last executing test programs: 1m43.386505524s ago: executing program 3 (id=15824): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x52}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r7) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000c40)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x4004854) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 1m40.22728569s ago: executing program 3 (id=15833): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 1m39.956850722s ago: executing program 3 (id=15839): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4001) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829bd7000fddbdf25011052000000000002410074683a6970365f76746930000000000000000000004b6d024e438c12673d5afe201b7fc1f62d2de92786706375cf79e736085efb613ae26d3d1a96ffe9ccc875c2ab57b4a4d9e8791d3938bffa6e3c441a4d9addd4537cc7253ac5fcdb522b80a3443663aad7b6116867f0b8f18df29465c0ac13deb18df639fd0d2f787d8905ce5a44720bf8d132b5ac66917dedd55a8213b158d267fb76135dbf7c2542628624e2b324d53ae556d0d964bf848864f22a"], 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x45) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000001880)=@gcm_256={{0x304}, "e1a8375b6f203410", "88f8e480a74417a80f7404e3d15f0249400522bb3e39a720b4775071312959c9", "81e850ca", "a555464693bd1103"}, 0x38) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newtclass={0xa0, 0x28, 0x108, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x56982820bee6efd5, 0x10}, {0x5, 0xfff3}, {0x2, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xee, 0x81}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xf9, 0x4}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x40}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x750}}}, @TCA_RATE={0x6, 0x5, {0xfc}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="21000000000000000042810d3a97c26d45df43ec5a03c683c3409f17992986cb4d897086382d3dd67979864289145cabfce2bc9e5f5fada1a800ed8256257578ae07bb86f6930cc826c2525a889dbf2e731ed34205f4fecff6f71bb88aacff88e4f40f", @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, 0x0, 0x60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f00000003c0), 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r9, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) 1m21.271245051s ago: executing program 4 (id=15965): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) 1m20.710372532s ago: executing program 4 (id=15967): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000203030000000000000000000000000008000100010000000000"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[], 0x20}}, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) (async) clock_gettime(0x23eaa8d54bacd65c, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r4}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x200000, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x9}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2, 0x4, 0x799b, 0x0, 0x28e, 0x68}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r5, r6+60000000}, 0x0) 1m19.471180234s ago: executing program 4 (id=15971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="383eda000dae", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000086c0)={0x0, 0x0, &(0x7f0000008680)={&(0x7f0000001280)=ANY=[@ANYBLOB="180000000114010029bd7000fcdbdf27080001000000000007995ad0f916e876e5e82a5118a159f7e01d95637a600ec4be28d185ab88b14b5ee0a072d401f347ebfee479770781cb03742cf791c2741969e6a875bebcc912c399e4f3ccb9f7d228cfa3a4977c68ddcbb5efd35df93ff0edd180881f63e41231161a6caf3bf217c0375a1b41422f29ad9180f35ce3b3ee0da5488713363cb2022762d697a999589959d64c29cb3b7e5d942cd80747bd56328004d429cbda197570f63917b1d1ca263819b902d3"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYRESDEC=r3], 0x18}}, 0x4000) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000002000000020000005c00448058800a000100696e6e657200000048000280080002400000008408000340000000070800040800014000000000240005800c0001007061796c6f6164001400028008000340000000e10800024000000005090001003200000000140000001100010000000000000000000000000a00"/174], 0xb0}}, 0x0) listen(r3, 0x74) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, 0x0, &(0x7f0000000140)) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="2c0800000002000000004e230000"], 0x14}}, 0x800) 1m18.039288435s ago: executing program 4 (id=15976): syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ed5569", 0x20, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8001}]}, @dstopts={0x62}], @echo_reply}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1m17.871907903s ago: executing program 0 (id=15977): r0 = socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x8, 0x3}, 0x10) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000340)=""/226, &(0x7f0000000440)=0xe2) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="78e21913de1648830efb0391c9507895aa37a819438f0100fb8256723eee0c927d36ae50394c990821d231e8a2011410021980", @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080011000100000008000c00a80a000008000b00000000000600010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 1m16.481169453s ago: executing program 3 (id=15844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a000700", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140), 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf0000000}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0xc4}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @remote}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) 53.646644752s ago: executing program 2 (id=15979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=@delchain={0x24, 0x26, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff3}}}, 0x24}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e000b7300fc040000000000000000000000000000ff020000000000000000000000000001"], 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x3}], 0x2, 0x40002320, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 53.646323201s ago: executing program 0 (id=15980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) splice(r2, &(0x7f0000000000)=0x7b, r2, &(0x7f0000000040)=0x2, 0x7, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffed}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 53.646150926s ago: executing program 0 (id=15981): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x29}, 0xa267c844179227d1) 53.645693173s ago: executing program 2 (id=15982): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ab82846e2330e124f358d5fa35000000000000000000000010000000000000"], 0x50) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x3, r4, 0x22, r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x130f0d4, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'nr0\x00', &(0x7f00000002c0)=@ethtool_stats={0x1d, 0x8, [0x4, 0x6, 0x2, 0xffffffffffffffff, 0x2, 0x1ff, 0x5de, 0x4]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004010}, 0x4084) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 53.645411583s ago: executing program 1 (id=15983): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000880)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 53.644115563s ago: executing program 1 (id=15984): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4001, 0x200001, @empty, 0x3e}, 0x23) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="578d2dbd7000fbdbdf250200ff1f14000190080003007f0000010600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 53.643963197s ago: executing program 1 (id=15985): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) 53.643849803s ago: executing program 1 (id=15986): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000001c0)="db34", 0x2}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="12008f8f000000000000000000722dc0d8a75d3fee64a351586dd9863f7fa7764dd96e0756a86ac9def9dbf8c7d6753e4ed4872dc5561e67d18cd2e230376e9a3da07b3c0b57c218f2c5444163d6ced44e883a56c5a91892ed8a3e4f0f72ab33d60638676a4b05c989a7fe45721de1d669ab6715a6d8f7f2a0196e168d70861fa4dcff236af91915debcc1cf250d67d741797df32bc7fe7bf2fd3f"], 0x18, 0x240488d1}, 0x8c4) 53.643659159s ago: executing program 2 (id=15987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4013}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="02", 0x1}], 0x1, 0x0, 0x0, 0x4000080}, 0x4050000) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5d510c8c95024873}, 0x12000) 53.635856379s ago: executing program 0 (id=15988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000506050000000000a90000000000000005000100070000000900020073797a3200000000"], 0x28}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250f0000000800270001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000000)='\xba#^%!\x00', 0x4200, &(0x7f0000000100)={@_ha_fsid={[0x1]}, {0x0, 0x9, 0x0, 0x7fffffffffffffff}}, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x3}, {[0x6, 0x3, 0x7, 0xe]}, 0x2, 0x67, &(0x7f00000002c0)=""/103}) (async) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="55ee4addb0838779ff7a51df6a147ea6d9f4894d", 0x14}], 0x1}, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1d, 0x4, 0x4, 0x9, 0x4084, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r6, &(0x7f0000000480), 0x0}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="71104e00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) recvmsg(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000022) (async) recvmmsg(r7, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000003c00)=""/4108, 0x100c}, {&(0x7f0000002a00)=""/15, 0xf}], 0x3}, 0xec}], 0x1, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={r2, &(0x7f0000000800)="27ddd2f57a3bff1315a67be290b4abe75e06f7efd232bab3e68a3404e0da33996e8f6077a3b38e031af002736c2c19672c0c5de305eace0c8875628e115dbf605ba46b94e1c5da68ce865b3ae4213beeaaa473ca5486c5f24e59e4437ec21331a052000d064baa65006338f5f3cb9e5f9b03d3dd596f1fbe84014dac5d5f162d098effa1d9c435ed3a60384f2b26ad04ccf876e2d7c252215f20af7f61d273ab15fc25b848de89f4bda507f479452d7717c1859a013abee609287c5f79d3606d520c2d84269ff4d61db0c8566d6febe651b27a", &(0x7f0000000900)=""/22}, 0x20) (async) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000113dc0)={0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "0cbcde3e679f4f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000114dc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000114fc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000115fc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xe, "49ecf0fbf4e637"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000116fc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "91ea2dcc930ba8"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000117fc0)={0xd81e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "489e03bddeb8a0"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000118fc0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00001191c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "44511093f40e9d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f000011a1c0)={0x9, [{r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {0x0, r21}], 0x4, "92a1bdffa35091"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000011b1c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r13}, {0x0, r14}, {r15, r19}, {r20, r22}, {0x0, r24}, {r25}], 0x1, "dca5f60f38459d"}) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) 53.61350155s ago: executing program 1 (id=15989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000000780)=ANY=[], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 53.612699964s ago: executing program 2 (id=15990): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c08021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c937e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800"/92, 0x5c}], 0x1, 0x0, 0x5a, 0x1f00c00e}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 53.606883764s ago: executing program 3 (id=15991): setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=0x5, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2e, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x44000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x1d, &(0x7f0000000000), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRESOCT=r5, @ANYRES32=r5, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c0000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002000000ff020000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000000000000003000000000000000000000007000000000000000000000001"], 0x23c}}, 0x4000) 53.606437117s ago: executing program 4 (id=15992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x2, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) 53.391549333s ago: executing program 4 (id=15993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000ec0)={'sit0\x00', &(0x7f0000000dc0)={'gre0\x00', 0x0, 0xc57b77da66c4c14a, 0x40, 0x1000, 0x7, {{0x29, 0x4, 0x2, 0xd, 0xa4, 0x65, 0x0, 0xf4, 0x2, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp_addr={0x44, 0x24, 0xd3, 0x1, 0x8, [{@empty, 0xffffffff}, {@empty, 0x7}, {@local, 0x9}, {@loopback, 0x400}]}, @generic={0x82, 0x4, "acf5"}, @rr={0x7, 