last executing test programs: 3m27.320733956s ago: executing program 2 (id=10076): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000080)="5ef952ee05f6303df43c13758d84d7f131ab9d9cd289f68183be7ed59f96de78a403f2e4", 0x24}, {&(0x7f0000000100)="12c3cf13ad6b8016c24a6cd25a9dc1380007e55248fede93f861693a681abf69fd05925f5505ae7eca3efb930bff7ca56863d1773345c4cd536c805bec17494fa587285e532ba295d7507ab477179606b9b672f3e3fc046ec0bd5b26ea947d4a2a9ebbd398295fd107bb2eabc2e8b0926292468d1f1aab3ebfba32930cba7009ac2b2b3df7b2df0f642484140b030ceb11731152ce8dcdfad7fcb789a2b5ae8081b1bf16152920e74fab38d8c56a6416b810d3efcc1ca13ee5", 0xb9}, {&(0x7f0000000280)="5cdfca463865698b15c573a741f182a18ea4af09a6a58fcafa15cc22ad3d49aff1a6ea0a4733129d4acd4e13af0e0473e99c9fab193116602e8ecf1b410b69d3320175a99eb621cd3813ce1eb65f5471c30da1d6cea522e8be64307d510c28cf132507680fa0c9509c2f0d259f1b68f9c6c24c0f178acbf132fd70908bcc", 0x7e}, {&(0x7f0000000300)="21ac56112c775ddaa9f8cfe34b567dba4e0ecd8c9097e0fefb3a1e98e4c375bae35debca9dfc492c7655c779e337ef1f9f6c9c62dbc365b7c51f7d27228a8e46460f2c048132fd323e9dff2917677bef64458e5bd844917778c47f23bffb118a463096e1106f9f13a87593dddbd16942127d1ff4c567e368f02ed221bb3785aa7edc0f77d5f32b7c89f43693e70ae4cdf93c32cdc74a6c6e376023827bbd45529983d18cabb1609f4dfe07a9dc02ac871d5a008b4f93af05ae30f08ae3", 0xbd}], 0x4) sendmmsg(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)="1f", 0x1}], 0x1}}], 0x1, 0x4000045) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x40004) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006800), 0x0, 0x4048800) 3m26.49825762s ago: executing program 2 (id=10082): sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0100002e00010000000000fcdbdf250b"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="a0"], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="a0"], 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x8, 0xfffffffffffffd61, 0x6, 0xbb8, 0x1000, 0x6, 0x8, 0xc, 0x401, 0xffffffffffff3e82, 0xb0, 0x0, 0x100, 0xc4, 0x1]}, &(0x7f0000000100)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x8, 0xfffffffffffffd61, 0x6, 0xbb8, 0x1000, 0x6, 0x8, 0xc, 0x401, 0xffffffffffff3e82, 0xb0, 0x0, 0x100, 0xc4, 0x1]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x2}, 0x8) 3m25.98218253s ago: executing program 2 (id=10086): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r0, r0, &(0x7f00000000c0)=0x7, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f00000003c0)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100}}}}}}}}}, 0x4a) listen(0xffffffffffffffff, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0100001a000100feffffff00010000fc020000210000000000000000000001fc0100000d00000000000000000000014001071c4e2300050a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000e000000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c25080000000000050000000000000081000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000ff0000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00ffffffff00"/260], 0x14c}}, 0x844) getuid() (async) getuid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a3200000000050001"], 0x4c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x80002, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r10) (async) close(r10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) 3m24.968685581s ago: executing program 2 (id=10096): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140e, 0x529, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) recvmmsg(r5, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, 0x0, 0xc4fc9e906872338b, 0xfefffffd, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x7c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x4, 0x6, 0x6c, 0xc, 0x30, 0x16, 0x2, 0x9, 0x16]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x1, 0x6c, 0x16, 0xc, 0xc, 0x60, 0x2, 0x16, 0x4, 0x4, 0x9, 0x48, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x9b, 0x3ff, 0xe, 0xd8a3, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x5}, {0x3, 0xa}, {0x6, 0x5}, {0x0, 0x7}, {0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x2}, {0x4, 0x8}, {0x7}, {0x2}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x2, 0x5, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, r4, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4090) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020400030e000000000000000000000005000600000000000a00000000000000fc0100000000000000000000000000000000000000000000020001000000000000008b000000000005000700000000000a00000000000000fc0100000000000000000000000040000000000000000000"], 0x70}, 0x1, 0x7}, 0x0) 3m24.532516957s ago: executing program 2 (id=10099): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 3m23.81117748s ago: executing program 2 (id=10104): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 3m8.569788209s ago: executing program 32 (id=10104): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1m37.54836534s ago: executing program 5 (id=10660): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa29000008000300", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) (async) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x800001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x384e}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @remote}, 0x14) (async) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) (async) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000000c0)) (async) bind$phonet(r10, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r13, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r14, @ANYBLOB="040046000a0034000202020202020000080026006c09"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) accept4(r11, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x1418, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1m28.740353925s ago: executing program 5 (id=10676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d9c0435cb11ee4cd61b574812dfba07bf852bf15438a51fb6d5bb9b194a58efa6c080b5b9eb4daf66d82bac3f2990bc9b4caf7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m28.481178191s ago: executing program 0 (id=10677): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000180)=']#!*[%\x81(!\x00', 0x8300, &(0x7f0000000200)={@align=0xffffffffffffff80, {0x9, 0xd, 0xfffffff7, 0x1}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000019080)=@assoc_value={r3, 0x7f}, &(0x7f00000190c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={r3, 0x2, 0x4c, 0x1000, 0x100, 0x5}, &(0x7f0000000380)=0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2c000090}, 0x4000044) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e21, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}, 0x0) 1m28.403428773s ago: executing program 5 (id=10679): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@remote, @rand_addr, 0x0}, &(0x7f00000007c0)=0xc) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x3, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x20, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x1, 0x0, 0x5, 0x9, 0x100, 0x10}, @call={0x85, 0x0, 0x0, 0x98}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffff8}, @call={0x85, 0x0, 0x0, 0x43}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x511}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000600)='syzkaller\x00', 0x2c, 0xe8, &(0x7f0000000640)=""/232, 0x41000, 0x2c, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0x7, 0x2, 0xb62}, 0x10, r3, 0x0, 0x0, &(0x7f0000000880)=[r1, r1], 0x0, 0x10, 0xa4}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1m28.070965087s ago: executing program 5 (id=10684): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)=')\x00', 0x80040, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0x3]}, {0xffff, 0x0, 0x0, 0x7ff}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0xffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x4, 0x39d, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8, 0x1, 0x80, 0x5}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0xf, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff2e6, 0x0, 0x0, 0x0, 0x5d4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x2, 0x3, 0xb, 0x2, 0x4}, @exit, @generic={0xc, 0x7, 0x4, 0x2, 0x2}, @generic={0xe3, 0x6, 0x0, 0x3, 0x7bb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x28, r0, 0x8, &(0x7f00000006c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x2, &(0x7f0000000700)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x9a1f, 0x1, 0xd, 0x7}, {0x3, 0x5, 0x2, 0x2}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x896}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffef0}, @exit, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_val={0x18, 0x3, 0x2, 0x0, r0}, @alu={0x4, 0x1, 0x8, 0x4, 0x0, 0x6, 0x1}, @ldst={0x1, 0x2, 0x6, 0x2, 0x1, 0x80}, @jmp={0x5, 0x0, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0xfffffffffffffffc}, @ldst={0x1, 0x3, 0x2, 0x5, 0xa, 0x4, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xed, 0xc8, &(0x7f00000003c0)=""/200, 0x41000, 0x11, '\x00', r1, 0x19, r0, 0x8, &(0x7f0000000580)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x8, 0xa, 0x16f6}, 0x10, 0xa11b, r2, 0x2, &(0x7f0000000840)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000880)=[{0x4, 0x5, 0x4, 0x6}, {0x4, 0x1, 0xc, 0x6}], 0x10, 0xff}, 0x94) socket$key(0xf, 0x3, 0x2) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="285d53965e3a58356b61c686fb1d440d7dcd43d0b116e1978dcf", 0x1a, 0x1, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)=')\x00', 0x80040, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0x3]}, {0xffff, 0x0, 0x0, 0x7ff}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0xffffffff}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x4, 0x39d, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8, 0x1, 0x80, 0x5}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0xf, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff2e6, 0x0, 0x0, 0x0, 0x5d4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x2, 0x3, 0xb, 0x2, 0x4}, @exit, @generic={0xc, 0x7, 0x4, 0x2, 0x2}, @generic={0xe3, 0x6, 0x0, 0x3, 0x7bb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x28, r0, 0x8, &(0x7f00000006c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x2, &(0x7f0000000700)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000740)=[{0x9a1f, 0x1, 0xd, 0x7}, {0x3, 0x5, 0x2, 0x2}], 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x896}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffef0}, @exit, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_val={0x18, 0x3, 0x2, 0x0, r0}, @alu={0x4, 0x1, 0x8, 0x4, 0x0, 0x6, 0x1}, @ldst={0x1, 0x2, 0x6, 0x2, 0x1, 0x80}, @jmp={0x5, 0x0, 0x0, 0x7, 0x9, 0xfffffffffffffff4, 0xfffffffffffffffc}, @ldst={0x1, 0x3, 0x2, 0x5, 0xa, 0x4, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xed, 0xc8, &(0x7f00000003c0)=""/200, 0x41000, 0x11, '\x00', r1, 0x19, r0, 0x8, &(0x7f0000000580)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x8, 0xa, 0x16f6}, 0x10, 0xa11b, r2, 0x2, &(0x7f0000000840)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000880)=[{0x4, 0x5, 0x4, 0x6}, {0x4, 0x1, 0xc, 0x6}], 0x10, 0xff}, 0x94) (async) socket$key(0xf, 0x3, 0x2) (async) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="285d53965e3a58356b61c686fb1d440d7dcd43d0b116e1978dcf", 0x1a, 0x1, 0x0, 0x0) (async) 1m27.342882117s ago: executing program 5 (id=10686): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) mmap(&(0x7f00002d3000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x840) 1m27.240011873s ago: executing program 0 (id=10687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="d2e6725d5a"]) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x80, 0x101, 0xe, 0xc40, 0x3, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffbe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x6, 0x4, 0x9}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) 1m26.938979576s ago: executing program 3 (id=10691): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) 1m26.849022395s ago: executing program 0 (id=10692): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xd4, 0x0, 0x4) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/75, 0x100000, 0x800, 0x5, 0x3}, 0x20) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000001380)={0x1000, @broadcast}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x100, @empty}, {0x2, 0x4, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @empty}, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4}) 1m26.511174856s ago: executing program 4 (id=10694): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x23}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001900)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r0}) 1m26.398396862s ago: executing program 0 (id=10695): r0 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r0, 0x28, 0x3, 0xfffffffffffffffe, 0x41584fc00e997fc4) socketpair(0x3, 0x3, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000680)="297e3d87e055221ad95b1db518a81ee2750e66160353d035df615687a87b9b29e4b7092f21b49cd8b9cd162714804116bb", 0x31, 0x80001, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f0000001580)=""/4096, &(0x7f0000002580)=0x1000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x1bf1, 0x80000000, 0x1, 0x8, 0xae54, 0xd}, [@TCA_NETEM_CORR={0x10, 0x1, {0x3, 0xaa, 0x5}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8084) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x20, 0x20, 0x7, 0x7f, {{0xb, 0x4, 0x1, 0x3e, 0x2c, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@lsrr={0x83, 0x13, 0xe8, [@rand_addr=0x64010102, @empty, @local, @loopback]}, @noop, @end, @end]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)={0x19c, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "ab281b052a4e97d0aff71b6540f31e"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '({$^\\)W\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xb0({//)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'br\x02\x00\x00\x000\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4) r12 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003020000"], 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x89e2, &(0x7f0000000740)={r2}) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060086dd0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCETHTOOL(r12, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0xb, "f42a97b96d02674f51eae4"}}) 1m26.251915182s ago: executing program 3 (id=10697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000200)="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", 0x104, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@private=0xa010100, @multicast1, r3}, 0xc) (async) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@private=0xa010100, @multicast1, r3}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x0) listen(r1, 0xfff) (async) listen(r1, 0xfff) r5 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x55, 0x6}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r6, 0x1, 0x13, 0x0, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x15, 0x3240, 0x3a}, {@empty, 0x4e22, 0x4, 0x2b83, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 1m26.058502694s ago: executing program 1 (id=10698): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r2, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000140)=0xc) sendto$inet(r4, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) r5 = openat$cgroup_int(r3, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x2, 0x12) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m25.984250911s ago: executing program 4 (id=10699): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$kcm(0x10, 0x5, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) 1m25.723629774s ago: executing program 3 (id=10700): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x104}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x9) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000140)) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100), 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x20004184, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 1m25.695415121s ago: executing program 4 (id=10701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000080)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) r5 = accept4(r4, 0x0, 0x0, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x40010040, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x9ec6e000) 1m25.230980373s ago: executing program 1 (id=10702): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c00038018000340000000020c000a8008000002688d33f2"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x8) 1m25.180218826s ago: executing program 4 (id=10703): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000000)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x21, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) 1m25.179801556s ago: executing program 3 (id=10704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20004048) 1m25.179496825s ago: executing program 0 (id=10705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000a0601010000002020000000000000"], 0x1c}}, 0x0) 1m24.743931966s ago: executing program 4 (id=10706): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000009c0)) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newqdisc={0x324, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0xc3, 0x1, 0x0, 0x67bf, 0x7fff, 0x7}}, {0x12, 0x2, [0x0, 0x3, 0x4c, 0x7fff, 0x2, 0x0, 0x7]}}]}, @TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x2, 0x1ff, 0x0, 0x5, 0x18, 0xa}}, {0x18, 0x2, [0x7f, 0x8, 0xff, 0x5, 0x7, 0x49, 0x7f, 0x4, 0xba9, 0xff]}}, {{0x1c, 0x1, {0xa6, 0x7, 0x90, 0x10001, 0x0, 0x8, 0x1, 0x5}}, {0xe, 0x2, [0xcc, 0x8bf, 0xfd3, 0xc, 0x1ff]}}, {{0x1c, 