a429da10f", "4143b5a7b3752f1fa33f9474bb9787fed87fd666facd431277f34724409c761c", "4ea34884b1e011143195b2d3bd9b36c6b9a1e472440ca265d7f6f1660c6dc12a", "a646ed89db088d4f147cea6360ac305aa1328e4ab21a28764b42e0c6e6e52867", "18f1342f43747e64fe9c3e69", 0x18, 0x3, 0x10000, 0xeef6105, 0xfffffff5}}) 1m13.088220838s ago: executing program 4 (id=8696): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r3}, &(0x7f0000000300)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r4 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89b0, &(0x7f0000000080)={'bridge0\x00', 0x2000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m12.905549463s ago: executing program 4 (id=8697): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1m12.421373024s ago: executing program 2 (id=8699): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 1m12.111581576s ago: executing program 3 (id=8700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@loopback, @multicast2}, 0x8) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x2, @mcast1, 0x7}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b60000001900000227bd7000fbdbdf1eb37f8b0015005f84000020025d331e9776466a565e11c800"/52], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1m12.077216635s ago: executing program 2 (id=8701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x5, 0x142, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r1 = socket(0x15, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 1m11.997785311s ago: executing program 3 (id=8702): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@dev, @in=@multicast2}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000940)=0xe8) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0xc7, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x948}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x8ce}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x61ef}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x8f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x80000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfffd}, {0x8, 0x15, 0xb}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa49}, {0x8, 0x15, 0x1fb3}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4044800}, 0x14) 1m11.987717936s ago: executing program 1 (id=8703): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x3ff, 0x4) write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000100000200000800040001000000", 0x24) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1m11.921744336s ago: executing program 4 (id=8704): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1406, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10040004}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) r5 = gettid() (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000001800)=0xe8) (async) r7 = getgid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001880)={0xffffffffffffffff}, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000018c0)=0x0) r11 = getuid() (async) r12 = getgid() (async) r13 = getpid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001900)=0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001940)={0x0, 0x0, 0x0}, &(0x7f0000001980)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000019c0)=0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001a00)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000001b00)=0xe8) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001b40)=0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0, 0x0}, &(0x7f0000001bc0)=0xc) (async) r20 = gettid() (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001c00)=0x0) (async) r22 = getgid() sendmsg$netlink(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)={0x13f0, 0x3b, 0x300, 0x70bd28, 0x25dfdbfc, "", [@nested={0x25a, 0xfb, 0x0, 0x1, [@generic="a2ea821893e0c2741b77726694361505869117c6a2547b07900bee1630365093731b1056388cfe85aae1d3cb2cf6b2129305278fdc23d9f0fd929b506f4cb4d60fd54c21eec0d7b8d587ade8ea8899711a9dbf5d947868615266a8dcd18978c5cf464b925b4119652263fa72d8041afb039e8efbabf432c8811ab376f635e795d103496105339972ff04fe", @generic="2d8f9411e8fa6b39a6b0256b31c7f70e18873b4d3e1ccd651f339c6c740c2281558411bc308f0a21a6db6307e711d6847aa895cf3b79b2609fd198f8fe8cf5524ccc568a2b78acfbbcdbebf2e098e780a7a114e402b5a11127b20d4d47bae37e7e957ee1d45169261a27ccb1ab8f97b23f940042ee5594b94ee549b43eeaf2dbc85b1c2dc51ea22e43e47bf300d589e7cb154e1a48bf36184badfd786fc2a743df4495ed36b605f900eb887ea88f0626e39cda6039792f2538a2ca8bce75b2fb390e98082798ae0b083d8719aed19cb08f234d16a9620d07f720e5e48fb15658d57212ee5211c190498ee23af8587af364c211db2e14d5063be8b336d5", @generic="10d6c78778ab05644989006090b5c8c69e25896c22ad852f30cf7cc7e9fe8ef190bddce4dca68a55bd4c6990fc8e51d452cb31a1f50cc46ed537fa7a0ff8d15c343f8a8c5b079fe1acce1edce295e902b36abf306b3453b3da425445d1844b1c7167f044beaa6e117d9b43b9b966b590690e0c9f17918f70fad2ce63d9782e1f54396dd88aefe37386f210a45778d3e7bb833e3b022ee86e9c5d032391fb2c833d61cf5e70de6509922a5ed9bd13772d5daf7caedd84a3dba1590366611782f7d28aa70cf1d8dbbc329e", @typed={0x4, 0x3f}]}, @generic="07b2b515b464dc4cb6890f882bd4fbc0e8a7ec488d22458a9dbf15f370b505244f2c05f8c8386b0a37aff6387a4f8645a045a120ac13a9666cdd1d1e11ae487b3d6138", @typed={0x8, 0x95, 0x0, 0x0, @uid=r3}, @generic="a100f6365652adf1062eb8f10642d3ee603b3954acd31c2f06931691487ba72ad76df96400ae860cc89263a4acb52e618b0f8e451a07b7c6dbe70b147acb3c2e22b3354c5edab675affca8c8ea09a8513c5083441eea0f314dca1fb4110d69b4af2aa54a8850e3bc797cd3255246d21412ef8dbb9f77a593a191f6c3dc9050ff46abbd036e0baff6f8c9c18cd3cc9561859129a17c52fa59a46b013f", @typed={0x8, 0x144, 0x0, 0x0, @uid=r4}, @typed={0x86, 0x146, 0x0, 0x0, @binary="36c4d84a849eab9e7218450c4b32c8e05801b29a307051c1c349c43940da543a28d3ac5772751ba538bf7fe52bcc8485ce6daad7bf1e0e7667c5d7fb145d79c94e563937c831329c19a8bd7cc8f72de03197d572a73cdeea8c280181d13e8fb88dbb7ff4c584c2540c63d2f7cd313c1bb49e55af079dc9e1c798849bb92221809091"}, @nested={0x100c, 0x147, 0x0, 0x1, [@generic="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", @typed={0x8, 0xdc, 0x0, 0x0, @str='%\x9f\xae\x00'}]}]}, 0x13f0}], 0x1, &(0x7f0000001c40)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r8, r0, r9, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xee00, r19}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}], 0x130, 0x40000}, 0x8000) pipe(&(0x7f0000001dc0)={0xffffffffffffffff}) sendmsg$IPSET_CMD_TYPE(r23, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x24, 0xd, 0x6, 0x300, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r24 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r23, 0x89f1, &(0x7f0000001f80)={'sit0\x00', &(0x7f0000001f40)={'tunl0\x00', r2, 0x8000, 0x80, 0x2, 0x7fffffff, {{0x7, 0x4, 0x3, 0x3, 0x1c, 0x65, 0x0, 0x3c, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x8, 0xde, 0x0, 0xe, [0x9]}]}}}}}) sendmsg$nl_route(r24, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)=@RTM_GETMDB={0x18, 0x56, 0x10, 0x70bd2d, 0x25dfdbfd, {0x7, r25}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x84}, 0x8011) setsockopt$MRT_DONE(r23, 0x0, 0xc9, 0x0, 0x0) 1m11.869743774s ago: executing program 3 (id=8705): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfd, 0xfd, 0x7, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x9}, @enum64={0xe, 0x5, 0x0, 0x13, 0x0, 0x8, [{0x3, 0x8, 0x664}, {0x3, 0x4, 0x5}, {0xb, 0x6, 0x2ad}, {0x5, 0x8, 0xef}, {0xd, 0xfffffff7, 0x10000}]}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x7, [{0x5, 0x0, 0x600000}, {0xd, 0x1, 0xb50}]}, @struct={0x8, 0x5, 0x0, 0x4, 0x0, 0xa, [{0xe, 0x4, 0x10}, {0x10, 0x1, 0x6}, {0x3, 0x3}, {0x8, 0x0, 0x400}, {0x4, 0x3, 0x6}]}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x5, 0x7}], 'e'}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0xa, 0x2124}]}]}, {0x0, [0x5f, 0x30, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000280)=""/203, 0x11f, 0xcb, 0x0, 0x7}, 0x28) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000003c0)={0xc1, 0x400, 0x1593, 0x2, 0xfff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 1m11.854364844s ago: executing program 2 (id=8706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x3c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1b, @private1, 0x638991b6}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000300)=0x10) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r3, 0x110, 0x7, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x268}, 0x1, 0x0, 0x0, 0x48000}, 0x810) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000000004000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf0dd467b592f868ee30ad5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e4fd8f36e15fdd97870f2bdf4000000000000b0c2940dd8e263aa743f0400000000000000b100400600e1ffff8816326d7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b1cbf698fce63a4fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ff6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33600000bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed3fb58c81b76100aeaa4619668a2c4ef4e159d4594396864965422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693cf61c2ae0a9c27bd1a6f1e72550fbb1f1543a9bcd48de44e837db44e2be1c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7105e2378d42eb22e035a88305f8342834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0600968fce3c425729a77e3d089356654680e715f4ce5c1a39e4a63d8a67d6dbe1d3c26affdb25cbe15923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be411b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a753bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967a60efb51c206ea0cbab9bef181cc917fca894189514e85d6e1d9249f8caa701b4357ae5b9117225d1f5ca89a4bb7d49086ea61948926db5132f2e29bf45a1429c19ba1adc457e2963d1474d85aeb3cca158e3fd4b7a05250ceafd44f46af924916ce9ce9a8881aad996ddaaf3fbd52e636367e9f90ab1c773fa96e538e7f87a21206a804524e1dc9fea9772b009bc49a8d787a90e78badf58e37b3cf6f64861d416e859994e4deca6f39551e73c7e332de66be92ecb94e63ecbc07f8f799536be0da90fa824b3f4965caa19b5556907746aec5db9fea5e5e69de3bd13a70c1374683a0e63ff6f6f51136d16e04bbd8ba0c96e0b562f5425614d80de6ba5e901587bb5c1f83382aab6efcccef90fdbebcc4ffed3af40365583fb800cf5ec6496a2a47f2217c7160f88b192ddec89558140447ec86726db3bfe9d22390085b1638f9ebf3219b426dcb69ff80f5b5be82803555c8421c17c9d39f9c1de9e8e7dedf826b00fd8860046e36f790e8e6796db3b778ff4f0fc2b79a5ca96ff3907452ed76bc5e63218ea96866ae2b265ab11206301bfb909a7fd77653c73b6d46a242864f839e5646cc5ada07fba0d9cf6f840179c34de5e9aa58d5b1ca5327dc945267524b8c363b7f847491b5939cf608927c797af1300"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071124700000000019500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) 1m11.790995091s ago: executing program 3 (id=8707): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) syz_emit_ethernet(0xc5, &(0x7f0000000180)={@random='lfXkZ1', @multicast, @void, {@llc={0x4, {@snap={0x0, 0xaa, "c0f1", "026a3f", 0x806, "06399a63690cd7b611ca8b3b8839cb70ae8247fa01cd755bec7abaa1b579895b9f0497ec1fcb1493b49070e9bad4b9465581b6e062ad7d158b72dc4d2d6c45335bf5c06ada317e84d50fdacc6cef031fc71941d1c4c20c71b80c110d261b94e69088fb03b11a116f14642bee454a47342094668e3a98cf4e52b1ae4e62f677af746ac31db6dbce9ae84e592a146bed325f781c5c9accaaac110c19c9f41a13e53f9af78e0fcc3900000000000000"}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8040) (async) setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) (async) syz_emit_ethernet(0xc5, &(0x7f0000000180)={@random='lfXkZ1', @multicast, @void, {@llc={0x4, {@snap={0x0, 0xaa, "c0f1", "026a3f", 0x806, "06399a63690cd7b611ca8b3b8839cb70ae8247fa01cd755bec7abaa1b579895b9f0497ec1fcb1493b49070e9bad4b9465581b6e062ad7d158b72dc4d2d6c45335bf5c06ada317e84d50fdacc6cef031fc71941d1c4c20c71b80c110d261b94e69088fb03b11a116f14642bee454a47342094668e3a98cf4e52b1ae4e62f677af746ac31db6dbce9ae84e592a146bed325f781c5c9accaaac110c19c9f41a13e53f9af78e0fcc3900000000000000"}}}}}, 0x0) (async) 1m11.741593178s ago: executing program 4 (id=8708): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="3ed55c5fe39eedaffc9f0757a4e6caff0f7bfaf900400700", 0x18) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x6}, {0x0, 0x1}}}, 0x24}}, 0x4000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r12) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r13, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r14], 0x2c}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x37, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) 1m11.65673339s ago: executing program 3 (id=8709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) 1m11.594553374s ago: executing program 3 (id=8710): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x40400b0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="7e2b220cb67326295a4b79bce2c3a0306e03fe4893e9e8683dc0edf43e16df97197bbfbc0536dedc5be229a1ecede3dac4c27d107f4cb684a428db9df178b8c4d583a2161e8df37bf6ba88708a46a911d6e8374cd5cb5cbfe66e23992118700fd451a4eccb191190fcb785c89c0400"/120, @ANYRES16=r1, @ANYBLOB="000426bd7000fddbdf2516000000100002800400040008000100008000000c0005800700010069620000500007800c000300ffffff7f000000000c000400090000000000000008000100000000800c000400ff010000000000000c00030081ffffffffffffff08000100060000000c00030001000000000000001400028008000100050000000800010003000000"], 0x94}, 0x1, 0x0, 0x0, 0x80040}, 0x418d6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10}}, 0xa4}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r5, 0x215eb000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket(0x14, 0x2, 0x4) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x30, 0x1, 0x7, 0x4ac90b4274c78c17, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x400461f5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000012000061b100000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r10, 0x0, &(0x7f0000001780)=""/4096}, 0x20) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[], 0x1000d) 1m11.465101397s ago: executing program 2 (id=8711): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="ff000000aaaaffffffffffff86dd697a262d00383a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x0) 1m11.308670871s ago: executing program 2 (id=8712): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000000000000100c"], 0x0, 0x56}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 1m11.306537151s ago: executing program 1 (id=8713): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x90) 1m11.203334246s ago: executing program 2 (id=8714): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x18, 0x5, 0x3, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f00000007c0)=0x200) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0xbf82) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r7 = socket(0x11, 0x3, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r8, &(0x7f0000000480)=[{{&(0x7f0000000800)={0x2, 0xee1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee979", 0x45}], 0x1}}], 0x2, 0x2404c044) syz_emit_ethernet(0x2e, 0x0, 0x0) writev(r8, &(0x7f0000001580)=[{&(0x7f0000000f80)="94ec", 0x2}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf05fdfd}}) accept$phonet_pipe(r7, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000002c0)=0x4) ioctl$XFS_IOC_GOINGDOWN(r6, 0x8004587d, &(0x7f00000000c0)=0x6) 1m11.041513546s ago: executing program 1 (id=8715): r0 = socket$inet6(0xa, 0xa, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r3}, &(0x7f0000000140)=0x20) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc01008c000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x100000000000001, 0x12) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x2b, 'hugetlb'}, {0x2d, 'hugetlb'}, {0x2d, 'devices'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'blkio'}, {0x2b, 'blkio'}]}, 0x36) 1m10.999298954s ago: executing program 4 (id=8716): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) 50.676913863s ago: executing program 33 (id=8585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES16=r0], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x12) sendmmsg$inet(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="d178", 0x2}], 0x1}}], 0x1, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x0, 0x40, 0x0, 0x0, 0x41000, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="740000001c00020026bd3000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="2000200a08000b00ffffff7f080004000200000034000e800500010002000000050001005e00000005000100ff000000050001000300000004000200050001007e000000040002000a000100051ad8988e8800000800040000000000"], 0x74}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) 0s ago: executing program 1 (id=8718): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000002080102000000000000000007000001050003002f000000060002400010000005000300110000000900010073797a31000000000900010073797a3100000000240004800800044000000000080008400000000b0800094000000004084000000000000000000300010000000600024000150000"], 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x44) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000104000800000c0005800500010000000000"], 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0xfffc, @any, 0x4, 0x1}, 0xe) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000280)=0x3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000001f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0x354}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="bfab0adca1ebe7a08a9dba94afde199b9d244b16be143373a3dc41d2a9d591", 