0x27, 0x15, [@multicast2, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}]}, @cipso={0x86, 0xa, 0x0, [{0x6, 0x4, "9a14"}]}, @generic={0x44, 0x12, "c4ea8ddfdf357a5bdece5181895bee14"}, @generic={0x94, 0xd, "0b879f551eaa0c008e8314"}, @rr={0x7, 0xf, 0x8, [@multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010102]}, @generic={0x7, 0x7, "3e03d71b0c"}]}}}}}) recvfrom$packet(r1, &(0x7f0000000580)=""/146, 0x92, 0x2000, &(0x7f0000000f00)={0x11, 0x1c, r5, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket(0x2b, 0x1, 0x1) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x20008055) listen(r7, 0x5) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x2, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xca0}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa80}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xc1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20080011}, 0x48c0) 53.267008938s ago: executing program 2 (id=15994): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="020108dd012918000e3580009f0001140000002f0600ac1414b0e0000003808a8972bdc933091ce132d730062376cabd413ad631bb8dfb24cc0e22", @ANYBLOB="e4f9b7cb031d9fd763a37847f78e440faf628d6712891472fc41b8aa2175bc07a1960541edf2e6ec"], 0xdd12}], 0x1, 0x0, 0x0, 0x20040090}, 0x10) 53.265141913s ago: executing program 0 (id=15995): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000380)='G', 0x0}, 0x20) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0x1}], 0x1}}], 0x1, 0x4000800) 53.240471535s ago: executing program 1 (id=15996): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r1, 0x11, 0x4, 0x0, 0x1000000000000) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x14) close(r2) 53.202049104s ago: executing program 3 (id=15997): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x7, 0x7fffffffffffffff}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000880)={0x1, 0xfffb, "2841f7", 0x6, 0xf8}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf250400000006000a006b983800080001"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r7], 0x44}, 0x1, 0x0, 0x0, 0x2408c844}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r5, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000015}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000040) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffff7fffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b383931432600b7adac15084db1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54, 0x0, 0x0, 0x6}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x3c, r10, 0x4, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r11, &(0x7f0000001540)={0x24, @none={0x0, 0x3}}, 0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4098000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1fff01e3bb9ad809d5e1cace81ed0b66bce0b42a9e1b518077c20708215c2c4b4ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300000000000000", 0xd8}], 0x1}, 0x48002) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r12, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r14, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 49.1199926s ago: executing program 0 (id=15998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r5, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_csum={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x6}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0xffffffffffffffff, &(0x7f0000000040)=0x47) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r13, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r14) r15 = getpid() sendmsg$unix(r14, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r15, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r12, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r15}]}, 0x38}, 0x1, 0x0, 0x0, 0x88000}, 0x24008001) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x22004874) 17.663377874s ago: executing program 2 (id=15999): syz_emit_ethernet(0x4a, &(0x7f0000000340)={@broadcast, @random="000000000400", @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x3, 0x3, 0x3c, 0x64, 0x0, 0x5, 0x6, 0x0, @empty, @empty, {[@noop, @ra={0x94, 0x4, 0x400}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2, 0x8, 0x4, 0x3, 0x8000, 0x4936, 0x0, 0x4e23, 0x4e21}, 0x3, 0x3}}}}}}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x10011, 0x2, 0x2, 0x5, 0xc}, 0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r1, 0x8b32, &(0x7f0000000040)) (async) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000440)={{[0xa279, 0x6, 0x3, 0x2]}, 0x0, 0x0, 0x7ff, 0x0, &(0x7f0000000380)=[{{@align=0x5, {0x8000, 0x8, 0x9, 0x4}}, 0x0, 0x0, 'rpfilter\x00'}, {{@_ha_fsid={[0x10000, 0x7fffffff]}, {0x8, 0x2, 0x4, 0xf}}, 0x5, 0x0, '\x00'}, {{@_ha_fsid={[0x8cd]}, {0x81, 0x3, 0x2, 0x100}}, 0x1, 0x0, 'raw\x00'}, {{@_ha_fsid={[0x179, 0x4]}, {0x0, 0x81, 0x2, 0x3}}, 0x7, 0x0, '!\x00'}]}) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c081}, 0x440c0) 0s ago: executing program 32 (id=15998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r5, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_csum={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x6}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0xffffffffffffffff, &(0x7f0000000040)=0x47) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r13, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r14) r15 = getpid() sendmsg$unix(r14, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r15, 0xee01, 0xee01}}}], 0x20, 0x10}, 0x80) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r12, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r15}]}, 0x38}, 0x1, 0x0, 0x0, 0x88000}, 0x24008001) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x22004874) kernel console output (not intermixed with test programs): ime: unknown flags 0xf4 [ 1556.939125][T28654] bond10: entered promiscuous mode [ 1556.982970][T28654] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1557.065067][T28676] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 1557.081313][T28647] bond10: (slave bridge8): making interface the new active one [ 1557.105090][T28647] bridge8: entered promiscuous mode [ 1557.129886][T28647] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 1557.424863][T28692] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.14691'. [ 1557.828324][T28707] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1557.881691][T28707] bond5 (unregistering): Released all slaves [ 1558.254392][T28742] netlink: 'syz.4.14704': attribute type 29 has an invalid length. [ 1558.305138][T28742] netlink: 'syz.4.14704': attribute type 29 has an invalid length. [ 1558.350146][T28743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14703'. [ 1558.368695][T28742] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1558.740477][T28781] syzkaller1: entered promiscuous mode [ 1558.777844][T28781] syzkaller1: entered allmulticast mode [ 1558.999593][T28799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14713'. [ 1559.197111][T28811] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1559.605308][T28828] netlink: 'syz.3.14716': attribute type 9 has an invalid length. [ 1559.741444][T28836] netlink: 272 bytes leftover after parsing attributes in process `syz.0.14718'. [ 1559.880730][T28840] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1559.897344][T28840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1559.943823][T28835] netlink: 'syz.0.14718': attribute type 1 has an invalid length. [ 1560.289206][T28816] speed is unknown, defaulting to 1000 [ 1560.557770][T28880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1560.565084][T28880] IPv6: NLM_F_CREATE should be set when creating new route [ 1560.572376][T28880] IPv6: NLM_F_CREATE should be set when creating new route [ 1560.855315][T28887] netlink: 'syz.4.14727': attribute type 1 has an invalid length. [ 1560.886293][T28889] netlink: 'syz.0.14729': attribute type 15 has an invalid length. [ 1560.937235][T28887] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1560.980535][T28894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14731'. [ 1561.052091][T28894] bond10: Invalid ad_actor_system MAC address. [ 1561.058598][T28894] bond10: option ad_actor_system: invalid value (1) [ 1561.070284][T28894] bond10 (unregistering): Released all slaves [ 1561.174307][T28887] bond5: entered promiscuous mode [ 1561.179844][T28887] bond5: entered allmulticast mode [ 1561.229228][T28885] macvlan0: entered promiscuous mode [ 1561.248816][T28885] macvlan0: entered allmulticast mode [ 1561.307603][T28885] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1561.588730][T28921] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.14737'. [ 1561.600664][T28923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14736'. [ 1561.600664][T28926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14736'. [ 1561.624880][T28931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14739'. [ 1561.627393][T28932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14739'. [ 1561.699159][T28939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14740'. [ 1561.716956][T28939] IPv6: NLM_F_CREATE should be specified when creating new route [ 1561.978560][T28956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14745'. [ 1562.013981][T28944] bond8: option fail_over_mac: invalid value (16) [ 1562.061325][T28944] bond8 (unregistering): Released all slaves [ 1562.163074][T28969] netlink: 'syz.0.14749': attribute type 11 has an invalid length. [ 1562.529846][T28988] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 1562.639571][T28993] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 1562.776190][ T3364] bond1: (slave geneve0): link status definitely down, disabling slave [ 1562.809036][ T3364] bond1: now running without any active interface! [ 1565.042459][T28962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1565.648223][T29120] bond11 (unregistering): Released all slaves [ 1565.733232][T29136] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1565.748251][T29136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14767'. [ 1565.952145][T29149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14771'. [ 1566.229386][T29161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14772'. [ 1566.327406][T29166] netlink: 'syz.0.14776': attribute type 3 has an invalid length. [ 1566.379127][T29166] openvswitch: netlink: Key type 30 is not supported [ 1566.455370][T29174] sctp: [Deprecated]: syz.0.14776 (pid 29174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1566.455370][T29174] Use struct sctp_sack_info instead [ 1566.517494][T29174] sctp: [Deprecated]: syz.0.14776 (pid 29174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1566.517494][T29174] Use struct sctp_sack_info instead [ 1566.933353][T29195] netlink: 'syz.1.14783': attribute type 7 has an invalid length. [ 1566.958335][T29195] netlink: 'syz.1.14783': attribute type 7 has an invalid length. [ 1567.048820][T29207] __nla_validate_parse: 1 callbacks suppressed [ 1567.048839][T29207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14781'. [ 1586.574821][T29219] netlink: 27 bytes leftover after parsing attributes in process `syz.1.14786'. [ 1586.623405][T29228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14789'. [ 1586.668296][T29231] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.14785'. [ 1586.973450][T29255] ip6gre2: entered promiscuous mode [ 1586.981273][T29255] ip6gre2: entered allmulticast mode [ 1586.988933][T27659] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1587.003391][T29255] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1587.016491][T27659] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1587.024958][T17851] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1587.066557][T27871] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1587.361110][T29269] netlink: 'syz.0.14800': attribute type 18 has an invalid length. [ 1587.379517][T29269] netlink: 'syz.0.14800': attribute type 18 has an invalid length. [ 1587.398618][T29271] mac80211_hwsim hwsim143 wlan0: entered promiscuous mode [ 1587.407838][T29271] batman_adv: batadv0: Adding interface: wlan0 [ 1587.420281][T29271] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.450794][T29271] batman_adv: batadv0: Interface activated: wlan0 [ 1587.524422][T29279] netem: change failed [ 1587.621280][T29289] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 1587.654082][T29291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14807'. [ 1587.734778][T23623] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1587.782702][T29293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14807'. [ 1587.802261][T29291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14807'. [ 1587.811567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.100328][T29317] syzkaller0: entered promiscuous mode [ 1588.117329][T29317] syzkaller0: entered allmulticast mode [ 1588.128421][T23623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.412215][T29334] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1588.491709][T29339] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14823'. [ 