0x1, {0x1, 0x8, 0xb, 0x434c, 0x2, 0x7fff, 0x5a0, 0x3}}, {0xa, 0x2, [0xad, 0x3, 0x8]}}, {{0x1c, 0x1, {0x7, 0x8, 0x2, 0x100, 0x2, 0xff, 0x5d, 0x5}}, {0xe, 0x2, [0xe, 0x9, 0x1, 0x4, 0x1]}}, {{0x1c, 0x1, {0x4, 0xe, 0xfffa, 0x4, 0x0, 0x2, 0x2, 0x4}}, {0xc, 0x2, [0x2, 0x1, 0x800, 0x1000]}}, {{0x1c, 0x1, {0x1, 0xfd, 0x400, 0x1, 0x0, 0x3d, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x0, 0xff72, 0xb52583e, 0x2, 0x4, 0x7, 0x2}}, {0x8, 0x2, [0x944, 0x5]}}, {{0x1c, 0x1, {0x29, 0x3, 0x8, 0x6, 0x0, 0x7ee7, 0x2, 0x6}}, {0x10, 0x2, [0x3ff, 0xffc8, 0x5, 0xfe, 0x0, 0x4f2]}}]}, @TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x0, 0x2, 0x8, 0x0, 0x6, 0x1000, 0x8}}, {0x14, 0x2, [0x7, 0x8, 0x5, 0x1, 0xd20d, 0x9d, 0xffff, 0x9]}}, {{0x1c, 0x1, {0x4, 0x4, 0x9, 0xfffffffd, 0x1, 0xfffffffb, 0xcf6, 0x3}}, {0xa, 0x2, [0x6, 0xbb7b, 0x1]}}, {{0x1c, 0x1, {0x3, 0x0, 0x1ff, 0x6, 0x1, 0x7fff, 0xe583, 0x8}}, {0x14, 0x2, [0x9, 0x5, 0x7, 0x1, 0x4, 0x3, 0xff, 0x6]}}, {{0x1c, 0x1, {0xfb, 0x9, 0x2, 0xd12, 0x1, 0xe2bf, 0xfb0, 0x5}}, {0xe, 0x2, [0x7, 0x800, 0x0, 0x3, 0xeb11]}}, {{0x1c, 0x1, {0x6, 0x8b, 0x95, 0x0, 0x1, 0x1, 0x1ff, 0x5}}, {0xe, 0x2, [0x7ff, 0x325, 0x7, 0x100, 0x3]}}, {{0x1c, 0x1, {0xe, 0x7, 0x80, 0x6, 0x1, 0x3, 0x7, 0x2}}, {0x8, 0x2, [0xe, 0x3]}}, {{0x1c, 0x1, {0x3, 0x41, 0x8, 0x7fff, 0x1, 0x10001, 0x8, 0x4}}, {0xc, 0x2, [0x5, 0x7f, 0xb, 0x7]}}, {{0x1c, 0x1, {0x80, 0x4, 0x8, 0x8, 0x1, 0x5, 0x1, 0x4}}, {0xc, 0x2, [0x8000, 0xfffe, 0x2, 0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5419}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x324}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) socket(0x400000000010, 0x3, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="ff7013f7ea79f96eacd59ca586ffffff7000", @ANYRES32=0x0, @ANYBLOB="050013000100000008000300", @ANYRES32=r9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24048881}, 0x80) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) (async) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r15, &(0x7f00000001c0)="2ae0e710", 0x4, 0x20009800, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) setsockopt$inet6_int(r15, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) (async, rerun: 32) recvmmsg(r15, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) (async, rerun: 32) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000a00be53687e8eb7dcb3b02e823dd899ee22edf7e808089b32b52aa1b95077145c4cf635ee13875cf513b5fd3a7e1e4bb4dc1a5b8a2fff2824a218b8edcf720ad8f586970ae7ac01bb8b7c21453715aed33ab8377261cd89a0eea6a4d0c362c433d88119073bc", @ANYRES16=r10, @ANYBLOB="000127bd7000fddbdf250200000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xa004}, 0x4000006) 1m24.639202111s ago: executing program 3 (id=10707): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x4ca31, 0xffffffffffffffff, 0x42910000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0xdb, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000100), &(0x7f00000001c0), 0xffffffffffffff5c, 0x3b, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r0, 0x4) 1m24.26389933s ago: executing program 4 (id=10708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'bridge_slave_1\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x24008004) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x6280, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000440)=ANY=[], 0x50) sendto$inet6(r5, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f00000001c0)={'security\x00', 0x0, [0x24, 0x3, 0x92, 0x3, 0x3ff]}, &(0x7f0000000240)=0x54) r8 = socket(0xa, 0x3, 0xc0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRESDEC=r6, @ANYRES16=r4], 0x64}, 0x1, 0x0, 0x0, 0x20040080}, 0x24004040) write(r8, 0x0, 0x0) connect$netlink(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x21, 0x0, 0x0) sendmmsg(r8, 0x0, 0x0, 0x20040020) 1m24.1225992s ago: executing program 1 (id=10709): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="827e39d71fd63ecdff3054f742cd4087c6d9d793dfd4", 0x16}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000240)="9b1d", 0x2, 0x3b00, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x800) write(r0, &(0x7f0000000140)="021e10c182ae764d04121003dadaf0edae7dd8d8cf093f9244be31e6c0036cb7ff8c314ae5925569721ace6233e51ca59624e03ce864cb11107cf2c6125aeadb9599a0f9ce01a5f187741260942b5b49d162c839e442ee06a7f36c583a1f5f05e7ba447acf71a31470787729f955882497f92e74964fcde9fc28ece28abc03d3a4cee3c32f3556dd752b2828ecac75a4689af44cef8b2d9fc503e5a2d2087a272ccd51fbceba2e90856dceb5e803f45ad8a5cee311d51c32a26a13ee0d08dadcdcf4abbafe56c8861929dd3bdb65c864b8e58dc6486327be906bfe5a8bb8480d319756e8a359dc23c532c8e0ce3ecabc091964bb98", 0xf5) 1m23.856202036s ago: executing program 5 (id=10710): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, {[], {{0x0, 0x8902, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1m23.775939554s ago: executing program 1 (id=10711): syz_emit_ethernet(0x2a, &(0x7f0000001400)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x76, 0x4f871e957a087a12}}}}}}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x76, 0x4f871e957a087a12}}}}}}}, 0x0) 1m23.769715093s ago: executing program 0 (id=10712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0x10, 0xffff}, {0xfff2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000000}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000140)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010027bd7000fcdbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="4000330030284000080211000000080211000000ffffffffffff400001803c00010001002d1a004017fe00000000000000080006001000000008000100000008080026006c09"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0xc, 0x5, "eed183d26b08ba3c6c34481250737219e2ba95dcc0060c24e1009382c1822bc27287e8c4699138ac66c92bd601f70a01ab8a0028e4ac77561c61b87f5d8f07", 0x31}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="81", 0x1}], 0x1}, 0x4) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r15 = accept4(r14, 0x0, 0x0, 0x800) sendmmsg$alg(r15, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}], 0x1}], 0x1, 0x8001) accept4(r15, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) 1m23.272942372s ago: executing program 1 (id=10713): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe61, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x300, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m22.646935536s ago: executing program 1 (id=10714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe1b}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1m22.559142308s ago: executing program 3 (id=10715): r0 = socket$alg(0x26, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x2d, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pimreg\x00', 0x0}) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x40, 0x1a, 0x100, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @remote}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x8}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xd}]}, 0x40}}, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) (rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRESOCT=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 0s ago: executing program 33 (id=10712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0x10, 0xffff}, {0xfff2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000000}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000000140)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010027bd7000fcdbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="4000330030284000080211000000080211000000ffffffffffff400001803c00010001002d1a004017fe00000000000000080006001000000008000100000008080026006c09"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0xc, 0x5, "eed183d26b08ba3c6c34481250737219e2ba95dcc0060c24e1009382c1822bc27287e8c4699138ac66c92bd601f70a01ab8a0028e4ac77561c61b87f5d8f07", 0x31}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="81", 0x1}], 0x1}, 0x4) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r15 = accept4(r14, 0x0, 0x0, 0x800) sendmmsg$alg(r15, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}], 0x1}], 0x1, 0x8001) accept4(r15, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) kernel console output (not intermixed with test programs): 446.584191][ T9117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.638083][ T9899] netlink: 'syz.2.9564': attribute type 10 has an invalid length. [ 1446.653458][ T1114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.674228][ T1114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.705944][ T9899] syz_tun: entered promiscuous mode [ 1446.754129][ T1114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.776676][ T1114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.017430][ T9910] netlink: 'syz.2.9567': attribute type 25 has an invalid length. [ 1447.223364][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9568'. [ 1447.618774][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9573'. [ 1447.629325][ T9933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9573'. [ 1447.639463][ T9933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9573'. [ 1448.711944][ T9945] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 1448.721470][ T9945] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 1449.111231][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1449.119431][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1449.322541][ T9884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1449.470708][ T8692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.510076][ T8692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.234891][ T9954] syzkaller0: entered promiscuous mode [ 1450.250318][ T9954] syzkaller0: entered allmulticast mode [ 1450.757879][ T9984] netlink: 'syz.0.9588': attribute type 1 has an invalid length. [ 1457.245593][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.254612][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.266219][ T9984] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1457.429663][ T9988] netlink: 'syz.3.9589': attribute type 10 has an invalid length. [ 1457.475543][ T9992] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9591'. [ 1457.780028][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9596'. [ 1457.847397][T10008] netlink: 'syz.2.9595': attribute type 2 has an invalid length. [ 1457.959694][T10016] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9597'. [ 1458.165935][T10025] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1458.174955][T10025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1458.559276][T10049] xt_hashlimit: size too large, truncated to 1048576 [ 1458.587612][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.640664][T10048] bridge_slave_0 (unregistering): left allmulticast mode [ 1458.676501][T10048] bridge_slave_0 (unregistering): left promiscuous mode [ 1458.713707][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.127561][T27401] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1459.147768][T27401] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1459.165416][T27401] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1459.176227][T27401] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1459.184671][T27401] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1459.343651][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1459.363968][T10073] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9611'. [ 1459.536348][T10075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9612'. [ 1459.552867][T10077] netlink: 'syz.0.9613': attribute type 9 has an invalid length. [ 1459.587407][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9612'. [ 1459.780274][T10075] bond1: option xmit_hash_policy: invalid value (64) [ 1459.802645][T10075] bond1 (unregistering): Released all slaves [ 1460.136159][T10097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9617'. [ 1460.186203][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9617'. [ 1460.250730][T10102] netlink: 'syz.4.9619': attribute type 1 has an invalid length. [ 1460.329370][T10097] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1460.377569][T10097] bond3 (unregistering): Released all slaves [ 1460.483104][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9621'. [ 1460.545144][T10063] lo speed is unknown, defaulting to 1000 [ 1460.565674][T10116] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9622'. [ 1460.576104][T10063] 0· speed is unknown, defaulting to 1000 [ 1460.611690][T10063] xfrm0 speed is unknown, defaulting to 1000 [ 1460.776866][T10128] netlink: 'syz.2.9625': attribute type 7 has an invalid length. [ 1460.836967][T10128] netlink: 'syz.2.9625': attribute type 7 has an invalid length. [ 1461.054621][T10132] siw: device registration error -23 [ 1461.105844][T10143] netlink: 'syz.4.9629': attribute type 1 has an invalid length. [ 1461.264143][ T5643] Bluetooth: hci4: command tx timeout [ 1461.546214][T10167] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1461.561802][T10166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1461.649005][T10166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1462.159954][T10063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.193468][T10063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.224109][T10063] bridge_slave_0: entered allmulticast mode [ 1462.241895][T10063] bridge_slave_0: entered promiscuous mode [ 1462.303218][T10063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.328133][T10063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.340848][T10063] bridge_slave_1: entered allmulticast mode [ 1462.349560][T10063] bridge_slave_1: entered promiscuous mode [ 1462.481431][T10209] tipc: Failed to obtain node identity [ 1462.492855][T10209] tipc: Enabling of bearer rejected, failed to enable media [ 1462.529010][T10063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.548145][T10207] syzkaller0: entered promiscuous mode [ 1462.562974][T10207] syzkaller0: entered allmulticast mode [ 1462.579185][T10063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.624569][T10207] tc action pedit 'at' offset 2047 out of bounds [ 1462.633299][T10207] tc action pedit 'at' offset 2047 out of bounds [ 1462.639762][T10207] tc action pedit 'at' offset 2047 out of bounds [ 1462.646253][T10207] tc action pedit 'at' offset 2047 out of bounds [ 1462.652690][T10207] tc action pedit 'at' offset 2047 out of bounds [ 1462.659139][T10207] tc action pedit 'at' offset 2047 out of bounds [ 1462.665670][T10207] tc action pedit 'at' offset 2047 out of bounds [ 1462.672108][T10207] tc action pedit 'at' offset 2047 out of bounds [ 1462.678479][T10207] tc action pedit 'at' offset 2047 out of bounds [ 1462.684900][T10207] tc action pedit 'at' offset 2047 out of bounds [ 1462.691357][T10207] TC_ACT_REPEAT abuse ? [ 1462.720652][T10063] team0: Port device team_slave_0 added [ 1462.766603][T10063] team0: Port device team_slave_1 added [ 1462.998208][T10063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.006127][T10063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.046056][T10063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.125891][T10063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.146866][T10063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.178507][T10227] netlink: 'syz.1.9647': attribute type 1 has an invalid length. [ 1463.223622][T10063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.343683][ T5643] Bluetooth: hci4: command tx timeout [ 1463.358286][T10227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1463.394408][T10227] netlink: 'syz.1.9647': attribute type 1 has an invalid length. [ 1463.412407][T10232] bond1: (slave geneve2): making interface the new active one [ 1463.422939][T10241] __nla_validate_parse: 4 callbacks suppressed [ 1463.422958][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9650'. [ 1463.439246][T10232] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1463.464982][T10241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9650'. [ 1463.527384][T10241] gretap1: entered promiscuous mode [ 1463.543745][T10241] gretap1: entered allmulticast mode [ 1463.583752][T10227] netlink: 'syz.1.9647': attribute type 1 has an invalid length. [ 1463.634487][T10227] netlink: 'syz.1.9647': attribute type 1 has an invalid length. [ 1463.684551][T10063] hsr_slave_0: entered promiscuous mode [ 1463.703494][T10063] hsr_slave_1: entered promiscuous mode [ 1463.722518][T10063] debugfs: 'hsr0' already exists in 'hsr' [ 1463.729940][T10063] Cannot create hsr debugfs directory [ 1463.756763][T10227] netlink: 'syz.1.9647': attribute type 1 has an invalid length. [ 1463.906706][T10227] netlink: 'syz.1.9647': attribute type 1 has an invalid length. [ 1463.911890][T10255] netlink: 'syz.0.9655': attribute type 3 has an invalid length. [ 1463.994809][T10255] netlink: 666 bytes leftover after parsing attributes in process `syz.0.9655'. [ 1464.340229][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9653'. [ 1464.461146][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1464.908709][T10281] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1464.931467][T10285] netlink: 'syz.4.9664': attribute type 3 has an invalid length. [ 1464.939802][T10285] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9664'. [ 1465.197663][T10295] netlink: 'syz.2.9667': attribute type 1 has an invalid length. [ 1465.209724][T10294] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9666'. [ 1465.421683][ T5643] Bluetooth: hci4: command tx timeout [ 1465.424386][T10295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.564128][T10316] netlink: 'syz.4.9671': attribute type 6 has an invalid length. [ 1465.575724][T10313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9672'. [ 