0x1f, 0x40010, &(0x7f0000000200)={0x2, 0x7, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffaabd}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20004080) connect$vsock_stream(r1, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) pread64(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) kernel console output (not intermixed with test programs): : Failed to create a rescuer kthread for wq "bond0": -EINTR [ 775.314047][ T473] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7234'. [ 776.255438][ C1] net_ratelimit: 23469 callbacks suppressed [ 776.255471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.271430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.280637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.288849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.299045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.308248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.316476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.326586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.334805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.345051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.472930][ T492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7239'. [ 776.583077][ T494] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7239'. [ 780.599480][ T504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7242'. [ 780.890481][ T514] xt_TCPMSS: Only works on TCP SYN packets [ 780.913276][ T519] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7247'. [ 781.149055][ T518] syzkaller1: entered promiscuous mode [ 781.180914][ T518] syzkaller1: entered allmulticast mode [ 781.265685][ C1] net_ratelimit: 26907 callbacks suppressed [ 781.265717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.281701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.290023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.300405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.309880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.319346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.328765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.338292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.342064][ T518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7246'. [ 781.347708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.356171][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 781.410728][ T518] nbd: must specify at least one socket [ 781.616065][ T537] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7252'. [ 782.388990][ T558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7257'. [ 784.711608][ T563] netdevsim netdevsim2 €: renamed from netdevsim0 [ 785.016441][ T579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7264'. [ 785.173337][ T580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7263'. [ 785.476173][ T592] netlink: 'syz.2.7269': attribute type 1 has an invalid length. [ 786.187508][ T620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7278'. [ 786.239793][ T624] netlink: 'syz.1.7278': attribute type 1 has an invalid length. [ 786.275470][ C1] net_ratelimit: 28847 callbacks suppressed [ 786.275500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.291297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.299536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.309746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.317979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.328062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.336295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.346586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.355918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.365227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.441138][ T620] IPVS: Error connecting to the multicast addr [ 786.519607][ T625] syzkaller0: entered promiscuous mode [ 786.535031][ T625] syzkaller0: entered allmulticast mode [ 786.692764][ T637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7279'. [ 787.008735][ T625] bridge0: port 3(batadv0) entered blocking state [ 787.042755][ T625] bridge0: port 3(batadv0) entered disabled state [ 787.091779][ T625] batadv0: entered allmulticast mode [ 787.140907][ T625] batadv0: entered promiscuous mode [ 787.498999][T24242] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 787.508618][T24242] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 787.843305][ T660] xt_SECMARK: invalid mode: 9 [ 788.558849][ T698] xt_hashlimit: size too large, truncated to 1048576 [ 788.595257][ T688] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 788.653740][ T694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7298'. [ 788.975997][ T717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7305'. [ 789.088658][ T721] sctp: [Deprecated]: syz.0.7306 (pid 721) Use of int in maxseg socket option. [ 789.088658][ T721] Use struct sctp_assoc_value instead [ 789.440761][ T746] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 789.464378][ T746] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 789.492888][ T746] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 789.566750][ T752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7313'. [ 789.583657][ T753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7313'. [ 789.675813][ T752] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 789.681648][ T753] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 789.900461][ T768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7317'. [ 789.998855][ T768] 8021q: adding VLAN 0 to HW filter on device bond7 [ 790.023831][ T768] bond7 (unregistering): Released all slaves [ 790.789754][ T813] netlink: 'syz.2.7327': attribute type 8 has an invalid length. [ 790.821278][ T817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7328'. [ 790.859648][ T813] smc: net device team0 applied user defined pnetid SYZ2 [ 790.875841][ T820] pim6reg: left allmulticast mode [ 790.893405][ T813] smc: net device team0 erased user defined pnetid SYZ2 [ 790.928895][ T813] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 791.146905][ T831] netlink: 'syz.1.7332': attribute type 2 has an invalid length. [ 791.240922][ T838] mac80211_hwsim hwsim67 ÿ: renamed from wlan1 [ 791.304458][ T838] netlink: 'syz.3.7334': attribute type 1 has an invalid length. [ 791.368842][ T840] netlink: 'syz.4.7335': attribute type 1 has an invalid length. [ 791.378142][ T3377] net_ratelimit: 7251 callbacks suppressed [ 791.378158][ T3377] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.411348][ T840] netlink: 'syz.4.7335': attribute type 4 has an invalid length. [ 791.439354][ T840] netlink: 'syz.4.7335': attribute type 1 has an invalid length. [ 791.476332][ T840] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7335'. [ 791.601711][ T807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7325'. [ 791.676783][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.766428][T11876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.805876][ T7632] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 791.859338][ T864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7341'. [ 791.963770][ T868] netlink: 'syz.3.7342': attribute type 1 has an invalid length. [ 792.281787][ T875] syzkaller0: entered promiscuous mode [ 792.291215][ T880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7345'. [ 792.300495][ T875] syzkaller0: entered allmulticast mode [ 792.338927][T24242] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 792.577570][ T886] syzkaller0: entered promiscuous mode [ 792.605782][ T886] syzkaller0: entered allmulticast mode [ 792.673240][ T885] tipc: Enabled bearer , priority 0 [ 792.698553][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 792.740583][ T884] tipc: Resetting bearer [ 792.846967][ T884] tipc: Disabling bearer [ 792.901900][ T903] netlink: 'syz.4.7349': attribute type 1 has an invalid length. [ 792.959949][ T903] netlink: 'syz.4.7349': attribute type 1 has an invalid length. [ 792.969627][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 793.009447][ T903] netlink: 'syz.4.7349': attribute type 1 has an invalid length. [ 793.030813][ T903] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7349'. [ 793.059414][ T908] x_tables: duplicate underflow at hook 2 [ 793.059423][ T906] x_tables: duplicate underflow at hook 2 [ 793.104250][ T909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7351'. [ 793.127374][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 793.280499][ T930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7356'. [ 793.290227][T24242] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 793.408951][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 793.448524][ T939] netlink: 252 bytes leftover after parsing attributes in process `syz.4.7359'. [ 793.492998][ T939] netlink: 252 bytes leftover after parsing attributes in process `syz.4.7359'. [ 793.629024][ T951] bond5: (slave gre0): Device is not bonding slave [ 793.645928][ T951] bond5: option active_slave: invalid value (gre0) [ 793.665897][ T951] bond5 (unregistering): Released all slaves [ 793.987290][ T976] tipc: Enabled bearer , priority 0 [ 794.114695][ T975] tipc: Disabling bearer [ 794.288995][ T992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7366'. [ 794.304762][ T989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7368'. [ 794.345416][ T982] bond8: entered promiscuous mode [ 794.354329][ T992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7366'. [ 794.390060][ T982] 8021q: adding VLAN 0 to HW filter on device bond8 [ 794.454837][ T1000] bond8: (slave bridge3): making interface the new active one [ 794.479242][ T1000] bridge3: entered promiscuous mode [ 794.498541][ T1000] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 794.573699][ T181] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.587582][ T1008] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 794.669148][ T181] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.736755][ T3377] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.789299][ T3377] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.953323][ T1019] NCSI netlink: No device for ifindex 65584 [ 795.680165][ T1072] xt_hashlimit: size too large, truncated to 1048576 [ 795.952676][ T1084] bond6: Removing last ns target with arp_interval on [ 796.437543][T10936] net_ratelimit: 24 callbacks suppressed [ 796.437589][T10936] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.575778][T10936] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.587729][ T1131] validate_nla: 6 callbacks suppressed [ 796.587747][ T1131] netlink: 'syz.4.7407': attribute type 10 has an invalid length. [ 796.619706][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.635167][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.669322][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.688350][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.755781][T10936] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.891441][ T7632] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 796.902084][ T1147] __nla_validate_parse: 8 callbacks suppressed [ 796.902099][ T1147] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7410'. [ 796.948317][ T1147] netlink: 'syz.2.7410': attribute type 23 has an invalid length. [ 797.068590][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.336754][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.392310][ T1166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7417'. [ 797.508505][ T4945] block nbd6: Receive control failed (result -107) [ 797.682583][ T1160] syzkaller1: entered promiscuous mode [ 797.715734][ T1160] syzkaller1: entered allmulticast mode [ 797.716215][ T1180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7420'. [ 797.721497][ T1179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7420'. [ 797.737278][ T1179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7420'. [ 797.740805][ T7634] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.796281][ T1177] syzkaller1: entered promiscuous mode [ 797.802196][ T1177] syzkaller1: entered allmulticast mode [ 797.899229][ T7635] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 798.200397][T24242] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 798.376361][T24242] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 798.489015][ T1217] netlink: 'syz.2.7431': attribute type 12 has an invalid length. [ 798.509181][ T1217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7431'. [ 798.520161][ T1221] netlink: 'syz.4.7429': attribute type 13 has an invalid length. [ 799.461582][ T1217] netlink: 'syz.2.7431': attribute type 12 has an invalid length. [ 799.506509][ T1217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7431'. [ 799.765348][ T7634] netdevsim netdevsim2 €: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.795856][ T7634] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.817582][ T1232] netlink: 'syz.1.7433': attribute type 3 has an invalid length. [ 799.848063][ T7634] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.882110][ T7634] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.996535][ T1249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7437'. [ 800.131687][ T1259] netem: change failed [ 800.332933][ T1266] netlink: 'syz.2.7442': attribute type 3 has an invalid length. [ 800.355914][ T1266] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7442'. [ 800.451813][ T1269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7443'. [ 801.576344][ T7633] net_ratelimit: 8 callbacks suppressed [ 801.576364][ T7633] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 801.743538][ T1306] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 801.763092][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 801.895993][T10938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.045807][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.198175][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.345621][ T7633] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.363108][ T1339] __nla_validate_parse: 3 callbacks suppressed [ 802.363125][ T1339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7464'. [ 802.430824][ T1339] 8021q: adding VLAN 0 to HW filter on device bond7 [ 802.451419][ T1345] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7466'. [ 802.506121][ T7633] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.656225][ T7633] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.806733][T10938] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.935821][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.967804][ T1365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7471'. [ 802.979472][ T1370] netlink: 'syz.2.7473': attribute type 8 has an invalid length. [ 803.090323][ T1373] netlink: 'syz.2.7473': attribute type 8 has an invalid length. [ 803.294864][ T1379] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.304444][ T1379] team0: left allmulticast mode [ 803.309323][ T1379] team_slave_0: left allmulticast mode [ 803.314797][ T1379] team_slave_1: left allmulticast mode [ 803.325052][ T1379] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 803.326717][ T1384] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20001 [ 803.332179][ T1379] bridge3: left allmulticast mode [ 803.332370][ T1379] team0: left promiscuous mode [ 803.360440][ T1379] team_slave_0: left promiscuous mode [ 803.366034][ T1379] team_slave_1: left promiscuous mode [ 803.371599][ T1379] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 803.385687][ T1379] bridge3: left promiscuous mode [ 803.446948][ T1379] bridge0: port 3(team0) entered disabled state [ 803.471592][ T1379] team0: Cannot enslave team device to itself [ 804.759924][ T1425] syzkaller0: entered promiscuous mode [ 804.771674][ T1425] syzkaller0: entered allmulticast mode [ 804.991848][ T1454] xt_hl: Unknown Hop Limit match mode: 206 [ 806.797931][ T1461] netlink: 'syz.3.7495': attribute type 58 has an invalid length. [ 806.817757][ T1461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7495'. [ 807.814379][ T1460] net_ratelimit: 9 callbacks suppressed [ 807.814423][ T1460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 807.871266][ T7633] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.977878][T24242] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.106023][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.133782][ T1472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7500'. [ 808.222203][ T1481] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7501'. [ 808.300993][ T1484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7499'. [ 808.446565][T24242] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.561318][ T1500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7504'. [ 808.587784][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.718361][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.845504][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.882872][ T1519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7509'. [ 809.092908][ T1525] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7510'. [ 809.469253][ T1526] netlink: 'syz.1.7513': attribute type 4 has an invalid length. [ 809.492112][ T1526] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7513'. [ 809.586905][ T1538] syzkaller0: entered promiscuous mode [ 809.592550][ T1538] syzkaller0: entered allmulticast mode [ 809.613252][ T1526] .