1588.689282][T29350] sctp: [Deprecated]: syz.0.14825 (pid 29350) Use of int in maxseg socket option. [ 1588.689282][T29350] Use struct sctp_assoc_value instead [ 1588.717339][T29349] syzkaller1: entered promiscuous mode [ 1588.723007][T29349] syzkaller1: entered allmulticast mode [ 1588.731262][T29350] sctp: [Deprecated]: syz.0.14825 (pid 29350) Use of int in maxseg socket option. [ 1588.731262][T29350] Use struct sctp_assoc_value instead [ 1588.845613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.876799][T29358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14827'. [ 1588.911555][T29358] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14827'. [ 1589.135386][T29372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14833'. [ 1589.183596][T29372] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1589.197415][T29372] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1589.206394][T29372] gretap1: entered promiscuous mode [ 1589.211839][T29372] gretap1: entered allmulticast mode [ 1589.597950][T29398] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 1589.606529][T29401] xt_TCPMSS: Only works on TCP SYN packets [ 1589.790034][T29412] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1589.824654][T29412] netlink: 'syz.1.14845': attribute type 18 has an invalid length. [ 1589.886040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.060793][T29431] veth1_macvtap: left promiscuous mode [ 1590.070241][T29431] macsec0: entered promiscuous mode [ 1590.080355][T29431] macsec0: entered allmulticast mode [ 1590.109045][T29431] veth1_macvtap: entered promiscuous mode [ 1590.125102][T29431] veth1_macvtap: entered allmulticast mode [ 1590.150598][T29431] macsec0: left promiscuous mode [ 1590.158200][T29431] macsec0: left allmulticast mode [ 1590.170257][T29431] veth1_macvtap: left allmulticast mode [ 1590.240087][T29437] bridge6: entered promiscuous mode [ 1590.253053][T29437] bridge6: entered allmulticast mode [ 1590.491091][T29459] x_tables: unsorted underflow at hook 2 [ 1590.704451][T29466] netlink: 'syz.1.14864': attribute type 9 has an invalid length. [ 1590.925590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.054354][T29499] netlink: 'syz.1.14873': attribute type 4 has an invalid length. [ 1591.182553][T27864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.211116][T29505] veth1: entered allmulticast mode [ 1591.263677][T29512] nbd: must specify a size in bytes for the device [ 1591.270972][T29512] nbd: couldn't find device at index 0 [ 1591.326112][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1591.394177][T29521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1591.787383][T29551] netlink: 'syz.4.14889': attribute type 1 has an invalid length. [ 1591.815267][T29551] __nla_validate_parse: 13 callbacks suppressed [ 1591.815283][T29551] netlink: 88 bytes leftover after parsing attributes in process `syz.4.14889'. [ 1591.841194][T29551] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14889'. [ 1591.867711][T29551] netlink: 'syz.4.14889': attribute type 1 has an invalid length. [ 1591.888667][T29559] xt_l2tp: unknown flags: 10 [ 1591.893392][T29551] netlink: 634 bytes leftover after parsing attributes in process `syz.4.14889'. [ 1591.952019][T29563] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.14892'. [ 1591.966806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.981393][T29563] netlink: 'syz.2.14892': attribute type 4 has an invalid length. [ 1592.003864][T29565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14893'. [ 1592.178057][T29582] netlink: 'syz.2.14897': attribute type 1 has an invalid length. [ 1592.186813][T29582] netlink: 'syz.2.14897': attribute type 11 has an invalid length. [ 1592.194767][T29582] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14897'. [ 1592.290684][T29582] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1592.322204][T29582] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1592.335251][T29582] gretap1: entered promiscuous mode [ 1592.344115][T29582] gretap1: entered allmulticast mode [ 1592.737303][T29617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14900'. [ 1593.005999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.045643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.208344][T27864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.085630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.094587][T29572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1595.128809][T29631] netlink: 'syz.0.14908': attribute type 1 has an invalid length. [ 1595.145770][T29631] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14908'. [ 1595.197981][T29631] workqueue: Failed to create a rescuer kthread for wq "phy10": -EINTR [ 1595.462670][T29672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14918'. [ 1595.508498][T29682] netlink: 'syz.2.14920': attribute type 1 has an invalid length. [ 1595.563509][T29682] netlink: 'syz.2.14920': attribute type 2 has an invalid length. [ 1595.604554][T29688] netlink: 'syz.1.14922': attribute type 13 has an invalid length. [ 1595.607433][T29690] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14923'. [ 1595.653615][T29688] gretap0: refused to change device tx_queue_len [ 1595.708735][T29688] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1596.126081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.288553][T29732] syzkaller0: entered promiscuous mode [ 1596.294231][T29732] syzkaller0: entered allmulticast mode [ 1596.829592][T29774] sctp: [Deprecated]: syz.1.14941 (pid 29774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1596.829592][T29774] Use struct sctp_sack_info instead [ 1596.887191][T29779] __nla_validate_parse: 4 callbacks suppressed [ 1596.887207][T29779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14942'. [ 1596.941574][T29781] openvswitch: netlink: IP tunnel dst address not specified [ 1597.023707][T29784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14943'. [ 1597.067478][T29786] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14944'. [ 1597.127821][T29786] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14944'. [ 1597.165650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.261610][T27865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.586317][T29765] speed is unknown, defaulting to 1000 [ 1597.949738][T29827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14950'. [ 1598.205740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.245844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.285720][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1600.293523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.307513][T27865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.824246][T29832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14956'. [ 1600.932074][T29838] syzkaller0: entered promiscuous mode [ 1600.976075][T29838] syzkaller0: entered allmulticast mode [ 1600.981949][T29836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14956'. [ 1601.000908][T29838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14957'. [ 1601.325616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.480434][T29860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14965'. [ 1601.595478][T29867] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14966'. [ 1601.741554][T29867] xt_hashlimit: size too large, truncated to 1048576 [ 1601.842446][T29871] xt_CT: No such helper "snmp_trap" [ 1602.365847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.546060][T29925] lo: left promiscuous mode [ 1602.584652][T29925] tunl0: left promiscuous mode [ 1602.600321][T29927] __nla_validate_parse: 3 callbacks suppressed [ 1602.600340][T29927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14976'. [ 1602.609127][T29925] gre0: left promiscuous mode [ 1602.609251][T29925] gretap0: left promiscuous mode [ 1602.609368][T29925] erspan0: left promiscuous mode [ 1602.609483][T29925] ip_vti0: left promiscuous mode [ 1602.883012][T29925] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1602.933074][T29934] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14978'. [ 1603.309440][T29948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14984'. [ 1603.328596][T27864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.351804][T29948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14984'. [ 1603.362398][T29942] syzkaller0: entered promiscuous mode [ 1603.377559][T29942] syzkaller0: entered allmulticast mode [ 1603.405638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.111672][T30000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14999'. [ 1604.228396][T30007] netlink: 'syz.0.15001': attribute type 32 has an invalid length. [ 1604.257247][T30007] netlink: 776 bytes leftover after parsing attributes in process `syz.0.15001'. [ 1604.361251][T30016] sctp: [Deprecated]: syz.1.15004 (pid 30016) Use of int in maxseg socket option. [ 1604.361251][T30016] Use struct sctp_assoc_value instead [ 1604.445620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.559806][T30027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15006'. [ 1604.758729][T30032] syzkaller0: entered promiscuous mode [ 1604.764440][T30032] syzkaller0: entered allmulticast mode [ 1605.485781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.371086][T27865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.527719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.696825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.705858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.328930][T27864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.342465][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1607.343453][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1608.612442][ C1] net_ratelimit: 1 callbacks suppressed [ 1608.612463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.049173][T30070] bridge0: port 1(batadv1) entered blocking state [ 1609.056466][T30070] bridge0: port 1(batadv1) entered disabled state [ 1609.063115][T30070] batadv1: entered allmulticast mode [ 1609.084036][T30070] batadv1: entered promiscuous mode [ 1609.101700][T30074] netlink: 'syz.3.15018': attribute type 2 has an invalid length. [ 1609.127012][T30074] netlink: 'syz.3.15018': attribute type 2 has an invalid length. [ 1609.314854][T30080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15020'. [ 1609.445560][T30089] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1609.483955][T30093] tipc: Enabling of bearer rejected, failed to enable media [ 1609.538663][T30100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15028'. [ 1609.547225][T27657] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1609.558851][T27657] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1609.645607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.742064][T30110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15030'. [ 1609.793327][T30116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15031'. [ 1609.994462][T30126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15031'. [ 1610.192434][T30110] ipvlan2: entered allmulticast mode [ 1610.200065][T30110] syz_tun: entered allmulticast mode [ 1610.366945][T27864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.531914][T30134] netlink: 'syz.3.15037': attribute type 1 has an invalid length. [ 1610.552887][T30134] netlink: 'syz.3.15037': attribute type 4 has an invalid length. [ 1610.568374][T30134] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15037'. [ 1610.629879][T30138] IPVS: set_ctl: invalid protocol: 51 172.30.3.3:20001 [ 1610.637140][T30134] .