1465.727805][T10319] Cannot find add_set index 0 as target [ 1465.778967][T10321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9674'. [ 1465.828482][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9674'. [ 1465.876787][T10326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9676'. [ 1466.623228][T10063] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1466.647587][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1466.665879][T10063] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1466.723000][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1466.752798][T10063] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1466.776788][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1466.805634][T10063] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1466.853748][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1467.348121][T10063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.436504][T10063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.474833][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.482124][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.504150][ T5643] Bluetooth: hci4: command tx timeout [ 1467.593671][T10389] No such timeout policy "syz0" [ 1467.596696][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.605827][ T8692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.632299][T10389] ip6t_rpfilter: unknown options [ 1468.109023][T10410] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1469.073559][T10444] __nla_validate_parse: 8 callbacks suppressed [ 1469.073584][T10444] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9708'. [ 1469.224369][T10063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.408643][T10063] veth0_vlan: entered promiscuous mode [ 1469.448749][T10063] veth1_vlan: entered promiscuous mode [ 1469.514724][T10460] validate_nla: 2 callbacks suppressed [ 1469.514748][T10460] netlink: 'syz.1.9713': attribute type 29 has an invalid length. [ 1469.544683][T10462] x_tables: duplicate underflow at hook 3 [ 1469.570058][T10460] netlink: 'syz.1.9713': attribute type 29 has an invalid length. [ 1469.598861][T10460] netlink: 500 bytes leftover after parsing attributes in process `syz.1.9713'. [ 1469.606884][T10466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9715'. [ 1469.749534][T10472] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1469.773213][T10472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1469.887368][T13210] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 1469.897213][T13210] ip6gre1 (unregistering): left promiscuous mode [ 1470.204140][T13210] geneve1 (unregistering): left allmulticast mode [ 1470.215647][T13210] team0: Port device geneve1 removed [ 1470.526730][T13210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.536763][T13210] bond_slave_0: left allmulticast mode [ 1470.546608][T13210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.559830][T13210] bond_slave_1: left allmulticast mode [ 1470.567006][T13210] bond0 (unregistering): Released all slaves [ 1470.580664][T13210] bond1 (unregistering): (slave C): Releasing backup interface [ 1470.589842][T13210] bond1 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 1470.603985][T13210] bond1 (unregistering): Released all slaves [ 1470.622604][T13210] bond2 (unregistering): Released all slaves [ 1470.638796][T13210] bond3 (unregistering): Released all slaves [ 1470.654643][T13210] bond4 (unregistering): Released all slaves [ 1470.680164][T13210] bond5 (unregistering): Released all slaves [ 1470.723449][T13210] bond6 (unregistering): Released all slaves [ 1470.760360][T13210] bond7 (unregistering): Released all slaves [ 1470.778585][T13210] bond8 (unregistering): Released all slaves [ 1470.799079][T10460] bridge0: port 1(wlan0) entered blocking state [ 1470.810696][T10460] bridge0: port 1(wlan0) entered disabled state [ 1470.823212][T10460] mac80211_hwsim hwsim114 wlan0: entered allmulticast mode [ 1470.835161][T10460] mac80211_hwsim hwsim114 wlan0: entered promiscuous mode [ 1470.844242][T10460] bridge0: port 1(wlan0) entered blocking state [ 1470.850820][T10460] bridge0: port 1(wlan0) entered forwarding state [ 1470.963434][T13210] tipc: Left network mode [ 1471.059186][T10063] veth0_macvtap: entered promiscuous mode [ 1471.120834][T10063] veth1_macvtap: entered promiscuous mode [ 1471.245219][T10063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.311808][T10063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.434357][T23155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.456872][T23155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.587229][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1471.597173][T23155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.628888][T23155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.640380][T10500] netlink: 'syz.4.9721': attribute type 20 has an invalid length. [ 1471.640405][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1471.798071][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1471.815017][T10507] tipc: Started in network mode [ 1471.834290][T10500] netlink: 'syz.4.9721': attribute type 20 has an invalid length. [ 1471.837162][T10507] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 1471.873185][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1471.969660][T10507] tipc: Enabled bearer , priority 10 [ 1472.184871][T23155] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.224214][T23155] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.234183][T23155] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.367600][T23155] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.254729][ T9911] tipc: Node number set to 4269801492 [ 1473.376593][T10565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9739'. [ 1473.439555][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.494589][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.715315][T23158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.726890][T10571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9740'. [ 1473.763721][T23158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.843924][T10571] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9740'. [ 1474.031180][T13210] hsr_slave_0: left promiscuous mode [ 1474.046953][T13210] hsr_slave_1: left promiscuous mode [ 1474.136258][T13210] veth0_macvtap: left promiscuous mode [ 1474.150130][T13210] veth1_vlan: left promiscuous mode [ 1474.175385][T13210] veth0_vlan: left promiscuous mode [ 1474.203035][T10591] __nla_validate_parse: 2 callbacks suppressed [ 1474.203060][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9608'. [ 1474.265430][T10560] netlink: 75 bytes leftover after parsing attributes in process `syz.4.9738'. [ 1474.519105][T10607] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1475.017737][T13210] team_slave_1 (unregistering): left allmulticast mode [ 1475.026857][T13210] team0 (unregistering): Port device team_slave_1 removed [ 1475.049425][T13210] team_slave_0 (unregistering): left allmulticast mode [ 1475.057459][T13210] team0 (unregistering): Port device team_slave_0 removed [ 1475.184584][T10581] syz_tun: entered allmulticast mode [ 1475.192486][T10581] syz_tun: left allmulticast mode [ 1475.238571][T10589] syzkaller0: entered promiscuous mode [ 1475.248050][T10589] syzkaller0: entered allmulticast mode [ 1475.378711][T10560] veth0_to_team: entered promiscuous mode [ 1475.396059][T10560] batadv0: entered promiscuous mode [ 1475.402845][T10560] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1481.704566][ T5296] veth1_vlan: left promiscuous mode [ 1482.100328][T10631] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9749'. [ 1482.135659][T10634] netlink: 165 bytes leftover after parsing attributes in process `syz.2.9751'. [ 1482.452480][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9755'. [ 1482.515317][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9755'. [ 1482.586956][T10648] vlan0: entered promiscuous mode [ 1482.796611][T13210] IPVS: stop unused estimator thread 0... [ 1483.125152][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9762'. [ 1483.479467][T10686] netlink: 'syz.2.9765': attribute type 3 has an invalid length. [ 1483.526554][T10686] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9765'. [ 1483.540139][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9768'. [ 1483.627885][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9768'. [ 1483.717017][ T1103] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1483.807456][ T1103] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1483.846292][ T1103] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1483.880077][ T1103] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1484.102629][T10712] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9774'. [ 1484.263317][T10723] netlink: 'syz.0.9776': attribute type 32 has an invalid length. [ 1484.270822][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9777'. [ 1484.327992][T10722] netlink: 'syz.1.9777': attribute type 7 has an invalid length. [ 1484.352886][T10722] netlink: 'syz.1.9777': attribute type 8 has an invalid length. [ 1484.545664][T10736] netlink: 'syz.3.9778': attribute type 1 has an invalid length. [ 1485.474811][T10776] netlink: 'syz.1.9793': attribute type 2 has an invalid length. [ 1485.768141][T10790] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1485.796155][T10790] bond2 (unregistering): Released all slaves [ 1486.170004][T10814] xt_ipcomp: unknown flags 1D [ 1486.213837][T10815] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1486.265712][T10815] bond1 (unregistering): Released all slaves [ 1486.416892][T10829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1486.456291][T10819] : entered promiscuous mode [ 1486.475593][T10830] netlink: 'syz.0.9811': attribute type 1 has an invalid length. [ 1486.497211][T10830] netlink: 'syz.0.9811': attribute type 1 has an invalid length. [ 1486.525370][T10830] netlink: 'syz.0.9811': attribute type 1 has an invalid length. [ 1486.563064][T10830] netlink: 'syz.0.9811': attribute type 1 has an invalid length. [ 1487.790468][T10858] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1487.955051][T10871] __nla_validate_parse: 11 callbacks suppressed [ 1487.955082][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1488.323788][T10877] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1488.498963][T10886] validate_nla: 2 callbacks suppressed [ 1488.498992][T10886] netlink: 'syz.0.9828': attribute type 3 has an invalid length. [ 1488.540251][T10886] netlink: 666 bytes leftover after parsing attributes in process `syz.0.9828'. [ 1488.619448][T10892] x_tables: unsorted underflow at hook 3 [ 1488.656917][T10892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9831'. [ 1488.683291][T10892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9831'. [ 1489.230792][T10904] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1489.294143][T10904] bond5 (unregistering): Released all slaves [ 1490.564689][T10946] bond1: Unable to set down delay as MII monitoring is disabled [ 1490.685349][T10946] bond1 (unregistering): Released all slaves [ 1490.725523][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9842'. [ 1491.493396][T10966] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.9844'. [ 1491.534526][T10966] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.9844'. [ 1491.573256][T10975] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9847'. [ 1492.097421][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9852'. [ 1492.139898][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9850'. [ 1492.455586][T11002] tipc: Enabling not permitted [ 1492.510652][T11002] tipc: Enabling of bearer rejected, failed to enable media [ 1493.820046][T11043] __nla_validate_parse: 2 callbacks suppressed [ 1493.820070][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9860'. [ 1493.852616][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9858'. [ 1493.952010][T11049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9859'. [ 1494.017325][T11043] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1494.093464][T11043] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9860'. [ 1494.275419][T11053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1494.435060][T11057] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9863'. [ 1494.538251][T11057] netlink: 'syz.4.9863': attribute type 6 has an invalid length. [ 1495.045398][T11072] syzkaller0: entered promiscuous mode [ 1495.098091][T11072] syzkaller0: entered allmulticast mode [ 1495.772572][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9871'. [ 1495.815043][T11097] openvswitch: netlink: Flow actions attr not present in new flow. [ 1496.080162][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9872'. [ 1496.250775][T27541] IPVS: starting estimator thread 0... [ 1496.371344][T11108] IPVS: using max 27 ests per chain, 64800 per kthread [ 1496.528662][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9876'. [ 1496.694355][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9876'. [ 1496.775263][T11116] netlink: 192 bytes leftover after parsing attributes in process `syz.2.9875'. [ 1498.437320][T11163] netlink: 'syz.1.9890': attribute type 10 has an invalid length. [ 1499.019954][T11181] __nla_validate_parse: 6 callbacks suppressed [ 1499.019977][T11181] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9896'. [ 1499.096030][T11185] openvswitch: netlink: IP tunnel dst address not specified [ 1499.355823][T11188] netlink: 'syz.4.9897': attribute type 1 has an invalid length. [ 1499.428971][T11188] netlink: 'syz.4.9897': attribute type 3 has an invalid length. [ 1499.430190][T11190] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9897'. [ 1499.509082][T11188] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9897'. [ 1499.556933][T11188] NCSI netlink: No device for ifindex 813332851 [ 1500.439005][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9906'. [ 1500.563917][T11232] netlink: 'syz.0.9908': attribute type 1 has an invalid length. [ 1500.564779][T11234] netlink: 13 bytes leftover after parsing attributes in process `syz.4.9906'. [ 1500.624054][T11232] netlink: 14870 bytes leftover after parsing attributes in process `syz.0.9908'. [ 1501.252676][T11249] tipc: Enabling of bearer rejected, failed to enable media [ 1501.409707][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9913'. [ 1501.637626][T11261] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9914'. [ 1501.693537][T11261] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9914'. [ 1502.382404][T27401] Bluetooth: hci2: command 0x0406 tx timeout [ 1502.793443][T11284] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9921'. [ 1502.959192][T11286] bond0: (slave bond_slave_1): Releasing backup interface [ 1504.273209][T11316] syzkaller0: entered promiscuous mode [ 1504.406924][T11316] syzkaller0: entered allmulticast mode [ 1504.595281][T11340] nbd: socks must be embedded in a SOCK_ITEM attr [ 1514.062036][T11341] __nla_validate_parse: 1 callbacks suppressed [ 1514.062063][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9932'. [ 1514.089019][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9932'. [ 1514.522891][T11370] netlink: 'syz.4.9937': attribute type 1 has an invalid length. [ 1514.785374][T11381] veth0: entered promiscuous mode [ 1514.825763][T11375] veth0: left promiscuous mode [ 1515.737319][T11415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9949'. [ 1515.855727][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9950'. [ 1516.000120][T11422] vlan2: entered allmulticast mode [ 1516.052206][T11422] bond0: entered allmulticast mode [ 1516.099936][T11422] bond_slave_0: entered allmulticast mode [ 1516.127681][T11422] bond_slave_1: entered allmulticast mode [ 1516.179617][T11422] dummy0: entered allmulticast mode [ 1516.763539][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9957'. [ 1516.802064][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9957'. [ 1516.812163][T11435] tipc: Enabled bearer , priority 0 [ 1516.858153][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9957'. [ 1516.903160][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9957'. [ 1516.948666][T11434] tipc: Resetting bearer [ 1517.164858][T11434] tipc: Disabling bearer [ 1517.743618][ T5643] Bluetooth: hci3: command 0x0405 tx timeout [ 1517.860164][T11468] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1517.875383][T11471] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1518.126068][T11479] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1518.228859][T11484] sctp: [Deprecated]: syz.2.9966 (pid 11484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1518.228859][T11484] Use struct sctp_sack_info instead [ 1518.535746][T11485] can: request_module (can-proto-3) failed. [ 1519.024911][T11504] netlink: 304 bytes leftover after parsing attributes in process `syz.0.9973'. [ 1519.257770][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9975'. [ 1519.930063][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9982'. [ 1520.066450][T11538] siw: device registration error -23 [ 1520.398131][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9988'. [ 1520.414724][T11547] xt_ecn: cannot match TCP bits for non-tcp packets [ 1520.488991][T11554] netlink: 'syz.1.9987': attribute type 1 has an invalid length. [ 1520.534017][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9986'. [ 1520.558642][T11546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9988'. [ 1520.591304][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9986'. [ 