`: renamed from bond0 [ 809.635593][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 809.745809][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 809.885108][ T1561] netlink: 'syz.2.7520': attribute type 1 has an invalid length. [ 809.965552][ T1568] netlink: 'syz.4.7522': attribute type 11 has an invalid length. [ 810.186509][ T1586] netlink: 'syz.4.7523': attribute type 3 has an invalid length. [ 810.219315][ T1586] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7523'. [ 810.422355][ T1591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7526'. [ 810.597825][ T1596] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 810.737615][ T1598] netlink: 81 bytes leftover after parsing attributes in process `syz.3.7529'. [ 811.157368][ T4945] block nbd7: Receive control failed (result -32) [ 811.159004][ T50] block nbd8: Receive control failed (result -32) [ 811.437913][ T1633] netlink: 'syz.3.7539': attribute type 4 has an invalid length. [ 811.451548][ T1633] netlink: 'syz.3.7539': attribute type 4 has an invalid length. [ 811.509669][ T1636] netlink: 'syz.1.7540': attribute type 11 has an invalid length. [ 811.586152][ T1633] tipc: Resetting bearer [ 811.945021][ T1639] tipc: Invalid UDP bearer configuration [ 811.945072][ T1639] tipc: Enabling of bearer rejected, failed to enable media [ 811.983882][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.013702][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.053276][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.089546][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.149685][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.189939][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.233330][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.280838][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.695325][ T1660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.392404][T11876] IPVS: starting estimator thread 0... [ 813.516713][ T1694] IPVS: using max 40 ests per chain, 96000 per kthread [ 813.551605][ T1696] __nla_validate_parse: 9 callbacks suppressed [ 813.551621][ T1696] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7563'. [ 813.573523][ T1696] NCSI netlink: No device for ifindex 0 [ 814.152918][ T1714] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7572'. [ 814.192852][ T1714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.224290][ T1714] bond_slave_0: left allmulticast mode [ 814.252428][ T1714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.271216][ T1714] bond_slave_1: left allmulticast mode [ 814.291256][ T1714] bond0 (unregistering): Released all slaves [ 815.331049][ T4945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 815.343936][ T4945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 815.353513][ T4945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 815.361351][ T4945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 815.372679][ T4945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 815.451346][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 815.463936][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 815.477438][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 815.489995][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 815.497602][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 816.033679][ T1782] netlink: 'syz.1.7598': attribute type 1 has an invalid length. [ 816.115677][ T1791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7599'. [ 816.191701][ T1782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 816.208896][ T1789] sit2: entered promiscuous mode [ 816.214105][ T1789] sit2: entered allmulticast mode [ 816.264187][ T1793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7600'. [ 816.297605][ T1793] netlink: 'syz.2.7600': attribute type 22 has an invalid length. [ 816.321318][ T1793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7600'. [ 816.388583][ T1793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7600'. [ 816.414889][ T1793] netlink: 'syz.2.7600': attribute type 22 has an invalid length. [ 816.432874][ T1755] lo speed is unknown, defaulting to 1000 [ 816.438975][ T1793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7600'. [ 816.508774][ T1799] netlink: 'syz.1.7601': attribute type 1 has an invalid length. [ 816.674977][ T1803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7602'. [ 816.884061][ T1755] lo speed is unknown, defaulting to 1000 [ 816.893085][ T1755] vxcan1 speed is unknown, defaulting to 1000 [ 817.002166][ T1807] netlink: 'syz.3.7604': attribute type 21 has an invalid length. [ 817.034556][ T1807] IPv6: NLM_F_CREATE should be specified when creating new route [ 817.606528][ T50] Bluetooth: hci4: command tx timeout [ 817.652769][ T1835] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7609'. [ 818.448188][ T1755] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.473756][ T1755] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.530216][ T1755] bridge_slave_0: entered allmulticast mode [ 818.596199][ T1755] bridge_slave_0: entered promiscuous mode [ 818.643412][ T1755] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.654152][ T1867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7619'. [ 818.688848][ T1755] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.708776][ T1755] bridge_slave_1: entered allmulticast mode [ 818.720318][ T1872] netlink: 'syz.3.7621': attribute type 1 has an invalid length. [ 818.740850][ T1755] bridge_slave_1: entered promiscuous mode [ 818.938832][ T1872] bond5: entered promiscuous mode [ 818.950437][ T1872] 8021q: adding VLAN 0 to HW filter on device bond5 [ 819.041375][ T1755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.096345][ T1755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.200532][ T1872] bond5: (slave bridge5): making interface the new active one [ 819.214786][ T1872] bridge5: entered promiscuous mode [ 819.222143][ T1872] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 819.348824][ T1755] team0: Port device team_slave_0 added [ 819.429844][ T1755] team0: Port device team_slave_1 added [ 819.685097][ T1755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.685912][ T50] Bluetooth: hci4: command tx timeout [ 819.754001][ T1755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.804601][ T1755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.875673][ T1755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.882997][ T1755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.945504][ T1755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.084617][ T1755] hsr_slave_0: entered promiscuous mode [ 820.107560][ T1755] hsr_slave_1: entered promiscuous mode [ 820.131014][ T1755] debugfs: 'hsr0' already exists in 'hsr' [ 820.147327][ T1755] Cannot create hsr debugfs directory [ 820.239217][ T1924] netlink: 272 bytes leftover after parsing attributes in process `syz.1.7632'. [ 820.417034][ T1926] batadv_slave_0: Caught tx_queue_len zero misconfig [ 820.677569][ T1937] xt_HMARK: spi-set and port-set can't be combined [ 820.711792][ T1939] net_ratelimit: 16 callbacks suppressed [ 820.711821][ T1939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 821.442894][ T1755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 821.539169][ T1755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.557727][ T1755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 821.625344][ T1963] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 821.664684][ T1962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7643'. [ 821.723135][ T1755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 821.744407][ T1755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 821.774352][ T50] Bluetooth: hci4: command tx timeout [ 821.791244][ T1966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7643'. [ 821.791467][ T1755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 821.838483][ T1755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 821.855318][ T1755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.864095][ T1968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7643'. [ 822.086180][ T1755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.154581][ T1755] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.199493][T24242] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.206695][T24242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.243672][T24242] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.250843][T24242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.502439][ T1984] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7646'. [ 822.618814][ T1989] bond1: (slave lo): Releasing backup interface [ 822.633363][ T1989] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 822.660055][ T1989] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 822.709842][ T1989] team0: No ports can be present during mode change [ 822.759968][ T1989] vlan0: entered promiscuous mode [ 822.780557][ T1989] tipc: Enabled bearer , priority 0 [ 823.074122][ T2004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7652'. [ 823.109796][ T2004] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7652'. [ 823.124465][ T2006] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7650'. [ 823.168411][ T2009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7654'. [ 823.478065][ T2020] bond8: entered promiscuous mode [ 823.483355][ T2020] bond8: entered allmulticast mode [ 823.489673][ T2020] 8021q: adding VLAN 0 to HW filter on device bond8 [ 823.810877][ T2033] __nla_validate_parse: 1 callbacks suppressed [ 823.810910][ T2033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7660'. [ 823.816740][ T2035] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 823.827947][ T2033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7660'. [ 823.857013][ T4945] Bluetooth: hci4: command tx timeout [ 823.858956][ T2030] nbd9: detected capacity change from 0 to 127 [ 823.905814][T10071] tipc: Node number set to 50750905 [ 823.914675][ T2036] netlink: 'syz.3.7661': attribute type 1 has an invalid length. [ 823.964178][ T2036] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7661'. [ 824.050792][ T50] block nbd9: Receive control failed (result -104) [ 824.112292][ T2041] netlink: 'syz.2.7663': attribute type 1 has an invalid length. [ 824.232746][ T1755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.880437][ T2060] netlink: 'syz.2.7669': attribute type 2 has an invalid length. [ 825.241323][ T1755] veth0_vlan: entered promiscuous mode [ 825.322531][ T1755] veth1_vlan: entered promiscuous mode [ 825.491416][ T1755] veth0_macvtap: entered promiscuous mode [ 825.613148][ T1755] veth1_macvtap: entered promiscuous mode [ 825.736857][ T1755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.814087][ T1755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.915263][T10936] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.969131][T10936] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.093326][T10936] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.137862][ T2113] netlink: 'syz.4.7679': attribute type 8 has an invalid length. [ 826.153544][T10936] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.209854][ T2113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7679'. [ 826.725145][ T7633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.772177][ T7633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.855310][ T2140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7683'. [ 826.992269][ T7633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.011909][ T7633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.202133][ T2149] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7689'. [ 827.252044][ T2150] syzkaller0: entered promiscuous mode [ 827.259296][ T2150] syzkaller0: entered allmulticast mode [ 827.549577][ T2160] netlink: 408 bytes leftover after parsing attributes in process `syz.5.7692'. [ 827.554812][ T2159] netlink: 408 bytes leftover after parsing attributes in process `syz.5.7692'. [ 827.682109][ T2160] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 827.776422][ T2173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7694'. [ 828.531220][ T2200] netlink: 300 bytes leftover after parsing attributes in process `syz.1.7702'. [ 828.570707][ T2195] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 828.593939][ T2195] bond6 (unregistering): Released all slaves [ 828.892535][ T2217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7705'. [ 828.922355][ T2211] veth1_vlan: left promiscuous mode [ 828.972972][ T2211] veth0_vlan: left promiscuous mode [ 828.999139][ T2211] veth0_vlan: entered promiscuous mode [ 829.039782][ T2219] netlink: 'syz.1.7706': attribute type 5 has an invalid length. [ 829.041509][ T2211] veth1_vlan: entered promiscuous mode [ 829.128796][ T2211] veth1_macvtap: left promiscuous mode [ 829.152783][ T2211] veth0_macvtap: left promiscuous mode [ 829.163074][ T2211] veth0_macvtap: entered promiscuous mode [ 829.178341][ T2211] veth1_macvtap: entered promiscuous mode [ 829.204000][ T2211] 8021q: adding VLAN 0 to HW filter on device € [ 829.223828][ T2211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 829.242209][ T2211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 829.271606][ T2211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 829.291108][ T2211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 829.299757][ T2231] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 829.301231][ T2211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 829.319974][ T2211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 829.330726][ T2211] 8021q: adding VLAN 0 to HW filter on device bond4 [ 829.342941][ T2211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 829.372545][ T2211] 8021q: adding VLAN 0 to HW filter on device bond6 [ 829.382844][ T2211] 8021q: adding VLAN 0 to HW filter on device bond7 [ 829.394552][ T2211] 8021q: adding VLAN 0 to HW filter on device bond9 [ 829.511240][T10938] netdevsim netdevsim2 €: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.538237][T10938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.674417][T10938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.727816][ T2245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.756630][ T7633] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 829.765667][ T7633] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 829.793376][ T2245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.869305][T10042] IPVS: starting estimator thread 0... [ 829.889484][T10938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.923675][ T2255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7713'. [ 829.967436][ T2251] IPVS: using max 31 ests per chain, 74400 per kthread [ 829.980229][ T2255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7713'. [ 830.082782][ T2258] netlink: 'syz.3.7716': attribute type 7 has an invalid length. [ 830.082899][ T2260] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 830.229443][ T2264] netlink: 'syz.4.7717': attribute type 1 has an invalid length. [ 830.434013][ T2264] 8021q: adding VLAN 0 to HW filter on device bond9 [ 830.586918][ T2285] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7718'. [ 830.621916][ T2268] bond9: (slave gretap0): making interface the new active one [ 830.674507][ T2268] bond9: (slave gretap0): Enslaving as an active interface with an up link [ 830.801264][ T2275] : entered promiscuous mode [ 831.124761][ T7633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.134618][ T2300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.174669][ T7633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.467034][ T2315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7729'. [ 831.679479][ T2326] lo: entered promiscuous mode [ 831.688713][ T2326] tunl0: entered promiscuous mode [ 831.694217][ T2326] gre0: entered promiscuous mode [ 831.701868][ T2326] ip_vti0: entered promiscuous mode [ 832.041729][ T2335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7736'. [ 832.157336][ T2342] gtp0: entered allmulticast mode [ 832.192228][ T2342] team0: Device gtp0 is of different type [ 833.177920][ T2391] openvswitch: netlink: IP tunnel TTL not specified. [ 833.209542][ T2393] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7755'. [ 833.270930][ T2393] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7755'. [ 833.544061][ T2415] rdma_rxe: rxe_newlink: failed to add lo [ 833.886758][ T2430] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7762'. [ 833.968539][ T2442] siw: device registration error -23 [ 834.067357][ T2442] »»»»»»: renamed from lo (while UP) [ 834.068240][ T2447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 834.510613][ T2467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7770'. [ 834.539301][ T2467] netlink: 'syz.3.7770': attribute type 1 has an invalid length. [ 834.548574][ T2467] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7770'. [ 834.558433][ T2467] NCSI netlink: No device for ifindex 0 [ 834.810220][ T2475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7772'. [ 