`: renamed from bond0 (while UP) [ 1610.685609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.978076][T30159] netlink: 'syz.1.15044': attribute type 3 has an invalid length. [ 1611.014965][T30159] netlink: 'syz.1.15044': attribute type 1 has an invalid length. [ 1611.071392][T30159] netlink: 212 bytes leftover after parsing attributes in process `syz.1.15044'. [ 1611.102043][T30163] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15045'. [ 1611.145180][T30166] netlink: 45 bytes leftover after parsing attributes in process `syz.4.15046'. [ 1611.550548][T30185] netlink: 'syz.4.15050': attribute type 10 has an invalid length. [ 1611.624172][T30192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15052'. [ 1611.653906][T30192] netlink: 'syz.1.15052': attribute type 18 has an invalid length. [ 1611.696593][T30192] netlink: 'syz.1.15052': attribute type 18 has an invalid length. [ 1611.725945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.574320][T24472] C: left allmulticast mode [ 1612.765657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.775848][T30257] netlink: 'syz.2.15065': attribute type 21 has an invalid length. [ 1612.808218][T30257] netlink: 'syz.2.15065': attribute type 22 has an invalid length. [ 1612.831827][T30257] netlink: 'syz.2.15065': attribute type 23 has an invalid length. [ 1613.226404][T24472] batman_adv: batadv0: Removing interface: gretap1 [ 1613.241482][T30271] IPv6: NLM_F_CREATE should be specified when creating new route [ 1613.406400][T27871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.500461][T24472] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1613.508808][T24472] bridge3 (unregistering): left promiscuous mode [ 1613.515176][T24472] bridge3 (unregistering): left allmulticast mode [ 1613.651185][T24472] bond1 (unregistering): Released all slaves [ 1613.665103][T24472] bond0 (unregistering): Released all slaves [ 1613.681376][T24472] bond2 (unregistering): Released all slaves [ 1613.701577][T24472] bond3 (unregistering): Released all slaves [ 1613.717327][T24472] bond4 (unregistering): Released all slaves [ 1613.732560][T24472] bond5 (unregistering): Released all slaves [ 1613.805918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.818905][T30082] Bluetooth: hci3: command 0x0405 tx timeout [ 1613.945114][T24472] : left promiscuous mode [ 1614.081813][T24472] : left promiscuous mode [ 1614.153540][T30284] erspan0: entered promiscuous mode [ 1614.237191][T30290] veth0: entered promiscuous mode [ 1614.256324][T30289] veth0: left promiscuous mode [ 1614.467026][T30295] syzkaller1: entered promiscuous mode [ 1614.479171][T30295] syzkaller1: entered allmulticast mode [ 1614.768772][T30324] __nla_validate_parse: 16 callbacks suppressed [ 1614.768878][T30324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15081'. [ 1615.156730][T30344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15084'. [ 1615.302465][T30347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15088'. [ 1615.662291][T30363] validate_nla: 3 callbacks suppressed [ 1615.662311][T30363] netlink: 'syz.2.15092': attribute type 9 has an invalid length. [ 1615.793478][T24472] hsr_slave_0: left promiscuous mode [ 1615.799999][T24472] hsr_slave_1: left promiscuous mode [ 1615.809943][T24472] veth0_macvtap: left promiscuous mode [ 1616.319187][T30376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15095'. [ 1616.463820][T27864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.926054][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1616.934801][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.587361][T17851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.607013][ T749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.636275][T17851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.648193][T12972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.925271][T30329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1617.935309][T30336] nbd: couldn't find a device at index 1048580 [ 1617.965604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.143658][T30399] tipc: Enabled bearer , priority 0 [ 1618.163217][T30399] syzkaller0: entered promiscuous mode [ 1618.174403][T30399] syzkaller0: entered allmulticast mode [ 1618.205137][T30406] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1618.249579][T30406] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1618.259228][T30406] gretap1: entered promiscuous mode [ 1618.264815][T30406] gretap1: entered allmulticast mode [ 1618.308557][T30398] tipc: Resetting bearer [ 1618.381566][T30398] tipc: Disabling bearer [ 1618.514686][T30421] xt_CT: No such helper "snmp_trap" [ 1618.792710][T30439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15114'. [ 1618.817855][T30436] sctp: [Deprecated]: syz.0.15112 (pid 30436) Use of int in max_burst socket option. [ 1618.817855][T30436] Use struct sctp_assoc_value instead [ 1618.862690][T30444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15114'. [ 1618.911852][T30444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15114'. [ 1618.965376][T30444] netlink: 10 bytes leftover after parsing attributes in process `syz.2.15114'. [ 1619.005622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.018123][T30452] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1619.024404][T30444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15114'. [ 1619.158573][T30454] 8021q: VLANs not supported on gre0 [ 1619.194214][T30454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15118'. [ 1619.197788][T30458] syzkaller1: entered promiscuous mode [ 1619.229737][T30454] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1619.255758][T30458] syzkaller1: entered allmulticast mode [ 1619.280265][T30454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1620.013019][T30529] tipc: Enabling of bearer rejected, failed to enable media [ 1620.029725][T30529] tipc: Enabling of bearer rejected, failed to enable media [ 1620.041396][T30529] tipc: Enabling of bearer rejected, failed to enable media [ 1620.050211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.143434][T30525] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1620.439860][T30551] syzkaller0: entered promiscuous mode [ 1620.446052][T30551] syzkaller0: entered allmulticast mode [ 1620.469784][T30553] __nla_validate_parse: 5 callbacks suppressed [ 1620.470224][T30553] netlink: 288 bytes leftover after parsing attributes in process `syz.1.15144'. [ 1620.489896][T30551] netlink: zone id is out of range [ 1620.530765][T30551] netlink: zone id is out of range [ 1620.537662][T30551] netlink: zone id is out of range [ 1620.538716][T30555] netlink: zone id is out of range [ 1620.553060][T30551] netlink: zone id is out of range [ 1620.560574][T30551] netlink: zone id is out of range [ 1620.818073][T30558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15146'. [ 1621.014323][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1621.045161][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1621.075214][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1621.093482][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1621.106881][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1621.520065][T30591] syzkaller0: entered promiscuous mode [ 1621.522771][T30594] netlink: 'syz.3.15155': attribute type 1 has an invalid length. [ 1621.536253][T30591] syzkaller0: entered allmulticast mode [ 1621.621764][T30595] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1621.623718][T30594] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1621.666810][T30591] tipc: Started in network mode [ 1621.685415][T30591] tipc: Node identity 3ee7fc60cb88, cluster identity 246 [ 1621.694375][T30591] tipc: Enabled bearer , priority 0 [ 1621.711739][T30590] tipc: Resetting bearer [ 1621.779952][T30590] tipc: Disabling bearer [ 1621.889763][T30615] netlink: 'syz.0.15159': attribute type 1 has an invalid length. [ 1622.162349][T30631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15165'. [ 1622.272185][T30635] netlink: 'syz.3.15166': attribute type 1 has an invalid length. [ 1622.274637][T30571] speed is unknown, defaulting to 1000 [ 1622.817728][T30667] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15174'. [ 1623.031573][T30571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.045970][T30571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.057016][T30571] bridge_slave_0: entered allmulticast mode [ 1623.083679][T30571] bridge_slave_0: entered promiscuous mode [ 1623.108736][T30571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.119328][T30571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.128516][T30571] bridge_slave_1: entered allmulticast mode [ 1623.145231][T30571] bridge_slave_1: entered promiscuous mode [ 1623.146989][T30687] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15179'. [ 1623.168089][ T5635] Bluetooth: hci2: command tx timeout [ 1623.225174][T30571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.241541][T30571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.292293][T30571] team0: Port device team_slave_0 added [ 1623.320210][T30571] team0: Port device team_slave_1 added [ 1623.381701][T30571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1623.390586][T30571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1623.431914][T30571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1623.467721][T30571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1623.486964][T30571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1623.530126][T30571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1623.547659][T30697] geneve1: entered allmulticast mode [ 1623.660046][T30571] hsr_slave_0: entered promiscuous mode [ 1623.683373][T30571] hsr_slave_1: entered promiscuous mode [ 1623.690621][T30571] debugfs: 'hsr0' already exists in 'hsr' [ 1623.701665][T30571] Cannot create hsr debugfs directory [ 1623.768339][T30708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15188'. [ 1623.803284][T30712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15189'. [ 1623.962213][T30715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15188'. [ 1623.972096][T30724] x_tables: duplicate underflow at hook 2 [ 1624.002074][T30724] x_tables: duplicate underflow at hook 2 [ 1624.029907][T30726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15192'. [ 1624.205597][ C1] net_ratelimit: 62 callbacks suppressed [ 1624.205620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.220546][T30733] netlink: 'syz.0.15195': attribute type 10 has an invalid length. [ 1624.244464][T30735] netlink: 'syz.3.15194': attribute type 21 has an invalid length. [ 1624.246856][T30733] veth1_macvtap: left promiscuous mode [ 1624.261032][T30736] netlink: 9 bytes leftover after parsing attributes in process `syz.0.15195'. [ 1624.265369][T30733] veth1_macvtap: entered promiscuous mode [ 1624.279898][T30733] .`: (slave macsec0): Enslaving as an active interface with an up link [ 1624.600600][T30571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1624.916415][T30571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.030642][T30763] IPVS: Unknown mcast interface: vcan0 [ 1625.159826][T30571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.161537][T30767] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1625.217421][T30771] syzkaller1: entered promiscuous mode [ 1625.228618][T30771] syzkaller1: entered allmulticast mode [ 1625.245916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.246185][ T5635] Bluetooth: hci2: command tx timeout [ 1625.342721][T30571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.372667][T30776] netlink: 'syz.4.15211': attribute type 1 has an invalid length. [ 1625.441178][T30780] xt_hashlimit: size too large, truncated to 1048576 [ 1625.800840][T30787] __nla_validate_parse: 2 callbacks suppressed [ 1625.800871][T30787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15214'. [ 1626.061473][T30811] ipt_REJECT: ECHOREPLY no longer supported. [ 1626.086601][T30571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1626.112213][T30571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1626.116828][T30813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15221'. [ 1626.134474][T30571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1626.161657][T30571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1626.174744][T30571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1626.188229][T30571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1626.220289][T30571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1626.238273][T30571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1626.286058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.434978][T30821] ipvlan4: entered promiscuous mode [ 1626.709187][T30571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.743247][T30571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1626.753554][T30849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1626.776407][T27865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.793818][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.801018][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1626.812353][T30849] netlink: 'syz.4.15229': attribute type 2 has an invalid length. [ 1626.840032][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.847225][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.261209][T30879] netlink: 'syz.0.15236': attribute type 7 has an invalid length. [ 1627.325659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.327714][ T5635] Bluetooth: hci2: command tx timeout [ 1627.481993][T30886] syzkaller1: entered promiscuous mode [ 1627.498757][T30886] syzkaller1: entered allmulticast mode [ 1627.569426][T27865] page_pool_release_retry() stalled pool shutdown: id 476, 1 inflight 60 sec [ 1627.764352][T30903] openvswitch: netlink: Key type 132 is out of range max 32 [ 1627.840954][T30913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15240'. [ 1627.929598][T30571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.944489][T30917] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1628.158794][T30932] lo: entered promiscuous mode [ 1628.183873][T30932] tunl0: entered promiscuous mode [ 1628.202867][T30932] gre0: entered promiscuous mode [ 1628.204473][T30939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15247'. [ 1628.223221][T30932] gretap0: entered