1520.609473][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9987'. [ 1520.625424][T11557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9987'. [ 1520.775724][T11552] bridge1: port 1(veth3) entered blocking state [ 1520.835900][T11552] bridge1: port 1(veth3) entered disabled state [ 1520.880273][T11552] veth3: entered allmulticast mode [ 1520.924870][T11552] veth3: entered promiscuous mode [ 1520.969826][T11564] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1521.065040][T11562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9990'. [ 1521.334640][T11569] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9992'. [ 1521.728624][T11582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1522.113358][T11593] netlink: 'syz.1.10000': attribute type 5 has an invalid length. [ 1522.654249][T11573] Cannot find set identified by id 0 to match [ 1524.205529][T11621] netlink: 'syz.3.10009': attribute type 11 has an invalid length. [ 1524.444803][T11626] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1524.500239][T11626] bond2 (unregistering): Released all slaves [ 1524.637985][T11630] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1524.691775][T11630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1525.025065][T11644] __nla_validate_parse: 4 callbacks suppressed [ 1525.025093][T11644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10018'. [ 1525.095662][T11644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10018'. [ 1525.124377][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10016'. [ 1525.625625][T11645] nbd1: detected capacity change from 0 to 63 [ 1525.666191][T11648] block nbd1: NBD_DISCONNECT [ 1525.693710][T11663] netlink: 'syz.3.10022': attribute type 266 has an invalid length. [ 1525.698086][T11648] block nbd1: Disconnected due to user request. [ 1525.778532][T11586] blk_print_req_error: 138 callbacks suppressed [ 1525.778562][T11586] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.779332][T11648] block nbd1: shutting down sockets [ 1525.807571][T11586] buffer_io_error: 138 callbacks suppressed [ 1525.807667][T11586] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1525.983343][ T1700] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1525.998415][ T1700] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1526.012138][ T1700] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1526.023840][ T1700] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1526.038330][T11586] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.067795][T11586] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1526.084586][T11586] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.094476][T11586] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1526.103575][T11586] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.113151][T11586] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1526.122662][T11586] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.132148][T11586] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1526.147290][T11586] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.171003][T11586] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1526.180770][T11586] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.215759][T11586] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1526.260287][T11586] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.318746][T11586] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.410685][T11586] ldm_validate_partition_table(): Disk read failed. [ 1526.485170][T11586] Dev nbd1: unable to read RDB block 0 [ 1526.558539][T11586] nbd1: unable to read partition table [ 1526.601800][T11681] ip6t_srh: unknown srh invflags 4000 [ 1526.698147][T11586] ldm_validate_partition_table(): Disk read failed. [ 1526.774253][T11586] Dev nbd1: unable to read RDB block 0 [ 1526.824028][T11586] nbd1: unable to read partition table [ 1527.699831][T11714] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10037'. [ 1527.878517][T11716] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.10036'. [ 1528.019132][T11726] netlink: 'syz.0.10040': attribute type 1 has an invalid length. [ 1528.357370][T11726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1528.490631][T11735] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10036'. [ 1528.584160][T11744] netlink: 'syz.3.10042': attribute type 1 has an invalid length. [ 1528.620585][T11747] netlink: 'syz.2.10043': attribute type 1 has an invalid length. [ 1528.658152][T11747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1528.706099][T11739] bond3: (slave geneve2): making interface the new active one [ 1528.758511][T11739] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1528.827251][T11744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1528.856119][T11750] bond1: (slave geneve2): making interface the new active one [ 1528.867129][T11750] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1529.307327][T11767] netlink: 'syz.0.10047': attribute type 29 has an invalid length. [ 1529.950225][T11781] xt_hashlimit: size too large, truncated to 1048576 [ 1530.211355][T11794] ipt_REJECT: ECHOREPLY no longer supported. [ 1530.891471][T11810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10059'. [ 1531.288463][T11822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1531.424916][T11826] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1531.431717][T11833] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 1531.746652][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10067'. [ 1531.866009][T11849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1532.824511][T11877] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10078'. [ 1533.334313][T13210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.384089][T13210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.438255][T11893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10079'. [ 1533.608300][T11899] netlink: 'syz.2.10082': attribute type 11 has an invalid length. [ 1533.649516][T11899] netlink: 'syz.2.10082': attribute type 11 has an invalid length. [ 1533.717384][T11899] netlink: 204 bytes leftover after parsing attributes in process `syz.2.10082'. [ 1534.213592][T11911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10086'. [ 1534.854829][T11920] syzkaller0: entered promiscuous mode [ 1534.912701][T11920] syzkaller0: entered allmulticast mode [ 1534.928169][T11920] netlink: 120 bytes leftover after parsing attributes in process `syz.0.10089'. [ 1535.287125][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10094'. [ 1535.395127][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10097'. [ 1535.426612][T11943] syzkaller0: entered promiscuous mode [ 1535.471505][T11943] syzkaller0: entered allmulticast mode [ 1535.539132][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10099'. [ 1535.554558][T11946] netlink: 'syz.3.10097': attribute type 25 has an invalid length. [ 1535.856642][T13210] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1535.895654][T13210] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1535.950763][T11953] team0: Device xfrm0 is of different type [ 1536.095790][T11963] netlink: 'syz.3.10103': attribute type 8 has an invalid length. [ 1536.138199][T13210] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1536.176199][T13210] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1536.208872][T11958] __nla_validate_parse: 1 callbacks suppressed [ 1536.208901][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10102'. [ 1536.507546][T11967] lo speed is unknown, defaulting to 1000 [ 1536.593844][T11967] lo speed is unknown, defaulting to 1000 [ 1536.640153][T11967] lo speed is unknown, defaulting to 1000 [ 1537.416676][T11986] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10111'. [ 1537.500598][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10111'. [ 1537.589694][T11993] syzkaller1: entered promiscuous mode [ 1537.621529][T11993] syzkaller1: entered allmulticast mode [ 1537.900480][T13013] lo speed is unknown, defaulting to 1000 [ 1537.910018][T11967] infiniband sz1: set active [ 1537.926930][T11967] infiniband sz1: added lo [ 1538.148703][T11967] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1538.226725][T11967] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1538.282238][T11967] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1538.604178][T12008] sctp: [Deprecated]: syz.4.10117 (pid 12008) Use of int in maxseg socket option. [ 1538.604178][T12008] Use struct sctp_assoc_value instead [ 1538.652822][T11967] RDS/IB: sz1: added [ 1538.679989][T11967] smc: adding ib device sz1 with port count 1 [ 1538.708234][T11967] smc: ib device sz1 port 1 has no pnetid [ 1538.935092][T29866] lo speed is unknown, defaulting to 1000 [ 1538.957672][T11967] lo speed is unknown, defaulting to 1000 [ 1538.976812][T12029] netlink: 'syz.1.10121': attribute type 4 has an invalid length. [ 1540.365377][T11967] lo speed is unknown, defaulting to 1000 [ 1541.167348][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10137'. [ 1541.253432][T12088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10137'. [ 1541.279226][T12086] syzkaller1: entered promiscuous mode [ 1541.312872][T12086] syzkaller1: entered allmulticast mode [ 1541.371973][T11967] lo speed is unknown, defaulting to 1000 [ 1541.520138][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10138'. [ 1541.556175][T12100] netlink: 'syz.1.10138': attribute type 2 has an invalid length. [ 1542.105883][T12105] x_tables: duplicate underflow at hook 4 [ 1542.285803][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10142'. [ 1542.674464][T12112] team0: Port device team_slave_0 removed [ 1542.730314][T11967] lo speed is unknown, defaulting to 1000 [ 1543.066001][T12124] syzkaller1: entered promiscuous mode [ 1543.113224][T12124] syzkaller1: entered allmulticast mode [ 1543.171181][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10148'. [ 1543.190496][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10145'. [ 1543.384899][T12125] veth5: entered promiscuous mode [ 1543.413667][T12125] veth5: entered allmulticast mode [ 1543.846909][T12152] ip_vti0: entered promiscuous mode [ 1543.853118][T12153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1544.128123][T11967] lo speed is unknown, defaulting to 1000 [ 1544.299930][T12162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1544.739585][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10156'. [ 1545.194584][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10157'. [ 1545.496679][T11967] lo speed is unknown, defaulting to 1000 [ 1545.708350][T12184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10161'. [ 1545.729186][T12184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10161'. [ 1545.760246][T12185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10159'. [ 1545.808014][T12185] ip6t_srh: unknown srh match flags 4000 [ 1545.846460][T12185] netlink: 'syz.0.10159': attribute type 8 has an invalid length. [ 1546.084513][T12193] netlink: 'syz.0.10163': attribute type 1 has an invalid length. [ 1546.415168][T12195] : entered promiscuous mode [ 1546.733195][T12204] __nla_validate_parse: 1 callbacks suppressed [ 1546.733223][T12204] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10165'. [ 1546.775886][T12204] xt_policy: neither incoming nor outgoing policy selected [ 1546.929647][T12207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10167'. [ 1547.462461][T12221] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10167'. [ 1547.617232][T11967] lo speed is unknown, defaulting to 1000 [ 1547.624611][T12218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.068495][T12225] bond2: Unable to set down delay as MII monitoring is disabled [ 1548.118506][T12225] bond2 (unregistering): Released all slaves [ 1548.606592][T12240] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1548.772648][T12243] gre1: entered promiscuous mode [ 1549.087627][T11967] lo speed is unknown, defaulting to 1000 [ 1549.188075][T12258] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.10180'. [ 1549.219566][T12260] tipc: Enabling of bearer rejected, failed to enable media [ 1549.288745][T12265] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10181'. [ 1549.338137][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10181'. [ 1549.498466][T12265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10181'. [ 1549.830311][T12280] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10187'. [ 1550.425851][T12292] netlink: 'syz.0.10191': attribute type 4 has an invalid length. [ 1550.454368][T12292] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10191'. [ 1550.707719][T12296] bond2: Unable to set down delay as MII monitoring is disabled [ 1550.749733][T12296] bond2 (unregistering): Released all slaves [ 1550.937752][T12309] netlink: 'syz.1.10195': attribute type 1 has an invalid length. [ 1551.019907][T11967] lo speed is unknown, defaulting to 1000 [ 1551.672894][T12323] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10198'. [ 1552.086151][T11967] lo speed is unknown, defaulting to 1000 [ 1552.464421][T12336] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10207'. [ 1552.495028][T12336] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10207'. [ 1552.540420][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1552.555057][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1552.573611][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1552.588361][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1552.597910][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1552.980163][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10210'. [ 1553.116004][T12356] netlink: 'syz.1.10210': attribute type 1 has an invalid length. [ 1553.202508][T12356] netlink: 'syz.1.10210': attribute type 2 has an invalid length. [ 1553.514612][T11967] lo speed is unknown, defaulting to 1000 [ 1554.055565][T12378] syzkaller0: entered promiscuous mode [ 1554.093838][T12378] syzkaller0: entered allmulticast mode [ 1554.229914][T12382] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10216'. [ 1554.701729][T27401] Bluetooth: hci1: command tx timeout [ 1554.910783][T12401] netlink: 'syz.1.10220': attribute type 1 has an invalid length. [ 1555.064703][T12404] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10221'. [ 1555.089873][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10220'. [ 1555.393365][T12344] lo speed is unknown, defaulting to 1000 [ 1555.450525][T12344] 0· speed is unknown, defaulting to 1000 [ 1555.505609][T12344] xfrm0 speed is unknown, defaulting to 1000 [ 1555.611431][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10223'. [ 1555.972702][T12412] hsr_slave_1 (unregistering): left promiscuous mode [ 1556.039088][T12344] lo speed is unknown, defaulting to 1000 [ 1556.786745][T27401] Bluetooth: hci1: command tx timeout [ 1557.264884][T12439] openvswitch: netlink: IP tunnel dst address not specified [ 1557.285195][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10232'. [ 1557.303368][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10232'. [ 1558.017453][T12455] netlink: 'syz.4.10237': attribute type 83 has an invalid length. [ 1558.865767][T27401] Bluetooth: hci1: command tx timeout [ 1559.553697][T12496] netlink: 232 bytes leftover after parsing attributes in process `syz.1.10250'. [ 1559.677330][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.709086][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.747951][T12344] bridge_slave_0: entered allmulticast mode [ 1559.791569][T12344] bridge_slave_0: entered promiscuous mode [ 1559.908783][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.931857][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.945784][T12344] bridge_slave_1: entered allmulticast mode [ 1559.977608][T12344] bridge_slave_1: entered promiscuous mode [ 1560.172956][T12344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.230044][T12344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.340716][ T30] audit: type=1800 audit(1781204045.870:24): pid=12510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10255" name="memory.events" dev="tmpfs" ino=991 res=0 errno=0 [ 1560.397875][T12344] team0: Port device team_slave_0 added [ 1560.522355][T12344] team0: Port device team_slave_1 added [ 1560.886510][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10260'. [ 1560.944203][T27401] Bluetooth: hci1: command tx timeout [ 1560.995012][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10260'. [ 1561.079030][T12344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.128706][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.199391][T12534] netlink: 'syz.0.10263': attribute type 4 has an invalid length. [ 1561.229572][T12344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.297432][T12521] syzkaller1: entered promiscuous mode [ 1561.321603][T12521] syzkaller1: entered allmulticast mode [ 1561.558580][T12344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.585085][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.667789][T12344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.727049][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10268'. [ 1561.735298][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10267'. [ 1562.069434][T12558] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10269'. [ 1562.244523][T12344] hsr_slave_0: entered promiscuous mode [ 1562.266708][T12344] hsr_slave_1: entered promiscuous mode [ 1562.289479][T12344] debugfs: 'hsr0' already exists in 'hsr' [ 1562.311934][T12344] Cannot create hsr debugfs directory [ 1562.389801][T12570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10272'. [ 