834.851408][ T2475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7772'. [ 834.876913][ T2475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7772'. [ 834.891427][ T2475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7772'. [ 834.923685][ T2477] syzkaller0: entered promiscuous mode [ 834.939298][ T2477] syzkaller0: entered allmulticast mode [ 835.216026][ T2499] netlink: 'syz.4.7780': attribute type 25 has an invalid length. [ 835.245813][ T2499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7780'. [ 835.267208][ T2499] netlink: 'syz.4.7780': attribute type 25 has an invalid length. [ 835.309581][ T2499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7780'. [ 835.643848][ T2519] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7785'. [ 835.683064][ T2522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7787'. [ 835.684589][ T2519] netlink: 'syz.1.7785': attribute type 2 has an invalid length. [ 835.733520][ T2519] netlink: 'syz.1.7785': attribute type 2 has an invalid length. [ 835.832410][ T2532] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 836.213401][ T2563] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 836.383257][ T2570] netlink: 'syz.4.7800': attribute type 10 has an invalid length. [ 836.591741][ T2582] Only authenc() type AEADs are supported by ESSIV [ 836.653986][ T2575] 8021q: adding VLAN 0 to HW filter on device bond6 [ 836.744456][ T2569] 8021q: adding VLAN 0 to HW filter on device bond7 [ 836.753789][ T2569] bond6: (slave bond7): Enslaving as an active interface with an up link [ 836.772408][ T2572] xt_hashlimit: overflow, rate too high: 0 [ 836.796398][ T2583] bond6 (unregistering): (slave bond7): Releasing backup interface [ 836.832347][ T2583] bond6 (unregistering): Released all slaves [ 836.887529][ T2586] syzkaller0: entered promiscuous mode [ 836.897274][ T2586] syzkaller0: entered allmulticast mode [ 837.102380][ T2595] netlink: 'syz.4.7803': attribute type 2 has an invalid length. [ 837.505996][ T2615] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 837.553251][ T2615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 838.077251][ T2649] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 838.123301][ T2643] bond1 (unregistering): Released all slaves [ 838.677059][ T2679] macsec1: entered promiscuous mode [ 838.851058][ T2687] netlink: 'syz.2.7821': attribute type 10 has an invalid length. [ 838.902322][ T2692] netlink: 'syz.2.7821': attribute type 10 has an invalid length. [ 838.919706][ T2687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 838.983156][ T2687] team0: Port device netdevsim1 added [ 839.118142][ T2692] team0: Port device netdevsim1 removed [ 839.569421][ T2726] xt_hashlimit: size too large, truncated to 1048576 [ 839.587195][ T2724] xt_hashlimit: size too large, truncated to 1048576 [ 839.610263][ T2729] netlink: 'syz.3.7833': attribute type 1 has an invalid length. [ 840.114928][ T2745] bond5: option fail_over_mac: invalid value (16) [ 840.124547][ T2745] bond5 (unregistering): Released all slaves [ 840.411857][ T2755] netem: change failed [ 840.434825][ T2756] netem: change failed [ 840.780774][ T2776] bridge6: entered promiscuous mode [ 840.785061][ T2780] __nla_validate_parse: 23 callbacks suppressed [ 840.785091][ T2780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7846'. [ 840.807284][ T2776] bridge6: entered allmulticast mode [ 841.102942][ T2798] netlink: 14544 bytes leftover after parsing attributes in process `syz.5.7852'. [ 841.198280][ T2800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7852'. [ 841.215127][ T2803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7851'. [ 841.233291][ T2800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7852'. [ 841.275349][ T2802] netlink: 'syz.4.7853': attribute type 1 has an invalid length. [ 841.507568][ T2802] 8021q: adding VLAN 0 to HW filter on device bond10 [ 841.576763][ T2814] bond10: (slave geneve3): making interface the new active one [ 841.587829][ T2814] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 841.691417][ T7635] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 841.755163][ T7635] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 841.790788][ T7634] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 841.848718][T10940] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 841.877411][ T2820] netlink: 'syz.3.7856': attribute type 1 has an invalid length. [ 842.019119][ T2820] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 842.192094][ T2839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7859'. [ 842.199397][ T2846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7860'. [ 842.331379][ T2849] netlink: 'syz.4.7861': attribute type 1 has an invalid length. [ 842.338578][ T2846] bridge0: port 3(batadv1) entered blocking state [ 842.356741][ T2846] bridge0: port 3(batadv1) entered disabled state [ 842.365935][ T2849] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7861'. [ 842.381951][ T2846] batadv1: entered allmulticast mode [ 842.405221][ T2846] batadv1: entered promiscuous mode [ 842.704956][ T2870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7863'. [ 842.817448][ T2877] tipc: Failed to remove unknown binding: 66,0,0/50750905:1874520143/1874520144 [ 842.837577][ T7634] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 842.848042][ T7634] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 842.866099][ T2877] tipc: Failed to remove unknown binding: 66,0,0/50750905:1874520143/1874520144 [ 842.879397][ T2880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7867'. [ 843.212554][ T2892] : entered promiscuous mode [ 843.219788][ T2892] : entered allmulticast mode [ 843.310647][ T2898] netlink: 'syz.5.7871': attribute type 2 has an invalid length. [ 843.434241][ T2902] netlink: 'syz.2.7872': attribute type 83 has an invalid length. [ 844.334429][ T2942] netlink: 'syz.2.7885': attribute type 3 has an invalid length. [ 844.452042][ T2947] syzkaller0: entered promiscuous mode [ 844.475247][ T2947] syzkaller0: entered allmulticast mode [ 844.500352][ T2957] netlink: 'syz.1.7887': attribute type 16 has an invalid length. [ 844.543667][ T2957] netlink: 'syz.1.7887': attribute type 16 has an invalid length. [ 844.555925][ T2956] syzkaller0: entered promiscuous mode [ 844.574975][ T2956] syzkaller0: entered allmulticast mode [ 844.882279][ T2967] openvswitch: netlink: Message has 8 unknown bytes. [ 844.897012][ T2967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.195171][ T2972] syzkaller0: entered promiscuous mode [ 845.252454][ T2972] syzkaller0: entered allmulticast mode [ 846.055986][ T3023] netlink: 'syz.2.7909': attribute type 1 has an invalid length. [ 846.137879][ T3023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.385972][ T3033] bridge0: port 3(veth1_to_bridge) entered blocking state [ 846.399905][ T3033] bridge0: port 3(veth1_to_bridge) entered disabled state [ 846.414771][ T3033] veth1_to_bridge: entered allmulticast mode [ 846.423741][ T3033] veth1_to_bridge: entered promiscuous mode [ 846.429923][ T3033] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 846.444910][ T3033] bridge0: port 3(veth1_to_bridge) entered blocking state [ 846.452178][ T3033] bridge0: port 3(veth1_to_bridge) entered listening state [ 846.728205][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 846.741475][ C0] bridge0: port 3(veth1_to_bridge) entered blocking state [ 847.094140][ T3064] netlink: 'syz.5.7921': attribute type 61 has an invalid length. [ 847.284286][ T3069] netlink: 'syz.4.7922': attribute type 1 has an invalid length. [ 847.360623][ T3071] netlink: 'syz.3.7917': attribute type 9 has an invalid length. [ 847.370936][ T3071] netlink: 'syz.3.7917': attribute type 6 has an invalid length. [ 847.520149][ T3074] __nla_validate_parse: 10 callbacks suppressed [ 847.520192][ T3074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7922'. [ 850.034372][ T3065] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 850.072312][ T3067] netem: unknown loss type 8 [ 850.079200][ T3067] netem: change failed [ 850.126580][ T3069] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 850.134511][ T3070] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 850.542713][ T3089] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 850.592664][ T3089] bond10: (slave lo): Enslaving as an active interface with an up link [ 850.603240][ T3089] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 850.657794][ T3097] netlink: 'syz.4.7927': attribute type 1 has an invalid length. [ 850.681290][ T3097] netlink: 'syz.4.7927': attribute type 2 has an invalid length. [ 851.500888][ T3130] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 851.535121][ T3130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7938'. [ 851.744925][ T3141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7944'. [ 851.888827][ T3148] netlink: 'syz.4.7946': attribute type 1 has an invalid length. [ 851.897681][ T3148] netlink: 'syz.4.7946': attribute type 2 has an invalid length. [ 851.900771][ T3149] openvswitch: netlink: IPv6 tunnel dst address is zero [ 851.906533][ T3148] netlink: 'syz.4.7946': attribute type 1 has an invalid length. [ 851.939658][ T3148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7946'. [ 851.985298][ T3146] netlink: 'syz.3.7945': attribute type 4 has an invalid length. [ 852.210108][ T3157] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 852.489487][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.647234][T11876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.690482][ T3178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7955'. [ 852.728809][ T3178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7955'. [ 853.105097][ T3193] netlink: 'syz.4.7958': attribute type 1 has an invalid length. [ 853.374728][ T3213] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7963'. [ 853.526042][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.640219][ T3228] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7966'. [ 853.756440][ T3235] IPv6: sit1: Disabled Multicast RS [ 853.764892][ T3235] sit1: entered allmulticast mode [ 854.061541][ T3247] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7972'. [ 854.079379][ T3247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7972'. [ 854.133586][ T3255] team0: Caught tx_queue_len zero misconfig [ 854.272064][ T3260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7977'. [ 854.312489][ T3260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7977'. [ 854.336363][ T3262] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7978'. [ 854.467269][ T3265] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7979'. [ 854.483197][ T3268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 854.490416][ T3268] IPv6: NLM_F_CREATE should be set when creating new route [ 854.572047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.585375][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.597601][ T25] block nbd9: Possible stuck request ffff888027270000: control (read@0,1024B). Runtime 30 seconds [ 854.609288][ T25] block nbd9: Possible stuck request ffff8880272701c0: control (read@1024,1024B). Runtime 30 seconds [ 854.625437][ T25] block nbd9: Possible stuck request ffff888027270380: control (read@2048,1024B). Runtime 30 seconds [ 854.636320][ T25] block nbd9: Possible stuck request ffff888027270540: control (read@3072,1024B). Runtime 30 seconds [ 855.209084][T11876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.469021][ T3314] pim6reg: entered allmulticast mode [ 855.607979][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.846613][T11876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.036034][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.074986][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.104201][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.116085][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.124508][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.133567][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.216872][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.266920][ T3349] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 856.551289][ T3365] netlink: 'syz.1.8006': attribute type 1 has an invalid length. [ 856.633590][ T3369] bond5: (slave bridge12): Enslaving as a backup interface with an up link [ 856.663344][ T3365] macvlan2: entered promiscuous mode [ 856.669100][ T3365] macvlan2: entered allmulticast mode [ 856.675896][ T3365] bond5: entered promiscuous mode [ 856.681397][ T3365] bridge12: entered promiscuous mode [ 856.688768][ T3365] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 856.700364][ T3365] bond5: left promiscuous mode [ 856.709385][ T3365] bridge12: left promiscuous mode [ 859.014192][ T3338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 860.492583][ T3421] net_ratelimit: 7 callbacks suppressed [ 860.492601][ T3421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 860.806058][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.099005][ T3428] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 861.141891][ T3428] netlink: 'syz.2.8023': attribute type 1 has an invalid length. [ 861.288015][T29485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.322899][ T3446] __nla_validate_parse: 6 callbacks suppressed [ 861.322930][ T3446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8027'. [ 861.332763][ T3428] bond11: entered promiscuous mode [ 861.356724][ T3428] 8021q: adding VLAN 0 to HW filter on device bond11 [ 861.485173][ T3436] bond11: (slave bridge5): making interface the new active one [ 861.498339][ T3436] bridge5: entered promiscuous mode [ 861.506771][ T3436] bridge5: left promiscuous mode [ 861.508114][ T3449] netlink: 'syz.4.8028': attribute type 1 has an invalid length. [ 861.521219][ T3449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8028'. [ 861.846480][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.893744][ T3457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8030'. [ 861.923721][ T3456] netlink: 'syz.2.8031': attribute type 1 has an invalid length. [ 861.969612][ T3456] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8031'. [ 862.011738][ T3458] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8031'. [ 862.129641][ T3456] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 862.138299][ T3456] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 862.147733][ T3467] syzkaller0: entered promiscuous mode [ 862.167446][ T3467] syzkaller0: entered allmulticast mode [ 862.169286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.193346][ T3470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8033'. [ 862.381142][ T3472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8036'. [ 862.732088][ T3482] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8039'. [ 862.757975][ T3484] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8041'. [ 862.892949][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.284954][ T3505] netlink: 'syz.1.8046': attribute type 3 has an invalid length. [ 863.314804][ T3505] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8046'. [ 863.682325][ T3530] SET target dimension over the limit! [ 863.712173][ T3531] SET target dimension over the limit! [ 863.927244][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.039107][ T3545] IPv6: NLM_F_REPLACE set, but no existing node found! [ 864.328188][T29485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.448512][ T3556] pim6reg: entered allmulticast mode [ 864.478971][ T3561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.488792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.894818][ T3576] netlink: 'syz.5.8069': attribute type 1 has an invalid length. [ 865.033129][ T3576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 865.178968][ T3577] bond2: (slave veth3): Enslaving as an active interface with a down link [ 865.274613][ T3595] x_tables: duplicate underflow at hook 2 [ 865.305803][ T3585] bond2: (slave veth5): Enslaving as an active interface with a down link [ 865.615346][ T3599] vcan1: entered promiscuous mode [ 865.643262][ T3599] vcan1: entered allmulticast mode [ 866.010303][T10046] net_ratelimit: 3 callbacks suppressed [ 866.010335][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.543567][ T3623] 8021q: adding VLAN 0 to HW filter on device bond7 [ 866.552256][ T3623] bond6: (slave bond7): Enslaving as an active interface with an up link [ 866.578136][ T3645] __nla_validate_parse: 8 callbacks suppressed [ 866.578151][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8086'. [ 867.046627][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.071582][ T3661] bond4: (slave »»»»»»): Releasing backup interface [ 867.089490][ T3661] bond4: (slave »»»»»»): last VLAN challenged slave left bond - VLAN blocking is removed [ 867.114489][ T3661] bridge_slave_0: left allmulticast mode [ 867.120576][ T3661] bridge_slave_0: left promiscuous mode [ 867.139074][ T3661] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.166681][ T3661] bridge_slave_1: left allmulticast mode [ 867.180211][ T3661] bridge_slave_1: left promiscuous mode [ 867.187330][ T3661] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.202340][ T3661] bond0: (slave