promiscuous mode [ 1628.251654][T30932] ip_vti0: entered promiscuous mode [ 1628.273760][T30931] netlink: 666 bytes leftover after parsing attributes in process `syz.4.15246'. [ 1628.300624][T30571] veth0_vlan: entered promiscuous mode [ 1628.310778][T30928] netlink: 72 bytes leftover after parsing attributes in process `syz.4.15246'. [ 1628.352022][T30571] veth1_vlan: entered promiscuous mode [ 1628.365721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.490555][T30571] veth0_macvtap: entered promiscuous mode [ 1628.507570][T30949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15251'. [ 1628.543940][T30571] veth1_macvtap: entered promiscuous mode [ 1628.670886][T30961] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.15253'. [ 1628.709376][T30571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1628.750981][T30571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1628.868429][T27659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.879983][T23179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.948115][T23179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.005354][T24472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.039579][T30981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15255'. [ 1629.406137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.414957][ T5635] Bluetooth: hci2: command tx timeout [ 1629.444336][ T749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.503846][ T749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.516637][T30994] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1629.579793][T31000] netlink: 'syz.2.15260': attribute type 29 has an invalid length. [ 1629.601096][T31000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15260'. [ 1629.628960][T24472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.651378][T24472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.759468][T31008] netlink: 'syz.4.15261': attribute type 11 has an invalid length. [ 1629.788463][T31008] netlink: 'syz.4.15261': attribute type 11 has an invalid length. [ 1629.815967][T27867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.397996][T31044] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 1630.445637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.572047][T31054] Cannot find del_set index 4 as target [ 1630.639725][T31056] syzkaller1: entered promiscuous mode [ 1630.649058][T31064] Cannot find set identified by id 0 to match [ 1630.659829][T31056] syzkaller1: entered allmulticast mode [ 1630.701226][T31060] netlink: 'syz.0.15275': attribute type 10 has an invalid length. [ 1630.839799][T31060] ipvlan0: entered allmulticast mode [ 1630.853615][T31060] veth0_vlan: entered allmulticast mode [ 1631.177656][T31090] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1631.199048][T31090] syzkaller1: linktype set to 823 [ 1631.224634][T31090] syzkaller1: tun_chr_ioctl cmd 2155910208 [ 1631.485633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.602613][T31118] __nla_validate_parse: 4 callbacks suppressed [ 1631.602631][T31118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15292'. [ 1631.830102][T31131] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15293'. [ 1632.087103][T31144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15299'. [ 1632.526085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.846668][T27867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.151418][T31210] tunl0: entered promiscuous mode [ 1633.183088][T31210] netlink: 'syz.2.15316': attribute type 3 has an invalid length. [ 1633.211963][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15320'. [ 1633.232804][T31210] netlink: 9 bytes leftover after parsing attributes in process `syz.2.15316'. [ 1633.565833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.605613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.890851][T27867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.052084][T31226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1636.067151][T31244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15325'. [ 1636.140852][T27659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.223145][T31248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15325'. [ 1636.243530][T31256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1636.262863][T31259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1636.828191][T31286] netlink: 'syz.2.15339': attribute type 1 has an invalid length. [ 1636.932208][T31286] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1636.941565][T31286] netlink: 'syz.2.15339': attribute type 1 has an invalid length. [ 1636.952309][T31286] netlink: 'syz.2.15339': attribute type 1 has an invalid length. [ 1636.973359][T31286] netlink: 'syz.2.15339': attribute type 1 has an invalid length. [ 1636.982226][T31286] netlink: 'syz.2.15339': attribute type 1 has an invalid length. [ 1636.992170][T31286] netlink: 'syz.2.15339': attribute type 1 has an invalid length. [ 1637.000519][T31286] netlink: 'syz.2.15339': attribute type 1 has an invalid length. [ 1637.010703][T31286] netlink: 'syz.2.15339': attribute type 1 has an invalid length. [ 1637.020452][T31286] netlink: 'syz.2.15339': attribute type 1 has an invalid length. [ 1637.165676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.434332][T31264] 8021q: adding VLAN 0 to HW filter on device .` [ 1637.455266][T31327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15350'. [ 1637.473121][T31326] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15349'. [ 1637.489168][T31327] bridge: RTM_NEWNEIGH with invalid ether address [ 1637.855462][T31344] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15355'. [ 1637.929335][T31352] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1637.947822][T31352] syzkaller1: linktype set to 823 [ 1637.972755][T31352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15359'. [ 1638.083517][T31352] netlink: 51 bytes leftover after parsing attributes in process `syz.3.15359'. [ 1638.153746][T31357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15359'. [ 1638.205765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.282615][T31365] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15362'. [ 1638.583717][T31375] validate_nla: 57 callbacks suppressed [ 1638.583740][T31375] netlink: 'syz.3.15366': attribute type 1 has an invalid length. [ 1638.630072][T31375] netlink: 280 bytes leftover after parsing attributes in process `syz.3.15366'. [ 1638.955359][T27871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.248079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.491065][T31408] netlink: 'syz.0.15375': attribute type 1 has an invalid length. [ 1639.514524][T31408] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15375'. [ 1639.533594][T31408] netlink: 'syz.0.15375': attribute type 1 has an invalid length. [ 1639.542054][T31408] netlink: 'syz.0.15375': attribute type 8 has an invalid length. [ 1639.551905][T31408] netlink: 582 bytes leftover after parsing attributes in process `syz.0.15375'. [ 1639.716297][T31413] tipc: Enabling of bearer rejected, failed to enable media [ 1639.910876][T31428] netlink: 'syz.1.15379': attribute type 1 has an invalid length. [ 1639.996549][T31432] netlink: 'syz.2.15382': attribute type 1 has an invalid length. [ 1640.286134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.497991][T31455] netlink: 'syz.1.15391': attribute type 7 has an invalid length. [ 1640.912613][T31476] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1640.963616][T31478] netlink: 'syz.2.15398': attribute type 1 has an invalid length. [ 1641.010274][T31485] x_tables: duplicate underflow at hook 1 [ 1641.012303][T31478] netlink: 'syz.2.15398': attribute type 7 has an invalid length. [ 1641.034260][T31478] netlink: 'syz.2.15398': attribute type 8 has an invalid length. [ 1641.087229][T31479] mac80211_hwsim hwsim167 wlan0: entered promiscuous mode [ 1641.325799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.969031][T27871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.366122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.812800][T30082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1642.847797][T30082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1642.863286][T30082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1642.873834][T30082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1642.891970][T30082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1643.405776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.432570][T31587] gretap0: entered promiscuous mode [ 1643.463055][T31587] vlan3: entered promiscuous mode [ 1643.464435][T31590] __nla_validate_parse: 9 callbacks suppressed [ 1643.464465][T31590] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15423'. [ 1643.503172][T31592] x_tables: duplicate underflow at hook 3 [ 1643.623727][T31592] can: request_module (can-proto-0) failed. [ 1644.446352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.742606][T31643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15433'. [ 1644.902887][T24472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1644.951284][T24472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.978206][T24472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45733 - 0 [ 1645.006343][T27867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.008444][T30082] Bluetooth: hci0: command tx timeout [ 1645.267353][T31564] speed is unknown, defaulting to 1000 [ 1645.410288][T24472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.444554][T24472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.489627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.502365][T24472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45733 - 0 [ 1645.667165][T31662] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1645.683645][T31662] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 1645.722160][T31662] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1645.750498][T24472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.777764][T24472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.804798][T24472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45733 - 0 [ 1646.000441][T24472] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.010427][T24472] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.022823][T24472] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 45733 - 0 [ 1646.096137][T31674] syzkaller0: entered promiscuous mode [ 1646.101703][T31674] syzkaller0: entered allmulticast mode [ 1646.525689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.099816][T30082] Bluetooth: hci0: command tx timeout [ 1647.573959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.060185][T27867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.330825][T31652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1648.606125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.180879][T30082] Bluetooth: hci0: command tx timeout [ 1649.645684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.685699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.861866][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1651.086440][T27871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.255400][T30082] Bluetooth: hci0: command tx timeout [ 1651.689494][T31710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15446'. [ 1651.751625][T31714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15446'. [ 1651.810270][T31713] netlink: 404 bytes leftover after parsing attributes in process `syz.1.15448'. [ 1651.816061][T31710] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15446'. [ 1651.831751][T31713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15448'. [ 1651.840988][T31713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15448'. [ 1651.850775][T31713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15448'. [ 1652.291581][T31722] syzkaller0: entered promiscuous mode [ 1652.305780][T31722] syzkaller0: entered allmulticast mode [ 1652.772333][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.803751][T31755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15455'. [ 1653.805710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.147099][T27871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.845727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.890674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.938778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.175115][T27864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.751466][T31747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15457'. [ 1657.879711][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1657.950047][T24472] bridge_slave_1: left allmulticast mode [ 1657.963007][T24472] bridge_slave_1: left promiscuous mode [ 1657.965711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.978528][T24472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.004952][T24472] bridge_slave_0: left allmulticast mode [ 1658.025893][T24472] bridge_slave_0: left promiscuous mode [ 1658.042221][T24472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.694417][T24472] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 1658.704111][T24472] ip6gre1 (unregistering): left promiscuous mode [ 1659.006043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.542439][T24472] bond8 (unregistering): (slave bridge7): Releasing active interface [ 1659.724737][T24472] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1659.737663][T24472] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.753941][T24472] .