1563.409395][T12598] sctp: [Deprecated]: syz.0.10280 (pid 12598) Use of int in max_burst socket option. [ 1563.409395][T12598] Use struct sctp_assoc_value instead [ 1563.704149][T12604] veth0_to_bond: entered allmulticast mode [ 1563.821891][T27401] Bluetooth: hci5: command 0x0406 tx timeout [ 1564.353898][T12611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1564.459592][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10285'. [ 1565.376648][T12344] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1565.432458][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1565.467037][T12344] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1565.528330][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1565.564273][T12344] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1565.588897][T12641] vxcan1: tx drop: invalid sa for name 0x8000000000000000 [ 1565.612943][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1565.655275][T12344] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1565.728722][T12344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1565.887678][T12639] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.10292'. [ 1566.175271][T12344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.290805][T12344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1566.376214][T23154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.383491][T23154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.503576][T23154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.510978][T23154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.178234][T12706] netlink: 'syz.4.10310': attribute type 19 has an invalid length. [ 1574.597065][T23147] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 1574.620580][T12715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1575.719918][T12749] x_tables: duplicate entry at hook 3 [ 1575.742266][T12751] tipc: Enabling of bearer rejected, media not registered [ 1575.937713][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10322'. [ 1575.994292][T12758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10322'. [ 1576.178075][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10325'. [ 1576.903242][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10328'. [ 1577.035607][T12344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.862073][T12819] pimreg3: entered allmulticast mode [ 1577.967358][T12825] netlink: 'syz.0.10336': attribute type 1 has an invalid length. [ 1578.028551][T12824] netlink: 184 bytes leftover after parsing attributes in process `syz.0.10336'. [ 1578.063590][T12825] netlink: 184 bytes leftover after parsing attributes in process `syz.0.10336'. [ 1578.103474][T12825] netlink: 'syz.0.10336': attribute type 1 has an invalid length. [ 1578.177637][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10336'. [ 1578.213838][T12824] netlink: 184 bytes leftover after parsing attributes in process `syz.0.10336'. [ 1578.540646][T12834] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10338'. [ 1579.494962][T12344] veth0_vlan: entered promiscuous mode [ 1579.596436][T12344] veth1_vlan: entered promiscuous mode [ 1579.658550][T12857] netlink: 'syz.3.10344': attribute type 4 has an invalid length. [ 1579.676461][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10344'. [ 1579.866070][T12344] veth0_macvtap: entered promiscuous mode [ 1580.017386][T12344] veth1_macvtap: entered promiscuous mode [ 1580.206302][T12344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.355448][T12344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.502834][T11026] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.545313][T12140] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.601656][T12142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.665812][T12142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.964303][T12876] __nla_validate_parse: 1 callbacks suppressed [ 1580.964333][T12876] netlink: 151560 bytes leftover after parsing attributes in process `syz.1.10350'. [ 1581.006068][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10353'. [ 1581.087195][T12879] openvswitch: netlink: Invalid VLAN frame [ 1581.194318][T12874] syzkaller0: entered promiscuous mode [ 1581.223538][T12874] syzkaller0: entered allmulticast mode [ 1581.301907][T12885] netlink: 'syz.0.10353': attribute type 1 has an invalid length. [ 1581.328539][T12885] netlink: 'syz.0.10353': attribute type 2 has an invalid length. [ 1581.622819][T12902] atomic_op ffff8880a625f198 conn xmit_atomic 0000000000000000 [ 1590.005313][T12892] syzkaller0: entered promiscuous mode [ 1590.011467][T12892] syzkaller0: entered allmulticast mode [ 1590.401958][T12915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10357'. [ 1590.824621][T23158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.849658][T23158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.928818][T12929] Cannot find del_set index 4 as target [ 1591.108791][T23158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.139644][T23158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.349420][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1592.141424][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10374'. [ 1592.190367][T12970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.240297][T12970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.262999][T12970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.274657][T12970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.310032][T12997] vcan1: entered promiscuous mode [ 1593.336464][T12997] vcan1: entered allmulticast mode [ 1593.935509][T13014] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10382'. [ 1593.994017][T13015] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1594.129695][T13018] geneve3: entered promiscuous mode [ 1594.197626][T12143] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 57142 - 0 [ 1594.231906][T12143] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 57142 - 0 [ 1594.257772][T12143] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 57142 - 0 [ 1594.293599][T12143] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 57142 - 0 [ 1594.542072][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 1594.713699][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10388'. [ 1595.042308][T13051] syzkaller0: entered promiscuous mode [ 1595.050254][T13051] syzkaller0: entered allmulticast mode [ 1595.377016][T13060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10392'. [ 1595.406424][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10392'. [ 1595.808849][T13060] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1595.844530][T13060] bond4 (unregistering): Released all slaves [ 1596.719762][T13084] netlink: 'syz.5.10398': attribute type 1 has an invalid length. [ 1596.733918][T13084] netlink: 'syz.5.10398': attribute type 2 has an invalid length. [ 1597.395642][T13025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1597.780412][T13089] netlink: 'syz.3.10399': attribute type 1 has an invalid length. [ 1597.872441][T13089] Cannot find del_set index 2 as target [ 1599.095103][T13123] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10409'. [ 1601.497227][T13182] nftables ruleset with unbound chain [ 1601.679521][T13182] pimreg: entered allmulticast mode [ 1601.975345][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10427'. [ 1602.040698][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10427'. [ 1602.195637][T13201] netlink: 'syz.5.10430': attribute type 49 has an invalid length. [ 1602.222683][T13199] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10428'. [ 1602.689685][T13201] ip6gretap0: entered promiscuous mode [ 1602.696489][T13201] ip6gretap0: entered allmulticast mode [ 1602.779485][T13203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10429'. [ 1602.794076][T13211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1603.902449][T13228] bond2 (unregistering): Released all slaves [ 1605.054674][T13255] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10441'. [ 1605.165593][T13253] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10440'. [ 1605.207705][T13263] Bluetooth: MGMT ver 1.23 [ 1605.236799][T13263] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10443'. [ 1605.284182][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10443'. [ 1605.713579][T13275] netlink: 'syz.3.10448': attribute type 1 has an invalid length. [ 1605.737362][T13275] netlink: 216 bytes leftover after parsing attributes in process `syz.3.10448'. [ 1605.842641][T13281] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10448'. [ 1605.935382][T13281] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10448'. [ 1606.041810][T13275] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10448'. [ 1606.095081][T13275] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10448'. [ 1607.319671][T13314] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10455'. [ 1607.568100][T13330] netlink: 'syz.0.10458': attribute type 1 has an invalid length. [ 1607.704414][T13330] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1607.853407][T13337] netlink: 'syz.1.10459': attribute type 1 has an invalid length. [ 1607.878137][T13341] netlink: 'syz.5.10460': attribute type 29 has an invalid length. [ 1608.047800][T13341] netlink: 'syz.5.10460': attribute type 29 has an invalid length. [ 1608.579120][T13347] syzkaller0: entered promiscuous mode [ 1608.610362][T13347] syzkaller0: entered allmulticast mode [ 1609.419249][T13375] netlink: 'syz.5.10467': attribute type 4 has an invalid length. [ 1610.082763][T13399] __nla_validate_parse: 3 callbacks suppressed [ 1610.082790][T13399] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10471'. [ 1610.211862][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10473'. [ 1610.997185][T13429] geneve2: entered allmulticast mode [ 1612.048926][T13447] bridge0: port 3(gretap0) entered blocking state [ 1612.100768][T13447] bridge0: port 3(gretap0) entered disabled state [ 1612.145753][T13447] gretap0: entered allmulticast mode [ 1612.208840][T13447] gretap0: entered promiscuous mode [ 1612.260480][T13447] bridge0: port 3(gretap0) entered blocking state [ 1612.271780][T13447] bridge0: port 3(gretap0) entered forwarding state [ 1612.928330][T13472] sctp: [Deprecated]: syz.4.10488 (pid 13472) Use of int in max_burst socket option deprecated. [ 1612.928330][T13472] Use struct sctp_assoc_value instead [ 1612.948109][T13471] netlink: 'syz.1.10487': attribute type 1 has an invalid length. [ 1613.206874][T13471] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1613.832909][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10491'. [ 1613.862289][T13490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10492'. [ 1614.807653][T13532] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10501'. [ 1615.866933][T13543] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10504'. [ 1616.398874][T13494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1616.799625][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10505'. [ 1616.895655][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10505'. [ 1618.063307][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1618.154589][T13582] netlink: 'syz.5.10516': attribute type 1 has an invalid length. [ 1618.487520][T13582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1618.774814][T13585] bond1: (slave bridge1): making interface the new active one [ 1618.836354][T13585] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1619.689285][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10520'. [ 1619.778310][T13620] netlink: 280 bytes leftover after parsing attributes in process `syz.4.10522'. [ 1621.339690][T13711] netlink: 'syz.4.10533': attribute type 1 has an invalid length. [ 1621.358329][T13711] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10533'. [ 1621.419841][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10535'. [ 1622.055759][T13732] netlink: 'syz.5.10542': attribute type 1 has an invalid length. [ 1622.075346][T13728] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1622.113949][T13728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1622.380042][T13732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1622.397082][T13746] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1622.492468][T13746] netlink: 'syz.0.10543': attribute type 39 has an invalid length. [ 1622.558579][T12140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.615678][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.662770][T29866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.706284][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.771652][T13750] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1622.804434][T13750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1623.095945][T12139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.231341][T13757] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1623.374051][T13757] netlink: 'syz.3.10545': attribute type 12 has an invalid length. [ 1623.909337][T13773] ip6gre0: Master is either lo or non-ether device [ 1624.318456][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10550'. [ 1624.384448][T13779] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10550'. [ 1624.439661][T13779] netlink: 'syz.3.10550': attribute type 5 has an invalid length. [ 1624.619264][T13782] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10551'. [ 1624.693804][T13782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10551'. [ 1624.816010][T13786] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10552'. [ 1624.869743][T13788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10553'. [ 1624.935470][T13788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10553'. [ 1625.372050][T13798] netlink: 'syz.4.10555': attribute type 1 has an invalid length. [ 1625.479270][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10555'. [ 1625.539191][T13809] macvlan3: entered promiscuous mode [ 1625.546494][T13809] macvlan3: entered allmulticast mode [ 1625.563808][T13809] bond2: entered promiscuous mode [ 1625.581158][T13809] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1625.688194][T13809] bond2: left promiscuous mode [ 1625.884233][T13810] tipc: Started in network mode [ 1625.971528][T13810] tipc: Node identity ac14140f, cluster identity 4711 [ 1626.014973][T13810] tipc: New replicast peer: 255.255.255.255 [ 1626.102173][T13810] tipc: Enabled bearer , priority 10 [ 1626.207781][T13819] vlan2: entered allmulticast mode [ 1626.247371][T13819] bond0: entered allmulticast mode [ 1626.284600][T13819] bond_slave_0: entered allmulticast mode [ 1626.320337][T13819] bond_slave_1: entered allmulticast mode [ 1626.607383][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10562'. [ 1626.768922][T13833] syzkaller0: entered promiscuous mode [ 1626.797473][T13833] syzkaller0: entered allmulticast mode [ 1627.171743][ T9911] tipc: Node number set to 2886997007 [ 1627.189500][T13842] IPVS: length: 165 != 24 [ 1627.195805][T13833] netlink: 'syz.1.10563': attribute type 3 has an invalid length. [ 1627.535068][T13849] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10567'. [ 1627.569003][T13850] sctp: [Deprecated]: syz.0.10568 (pid 13850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1627.569003][T13850] Use struct sctp_sack_info instead [ 1627.673641][T13667] net_ratelimit: 14 callbacks suppressed [ 1627.673665][T13667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.726128][T12143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.179721][T13863] netlink: 'syz.0.10571': attribute type 4 has an invalid length. [ 1628.269391][T13859] netlink: 'syz.0.10571': attribute type 4 has an invalid length. [ 1628.706037][T13667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.903456][T12140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.999450][T13882] netlink: 'syz.5.10579': attribute type 10 has an invalid length. [ 1629.022277][T13881] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10578'. [ 1629.036413][T13882] netlink: 228 bytes leftover after parsing attributes in process `syz.5.10579'. [ 1629.075149][T13885] netlink: 'syz.4.10577': attribute type 16 has an invalid length. [ 1629.095862][T13885] netlink: 'syz.4.10577': attribute type 17 has an invalid length. [ 1629.096438][T13883] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1629.131306][T13886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1629.269329][T13887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1629.288357][T13880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.334136][T13889] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10580'. [ 1629.530287][T13891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1629.538750][T13891] IPv6: NLM_F_CREATE should be set when creating new route [ 1629.547072][T13891] IPv6: NLM_F_CREATE should be set when creating new route [ 1629.589311][T29866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.598399][T13875] lo speed is unknown, defaulting to 1000 [ 1629.742841][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.758061][T13898] bond4: Unable to set down delay as MII monitoring is disabled [ 1629.771593][T13898] bond4 (unregistering): Released all slaves [ 1629.874933][T13875] 0· speed is unknown, defaulting to 1000 [ 1629.897771][T13875] xfrm0 speed is unknown, defaulting to 1000 [ 1629.984309][T13875] lo speed is unknown, defaulting to 1000 [ 1630.072107][T23147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.100700][T13907] xt_l2tp: wrong L2TP version: 0 [ 1630.149958][T13906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10585'. [ 