bond_slave_0): Releasing backup interface [ 867.228266][ T3661] bond0: (slave bond_slave_1): Releasing backup interface [ 867.250893][ T3661] team0: Port device team_slave_0 removed [ 867.268831][ T3661] team0: Port device team_slave_1 removed [ 867.312696][ T3661] bond5: (slave veth5): Releasing active interface [ 867.334906][ T3661] bond9: (slave gretap0): Releasing active interface [ 867.352377][ T3661] bond10: (slave geneve3): Releasing active interface [ 867.379438][ T3667] ip6gre1: entered allmulticast mode [ 867.396725][ T3667] team0: Port device ip6gre1 added [ 867.425873][ T7634] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 867.454495][ T7634] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 867.484627][ T7634] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 867.506116][ T7634] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 867.862326][ T3681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8097'. [ 867.896404][ T3681] nbd: must specify at least one socket [ 867.911365][ T3681] nbd: couldn't find a device at index 2 [ 867.937555][ T3682] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20002 [ 868.011027][T10071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.087889][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.175879][ T3698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.185360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.199367][ T3700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8103'. [ 868.258694][ T3700] netlink: 'syz.3.8103': attribute type 4 has an invalid length. [ 868.401982][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.412734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.486030][T11876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.496357][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.580054][ T3710] sctp: [Deprecated]: syz.3.8107 (pid 3710) Use of int in max_burst socket option. [ 868.580054][ T3710] Use struct sctp_assoc_value instead [ 868.630005][ T3713] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8109'. [ 868.641639][ T3714] syz_tun: entered promiscuous mode [ 868.677726][ T3714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8108'. [ 868.920485][ T3727] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8113'. [ 869.223864][ T3737] netlink: 208 bytes leftover after parsing attributes in process `syz.5.8117'. [ 869.868257][ T181] tipc: Subscription rejected, illegal request [ 870.286559][ T3789] veth0_macvtap: Caught tx_queue_len zero misconfig [ 870.315833][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8132'. [ 870.331971][ T3789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8131'. [ 870.356819][ T3798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8135'. [ 870.444147][ T3798] vlan2: entered allmulticast mode [ 870.475872][ T3798] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 871.218911][T10042] net_ratelimit: 24 callbacks suppressed [ 871.218942][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.302201][ T3833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.323477][ T3833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.353772][ T3833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.406020][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.439013][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.470875][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.494095][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.508870][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.522433][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.531643][ T3833] netlink: 'syz.5.8144': attribute type 8 has an invalid length. [ 871.591469][ T3841] xt_hashlimit: overflow, rate too high: 0 [ 872.062346][ T3858] __nla_validate_parse: 8 callbacks suppressed [ 872.062364][ T3858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8152'. [ 872.144916][ T3861] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8153'. [ 872.354124][ T3858] macvtap1: entered promiscuous mode [ 872.365992][ T3858] vlan0: entered promiscuous mode [ 872.371984][ T3858] macvtap1: entered allmulticast mode [ 872.377421][ T3858] vlan0: entered allmulticast mode [ 872.382537][ T3858] veth0_vlan: entered allmulticast mode [ 872.420556][ T3864] geneve4: entered promiscuous mode [ 872.489903][ T3865] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 872.558966][ T7635] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 45981 - 0 [ 872.579294][ T7635] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 45981 - 0 [ 872.628038][ T7635] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 45981 - 0 [ 872.688350][ T7635] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 45981 - 0 [ 872.780306][ T3876] netlink: 'syz.2.8157': attribute type 1 has an invalid length. [ 872.820715][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8159'. [ 872.891279][ T3889] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8160'. [ 873.199914][ T3896] netlink: 'syz.4.8162': attribute type 1 has an invalid length. [ 873.381060][ T3903] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20001 [ 873.390304][ T3896] 8021q: adding VLAN 0 to HW filter on device bond11 [ 873.840446][ T3926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8171'. [ 873.878802][ T3930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8172'. [ 873.924411][ T3931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8173'. [ 874.063852][ T3937] bond8: entered allmulticast mode [ 874.591523][ T3945] veth3: entered allmulticast mode [ 875.145287][ T3967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8184'. [ 875.198564][ T3969] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8185'. [ 875.218025][ T3969] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8185'. [ 875.544315][ T3992] geneve2: entered promiscuous mode [ 875.678104][ T3997] netlink: 'syz.5.8190': attribute type 4 has an invalid length. [ 876.373725][ T4034] syzkaller0: entered promiscuous mode [ 876.383083][ T4034] syzkaller0: entered allmulticast mode [ 876.411413][T10046] net_ratelimit: 47 callbacks suppressed [ 876.411442][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.099896][ T4058] xt_hashlimit: size too large, truncated to 1048576 [ 877.152699][ T4064] netlink: 'syz.3.8211': attribute type 2 has an invalid length. [ 877.210026][ T7635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.249052][ T7635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.450416][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.608433][T29485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.627519][ T4081] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 877.670047][ T4085] __nla_validate_parse: 2 callbacks suppressed [ 877.670080][ T4085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8214'. [ 877.736398][ T4085] veth1_to_team: entered promiscuous mode [ 877.775933][ T4085] veth1_to_team: left promiscuous mode [ 877.869798][T29485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.934906][ T3958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 878.072121][ T4102] netlink: 'syz.2.8219': attribute type 1 has an invalid length. [ 878.226115][ T4102] bond12: entered promiscuous mode [ 878.248704][T11876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.280168][ T4102] 8021q: adding VLAN 0 to HW filter on device bond12 [ 878.487463][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.573618][ T4127] netlink: 'syz.2.8224': attribute type 28 has an invalid length. [ 878.596187][ T4127] netlink: 'syz.2.8224': attribute type 3 has an invalid length. [ 878.617299][ T4127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8224'. [ 878.760673][ T4138] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8228'. [ 878.809158][ T4138] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8228'. [ 878.848915][ T4138] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8228'. [ 878.873619][ T4138] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8228'. [ 878.888971][ T4138] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8228'. [ 878.898671][ T4138] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8228'. [ 878.908939][ T4138] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8228'. [ 878.919988][ T4152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8227'. [ 879.174702][ T4150] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 879.237408][ T4150] bond6 (unregistering): Released all slaves [ 879.527050][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.708503][ T4189] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 879.770509][ T7635] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.786709][ T7635] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.810229][ T7635] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.852360][ T7635] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.976469][ T4196] bond12 (unregistering): Released all slaves [ 880.304097][ T4212] xt_l2tp: v2 tid > 0xffff: 1114244 [ 880.622226][ T4220] veth11: entered allmulticast mode [ 880.799907][ T4237] xt_TCPMSS: Only works on TCP SYN packets [ 881.142915][ T4104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.218735][ T4255] pim6reg: entered allmulticast mode [ 881.525807][ C0] net_ratelimit: 4 callbacks suppressed [ 881.525825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.606940][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.637679][ T4266] netlink: 'syz.3.8262': attribute type 1 has an invalid length. [ 881.684101][ T4265] bond9: entered promiscuous mode [ 881.721109][ T4265] bond9: entered allmulticast mode [ 881.772785][ T4265] 8021q: adding VLAN 0 to HW filter on device bond9 [ 881.964279][ T4266] 8021q: adding VLAN 0 to HW filter on device bond6 [ 882.122286][ T4293] bond6: (slave geneve5): making interface the new active one [ 882.132033][ T4293] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 882.152705][ T7633] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 882.185268][ T4298] syzkaller0: entered promiscuous mode [ 882.191883][ T4298] syzkaller0: entered allmulticast mode [ 882.199500][ T7633] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 882.226447][ T7633] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 882.258399][ T7633] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 882.593786][ T4311] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 882.653904][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.739805][ T4314] ip6gre1: entered allmulticast mode [ 882.791603][ T4314] team0: Device ip6gre1 is of different type [ 882.951706][ T4331] __nla_validate_parse: 69 callbacks suppressed [ 882.951723][ T4331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8276'. [ 883.029407][ T4331] x_tables: duplicate underflow at hook 1 [ 883.536293][ T4356] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8281'. [ 883.686288][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.694885][T10071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.991709][ T4369] netlink: 'syz.3.8288': attribute type 1 has an invalid length. [ 884.131785][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8292'. [ 884.145703][ T4381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8292'. [ 884.152113][ T4369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8288'. [ 884.284917][ T4376] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 884.352294][ T4389] netlink: 'syz.2.8293': attribute type 8 has an invalid length. [ 884.378891][ T4389] sch_fq: defrate 0 ignored. [ 884.403208][ T4392] x_tables: unsorted entry at hook 2 [ 884.569366][ T4400] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8294'. [ 884.590490][ T4394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8294'. [ 884.604644][ T4393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 884.641942][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8296'. [ 884.652556][ T25] block nbd9: Possible stuck request ffff888027270000: control (read@0,1024B). Runtime 60 seconds [ 884.664686][ T25] block nbd9: Possible stuck request ffff8880272701c0: control (read@1024,1024B). Runtime 60 seconds [ 884.675562][ T25] block nbd9: Possible stuck request ffff888027270380: control (read@2048,1024B). Runtime 60 seconds [ 884.690279][ T25] block nbd9: Possible stuck request ffff888027270540: control (read@3072,1024B). Runtime 60 seconds [ 884.739749][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.919718][ T4421] macvtap0: entered allmulticast mode [ 884.926537][ T4421] veth0_macvtap: entered allmulticast mode [ 884.986877][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8300'. [ 885.150860][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8306'. [ 885.768020][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.150044][ T4470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.286751][ T4473] netlink: 'syz.3.8315': attribute type 83 has an invalid length. [ 886.566007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.728049][ T919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.806028][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.344255][ T4517] syzkaller0: entered promiscuous mode [ 887.367541][ T4517] syzkaller0: entered allmulticast mode [ 887.593338][ T4531] netlink: 'syz.5.8333': attribute type 1 has an invalid length. [ 887.648367][ T4531] 8021q: adding VLAN 0 to HW filter on device bond3 [ 887.728221][ T4531] bond3: (slave veth0_to_bond): making interface the new active one [ 887.742703][ T4531] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 887.800571][ T4531] netlink: 'syz.5.8333': attribute type 1 has an invalid length. [ 887.836294][ T4531] netlink: 'syz.5.8333': attribute type 2 has an invalid length. [ 887.846652][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.855218][T10071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.863913][ T919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.917076][ T4542] 8021q: VLANs not supported on ip6_vti0 [ 887.939625][ T4542] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 888.013711][ T4548] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 888.024331][ T4548] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 888.248371][ T4555] __nla_validate_parse: 6 callbacks suppressed [ 888.248389][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8342'. [ 888.291284][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8342'. [ 888.728629][ T4573] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8345'. [ 888.780376][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8345'. [ 888.794107][ T4574] netlink: 'syz.4.8346': attribute type 1 has an invalid length. [ 888.886630][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.020918][ T4587] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8350'. [ 889.050225][ T4574] bond12: entered promiscuous mode [ 889.076338][ T4574] 8021q: adding VLAN 0 to HW filter on device bond12 [ 889.105285][ T4581] 8021q: adding VLAN 0 to HW filter on device bond12 [ 889.112394][ T4581] bond12: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 889.161673][ T4581] bond12: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 889.199196][ T4581] bond12: (slave ip6gre2): making interface the new active one [ 889.211737][ T4581] ip6gre2: entered promiscuous mode [ 889.222630][ T4581] bond12: (slave ip6gre2): Enslaving as an active interface with an up link [ 889.312915][ T4587] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8350'. [ 889.341527][ T4602] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8355'. [ 889.365909][ T4602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8355'. [ 889.382101][ T4602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8355'. [ 889.926396][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.980425][ T4625] tipc: Started in network mode [ 890.028157][ T4625] tipc: Node identity 080211000001, cluster identity 4711 [ 890.070769][ T4625] tipc: Enabled bearer , priority 0 [ 890.087893][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.124562][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.153762][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.203624][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.242823][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.270735][ T4641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8366'. [ 890.282104][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.301311][ T4641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.313669][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.324389][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.351051][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.361400][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.373493][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.383365][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.391939][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.402876][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.411454][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.426997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.443462][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.456463][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.466178][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.474788][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.487089][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.488943][ T919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.495574][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.495890][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.496208][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.496584][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.626118][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.651205][ T4625] tipc: Enabling of bearer rejected, already enabled [ 890.702594][ T4652] veth1_to_bond: entered allmulticast mode [ 890.714311][ T4652] veth1_to_bond: left allmulticast mode [ 890.742734][ T4652] IPVS: set_ctl: invalid protocol: 25974 49.95.116.111:24418 [ 891.076997][T10071] tipc: Node number set to 134418688 [ 892.009945][T10042] net_ratelimit: 2 callbacks suppressed [ 892.009976][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.334278][ T4712] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 892.429252][ T7635] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 892.452301][ T4707] openvswitch: netlink: Unknown key attributes 2 [ 892.543050][ T4707] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 892.572935][ T919] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 892.708316][ T4722] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 892.718448][ T4728] xt_TCPMSS: Only works on TCP SYN packets [ 892.762974][ T4729] xt_hashlimit: size too large, truncated to 1048576 [ 892.782985][ T4724] xt_bpf: check failed: parse error [ 893.041240][ T4739] syzkaller0: entered promiscuous mode [ 893.050921][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.067245][ T4739] syzkaller0: entered allmulticast mode [ 893.676997][ T4773] netlink: 'syz.2.8408': attribute type 1 has an invalid length. [ 893.684764][ T4773] netlink: 'syz.2.8408': attribute type 1 has an invalid length. [ 893.697489][ T4773] __nla_validate_parse: 9 callbacks suppressed [ 893.697519][ T4773] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.8408'. [ 893.926306][ T919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.013367][ T4794] netlink: 'syz.4.8409': attribute type 8 has an invalid length. [ 894.059314][ T4794] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8409'. [ 894.086267][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.123315][ T4797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8413'. [ 894.247486][T10071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.307320][ T4810] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8412'. [ 895.129294][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.088059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.166558][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.663251][ T4774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 896.675306][ T4792] netlink: 'syz.5.8412': attribute type 1 has an invalid length. [ 896.695614][ T4792] netlink: 'syz.5.8412': attribute type 7 has an invalid length. [ 896.706817][ T4792] netlink: 'syz.5.8412': attribute type 8 has an invalid length. [ 896.715183][ T4792] netlink: 208 bytes leftover after parsing attributes in process `syz.5.8412'. [ 896.752123][ T4792] NCSI netlink: No device for ifindex 65584 [ 896.966121][T10071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.069108][ T4834] netlink: 'syz.5.8425': attribute type 32 has an invalid length. [ 897.099007][ T4832] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8424'. [ 897.206091][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.087822][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.250456][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.285149][ T4878] netlink: 83 bytes leftover after parsing attributes in process `syz.3.8439'. [ 898.459370][ T4892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8441'. [ 898.540407][ T4898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8443'. [ 898.728604][ T4911] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 899.009701][ T4922] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 899.286075][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.321622][ T4947] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8455'. [ 899.344487][ T4939] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 899.592577][ T4959] netlink: 620 bytes leftover after parsing attributes in process `syz.2.8460'. [ 899.975156][ T4980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8464'. [ 900.257788][ T5003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8467'. [ 900.327506][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.411469][ T5013] openvswitch: netlink: IP tunnel dst address not specified [ 900.803710][ T5027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8474'. [ 900.810955][ T5028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8473'. [ 900.823697][ T5030] netlink: 'syz.1.8475': attribute type 1 has an invalid length. [ 900.961852][ T5030] 8021q: adding VLAN 0 to HW filter on device bond10 [ 901.112431][ T5030] bond10: (slave geneve2): making interface the new active one [ 901.127752][T29485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.136193][ T5030] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 901.193843][ T7633] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.231129][ T5036] netlink: 'syz.3.8477': attribute type 2 has an invalid length. [ 901.362796][ T5040] syzkaller0: entered promiscuous mode [ 901.368869][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.380605][ T5040] syzkaller0: entered allmulticast mode [ 901.406338][T10938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.436727][T10938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.536160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.406871][T10046] net_ratelimit: 4 callbacks suppressed [ 902.406902][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.460413][ T5106] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 902.474480][ T5107] netlink: 'syz.3.8496': attribute type 1 has an invalid length. [ 902.521714][ T5106] bond1: (slave lo): Enslaving as an active interface with an up link [ 902.531161][ T5106] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 902.641831][ T5107] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8496'. [ 902.775126][ T5123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8500'. [ 903.230491][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8508'. [ 903.313943][ T5143] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8506'. [ 903.447903][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.846420][ T919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.107514][ T5177] IPVS: Unknown mcast interface: lo [ 904.165844][ T919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.486712][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.495307][ T919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.599646][ T5198] netlink: 'syz.5.8522': attribute type 11 has an invalid length. [ 904.642597][ T5198] netlink: 'syz.5.8522': attribute type 11 has an invalid length. [ 904.687465][ T5198] __nla_validate_parse: 4 callbacks suppressed [ 904.687480][ T5198] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8522'. [ 904.742675][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8525'. [ 904.753875][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8524'. [ 904.773810][ T5204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8524'. [ 904.860369][ T5211] bridge9: port 1(vlan3) entered blocking state [ 904.868278][ T5211] bridge9: port 1(vlan3) entered disabled state [ 904.875306][ T5211] vlan3: entered allmulticast mode [ 904.883329][ T5211] bridge9: entered allmulticast mode [ 904.898986][ T5211] vlan3: left allmulticast mode [ 904.904425][ T5211] bridge9: left allmulticast mode [ 904.948761][ T5213] IPVS: Error connecting to the multicast addr [ 905.088255][ T5227] netlink: 'syz.3.8529': attribute type 1 has an invalid length. [ 905.133408][ T5227] bond9: entered promiscuous mode [ 905.139015][ T5227] 8021q: adding VLAN 0 to HW filter on device bond9 [ 905.158064][ T5228] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 905.170478][ T5228] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 905.181295][ T5228] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 905.205965][ T5230] netlink: 'syz.5.8530': attribute type 1 has an invalid length. [ 905.258102][ T5230] bond5: entered promiscuous mode [ 905.263522][ T5230] 8021q: adding VLAN 0 to HW filter on device bond5 [ 905.278201][ T5226] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 905.291267][ T5226] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 905.302074][ T5226] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 905.390340][ T5233] xt_time: unknown flags 0xf4 [ 905.526215][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.633384][ T5209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 905.645952][ T5239] netlink: 'syz.5.8532': attribute type 1 has an invalid length. [ 905.679393][ T5239] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8532'. [ 905.696075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.836948][ T5248] FAULT_INJECTION: forcing a failure. [ 905.836948][ T5248] name failslab, interval 1, probability 0, space 0, times 0 [ 905.890308][ T5248] CPU: 0 UID: 0 PID: 5248 Comm: syz.2.8534 Not tainted syzkaller #0 PREEMPT(full) [ 905.890332][ T5248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 905.890342][ T5248] Call Trace: [ 905.890349][ T5248] [ 905.890357][ T5248] dump_stack_lvl+0xe8/0x150 [ 905.890385][ T5248] should_fail_ex+0x412/0x560 [ 905.890413][ T5248] should_failslab+0xa8/0x100 [ 905.890441][ T5248] __kmalloc_cache_noprof+0x88/0x660 [ 905.890464][ T5248] ? sctp_add_bind_addr+0x8c/0x370 [ 905.890602][ T5248] ? __pfx_sctp_get_port_local+0x10/0x10 [ 905.890624][ T5248] sctp_add_bind_addr+0x8c/0x370 [ 905.890644][ T5248] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 905.890666][ T5248] sctp_do_bind+0x5b2/0x9d0 [ 905.890696][ T5248] sctp_connect_new_asoc+0x270/0x6b0 [ 905.890717][ T5248] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 905.890742][ T5248] ? __local_bh_enable_ip+0xd0/0x130 [ 905.890760][ T5248] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 905.890782][ T5248] ? security_sctp_bind_connect+0x7e/0x2c0 [ 905.890871][ T5248] sctp_sendmsg+0x1576/0x2c50 [ 905.890908][ T5248] ? __pfx_sctp_sendmsg+0x10/0x10 [ 905.890929][ T5248] ? aa_sk_perm+0x6d5/0x900 [ 905.890948][ T5248] ? __might_fault+0xaf/0x130 [ 905.890975][ T5248] ? __pfx_aa_sk_perm+0x10/0x10 [ 905.890997][ T5248] ? sock_rps_record_flow+0x19/0x350 [ 905.891076][ T5248] ? __pfx_inet_sendmsg+0x10/0x10 [ 905.891093][ T5248] ? inet_sendmsg+0x2f4/0x370 [ 905.891109][ T5248] ? __pfx_inet_sendmsg+0x10/0x10 [ 905.891125][ T5248] __sys_sendto+0x5de/0x710 [ 905.891151][ T5248] ? __pfx___sys_sendto+0x10/0x10 [ 905.891167][ T5248] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 905.891258][ T5248] ? __fget_files+0x3a0/0x420 [ 905.891288][ T5248] ? ksys_write+0x242/0x270 [ 905.891313][ T5248] ? __pfx_ksys_write+0x10/0x10 [ 905.891339][ T5248] __x64_sys_sendto+0xde/0x100 [ 905.891359][ T5248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.891378][ T5248] do_syscall_64+0x15f/0xf80 [ 905.891398][ T5248] ? trace_irq_disable+0x3b/0x140 [ 905.891421][ T5248] ? clear_bhb_loop+0x40/0x90 [ 905.891441][ T5248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.891456][ T5248] RIP: 0033:0x7fbcd819ce59 [ 905.891473][ T5248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.891486][ T5248] RSP: 002b:00007fbcd9048028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 905.891504][ T5248] RAX: ffffffffffffffda RBX: 00007fbcd8415fa0 RCX: 00007fbcd819ce59 [ 905.891515][ T5248] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 905.891524][ T5248] RBP: 00007fbcd9048090 R08: 0000200000000100 R09: 000000000000001c [ 905.891534][ T5248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.891543][ T5248] R13: 00007fbcd8416038 R14: 00007fbcd8415fa0 R15: 00007fffeb0e5f28 [ 905.891573][ T5248] [ 906.006048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.150474][ T5134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 906.930893][ T5284] netlink: 'syz.4.8544': attribute type 1 has an invalid length. [ 906.950344][ T5284] nbd: error processing sock list [ 906.977338][ T5284] ip6tnl0: Caught tx_queue_len zero misconfig [ 906.995353][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8544'. [ 907.180747][ T5299] FAULT_INJECTION: forcing a failure. [ 907.180747][ T5299] name failslab, interval 1, probability 0, space 0, times 0 [ 907.218414][ T5299] CPU: 1 UID: 0 PID: 5299 Comm: syz.3.8546 Not tainted syzkaller #0 PREEMPT(full) [ 907.218434][ T5299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.218444][ T5299] Call Trace: [ 907.218450][ T5299] [ 907.218456][ T5299] dump_stack_lvl+0xe8/0x150 [ 907.218478][ T5299] should_fail_ex+0x412/0x560 [ 907.218500][ T5299] should_failslab+0xa8/0x100 [ 907.218521][ T5299] __kmalloc_cache_noprof+0x88/0x660 [ 907.218538][ T5299] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 907.218643][ T5299] ? sctp_association_new+0x89/0x25e0 [ 907.218686][ T5299] ? __asan_memcpy+0x40/0x70 [ 907.218704][ T5299] sctp_association_new+0x89/0x25e0 [ 907.218721][ T5299] ? sctp_do_bind+0x661/0x9d0 [ 907.218740][ T5299] ? __ipv6_addr_type+0x247/0x2f0 [ 907.218831][ T5299] sctp_connect_new_asoc+0x2e4/0x6b0 [ 907.218852][ T5299] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 907.218877][ T5299] ? __local_bh_enable_ip+0xd0/0x130 [ 907.218902][ T5299] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 907.218923][ T5299] ? security_sctp_bind_connect+0x7e/0x2c0 [ 907.218945][ T5299] sctp_sendmsg+0x1576/0x2c50 [ 907.218978][ T5299] ? __pfx_sctp_sendmsg+0x10/0x10 [ 907.218999][ T5299] ? aa_sk_perm+0x6d5/0x900 [ 907.219018][ T5299] ? __might_fault+0xaf/0x130 [ 907.219045][ T5299] ? __pfx_aa_sk_perm+0x10/0x10 [ 907.219067][ T5299] ? sock_rps_record_flow+0x19/0x350 [ 907.219083][ T5299] ? __pfx_inet_sendmsg+0x10/0x10 [ 907.219099][ T5299] ? inet_sendmsg+0x2f4/0x370 [ 907.219116][ T5299] ? __pfx_inet_sendmsg+0x10/0x10 [ 907.219133][ T5299] __sys_sendto+0x5de/0x710 [ 907.219157][ T5299] ? __pfx___sys_sendto+0x10/0x10 [ 907.219174][ T5299] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 907.219211][ T5299] ? __fget_files+0x3a0/0x420 [ 907.219241][ T5299] ? ksys_write+0x242/0x270 [ 907.219265][ T5299] ? __pfx_ksys_write+0x10/0x10 [ 907.219291][ T5299] __x64_sys_sendto+0xde/0x100 [ 907.219310][ T5299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.219328][ T5299] do_syscall_64+0x15f/0xf80 [ 907.219351][ T5299] ? clear_bhb_loop+0x40/0x90 [ 907.219372][ T5299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.219387][ T5299] RIP: 0033:0x7f0e0739ce59 [ 907.219403][ T5299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.219416][ T5299] RSP: 002b:00007f0e08231028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 907.219435][ T5299] RAX: ffffffffffffffda RBX: 00007f0e07615fa0 RCX: 00007f0e0739ce59 [ 907.219446][ T5299] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 907.219457][ T5299] RBP: 00007f0e08231090 R08: 0000200000000100 R09: 000000000000001c [ 907.219468][ T5299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.219478][ T5299] R13: 00007f0e07616038 R14: 00007f0e07615fa0 R15: 00007fff0eea5998 [ 907.219508][ T5299] [ 907.671771][T10046] net_ratelimit: 9 callbacks suppressed [ 907.671787][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.686080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.364322][ T5330] bond13 (unregistering): Released all slaves [ 908.468751][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.503071][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.539620][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.574774][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.592773][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.601475][ T5353] syzkaller0: entered promiscuous mode [ 908.631255][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.659340][ T5353] syzkaller0: entered allmulticast mode [ 908.660391][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8563'. [ 908.694314][ T5354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.734045][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.931877][ T5384] netlink: 'syz.1.8568': attribute type 13 has an invalid length. [ 908.972457][ T5384] tipc: Resetting bearer [ 909.004754][ T5385] nbd: must specify an index to disconnect [ 910.053823][ T5404] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 911.836398][ T4994] udevd[4994]: worker [1930] /devices/virtual/block/nbd9 is taking a long time [ 912.254187][ T5416] syzkaller1: entered promiscuous mode [ 912.259698][ T5416] syzkaller1: entered allmulticast mode [ 912.434734][ T5427] syzkaller1: left promiscuous mode [ 912.454076][ T5427] syzkaller1: left allmulticast mode [ 912.466059][ T5426] x_tables: unsorted underflow at hook 4 [ 912.630487][ T5444] netlink: 'syz.1.8584': attribute type 1 has an invalid length. [ 912.665148][ T5444] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 912.675432][ T5444] bond11: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 912.687270][ T5444] bond11: (slave vxcan5): making