1630.318165][T13910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10585'. [ 1630.784975][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.258140][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.512359][T13933] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10590'. [ 1631.863036][T13942] ip6gre0: Master is either lo or non-ether device [ 1632.235692][T13946] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10593'. [ 1632.277540][T13946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10593'. [ 1632.302303][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10592'. [ 1632.862119][T13672] net_ratelimit: 4 callbacks suppressed [ 1632.862145][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.554901][T12139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.901585][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.127752][T13984] bond5: option all_slaves_active: invalid value (222) [ 1634.173710][T13984] bond5 (unregistering): Released all slaves [ 1634.732405][T23158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.745714][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10603'. [ 1634.801740][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10603'. [ 1634.944031][T13667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.166180][T14021] netlink: 'syz.5.10608': attribute type 11 has an invalid length. [ 1635.218811][T14021] tunl0: entered promiscuous mode [ 1635.257503][T14021] netlink: 'syz.5.10608': attribute type 3 has an invalid length. [ 1635.308209][T14021] netlink: 9 bytes leftover after parsing attributes in process `syz.5.10608'. [ 1635.617740][T14026] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1635.663366][T29866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.908377][T23152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.983357][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.178579][T14042] sctp: [Deprecated]: syz.0.10615 (pid 14042) Use of int in max_burst socket option deprecated. [ 1636.178579][T14042] Use struct sctp_assoc_value instead [ 1636.336620][T14047] tls_set_device_offload: netdev not found [ 1636.605001][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10618'. [ 1637.022906][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.109537][T12142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.156734][T14059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.663405][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10627'. [ 1638.061489][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.302647][T12139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.318869][T14099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10632'. [ 1638.429620][T14099] netlink: 'syz.4.10632': attribute type 1 has an invalid length. [ 1638.447225][T14099] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10632'. [ 1638.458366][T14099] netlink: 'syz.4.10632': attribute type 1 has an invalid length. [ 1638.470242][T14099] netlink: 'syz.4.10632': attribute type 8 has an invalid length. [ 1638.555727][T14099] netlink: 606 bytes leftover after parsing attributes in process `syz.4.10632'. [ 1638.701407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.713700][T29866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.809543][T14111] gretap0: left allmulticast mode [ 1638.828307][T14111] gretap0: left promiscuous mode [ 1638.847890][T14111] bridge0: port 3(gretap0) entered disabled state [ 1638.961977][T14111] bridge_slave_1: left allmulticast mode [ 1638.999365][T14111] bridge_slave_1: left promiscuous mode [ 1639.033069][T14111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.106698][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.219243][T14132] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 1639.312165][T14111] bond0: (slave bond_slave_0): Releasing backup interface [ 1639.379503][T14111] bond_slave_0: left allmulticast mode [ 1639.464195][T14111] bond0: (slave bond_slave_1): Releasing backup interface [ 1639.468565][T12142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.494390][T14111] bond_slave_1: left allmulticast mode [ 1639.566925][T14111] team0: Port device team_slave_0 removed [ 1639.608040][T14111] team0: Port device team_slave_1 removed [ 1639.626257][T14111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1639.652322][T14111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1639.683235][T14111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1639.699584][T14111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.715786][T14111] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1639.913849][T14137] IPv6: addrconf: prefix option has invalid lifetime [ 1639.920670][T14137] IPv6: addrconf: prefix option has invalid lifetime [ 1640.391318][ T30] audit: type=1804 audit(1781204125.910:25): pid=14153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10643" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1670 res=1 errno=0 [ 1640.515380][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10643'. [ 1640.559082][ T30] audit: type=1800 audit(1781204125.910:26): pid=14153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10643" name="cgroup.controllers" dev="tmpfs" ino=1670 res=0 errno=0 [ 1642.452772][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10657'. [ 1642.502402][T14208] bond4: entered promiscuous mode [ 1642.510639][T14208] bond4: entered allmulticast mode [ 1642.517077][T14208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1642.738564][T14222] Bluetooth: MGMT ver 1.23 [ 1642.767922][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10660'. [ 1642.788397][T14223] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10661'. [ 1642.854109][T14223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10661'. [ 1643.159115][T14232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10664'. [ 1643.262121][T13675] net_ratelimit: 9 callbacks suppressed [ 1643.262150][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.777062][T14251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1644.067407][T13210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.319961][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.784906][T29866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.795287][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 1644.809729][T27401] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1645.284944][T13210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.355516][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.386737][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.499229][T23147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.454174][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.633687][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.473435][T13672] net_ratelimit: 1 callbacks suppressed [ 1648.473459][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.797031][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.509785][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.941761][T12139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.542480][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.867593][ T9911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.114446][T23147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.275560][T14272] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10674'. [ 1651.341979][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.352522][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.585017][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.707760][T14286] sctp: [Deprecated]: syz.0.10677 (pid 14286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1651.707760][T14286] Use struct sctp_sack_info instead [ 1651.715100][T14287] sctp: [Deprecated]: syz.1.10680 (pid 14287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1651.715100][T14287] Use struct sctp_sack_info instead [ 1651.923443][T14295] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10680'. [ 1652.107302][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10683'. [ 1652.803089][T14315] netlink: 'syz.0.10687': attribute type 4 has an invalid length. [ 1652.995992][T14325] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10690'. [ 1653.135922][T14328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10691'. [ 1653.390305][T14337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10693'. [ 1653.411895][T14337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10693'. [ 1653.720404][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10696'. [ 1653.747888][T13672] net_ratelimit: 3 callbacks suppressed [ 1653.747911][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.817844][T14343] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1653.909241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.928304][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.165364][T14356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10698'. [ 1654.259709][T14356] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.10698'. [ 1654.346803][T14362] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1654.369880][T14362] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1654.389523][T14362] veth1_to_bridge: entered allmulticast mode [ 1654.428807][T14362] veth1_to_bridge: entered promiscuous mode [ 1654.557919][T23152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.792656][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.346797][T14377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1655.702119][T12143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.823793][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.841841][T13672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.953572][T23158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.962114][T23158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.046170][T23158] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1656.054611][T23158] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1656.453628][T14397] netlink: 'syz.5.10710': attribute type 1 has an invalid length. [ 1657.068524][T14414] __nla_validate_parse: 3 callbacks suppressed [ 1657.068551][T14414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10712'. [ 1658.750857][ C1] net_ratelimit: 8095 callbacks suppressed [ 1658.750888][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1658.750924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1658.757447][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1658.757746][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1658.757978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1658.772378][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1658.782379][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1658.782657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1658.782972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1658.783280][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1663.761030][ C1] net_ratelimit: 27699 callbacks suppressed [ 1663.761055][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1663.761340][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1663.767267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1663.767504][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1663.767739][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1663.767951][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1663.782071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1663.792289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1663.792595][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1663.792832][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1665.620845][ C1] sched: DL replenish lagged too much [ 1668.770988][ C1] net_ratelimit: 26851 callbacks suppressed [ 1668.771017][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1668.771221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1668.777343][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1668.777613][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1668.777898][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1668.792167][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1668.802201][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1668.802487][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1668.802757][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1668.803213][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1673.780905][ C1] net_ratelimit: 28672 callbacks suppressed [ 1673.780917][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1673.780930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1673.781391][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1673.787173][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1673.787471][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1673.787719][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1673.801125][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1673.811914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1673.812189][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1673.812450][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1678.790866][ C1] net_ratelimit: 28129 callbacks suppressed [ 1678.790898][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1678.791345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1678.797163][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1678.797409][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1678.797637][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1678.811871][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1678.822046][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1678.822301][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1678.822536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1678.822772][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1683.800991][ C1] net_ratelimit: 27364 callbacks suppressed [ 1683.801018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1683.801208][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1683.807247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1683.807523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1683.807797][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1683.808059][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1683.821556][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1683.832290][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1683.832569][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1683.832860][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1685.760203][ T5643] Bluetooth: hci1: command tx timeout [ 1688.810968][ C1] net_ratelimit: 27205 callbacks suppressed [ 1688.810993][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1688.811322][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1688.817234][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1688.817499][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1688.817772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1688.832010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1688.842157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1688.842491][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1688.842758][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1688.843030][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1693.821056][ C1] net_ratelimit: 26570 callbacks suppressed [ 1693.821082][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1693.821204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1693.827313][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1693.827583][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1693.827855][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1693.842115][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1693.852309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1693.852601][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1693.852972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1693.853241][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1698.831074][ C1] net_ratelimit: 27096 callbacks suppressed [ 1698.831099][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1698.831193][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1698.837322][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1698.837589][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1698.837864][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1698.838110][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1698.851721][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1698.862291][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1698.862559][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1698.862833][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.841005][ C1] net_ratelimit: 28216 callbacks suppressed [ 1703.841030][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1703.841042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1703.847444][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1703.847712][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1703.847976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.848272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.862012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1703.872431][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1703.872720][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1703.872984][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.850826][ C1] net_ratelimit: 26839 callbacks suppressed [ 1708.850852][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.850963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1708.857083][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.857354][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1708.857635][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1708.857868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1708.871493][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1708.882090][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.882387][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1708.882717][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1713.861002][ C1] net_ratelimit: 27792 callbacks suppressed [ 1713.861027][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1713.861049][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1713.867273][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.867541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.867806][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1713.868037][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1713.881683][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1713.892285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1713.892637][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1713.892930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1718.870938][ C0] net_ratelimit: 27919 callbacks suppressed [ 1718.870995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1718.871140][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1718.878380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1718.889453][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1718.889718][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1718.889985][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1718.890266][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1718.890541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1718.890773][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1718.904399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1720.470130][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1723.881032][ C1] net_ratelimit: 27818 callbacks suppressed [ 1723.881058][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1723.881179][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1723.887368][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1723.887643][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1723.887950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1723.888176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1723.901927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1723.912387][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1723.912685][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1723.912951][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1725.584387][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1728.890934][ C1] net_ratelimit: 28398 callbacks suppressed [ 1728.890962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1728.891026][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1728.897195][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1728.897471][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1728.897724][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1728.911811][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1728.922049][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1728.922321][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1728.922594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1728.922857][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.900854][ C0] net_ratelimit: 28244 callbacks suppressed [ 1733.900862][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1733.900901][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1733.907140][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1733.907418][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1733.907676][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.921477][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1733.931950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.932242][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1733.932576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1733.932843][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1738.911107][ C1] net_ratelimit: 27793 callbacks suppressed [ 1738.911133][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1738.911227][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1738.917378][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1738.917646][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1738.917907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1738.931853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1738.942553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1738.942847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1738.943131][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1738.943405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1743.920896][ C1] net_ratelimit: 27850 callbacks suppressed [ 1743.920923][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1743.921181][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1743.927173][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1743.927482][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1743.927726][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1743.941907][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1743.952552][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1743.952835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1743.953103][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1743.953367][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1748.931075][ C1] net_ratelimit: 27314 callbacks suppressed [ 1748.931100][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1748.931098][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1748.931373][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1748.937641][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1748.937930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1748.938195][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1748.952601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1748.963620][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1748.963954][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1748.964235][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1753.940916][ C1] net_ratelimit: 28145 callbacks suppressed [ 1753.940942][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1753.941220][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1753.947253][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1753.947597][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1753.947859][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1753.961867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1753.972073][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1753.972357][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1753.972643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1753.972947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1758.951010][ C1] net_ratelimit: 28199 callbacks suppressed [ 1758.951034][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1758.951209][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1758.957348][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1758.957693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1758.957962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1758.971813][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1758.982268][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1758.982536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1758.982809][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1758.983073][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1763.960865][ C0] net_ratelimit: 27593 callbacks suppressed [ 1763.960904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1763.960923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1763.967150][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1763.967419][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1763.967683][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1763.967912][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1763.982202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1763.992481][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1763.992803][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1763.993094][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1768.970907][ C1] net_ratelimit: 27388 callbacks suppressed [ 1768.970932][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1768.971137][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1768.977320][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1768.977597][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1768.977847][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1768.991795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1769.002167][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1769.002433][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1769.002704][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1769.002966][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1773.981034][ C0] net_ratelimit: 27251 callbacks suppressed [ 1773.981049][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1773.981092][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1773.987371][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1773.987845][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1773.988342][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1774.001884][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1774.012693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1774.012984][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1774.013259][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1774.013539][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1778.990930][ C1] net_ratelimit: 28290 callbacks suppressed [ 1778.990961][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1778.991305][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1778.997192][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1778.997458][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1778.997709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1778.998019][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.012801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1779.022712][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1779.022993][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1779.023258][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1784.000816][ C0] net_ratelimit: 28644 callbacks suppressed [ 1784.000864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1784.001011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1784.008004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1784.019292][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1784.019622][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1784.019946][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1784.020284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.020619][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1784.033952][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1784.044691][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1789.011023][ C1] net_ratelimit: 27684 callbacks suppressed [ 1789.011051][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1789.011050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1789.011541][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1789.017535][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1789.017798][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1789.018062][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.032278][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1789.042512][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1789.042798][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1789.043069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1794.020799][ C1] net_ratelimit: 27473 callbacks suppressed [ 1794.020825][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.021061][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1794.027047][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1794.027321][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1794.027578][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1794.041742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1794.052042][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1794.052370][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.052656][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1794.053359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1799.030829][ C1] net_ratelimit: 27071 callbacks suppressed [ 1799.030869][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1799.031051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1799.037362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1799.037622][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1799.037878][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.038125][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1799.052219][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1799.062699][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1799.062960][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1799.063239][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.040969][ C1] net_ratelimit: 28070 callbacks suppressed [ 1804.041000][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1804.041238][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1804.047478][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.047836][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.048088][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1804.062134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1804.072607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1804.072878][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.073150][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1804.073487][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1809.050959][ C1] net_ratelimit: 27988 callbacks suppressed [ 1809.050991][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1809.051285][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1809.057289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.057605][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.057864][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1809.071837][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1809.082258][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1809.082534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.082800][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1809.083065][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1814.060928][ C1] net_ratelimit: 28110 callbacks suppressed [ 1814.060959][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1814.061210][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1814.067301][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.067594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.067886][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1814.082202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1814.093211][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1814.093591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.093864][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1814.094121][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1818.630752][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1818.637758][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14424/1:b..l [ 1818.646514][ C1] rcu: (detected by 1, t=10503 jiffies, g=310713, q=2958 ncpus=2) [ 1818.654431][ C1] task:syz.1.10714 state:R running task stack:23264 pid:14424 tgid:14423 ppid:8717 task_flags:0x400140 flags:0x00080000 [ 1818.669652][ C1] Call Trace: [ 1818.672974][ C1] [ 1818.675941][ C1] __schedule+0x1821/0x5740 [ 1818.680570][ C1] ? rcu_is_watching+0x15/0xb0 [ 1818.685466][ C1] ? trace_sched_exit_tp+0x3a/0x130 [ 1818.690936][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1818.696060][ C1] ? __pfx___schedule+0x10/0x10 [ 1818.700992][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1818.706046][ C1] irqentry_exit+0x14f/0x8b0 [ 1818.710661][ C1] ? trace_irq_disable+0x3b/0x140 [ 1818.715848][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1818.721863][ C1] RIP: 0010:deref_stack_reg+0x33/0x230 [ 1818.727368][ C1] Code: 53 48 83 ec 20 48 89 54 24 18 49 89 f0 49 89 ff 48 be 00 00 00 00 00 fc ff df 48 8d 5f 08 49 89 dc 49 c1 ec 03 41 80 3c 34 00 <4c> 89 04 24 74 16 48 89 df e8 4f 05 ba 00 4c 8b 04 24 48 be 00 00 [ 1818.747016][ C1] RSP: 0018:ffffc90002fcede0 EFLAGS: 00000246 [ 1818.753157][ C1] RAX: fffffffffffffff0 RBX: ffffc90002fcef10 RCX: 0000000000000000 [ 1818.761702][ C1] RDX: ffffc90002fcef48 RSI: dffffc0000000000 RDI: ffffc90002fcef08 [ 1818.769715][ C1] RBP: dffffc0000000000 R08: ffffc90002fcf8d0 R09: 0000000000000000 [ 1818.777903][ C1] R10: ffffc90002fcef58 R11: fffff520005f9ded R12: 1ffff920005f9de2 [ 1818.785998][ C1] R13: 1ffff920005f9de3 R14: ffffc90002fcef08 R15: ffffc90002fcef08 [ 1818.794048][ C1] unwind_next_frame+0x19d5/0x2550 [ 1818.799242][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1818.804482][ C1] ? udpv6_sendmsg+0x1db8/0x25c0 [ 1818.809565][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1818.815759][ C1] arch_stack_walk+0x11b/0x150 [ 1818.820593][ C1] ? ____sys_sendmsg+0x5c7/0x9f0 [ 1818.825581][ C1] stack_trace_save+0xa9/0x100 [ 