interface the new active one [ 912.695253][ T5444] bond11: (slave vxcan5): Enslaving as an active interface with an up link [ 912.712076][ T5444] netlink: 'syz.1.8584': attribute type 2 has an invalid length. [ 912.722596][ T5444] netlink: 'syz.1.8584': attribute type 2 has an invalid length. [ 912.922106][ T5456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8588'. [ 912.949772][ T5457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8588'. [ 912.959054][T10046] net_ratelimit: 4 callbacks suppressed [ 912.959067][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.031534][ T5459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8589'. [ 913.137215][ T5465] xt_limit: Overflow, try lower: 604147548/4200216962 [ 913.144960][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8592'. [ 913.320681][ T5474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8593'. [ 913.329766][ T5474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8593'. [ 913.330087][T10071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.366135][ T5480] IPv6: NLM_F_CREATE should be specified when creating new route [ 913.374474][ T5480] syzkaller1: entered promiscuous mode [ 913.394316][ T5480] syzkaller1: entered allmulticast mode [ 913.478476][ T5485] pim6reg1: entered promiscuous mode [ 913.483930][ T5485] pim6reg1: entered allmulticast mode [ 913.529085][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8596'. [ 913.544509][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8596'. [ 913.582686][ T5489] mac80211_hwsim hwsim62 syzkaller0: left promiscuous mode [ 913.589900][ T5489] mac80211_hwsim hwsim62 syzkaller0: left allmulticast mode [ 913.763734][ T5499] netlink: 'syz.4.8600': attribute type 10 has an invalid length. [ 913.785650][ T5498] netlink: 'syz.4.8600': attribute type 10 has an invalid length. [ 913.822604][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8601'. [ 913.914237][ T5501] bond13: entered promiscuous mode [ 913.919394][ T5501] bond13: entered allmulticast mode [ 913.944516][ T5509] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8604'. [ 914.000494][ T5505] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 914.059070][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.155167][T29485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.200276][ T5529] xt_hashlimit: size too large, truncated to 1048576 [ 914.203439][ T5528] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 914.525259][ T5543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.827335][ T25] block nbd9: Possible stuck request ffff888027270000: control (read@0,1024B). Runtime 90 seconds [ 914.861647][ T25] block nbd9: Possible stuck request ffff8880272701c0: control (read@1024,1024B). Runtime 90 seconds [ 914.872537][ T25] block nbd9: Possible stuck request ffff888027270380: control (read@2048,1024B). Runtime 90 seconds [ 914.883443][ T25] block nbd9: Possible stuck request ffff888027270540: control (read@3072,1024B). Runtime 90 seconds [ 914.919215][ T5563] h: entered promiscuous mode [ 915.033851][ T5575] tipc: Enabled bearer , priority 0 [ 915.044331][ T5576] tipc: Enabling of bearer rejected, already enabled [ 915.064091][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.113800][ T5575] syzkaller0: entered promiscuous mode [ 915.119273][ T5575] syzkaller0: entered allmulticast mode [ 915.125181][ T5575] tipc: Resetting bearer [ 915.132454][ T5574] tipc: Resetting bearer [ 915.612919][ T5589] netlink: 'syz.2.8624': attribute type 5 has an invalid length. [ 916.095303][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.414670][T10071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.135049][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.002166][ T5574] tipc: Disabling bearer [ 918.013564][ T5586] netlink: 'syz.2.8624': attribute type 1 has an invalid length. [ 918.033880][ T5588] __nla_validate_parse: 15 callbacks suppressed [ 918.033896][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8624'. [ 918.081800][ T5592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8628'. [ 918.204830][ T5598] syzkaller0: entered promiscuous mode [ 918.221117][ T5598] syzkaller0: entered allmulticast mode [ 918.231446][ T5598] TC_ACT_REPEAT abuse ? [ 918.243272][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.312847][ T5606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8634'. [ 918.455328][ T5619] netlink: 'syz.1.8637': attribute type 25 has an invalid length. [ 918.840940][ T5634] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8643'. [ 918.949995][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8646'. [ 919.338926][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.407727][ T5658] bridge0: port 3(veth1_to_bridge) entered blocking state [ 919.414957][ T5658] bridge0: port 3(veth1_to_bridge) entered disabled state [ 919.422269][ T5658] veth1_to_bridge: entered allmulticast mode [ 919.429257][ T5658] veth1_to_bridge: entered promiscuous mode [ 919.497460][T10071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.559578][ T5663] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8651'. [ 919.591106][ T5663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8651'. [ 919.708892][ T5675] Unsupported ieee802154 address type: 0 [ 919.716941][ T5677] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8655'. [ 919.757925][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8656'. [ 919.861427][ T5691] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8659'. [ 920.290021][ T5708] ip6tnl0: Caught tx_queue_len zero misconfig [ 920.432000][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.496303][ T5721] openvswitch: netlink: IP tunnel dst address not specified [ 920.637733][T10071] IPVS: starting estimator thread 0... [ 920.806345][ T5729] IPVS: using max 57 ests per chain, 136800 per kthread [ 921.176715][ T5746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.363933][ T5761] bridge0: port 4(syz_tun) entered blocking state [ 921.385579][ T5761] bridge0: port 4(syz_tun) entered disabled state [ 921.397809][ T5761] syz_tun: entered promiscuous mode [ 921.430824][ T5760] syzkaller1: entered promiscuous mode [ 921.446000][ T5760] syzkaller1: entered allmulticast mode [ 921.446661][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.559404][ T5768] netlink: 'syz.2.8681': attribute type 1 has an invalid length. [ 922.339635][ T5797] xt_CT: No such helper "pptp" [ 922.451047][ T5810] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 922.486621][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.527201][ T5814] syzkaller0: entered promiscuous mode [ 922.532694][ T5814] syzkaller0: entered allmulticast mode [ 922.541855][ T5814] netlink: 'syz.1.8695': attribute type 15 has an invalid length. [ 923.023259][ T5820] netlink: 'syz.2.8698': attribute type 9 has an invalid length. [ 923.106574][ T5822] netlink: 'syz.2.8699': attribute type 1 has an invalid length. [ 923.417756][ T5822] bond16: entered promiscuous mode [ 923.423412][ T5822] 8021q: adding VLAN 0 to HW filter on device bond16 [ 923.457446][ T5828] netlink: 'syz.3.8700': attribute type 10 has an invalid length. [ 923.465784][ T5828] __nla_validate_parse: 8 callbacks suppressed [ 923.465798][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8700'. [ 923.527058][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8702'. [ 923.536032][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8702'. [ 923.545010][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8702'. [ 923.556249][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8702'. [ 923.565142][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8702'. [ 923.574173][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8702'. [ 923.603696][T10046] net_ratelimit: 1 callbacks suppressed [ 923.603710][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.642240][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8701'. [ 923.680147][ T5838] netlink: 'syz.1.8703': attribute type 16 has an invalid length. [ 923.709193][T10071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.743270][ T5838] netlink: 'syz.1.8703': attribute type 17 has an invalid length. [ 923.752151][ T5838] lo: left promiscuous mode [ 923.757841][ T5838] tunl0: left promiscuous mode [ 923.764918][ T5838] gre0: left promiscuous mode [ 923.788287][ T5838] ip_vti0: left promiscuous mode [ 923.823148][ T5852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8708'. [ 923.832113][ T5852] netlink: 'syz.4.8708': attribute type 7 has an invalid length. [ 923.839831][ T5852] netlink: 'syz.4.8708': attribute type 8 has an invalid length. [ 923.847543][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8708'. [ 923.872892][ T5838] bridge0: port 4(syz_tun) entered blocking state [ 923.879486][ T5838] bridge0: port 4(syz_tun) entered listening state [ 923.893557][ T5838] 8021q: adding VLAN 0 to HW filter on device .` [ 923.901313][ T5838] tipc: Resetting bearer [ 923.907220][ T5838] tipc: Resetting bearer [ 923.918914][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.022469][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.054800][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 924.065705][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 924.081169][ T5838] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 924.166294][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.173453][ T36] bridge0: port 1(bridge_slave_0) entered listening state [ 924.184278][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.191418][ T36] bridge0: port 2(bridge_slave_1) entered listening state [ 924.199488][ T36] bridge0: port 3(veth1_to_bridge) entered blocking state [ 924.206710][ T36] bridge0: port 3(veth1_to_bridge) entered listening state [ 924.253965][ T5865] gretap2: entered promiscuous mode [ 925.891689][ C0] bridge0: port 3(veth1_to_bridge) entered blocking state [ 927.724236][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.668896][T10046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.245970][ T919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.345980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.466069][T10041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.644173][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.864310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.422378][ C0] bridge0: port 4(syz_tun) entered learning state [ 954.438726][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 954.445924][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 970.584831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.697588][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.818072][T10042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.069147][ T421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.585741][ T421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.393456][ T421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.497488][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.504732][ C1] bridge0: topology change detected, propagating [ 984.511235][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.518420][ C1] bridge0: topology change detected, propagating [ 984.524828][ C0] bridge0: port 4(syz_tun) entered forwarding state [ 984.524861][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 984.531445][ C0] bridge0: topology change detected, propagating [ 984.545074][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.550375][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 984.562030][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 984.575106][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 984.587050][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.599151][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 984.600764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 984.602497][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 987.393315][ C0] net_ratelimit: 4102 callbacks suppressed [ 987.393335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 987.393354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 987.400696][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 987.411630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 987.424698][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 987.436637][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 987.448669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 987.459458][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 987.472417][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 987.484401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 992.397888][ C0] net_ratelimit: 7076 callbacks suppressed [ 992.397910][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 992.407366][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 992.417307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 992.429901][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 992.441164][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 992.451969][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 992.465051][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 992.477052][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 992.489008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 992.499911][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 997.410326][ C0] net_ratelimit: 7037 callbacks suppressed [ 997.410348][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 997.420817][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 997.429755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 997.442401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 997.453658][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 997.464447][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 997.477672][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 997.489405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 997.501450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 997.512205][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1002.419477][ C0] net_ratelimit: 7338 callbacks suppressed [ 1002.419498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1002.420249][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1002.426917][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1002.438775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1002.450839][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1002.461734][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1002.474676][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1002.486636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1002.498701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1002.509495][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1007.430117][ C0] net_ratelimit: 7127 callbacks suppressed [ 1007.430137][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1007.431274][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1007.437563][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1007.448431][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1007.461416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1007.473335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1007.485427][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1007.496285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1007.509445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1007.521174][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1012.437036][ C0] net_ratelimit: 7178 callbacks suppressed [ 1012.437057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1012.439209][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1012.444513][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1012.455442][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1012.468430][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1012.480401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1012.492310][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1012.503229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1012.516290][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1012.528081][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1017.448915][ C0] net_ratelimit: 7187 callbacks suppressed [ 1017.448937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1017.450751][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1017.456367][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1017.467200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1017.480186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1017.492076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1017.504112][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1017.514978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1017.527956][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1017.539909][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1022.459149][ C0] net_ratelimit: 7184 callbacks suppressed [ 1022.459169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1022.459667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1022.466589][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1022.478512][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1022.490493][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1022.501492][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1022.514338][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1022.526255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1022.538347][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1022.549190][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1027.471407][ C0] net_ratelimit: 7197 callbacks suppressed [ 1027.471427][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1027.471700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1027.478819][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1027.489670][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1027.503045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1027.514643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1027.526617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1027.537441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1027.550415][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1027.562309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1032.481691][ C0] net_ratelimit: 7189 callbacks suppressed [ 1032.481712][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1032.482625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1032.489107][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1032.500036][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1032.512966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1032.524957][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1032.537364][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1032.547812][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1032.560769][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1032.572739][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1033.095400][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1033.102373][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5872/1:b..l [ 1033.110854][ C0] rcu: (detected by 0, t=10506 jiffies, g=199461, q=1893 ncpus=2) [ 1033.118758][ C0] task:syz.2.8714 state:R running task stack:25464 pid:5872 tgid:5872 ppid:28181 task_flags:0x400040 flags:0x00080002 [ 1033.133305][ C0] Call Trace: [ 1033.136592][ C0] [ 1033.139535][ C0] __schedule+0x1821/0x5740 [ 1033.144064][ C0] ? irqentry_exit+0x218/0x760 [ 1033.148860][ C0] ? __pfx___schedule+0x10/0x10 [ 1033.153716][ C0] ? page_table_check_set+0x126/0x510 [ 1033.159104][ C0] ? page_table_check_set+0x4b3/0x510 [ 1033.164487][ C0] ? page_table_check_set+0x126/0x510 [ 1033.169872][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1033.175268][ C0] preempt_schedule_common+0x82/0xd0 [ 1033.180576][ C0] preempt_schedule_thunk+0x16/0x30 [ 1033.185798][ C0] _raw_spin_unlock+0x3f/0x50 [ 1033.190554][ C0] insert_page+0x2db/0x440 [ 1033.194981][ C0] ? __pfx_insert_page+0x10/0x10 [ 1033.199931][ C0] ? vmalloc_to_page+0x41c/0x6b0 [ 1033.204883][ C0] kcov_mmap+0xc9/0x140 [ 1033.209085][ C0] mmap_region+0x19a3/0x22a0 [ 1033.213709][ C0] ? __pfx_mmap_region+0x10/0x10 [ 1033.218661][ C0] ? __pfx_mmap_region+0x10/0x10 [ 1033.223711][ C0] ? cap_mmap_addr+0xaf/0x100 [ 1033.228476][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1033.233342][ C0] ? shmem_mapping+0xd/0x50 [ 1033.237871][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 1033.243343][ C0] do_mmap+0xc39/0x10c0 [ 1033.247518][ C0] ? __pfx_do_mmap+0x10/0x10 [ 1033.252117][ C0] ? down_write_killable+0x180/0x240 [ 1033.257410][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 1033.263045][ C0] ? apparmor_mmap_file+0x2da/0x3e0 [ 1033.268257][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 1033.272867][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1033.277989][ C0] ? __fget_files+0x2a/0x420 [ 1033.282593][ C0] ? __fget_files+0x3a0/0x420 [ 1033.287275][ C0] ? __fget_files+0x2a/0x420 [ 1033.291880][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 1033.296655][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.302728][ C0] do_syscall_64+0x15f/0xf80 [ 1033.307331][ C0] ? trace_irq_disable+0x3b/0x140 [ 1033.312367][ C0] ? clear_bhb_loop+0x40/0x90 [ 1033.317053][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.322955][ C0] RIP: 0033:0x7fbcd819cbc2 [ 1033.327375][ C0] RSP: 002b:00007fffeb0e5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1033.335791][ C0] RAX: ffffffffffffffda RBX: 00007fbcd5ff6000 RCX: 00007fbcd819cbc2 [ 1033.343763][ C0] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fbcd5ff6000 [ 1033.351741][ C0] RBP: 0000000000000011 R08: 00000000000000db R09: 0000000000000000 [ 1033.359724][ C0] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 1033.367696][ C0] R13: 0000000000000003 R14: 0000000000000000 R15: 00007fbcd8415fa0 [ 1033.375690][ C0] [ 1033.378717][ C0] rcu: rcu_preempt kthread starved for 606 jiffies! g199461 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1033.389822][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1033.399791][ C0] rcu: RCU grace-period kthread stack dump: [ 1033.405675][ C0] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1033.419174][ C0] Call Trace: [ 1033.422457][ C0] [ 1033.425395][ C0] __schedule+0x1821/0x5740 [ 1033.429915][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1033.434900][ C0] ? __pfx___schedule+0x10/0x10 [ 1033.439778][ C0] ? schedule+0x90/0x360 [ 1033.444046][ C0] schedule+0x164/0x360 [ 1033.448222][ C0] schedule_timeout+0x158/0x2c0 [ 1033.453086][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1033.458472][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1033.463781][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1033.469600][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1033.475166][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1033.480022][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1033.485232][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 1033.490007][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1033.496171][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1033.501466][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1033.506681][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1033.512501][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1033.517107][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1033.522310][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1033.528131][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1033.533078][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1033.538124][ C0] kthread+0x389/0x470 [ 1033.542202][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1033.547405][ C0] ? __pfx_kthread+0x10/0x10 [ 1033.552008][ C0] ret_from_fork+0x514/0xb70 [ 1033.556647][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1033.561762][ C0] ? __switch_to+0xc79/0x1410 [ 1033.566452][ C0] ? __pfx_kthread+0x10/0x10 [ 1033.571053][ C0] ret_from_fork_asm+0x1a/0x30 [ 1033.575844][ C0] [ 1033.578865][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1033.585198][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1033.590409][ C1] NMI backtrace for cpu 1 [ 1033.590424][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 1033.590441][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1033.590452][ C1] Workqueue: krds_cp_wq#24/6 rds_connect_worker [ 1033.590552][ C1] RIP: 0010:__lock_acquire+0x2cf/0x2cf0 [ 1033.590572][ C1] Code: 00 00 00 00 48 01 e8 89 f1 81 e1 ff 1f 00 00 ba 00 e0 ff ff 41 23 54 c7 20 09 ca 41 89 54 c7 20 4d 89 44 c7 08 4d 89 4c c7 10 <48> 8b 94 24 20 01 00 00 49 89 54 c7 18 65 8b 15 59 e6 97 11 31 f6 [ 1033.590586][ C1] RSP: 0018:ffffc90000a072e0 EFLAGS: 00000006 [ 1033.590604][ C1] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000d9f [ 1033.590614][ C1] RDX: 00000000000c6d9f RSI: 0000000000000d9f RDI: 0000000000000000 [ 1033.590624][ C1] RBP: 0000000000000007 R08: ffffffff89b87354 R09: ffff8880340642c0 [ 1033.590635][ C1] R10: dffffc0000000000 R11: ffffffff89b872a0 R12: 0000000000000000 [ 1033.590646][ C1] R13: 0000000000000000 R14: ffff8880206c9ec0 R15: ffff8880206caa50 [ 1033.590657][ C1] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 1033.590669][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1033.590680][ C1] CR2: 00007f9be2fe8158 CR3: 0000000076aee000 CR4: 00000000003526f0 [ 1033.590694][ C1] Call Trace: [ 1033.590700][ C1] [ 1033.590711][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1033.590730][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1033.590748][ C1] ? advance_sched+0xb4/0xc20 [ 1033.590772][ C1] lock_acquire+0x106/0x350 [ 1033.590787][ C1] ? advance_sched+0xb4/0xc20 [ 1033.590810][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1033.590831][ C1] ? lock_acquire+0x106/0x350 [ 1033.590849][ C1] _raw_spin_lock+0x2e/0x40 [ 1033.590868][ C1] ? advance_sched+0xb4/0xc20 [ 1033.590889][ C1] advance_sched+0xb4/0xc20 [ 1033.590910][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1033.590934][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1033.590955][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1033.590978][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1033.590999][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 1033.591026][ C1] hrtimer_interrupt+0x44b/0x950 [ 1033.591057][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1033.591088][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1033.591110][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1033.591128][ C1] RIP: 0010:lock_is_held_type+0x106/0x150 [ 1033.591149][ C1] Code: 19 00 00 b8 ff ff ff ff 65 0f c1 05 74 ed 90 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 1033.591163][ C1] RSP: 0018:ffffc90000a07888 EFLAGS: 00000206 [ 1033.591175][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000080000101 [ 1033.591189][ C1] RDX: ffff8880206c9ec0 RSI: ffffffff8e21a4fb RDI: ffffffff8c28af60 [ 1033.591201][ C1] RBP: 00000000ffffffff R08: ffffc90000a07b40 R09: ffffc90000a07b50 [ 1033.591212][ C1] R10: ffffc90000a079a0 R11: fffff52000140f36 R12: 0000000000000246 [ 1033.591223][ C1] R13: ffff8880206c9ec0 R14: ffffffff8e95cda0 R15: 0000000000000003 [ 1033.591244][ C1] __find_rr_leaf+0x353/0x760 [ 1033.591311][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 1033.591334][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1033.591379][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1033.591397][ C1] fib6_table_lookup+0x3b4/0xa80 [ 1033.591425][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1033.591446][ C1] ip6_pol_route+0x228/0x13d0 [ 1033.591463][ C1] ? ip6_pol_route+0x160/0x13d0 [ 1033.591481][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 1033.591499][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1033.591571][ C1] ? net_generic+0x1e/0x240 [ 1033.591598][ C1] ? net_generic+0x1e/0x240 [ 1033.591617][ C1] ? net_generic+0x1e/0x240 [ 1033.591641][ C1] fib6_rule_lookup+0x556/0x730 [ 1033.591682][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1033.591700][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1033.591717][ C1] ? do_xdp_generic+0x168/0x12e0 [ 1033.591765][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1033.591808][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1033.591830][ C1] ? NF_HOOK+0x369/0x3f0 [ 1033.591853][ C1] ip6_route_input+0x730/0xad0 [ 1033.591874][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 1033.591896][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1033.591915][ C1] ? ip6_parse_tlv+0x18be/0x1f20 [ 1033.591958][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 1033.592026][ C1] ip6_rcv_finish+0x141/0x280 [ 1033.592049][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1033.592070][ C1] ip_sabotage_in+0x1e1/0x270 [ 1033.592091][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1033.592115][ C1] nf_hook_slow+0xc5/0x220 [ 1033.592181][ C1] NF_HOOK+0x21f/0x3c0 [ 1033.592203][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1033.592232][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1033.592253][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1033.592279][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1033.592302][ C1] ? netif_receive_skb+0x102/0xbf0 [ 1033.592344][ C1] netif_receive_skb+0x278/0xbf0 [ 1033.592359][ C1] ? NF_HOOK+0xfa/0x3a0 [ 1033.592370][ C1] ? lock_acquire+0x106/0x350 [ 1033.592387][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 1033.592404][ C1] ? br_netif_receive_skb+0x126/0x190 [ 1033.592419][ C1] NF_HOOK+0xa4/0x3a0 [ 1033.592432][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1033.592446][ C1] ? NF_HOOK+0xfa/0x3a0 [ 1033.592458][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1033.592472][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1033.592489][ C1] ? br_pass_frame_up+0x275/0x420 [ 1033.592512][ C1] br_handle_frame_finish+0x1541/0x1c80 [ 1033.592535][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1033.592556][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1033.592583][ C1] ? ip6t_do_table+0x153/0x1560 [ 1033.592647][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1033.592663][ C1] ? nf_hook_slow+0x176/0x220 [ 1033.592686][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1033.592709][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1033.592735][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1033.592758][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1033.592780][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1033.592853][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1033.592874][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 1033.592890][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1033.592917][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1033.592932][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1033.592947][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1033.592962][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1033.592977][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 1033.593002][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1033.593024][ C1] br_handle_frame+0x1277/0x1510 [ 1033.593051][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1033.593074][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1033.593101][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1033.593123][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 1033.593170][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1033.593189][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1033.593205][ C1] ? ip6_rcv_finish+0x265/0x280 [ 1033.593228][ C1] ? NF_HOOK+0x336/0x3c0 [ 1033.593253][ C1] ? process_backlog+0x3eb/0x1950 [ 1033.593273][ C1] ? process_backlog+0x3eb/0x1950 [ 1033.593290][ C1] ? process_backlog+0x3eb/0x1950 [ 1033.593308][ C1] ? process_backlog+0x3eb/0x1950 [ 1033.593324][ C1] process_backlog+0x76d/0x1950 [ 1033.593350][ C1] __napi_poll+0xae/0x340 [ 1033.593365][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1033.593383][ C1] net_rx_action+0x627/0xf70 [ 1033.593406][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1033.593430][ C1] ? sched_balance_domains+0x7ea/0x900 [ 1033.593457][ C1] handle_softirqs+0x22a/0x840 [ 1033.593473][ C1] ? do_softirq+0x76/0xd0 [ 1033.593489][ C1] ? __inet6_bind+0x399/0xf60 [ 1033.593504][ C1] do_softirq+0x76/0xd0 [ 1033.593518][ C1] [ 1033.593524][ C1] [ 1033.593529][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1033.593545][ C1] __inet6_bind+0x399/0xf60 [ 1033.593564][ C1] kernel_bind+0x13e/0x1c0 [ 1033.593605][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 1033.593633][ C1] ? rds_tcp_conn_path_connect+0x335/0x930 [ 1033.593678][ C1] rds_tcp_conn_path_connect+0x53e/0x930 [ 1033.593702][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1033.593720][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1033.593744][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1033.593761][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1033.593779][ C1] rds_connect_worker+0x1d8/0x290 [ 1033.593794][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1033.593810][ C1] process_scheduled_works+0xb5d/0x1860 [ 1033.593838][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1033.593856][ C1] ? assign_work+0x3d5/0x5e0 [ 1033.593872][ C1] worker_thread+0xa53/0xfc0 [ 1033.593899][ C1] kthread+0x389/0x470 [ 1033.593918][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1033.593933][ C1] ? __pfx_kthread+0x10/0x10 [ 1033.593953][ C1] ret_from_fork+0x514/0xb70 [ 1033.593970][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1033.593985][ C1] ? __switch_to+0xc79/0x1410 [ 1033.594007][ C1] ? __pfx_kthread+0x10/0x10 [ 1033.594027][ C1] ret_from_fork_asm+0x1a/0x30 [ 1033.594052][ C1] [ 1037.487918][ C1] net_ratelimit: 5890 callbacks suppressed [ 1037.487938][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1037.487983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1037.494241][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1037.507966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1037.519603][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1037.531795][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1037.542007][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1037.555706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0) [ 1037.566881][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1037.579590][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:4e:52:12:d5:ed, vlan:0)