1818.830477][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1818.835897][ C1] save_stack+0x122/0x230 [ 1818.840308][ C1] ? __pfx_save_stack+0x10/0x10 [ 1818.845316][ C1] ? __free_frozen_pages+0xc1c/0xd30 [ 1818.850729][ C1] ? __slab_free+0x274/0x2c0 [ 1818.855414][ C1] ? qlist_free_all+0x99/0x100 [ 1818.860213][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1818.865894][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 1818.871058][ C1] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 1818.878122][ C1] ? kmemdup_noprof+0x2b/0x70 [ 1818.882839][ C1] ? ip6_setup_cork+0x930/0xf30 [ 1818.887797][ C1] ? ip6_make_skb+0x1c8/0x320 [ 1818.892512][ C1] ? udpv6_sendmsg+0x1db8/0x25c0 [ 1818.897501][ C1] ? page_ext_put+0x97/0xc0 [ 1818.902059][ C1] __reset_page_owner+0x71/0x1f0 [ 1818.907061][ C1] __free_frozen_pages+0xc1c/0xd30 [ 1818.912227][ C1] __slab_free+0x274/0x2c0 [ 1818.916692][ C1] ? qlist_free_all+0x8e/0x100 [ 1818.921720][ C1] qlist_free_all+0x99/0x100 [ 1818.926361][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1818.931867][ C1] __kasan_kmalloc+0x22/0xb0 [ 1818.936498][ C1] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 1818.943039][ C1] ? ip6_setup_cork+0x930/0xf30 [ 1818.948002][ C1] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 1818.954683][ C1] kmemdup_noprof+0x2b/0x70 [ 1818.959311][ C1] ip6_setup_cork+0x930/0xf30 [ 1818.964027][ C1] ip6_make_skb+0x1c8/0x320 [ 1818.968565][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1818.974246][ C1] ? __pfx_ip6_make_skb+0x10/0x10 [ 1818.979303][ C1] ? ip6_dst_hoplimit+0x65/0x3e0 [ 1818.984379][ C1] ? ip6_dst_hoplimit+0x65/0x3e0 [ 1818.989364][ C1] ? ip6_dst_hoplimit+0x65/0x3e0 [ 1818.994433][ C1] udpv6_sendmsg+0x1db8/0x25c0 [ 1818.999415][ C1] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1819.004592][ C1] ? stack_trace_save+0xa9/0x100 [ 1819.009822][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1819.015719][ C1] ? inet_send_prepare+0x5c/0x270 [ 1819.020860][ C1] ? inet6_sendmsg+0xe4/0x120 [ 1819.025577][ C1] ____sys_sendmsg+0x5c7/0x9f0 [ 1819.030524][ C1] ? __might_fault+0xaf/0x130 [ 1819.035255][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1819.040587][ C1] ? import_iovec+0x73/0xa0 [ 1819.045760][ C1] ___sys_sendmsg+0x2a5/0x360 [ 1819.050470][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.055539][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1819.060778][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.065751][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 1819.071114][ C1] __sys_sendmmsg+0x27c/0x4e0 [ 1819.071155][ C0] net_ratelimit: 26172 callbacks suppressed [ 1819.071188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1819.075827][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1819.083351][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1819.094206][ C1] ? do_futex+0x333/0x420 [ 1819.094278][ C1] ? rcu_is_watching+0x15/0xb0 [ 1819.094314][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 1819.094347][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.094371][ C1] do_syscall_64+0x174/0x580 [ 1819.094395][ C1] ? trace_irq_disable+0x3b/0x140 [ 1819.094425][ C1] ? clear_bhb_loop+0x40/0x90 [ 1819.094452][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.094475][ C1] RIP: 0033:0x7fabb579ce59 [ 1819.094495][ C1] RSP: 002b:00007fabb661d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1819.094522][ C1] RAX: ffffffffffffffda RBX: 00007fabb5a15fa0 RCX: 00007fabb579ce59 [ 1819.094539][ C1] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 1819.094554][ C1] RBP: 00007fabb5832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1819.094569][ C1] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 1819.094584][ C1] R13: 00007fabb5a16038 R14: 00007fabb5a15fa0 R15: 00007ffef379f4d8 [ 1819.094622][ C1] [ 1819.094633][ C1] rcu: rcu_preempt kthread starved for 646 jiffies! g310713 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1819.094658][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1819.094669][ C1] rcu: RCU grace-period kthread stack dump: [ 1819.094678][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1819.094748][ C1] Call Trace: [ 1819.094757][ C1] [ 1819.094771][ C1] __schedule+0x1821/0x5740 [ 1819.094802][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.094859][ C1] ? __pfx___schedule+0x10/0x10 [ 1819.094902][ C1] ? schedule+0x90/0x360 [ 1819.094936][ C1] schedule+0x164/0x360 [ 1819.094970][ C1] schedule_timeout+0x158/0x2c0 [ 1819.095003][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1819.095032][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1819.095067][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1819.095098][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1819.095135][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1819.095173][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1819.095197][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1819.095218][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1819.095254][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1819.095290][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1819.095316][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1819.095344][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1819.095376][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1819.095402][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1819.095434][ C1] kthread+0x389/0x470 [ 1819.095472][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1819.095492][ C1] ? __pfx_kthread+0x10/0x10 [ 1819.095521][ C1] ret_from_fork+0x514/0xb70 [ 1819.095549][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.095572][ C1] ? __switch_to+0xc79/0x1410 [ 1819.095605][ C1] ? __pfx_kthread+0x10/0x10 [ 1819.095633][ C1] ret_from_fork_asm+0x1a/0x30 [ 1819.095678][ C1] [ 1819.095687][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1819.095702][ C1] CPU: 1 UID: 0 PID: 23155 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 1819.095725][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1819.095740][ C1] Workqueue: krds_cp_wq#2/7 rds_connect_worker [ 1819.102317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1819.112891][ C1] [ 1819.112903][ C1] RIP: 0010:lock_release+0x44/0x3c0 [ 1819.112929][ C1] Code: 8b 05 20 2b 96 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 23 2b 96 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 cc 5e 8e 0e <73> 0d e8 c5 f7 08 00 84 c0 0f 84 94 02 00 00 83 3d a6 91 8e 0e 00 [ 1819.112947][ C1] RSP: 0018:ffffc90000a07170 EFLAGS: 00000297 [ 1819.112969][ C1] RAX: 0000000000000001 RBX: ffffffff91582601 RCX: 0000000080000302 [ 1819.112984][ C1] RDX: ffffc90000a07201 RSI: ffffffff8176e256 RDI: ffffffff8e95cc20 [ 1819.113000][ C1] RBP: dffffc0000000000 R08: ffffc90000a08340 R09: 0000000000000000 [ 1819.113016][ C1] R10: ffffc90000a072f8 R11: fffff52000140e61 R12: ffffc90000a08350 [ 1819.113031][ C1] R13: ffffffff8176e256 R14: ffffffff8e95cc20 R15: ffffffff8176e256 [ 1819.113047][ C1] FS: 0000000000000000(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 1819.113065][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1819.113081][ C1] CR2: 00007fdccdd43850 CR3: 0000000099bee000 CR4: 00000000003526f0 [ 1819.113102][ C1] Call Trace: [ 1819.113112][ C1] [ 1819.113123][ C1] ? deref_stack_reg+0x19f/0x230 [ 1819.113154][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1819.113178][ C1] unwind_next_frame+0x1bba/0x2550 [ 1819.113211][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1819.113236][ C1] ? NF_HOOK+0x23e/0x3f0 [ 1819.113310][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1819.113350][ C1] arch_stack_walk+0x11b/0x150 [ 1819.113384][ C1] ? __br_forward+0x397/0x540 [ 1819.113410][ C1] stack_trace_save+0xa9/0x100 [ 1819.113439][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1819.113471][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1819.113507][ C1] kasan_save_track+0x3e/0x80 [ 1819.113535][ C1] ? kasan_save_track+0x3e/0x80 [ 1819.113562][ C1] ? kasan_save_free_info+0x46/0x50 [ 1819.113587][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1819.113614][ C1] ? kmem_cache_free+0x182/0x650 [ 1819.113643][ C1] ? skb_scrub_packet+0x2c8/0x3d0 [ 1819.113672][ C1] ? __dev_forward_skb2+0x28f/0x740 [ 1819.113727][ C1] ? veth_xmit+0x469/0xdb0 [ 1819.113807][ C1] ? dev_hard_start_xmit+0x2cd/0x830 [ 1819.113828][ C1] ? __dev_queue_xmit+0x14d9/0x3950 [ 1819.113849][ C1] ? br_dev_queue_push_xmit+0x370/0x4b0 [ 1819.113870][ C1] ? NF_HOOK+0x64e/0x6e0 [ 1819.113912][ C1] ? br_nf_post_routing+0xb66/0xfe0 [ 1819.113934][ C1] ? nf_hook_slow+0xc5/0x220 [ 1819.114006][ C1] ? NF_HOOK+0x23e/0x3f0 [ 1819.114025][ C1] ? br_forward_finish+0xd3/0x130 [ 1819.114044][ C1] ? br_nf_forward_finish+0xa5e/0xe90 [ 1819.114066][ C1] ? NF_HOOK+0x64e/0x6e0 [ 1819.114086][ C1] ? br_nf_forward_ip+0x7ef/0xa30 [ 1819.114108][ C1] ? nf_hook_slow+0xc5/0x220 [ 1819.114128][ C1] ? NF_HOOK+0x23e/0x3f0 [ 1819.114189][ C1] ? skb_scrub_packet+0x2c8/0x3d0 [ 1819.114216][ C1] kasan_save_free_info+0x46/0x50 [ 1819.114241][ C1] __kasan_slab_free+0x5c/0x80 [ 1819.114272][ C1] kmem_cache_free+0x182/0x650 [ 1819.114299][ C1] ? __skb_ext_put+0x221/0x2f0 [ 1819.114328][ C1] ? veth_xmit+0x60/0xdb0 [ 1819.119795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1819.123524][ C1] skb_scrub_packet+0x2c8/0x3d0 [ 1819.123560][ C1] __dev_forward_skb2+0x28f/0x740 [ 1819.123595][ C1] veth_xmit+0x469/0xdb0 [ 1819.123621][ C1] ? lock_acquire+0x106/0x350 [ 1819.123645][ C1] ? veth_xmit+0x60/0xdb0 [ 1819.123683][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 1819.123724][ C1] __dev_queue_xmit+0x14d9/0x3950 [ 1819.123757][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 1819.123785][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1819.123859][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.123889][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1819.123929][ C1] ? ip6table_mangle_hook+0x2b3/0x740 [ 1819.123982][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 1819.130491][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1819.135404][ C1] ? br_nf_dev_queue_xmit+0x4ee/0x25f0 [ 1819.135442][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 1819.135466][ C1] ? NF_HOOK+0xa2/0x6e0 [ 1819.135489][ C1] NF_HOOK+0x64e/0x6e0 [ 1819.135518][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1819.135544][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1819.135571][ C1] ? net_generic+0x1e/0x240 [ 1819.135593][ C1] ? net_generic+0x1e/0x240 [ 1819.135612][ C1] ? net_generic+0x1e/0x240 [ 1819.135633][ C1] ? skb_pull+0xc1/0x1d0 [ 1819.135660][ C1] br_nf_post_routing+0xb66/0xfe0 [ 1819.135684][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1819.135714][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1819.135740][ C1] nf_hook_slow+0xc5/0x220 [ 1819.135765][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1819.135789][ C1] NF_HOOK+0x23e/0x3f0 [ 1819.135814][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1819.135834][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1819.135852][ C1] ? net_generic+0x1e/0x240 [ 1819.135876][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1819.135905][ C1] ? net_generic+0x1e/0x240 [ 1819.135931][ C1] br_forward_finish+0xd3/0x130 [ 1819.135950][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1819.135976][ C1] br_nf_forward_finish+0xa5e/0xe90 [ 1819.136012][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1819.136040][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1819.136066][ C1] ? NF_HOOK+0xa2/0x6e0 [ 1819.136090][ C1] ? NF_HOOK+0xa2/0x6e0 [ 1819.136111][ C1] NF_HOOK+0x64e/0x6e0 [ 1819.136139][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1819.141779][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1819.145818][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1819.145846][ C1] ? net_generic+0x1e/0x240 [ 1819.145877][ C1] br_nf_forward_ip+0x7ef/0xa30 [ 1819.145900][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1819.145928][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 1819.145953][ C1] nf_hook_slow+0xc5/0x220 [ 1819.145979][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1819.146002][ C1] NF_HOOK+0x23e/0x3f0 [ 1819.146027][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1819.146047][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1819.146071][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1819.146095][ C1] ? br_flood+0x8e0/0xb80 [ 1819.146117][ C1] ? br_handle_vlan+0x61/0x530 [ 1819.146189][ C1] __br_forward+0x397/0x540 [ 1819.146208][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1819.146235][ C1] br_handle_frame_finish+0x1521/0x1c80 [ 1819.146259][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1819.146296][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1819.146340][ C1] ? ip6t_do_table+0x103/0x1560 [ 1819.152195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1819.156963][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1819.156996][ C1] ? nf_hook_slow+0x176/0x220 [ 1819.157022][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1819.157047][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1819.157082][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1819.157108][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1819.157131][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1819.157164][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1819.157200][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 1819.157225][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1819.157261][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1819.157288][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1819.157313][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1819.157350][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1819.157374][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 1819.157407][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1819.157430][ C1] br_handle_frame+0x1277/0x1510 [ 1819.157465][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1819.157487][ C1] ? chacha_block_generic+0x5dc/0xf10 [ 1819.157567][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1819.157591][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.163005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1819.170861][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1819.170887][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 1819.170931][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1819.170963][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1819.170997][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1819.171042][ C1] ? process_backlog+0x3eb/0x1950 [ 1819.171078][ C1] ? process_backlog+0x3eb/0x1950 [ 1819.171104][ C1] ? process_backlog+0x3eb/0x1950 [ 1819.171131][ C1] ? process_backlog+0x3eb/0x1950 [ 1819.171166][ C1] process_backlog+0x76d/0x1950 [ 1819.171216][ C1] __napi_poll+0xae/0x340 [ 1819.171240][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1819.171271][ C1] net_rx_action+0x627/0xf70 [ 1819.171337][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1819.171387][ C1] ? try_to_wake_up+0x7f2/0x1380 [ 1819.171434][ C1] handle_softirqs+0x22a/0x840 [ 1819.171461][ C1] ? do_softirq+0x76/0xd0 [ 1819.171490][ C1] ? __inet6_bind+0x30c/0xf60 [ 1819.171515][ C1] do_softirq+0x76/0xd0 [ 1819.171537][ C1] [ 1819.171546][ C1] [ 1819.171555][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1819.171578][ C1] __inet6_bind+0x30c/0xf60 [ 1819.171616][ C1] kernel_bind+0x13e/0x1c0 [ 1819.171640][ C1] ? irqentry_exit+0x218/0x8b0 [ 1819.171667][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 1819.171688][ C1] ? irqentry_exit+0x218/0x8b0 [ 1819.171726][ C1] ? rds_tcp_conn_path_connect+0x577/0x930 [ 1819.171804][ C1] rds_tcp_conn_path_connect+0x53e/0x930 [ 1819.171847][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1819.171876][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1819.171910][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1819.171934][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1819.171967][ C1] rds_connect_worker+0x1d8/0x290 [ 1819.171991][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1819.181501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1819.188221][ C1] process_scheduled_works+0xb5d/0x1860 [ 1819.188282][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1819.188314][ C1] ? assign_work+0x3d5/0x5e0 [ 1819.188350][ C1] worker_thread+0xa53/0xfc0 [ 1819.188403][ C1] kthread+0x389/0x470 [ 1819.188431][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1819.188452][ C1] ? __pfx_kthread+0x10/0x10 [ 1819.188480][ C1] ret_from_fork+0x514/0xb70 [ 1819.188507][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.188530][ C1] ? __switch_to+0xc79/0x1410 [ 1819.188563][ C1] ? __pfx_kthread+0x10/0x10 [ 1819.188591][ C1] ret_from_fork_asm+0x1a/0x30 [ 1819.188635][ C1] [ 1819.189271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1824.080843][ C1] net_ratelimit: 23404 callbacks suppressed [ 1824.080874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1824.080941][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1824.087500][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1824.087754][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1824.088470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1824.101789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1824.112273][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1824.112527][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1824.112852][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 1824.113109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0)