` (unregistering): (slave macsec0): Releasing backup interface [ 1659.763883][T24472] veth1_macvtap: left promiscuous mode [ 1659.772453][T24472] .` (unregistering): Released all slaves [ 1659.787927][T24472] bond1 (unregistering): Released all slaves [ 1659.813485][T24472] bond2 (unregistering): Released all slaves [ 1659.845189][T24472] bond3 (unregistering): Released all slaves [ 1659.864876][T24472] bond4 (unregistering): Released all slaves [ 1659.887136][T24472] bond5 (unregistering): Released all slaves [ 1659.912097][T24472] bond6 (unregistering): Released all slaves [ 1659.941360][T24472] bond0 (unregistering): Released all slaves [ 1659.962786][T24472] bond7 (unregistering): Released all slaves [ 1659.995469][T24472] bond8 (unregistering): Released all slaves [ 1660.014751][T24472] bond9 (unregistering): Released all slaves [ 1660.039724][T24472] bond10 (unregistering): Released all slaves [ 1660.045973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.222903][T27864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.471136][T24472] tipc: Disabling bearer [ 1660.483423][T24472] tipc: Left network mode [ 1660.807662][T31564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.826372][T31564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.870932][T31564] bridge_slave_0: entered allmulticast mode [ 1660.919890][T31564] bridge_slave_0: entered promiscuous mode [ 1661.097995][T31564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.123428][T31564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.128799][T24472] IPVS: stopping master sync thread 24309 ... [ 1661.179650][T31564] bridge_slave_1: entered allmulticast mode [ 1661.221625][T31564] bridge_slave_1: entered promiscuous mode [ 1661.392727][T31564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1661.459613][T31564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.516035][T31826] validate_nla: 1 callbacks suppressed [ 1661.516086][T31826] netlink: 'syz.1.15469': attribute type 1 has an invalid length. [ 1661.552794][T31826] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15469'. [ 1661.604346][T31826] NCSI netlink: No device for ifindex 0 [ 1661.778481][T31564] team0: Port device team_slave_0 added [ 1661.892227][T31564] team0: Port device team_slave_1 added [ 1662.218340][T31564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1662.253285][T31564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.344099][T31564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.417676][T31858] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1662.439216][T31858] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1662.464978][T31564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.506078][T31564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.610221][T31564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.712333][T31867] lo: entered promiscuous mode [ 1662.759808][T31867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1663.233476][T31564] hsr_slave_0: entered promiscuous mode [ 1663.273259][T31564] hsr_slave_1: entered promiscuous mode [ 1663.304044][T31564] debugfs: 'hsr0' already exists in 'hsr' [ 1663.331785][T31564] Cannot create hsr debugfs directory [ 1663.429027][T31895] xt_policy: too many policy elements [ 1663.636440][T31896] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1663.668577][T31896] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1663.698225][T31896] veth1_to_bridge: entered allmulticast mode [ 1663.714897][T31896] veth1_to_bridge: entered promiscuous mode [ 1663.732507][T31896] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1663.786984][T31900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15487'. [ 1663.797457][T31896] bridge0: port 3(veth1_to_bridge) entered blocking state [ 1663.804751][T31896] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 1663.975440][T31900] gtp0: entered promiscuous mode [ 1664.017608][T31900] gtp0: entered allmulticast mode [ 1664.159466][T24472] hsr_slave_0: left promiscuous mode [ 1664.192401][T24472] hsr_slave_1: left promiscuous mode [ 1664.213700][T24472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1664.224949][T24472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.245142][T31915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15490'. [ 1664.262420][T24472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1664.288003][T24472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.329850][T24472] veth1_vlan: left promiscuous mode [ 1664.347830][T24472] veth0_vlan: left promiscuous mode [ 1665.773966][T31913] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.15489'. [ 1665.796038][T31913] veth0_to_bond: default FDB implementation only supports local addresses [ 1665.849100][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1665.931713][T31948] blkio.reset_stats is deprecated [ 1666.316654][T31955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15495'. [ 1668.777145][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1671.441622][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1671.724298][T31994] openvswitch: netlink: IP tunnel dst address not specified [ 1671.800214][T24472] IPVS: stop unused estimator thread 0... [ 1672.579615][T32010] syzkaller0: entered promiscuous mode [ 1672.585355][T32010] syzkaller0: entered allmulticast mode [ 1672.796418][T32027] syzkaller1: entered promiscuous mode [ 1672.803371][T32027] syzkaller1: entered allmulticast mode [ 1673.169106][T32045] syzkaller0: entered promiscuous mode [ 1673.199136][T32045] syzkaller0: entered allmulticast mode [ 1673.733586][T32071] x_tables: unsorted underflow at hook 3 [ 1674.017400][T32082] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15517'. [ 1674.019009][T32083] netlink: 'syz.2.15519': attribute type 1 has an invalid length. [ 1674.469847][T32101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15523'. [ 1674.672430][T32107] netlink: 'syz.2.15524': attribute type 1 has an invalid length. [ 1674.700138][T32101] ipvlan2: entered allmulticast mode [ 1674.727345][T32101] syz_tun: entered allmulticast mode [ 1674.963570][T32107] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1675.054996][T32110] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1675.109756][T32110] bond9: (slave batadv2): making interface the new active one [ 1675.127291][T32110] bond9: (slave batadv2): Enslaving as an active interface with an up link [ 1675.533602][T31564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1675.581959][T31564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1675.673290][T31564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1675.695180][T31564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1675.759213][T31564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1675.785261][T31564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1675.797900][T31564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1675.828874][T31564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1675.841655][T17851] IPVS: starting estimator thread 0... [ 1675.959823][T32151] IPVS: using max 34 ests per chain, 81600 per kthread [ 1676.028289][T32145] syzkaller0: entered promiscuous mode [ 1676.033833][T32145] syzkaller0: entered allmulticast mode [ 1676.581641][T32177] xt_ecn: cannot match TCP bits for non-tcp packets [ 1681.437140][T32189] netlink: 284 bytes leftover after parsing attributes in process `syz.4.15538'. [ 1681.851190][T31564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.002103][T31564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.098216][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.107507][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.124125][T32220] netlink: 'syz.2.15546': attribute type 1 has an invalid length. [ 1682.189663][T23179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.196932][T23179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.030819][T32251] veth1_macvtap: renamed from vlan0 [ 1683.117933][T32250] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1683.178714][T32250] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1683.851214][T32277] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.15558'. [ 1684.084556][T32291] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.15562'. [ 1684.378610][T32293] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1684.470145][T32306] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.15565'. [ 1684.561088][T32295] veth5: entered allmulticast mode [ 1684.752205][T31564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1685.077922][T31564] veth0_vlan: entered promiscuous mode [ 1685.112145][T31564] veth1_vlan: entered promiscuous mode [ 1685.184950][T32333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15570'. [ 1685.320322][T31564] veth0_macvtap: entered promiscuous mode [ 1685.358604][T31564] veth1_macvtap: entered promiscuous mode [ 1685.463694][T31564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1685.534698][T31564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1685.612448][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.653638][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.708666][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.762431][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.323505][T23179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.349559][T32371] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1686.375180][T23179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1686.488402][T32375] netlink: 'syz.2.15578': attribute type 1 has an invalid length. [ 1686.727190][T32375] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1686.797643][T24472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.870036][T24472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.107840][T32396] netlink: 'syz.1.15583': attribute type 12 has an invalid length. [ 1687.150606][T32396] netlink: 'syz.1.15583': attribute type 29 has an invalid length. [ 1687.218361][T32396] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15583'. [ 1687.269846][T32396] netlink: 59 bytes leftover after parsing attributes in process `syz.1.15583'. [ 1687.333651][T32412] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15586'. [ 1687.387877][T32415] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15585'. [ 1687.512529][T32419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15586'. [ 1688.572341][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1688.591721][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1688.608650][T24213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1688.623438][T24213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1688.642939][T24213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1689.096194][ T35] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1689.117005][ T35] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.304791][ T35] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1689.341677][ T35] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.454955][ T35] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1689.488201][ T35] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.586177][ T35] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1689.615711][ T35] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.055071][T32436] speed is unknown, defaulting to 1000 [ 1690.121725][ T35] batadv1: left allmulticast mode [ 1690.128616][ T35] batadv1: left promiscuous mode [ 1690.138996][ T35] bridge0: port 1(batadv1) entered disabled state [ 1690.145710][T32403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1690.372174][ T35] tipc: Resetting bearer [ 1690.698360][T24213] Bluetooth: hci1: command tx timeout [ 1690.801711][ T35] bond1 (unregistering): (slave ip6gre2): Releasing backup interface [ 1690.822812][ T35] ip6gre2 (unregistering): left promiscuous mode [ 1690.992695][ T35] tipc: Disabling bearer [ 1691.534044][ T35] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 1691.544008][ T35] bridge4 (unregistering): left promiscuous mode [ 1691.777089][ T35] bond0 (unregistering): Released all slaves [ 1691.812245][ T35] bond1 (unregistering): Released all slaves [ 1691.860620][ T35] bond2 (unregistering): (slave bond3): Releasing active interface [ 1691.876996][ T35] bond2 (unregistering): Released all slaves [ 1691.919338][ T35] bond3 (unregistering): Released all slaves [ 1691.962563][ T35] bond4 (unregistering): Released all slaves [ 1692.014498][ T35] bond5 (unregistering): Released all slaves [ 1692.064044][ T35] bond6 (unregistering): Released all slaves [ 1692.110153][ T35] bond7 (unregistering): Released all slaves [ 1692.152524][ T35] bond8 (unregistering): Released all slaves [ 1692.200369][ T35] bond9 (unregistering): (slave batadv2): Releasing active interface [ 1692.223637][ T35] bond9 (unregistering): Released all slaves [ 1692.256595][ T35] bond10 (unregistering): Released all slaves [ 1692.392741][T32452] syzkaller1: entered promiscuous mode [ 1692.427485][T32452] syzkaller1: entered allmulticast mode [ 1692.766020][T24213] Bluetooth: hci1: command tx timeout [ 1692.874256][ T35] tipc: Left network mode [ 1693.188730][T32469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15595'. [ 1693.441527][T32481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15597'. [ 1693.518827][T32481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15597'. [ 1694.006471][T32478] syzkaller0: entered promiscuous mode [ 1694.013148][T32478] syzkaller0: entered allmulticast mode [ 1694.213366][T32509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15601'. [ 1694.845844][T24213] Bluetooth: hci1: command tx timeout [ 1696.927845][T24213] Bluetooth: hci1: command tx timeout [ 1699.241726][T32509] erspan0: entered promiscuous mode [ 1699.464734][T32525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15607'. [ 1700.122646][T32553] veth0_to_team: entered promiscuous mode [ 1700.157555][T32553] macvlan0: entered promiscuous mode [ 1700.539381][T32582] netlink: 'syz.0.15618': attribute type 1 has an invalid length. [ 1700.566945][T32582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1700.804265][T32550] syzkaller0: entered promiscuous mode [ 1700.813852][T32550] syzkaller0: entered allmulticast mode [ 1705.904712][ T35] batman_adv: batadv0: Interface deactivated: wlan0 [ 1705.931540][ T35] batman_adv: batadv0: Removing interface: wlan0 [ 1705.983007][T32436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.992881][T32436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.002622][T32436] bridge_slave_0: entered allmulticast mode [ 1706.011903][T32436] bridge_slave_0: entered promiscuous mode [ 1706.034368][T32436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.043278][T32436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.052671][T32436] bridge_slave_1: entered allmulticast mode [ 1706.062262][T32436] bridge_slave_1: entered promiscuous mode [ 1706.073877][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1706.314882][T32611] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1706.569564][T32618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1706.663817][T32436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.750530][T32436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1706.961364][ T35] hsr_slave_0: left promiscuous mode [ 1706.984215][ T35] hsr_slave_1: left promiscuous mode [ 1707.018490][ T35] veth1_macvtap: left promiscuous mode [ 1707.024133][ T35] veth0_macvtap: left promiscuous mode [ 1707.031398][ T35] veth1_vlan: left promiscuous mode [ 1707.033312][T32639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15633'. [ 1707.039347][ T35] veth0_vlan: left promiscuous mode [ 1707.217390][T32641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15633'. [ 1707.724639][T32436] team0: Port device team_slave_0 added [ 1707.733019][T32625] syzkaller0: entered promiscuous mode [ 1707.746204][T32625] syzkaller0: entered allmulticast mode [ 1707.933227][T32652] sctp: [Deprecated]: syz.0.15634 (pid 32652) Use of int in maxseg socket option. [ 1707.933227][T32652] Use struct sctp_assoc_value instead [ 1708.007932][T32436] team0: Port device team_slave_1 added [ 1708.114003][T32650] bond1: entered promiscuous mode [ 1708.131509][T32650] bond1: entered allmulticast mode [ 1708.140567][T32650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1708.187136][T32436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1708.194255][T32436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.222658][T32436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.236245][T32436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.243248][T32436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.362603][T32668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15639'. [ 1708.365559][T32436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1708.463275][T32675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15640'. [ 1708.663558][T32436] hsr_slave_0: entered promiscuous mode [ 1708.709936][T32436] hsr_slave_1: entered promiscuous mode [ 1708.748710][T32436] debugfs: 'hsr0' already exists in 'hsr' [ 1708.771147][T32436] Cannot create hsr debugfs directory [ 1708.779025][T32687] netlink: 10 bytes leftover after parsing attributes in process `syz.4.15644'. [ 1709.303341][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1709.445358][T32718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15649'. [ 1709.473783][T32718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15649'. [ 1709.506415][T32721] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1709.531030][T32721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15650'. [ 1709.594378][T32725] netlink: 'syz.4.15651': attribute type 1 has an invalid length. [ 1709.922928][T32735] can: request_module (can-proto-0) failed. [ 1709.960373][T32747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15653'. [ 1710.409261][T32766] syzkaller1: left promiscuous mode [ 1710.432643][T32766] syzkaller1: left allmulticast mode [ 1710.538459][T32766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15656'. [ 1710.581152][ T308] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1710.705852][ T306] netlink: 'syz.3.15659': attribute type 1 has an invalid length. [ 1710.901193][T32436] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1710.923828][T32436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1711.175326][T32436] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1711.191156][T32436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1711.201458][T32436] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1711.213335][T32436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1711.239868][T32436] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1711.262174][T32436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1711.698800][T32436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.752673][ T374] dvmrp0: entered allmulticast mode [ 1711.815294][ T374] netlink: 'syz.1.15675': attribute type 61 has an invalid length. [ 1711.823014][T32436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1711.868576][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.875810][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1711.960308][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.967554][ T749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1712.630156][ T419] __nla_validate_parse: 1 callbacks suppressed [ 1712.630174][ T419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15683'. [ 1712.739552][ T422] syzkaller0: entered promiscuous mode [ 1712.763937][ T422] syzkaller0: entered allmulticast mode [ 1712.898097][ T429] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.15687'. [ 1713.343905][ T442] tipc: Enabling of bearer rejected, media not registered [ 1713.910301][T32436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.051740][T32436] veth0_vlan: entered promiscuous mode [ 1714.068886][T32436] veth1_vlan: entered promiscuous mode [ 1714.113835][T32436] veth0_macvtap: entered promiscuous mode [ 1714.148476][T32436] veth1_macvtap: entered promiscuous mode [ 1714.181651][T32436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1714.204988][T32436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1714.230369][T27657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.240259][T27657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.251694][T27657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.267699][T27657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.265921][ T452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1716.455228][T24472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.505314][T24472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.572142][T23179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.583004][T23179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.623240][ T525] netlink: 100 bytes leftover after parsing attributes in process `syz.1.15700'. [ 1716.852200][ T540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15705'. [ 1716.910353][ T543] netlink: 'syz.0.15706': attribute type 28 has an invalid length. [ 1716.916038][ T544] syzkaller0: entered promiscuous mode [ 1716.972457][ T544] syzkaller0: entered allmulticast mode [ 1717.053444][ T551] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.15709'. [ 1717.207207][ T554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15710'. [ 1717.331887][T30082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1717.359965][T30082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1717.368725][T30082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1717.379676][T30082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1717.391504][T30082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1717.796423][ T583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15717'. [ 1717.888493][ T587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15719'. [ 1718.244583][ T603] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1718.320247][ T605] netlink: 'syz.3.15724': attribute type 2 has an invalid length. [ 1718.378417][ T605] netlink: 'syz.3.15724': attribute type 2 has an invalid length. [ 1718.415065][ T610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1718.524844][ T615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15726'. [ 1718.567976][ T614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15728'. [ 1718.632984][ T614] syzkaller0: entered promiscuous mode [ 1718.649693][ T614] syzkaller0: entered allmulticast mode [ 1718.951814][ T559] speed is unknown, defaulting to 1000 [ 1719.140982][ T636] sctp: [Deprecated]: syz.1.15733 (pid 636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1719.140982][ T636] Use struct sctp_sack_info instead [ 1719.166556][ T636] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1719.269463][ T657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15738'. [ 1719.297353][ T657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15738'. [ 1719.307642][ T657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15738'. [ 1719.353199][ T657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15738'. [ 1719.389558][ T657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15738'. [ 1719.410673][ T657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15738'. [ 1719.489307][T24213] Bluetooth: hci4: command tx timeout [ 1719.775983][ T672] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1719.795687][ T672] bond10 (unregistering): Released all slaves [ 1720.040814][ T692] vlan2: entered allmulticast mode [ 1720.063038][ T692] bond0: entered allmulticast mode [ 1720.074885][ T692] bond_slave_0: entered allmulticast mode [ 1720.081699][ T692] bond_slave_1: entered allmulticast mode [ 1720.141848][ T699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1720.152907][ T699] bond_slave_0: left allmulticast mode [ 1720.175453][ T699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1720.195022][ T699] bond_slave_1: left allmulticast mode [ 1720.211793][ T699] bond0 (unregistering): Released all slaves [ 1720.243986][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.252084][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.272253][ T559] bridge_slave_0: entered allmulticast mode [ 1720.291299][ T559] bridge_slave_0: entered promiscuous mode [ 1720.332447][ T559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.364312][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.394870][ T559] bridge_slave_1: entered allmulticast mode [ 1720.424539][ T559] bridge_slave_1: entered promiscuous mode [ 1720.569255][ T559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.614822][ T559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.714788][ T559] team0: Port device team_slave_0 added [ 1720.735169][ T739] netlink: 'syz.3.15758': attribute type 1 has an invalid length. [ 1720.742369][ T559] team0: Port device team_slave_1 added [ 1720.820658][ T748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1720.860735][ T739] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1720.911851][ T559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.931863][ T559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1720.980773][ T559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.020527][ T559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.027973][ T559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.105364][ T559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.149987][ T768] tipc: Enabling of bearer rejected, failed to enable media [ 1721.313260][ T559] hsr_slave_0: entered promiscuous mode [ 1721.322724][ T559] hsr_slave_1: entered promiscuous mode [ 1721.338697][ T559] debugfs: 'hsr0' already exists in 'hsr' [ 1721.354700][ T559] Cannot create hsr debugfs directory [ 1721.512980][ T789] netlink: 'syz.2.15768': attribute type 13 has an invalid length. [ 1721.560062][ T789] gretap0: refused to change device tx_queue_len [ 1721.575153][ T789] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1721.591598][T24213] Bluetooth: hci4: command tx timeout [ 1721.628516][ T802] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 1721.719633][ T804] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1721.753059][ T804] team1: entered promiscuous mode [ 1721.758257][ T804] team1: entered allmulticast mode [ 1721.771986][ T807] tipc: Enabling of bearer rejected, failed to enable media [ 1721.810724][T27659] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1721.829729][T27659] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1721.847508][T27659] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1721.883491][T27659] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1721.979187][ T559] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.995367][ T559] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1722.133093][ T814] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1722.152672][ T814] bond0: (slave lo): Enslaving as an active interface with an up link [ 1722.170792][ T814] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1722.365101][ T833] netlink: 'syz.3.15781': attribute type 1 has an invalid length. [ 1722.543900][ T839] xt_cgroup: path and classid specified [ 1722.675091][ T559] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.706648][ T559] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1723.646858][T24213] Bluetooth: hci4: command tx timeout [ 1725.087690][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1725.734197][T24213] Bluetooth: hci4: command tx timeout [ 1726.379172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1726.916053][ T864] syz_tun: entered allmulticast mode [ 1726.931858][ T866] bond0: entered promiscuous mode [ 1726.942453][ T866] bond_slave_0: entered promiscuous mode [ 1726.962133][ T866] bond_slave_1: entered promiscuous mode [ 1727.040445][ T559] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.061499][ T875] netlink: 'syz.2.15789': attribute type 1 has an invalid length. [ 1727.105093][ T559] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1727.125327][ T877] __nla_validate_parse: 12 callbacks suppressed [ 1727.125346][ T877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15791'. [ 1727.160813][ T881] netlink: 'syz.3.15792': attribute type 29 has an invalid length. [ 1727.226833][ T877] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15791'. [ 1727.313289][ T559] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.338675][ T559] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1728.059757][ T935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15802'. [ 1728.273801][ T949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1728.320431][ T949] bond3 (unregistering): Released all slaves [ 1728.504037][ T559] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1728.528405][ T559] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1728.547276][ T559] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1728.576342][ T559] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1728.597636][ T559] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1728.623128][ T559] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1728.643291][ T559] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1728.675930][ T559] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1728.762722][ T968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15806'. [ 1728.847894][ T979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15806'. [ 1728.894777][ T968] bond1 (unregistering): Released all slaves [ 1728.956257][ T977] netlink: 830 bytes leftover after parsing attributes in process `syz.3.15807'. [ 1729.041412][ T984] 8021q: VLANs not supported on lo [ 1729.181672][ T559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.231729][ T559] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.282630][T27657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.289877][T27657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.338712][T27657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.345980][T27657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.442233][ T1000] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.15813'. [ 1729.549041][ T1005] netem: change failed [ 1729.663221][ T1013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15817'. [ 1729.757600][ T1015] bridge7: entered promiscuous mode [ 1729.770836][ T1015] bridge7: entered allmulticast mode [ 1730.203740][ T1068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15827'. [ 1730.220132][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1730.342403][ T559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1730.738502][ T1077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15827'. [ 1730.777389][ T559] veth0_vlan: entered promiscuous mode [ 1730.803166][ T559] veth1_vlan: entered promiscuous mode [ 1730.849940][ T559] veth0_macvtap: entered promiscuous mode [ 1730.966114][ T559] veth1_macvtap: entered promiscuous mode [ 1731.010582][ T559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1731.050021][ T559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1731.075098][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.085295][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.097295][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.117200][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.905029][ T1035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1733.090152][ T1112] __nla_validate_parse: 3 callbacks suppressed [ 1733.090171][ T1112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15833'. [ 1733.123691][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1733.160943][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1733.183692][ T1113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15833'. [ 1733.203648][ T1115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15835'. [ 1733.323882][ T1125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1733.349161][ T1122] bond0: option miimon: invalid value (18446744071829782528) [ 1733.359635][ T1122] bond0: option miimon: allowed values 0 - 2147483647 [ 1733.368992][T27657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1733.397850][T27657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1733.460029][ T1131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15840'. [ 1733.462057][ T1130] netlink: 88 bytes leftover after parsing attributes in process `syz.3.15839'. [ 1733.484843][ T1125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15838'. [ 1733.504805][ T1126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15838'. [ 1733.608610][ T1137] netlink: 'syz.4.15707': attribute type 1 has an invalid length. [ 1733.638404][ T1139] syzkaller0: entered promiscuous mode [ 1733.644937][ T1139] syzkaller0: entered allmulticast mode [ 1733.939845][T30082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1733.954920][T30082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1733.963408][T30082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1733.979303][T30082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1733.990049][T30082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1734.207493][ T1162] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.15848'. [ 1734.217862][ T1162] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1734.604752][ T1179] tipc: Started in network mode [ 1734.632040][ T1179] tipc: Node identity a6f20d0576f9, cluster identity 4711 [ 1734.652539][ T1179] tipc: Enabled bearer , priority 0 [ 1734.678470][ T1185] syzkaller0: entered promiscuous mode [ 1734.692155][ T1185] syzkaller0: entered allmulticast mode [ 1734.788165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.791301][ T1179] tipc: Resetting bearer [ 1734.797043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.837288][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.848533][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.965915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.041108][ T1178] tipc: Resetting bearer [ 1735.176613][ T1178] tipc: Disabling bearer [ 1735.578069][ T1150] speed is unknown, defaulting to 1000 [ 1735.591682][ T1201] syzkaller0: entered promiscuous mode [ 1735.612125][ T1201] syzkaller0: entered allmulticast mode [ 1735.711551][ T1219] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.15861'. [ 1735.723044][ T1219] netlink: 'syz.2.15861': attribute type 1 has an invalid length. [ 1735.893104][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15864'. [ 1735.931456][ T1225] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1735.960871][ T1226] bond0: option mode: unable to set because the bond device has slaves [ 1736.047878][T30082] Bluetooth: hci5: command tx timeout [ 1736.327036][ T1252] syzkaller0: entered promiscuous mode [ 1736.345956][ T1252] syzkaller0: entered allmulticast mode [ 1736.428096][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.444573][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.464320][ T1150] bridge_slave_0: entered allmulticast mode [ 1736.483164][ T1150] bridge_slave_0: entered promiscuous mode [ 1736.508805][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.536662][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.553701][ T1150] bridge_slave_1: entered allmulticast mode [ 1736.562343][ T1150] bridge_slave_1: entered promiscuous mode [ 1736.653640][ T1150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1736.670366][ T1150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.779992][ T1150] team0: Port device team_slave_0 added [ 1736.802112][ T1150] team0: Port device team_slave_1 added [ 1736.867967][ T1272] netlink: 'syz.2.15875': attribute type 3 has an invalid length. [ 1736.885004][ T1150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.892959][ T1150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.926893][ T1150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.005301][ T1272] netlink: 'syz.2.15875': attribute type 3 has an invalid length. [ 1737.017761][ T1150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.043334][ T1150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.083873][ T1150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.340469][ T1150] hsr_slave_0: entered promiscuous mode [ 1737.360313][ T1150] hsr_slave_1: entered promiscuous mode [ 1737.374940][ T1150] debugfs: 'hsr0' already exists in 'hsr' [ 1737.382612][ T1150] Cannot create hsr debugfs directory [ 1737.656282][ T1321] veth1_macvtap: left promiscuous mode [ 1737.723189][ T1323] sit0: entered promiscuous mode [ 1737.796349][ T1323] netlink: 'syz.2.15886': attribute type 1 has an invalid length. [ 1738.108350][ T1341] __nla_validate_parse: 8 callbacks suppressed [ 1738.108367][ T1341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15892'. [ 1738.137778][T30082] Bluetooth: hci5: command tx timeout [ 1738.322792][ T1353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15895'. [ 1738.363483][ T29] audit: type=1107 audit(1779776109.637:42): pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1738.518604][ T1344] tipc: Enabled bearer , priority 0 [ 1738.589094][ T1366] netlink: 'syz.1.15898': attribute type 3 has an invalid length. [ 1738.604555][ T1366] netlink: 'syz.1.15898': attribute type 21 has an invalid length. [ 1738.614674][ T1366] netlink: 'syz.1.15898': attribute type 22 has an invalid length. [ 1738.624767][ T1366] netlink: 'syz.1.15898': attribute type 23 has an invalid length. [ 1738.633159][ T1366] netlink: 'syz.1.15898': attribute type 25 has an invalid length. [ 1738.641324][ T1366] netlink: 'syz.1.15898': attribute type 26 has an invalid length. [ 1738.651534][ T1366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15898'. [ 1738.693389][ T1150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.706390][ T1150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.716887][ T1150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1738.774653][ T1345] syzkaller0: entered promiscuous mode [ 1738.787217][ T1345] syzkaller0: entered allmulticast mode [ 1738.794396][ T1345] tipc: Resetting bearer [ 1738.905018][ T3331] tipc: Resetting bearer [ 1738.922535][ T1343] tipc: Resetting bearer [ 1738.954702][ T1373] openvswitch: netlink: IPv4 tun info is not correct [ 1740.206024][T30082] Bluetooth: hci5: command tx timeout [ 1742.298041][T30082] Bluetooth: hci5: command tx timeout [ 1743.037395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1743.240107][ T1343] tipc: Disabling bearer [ 1743.274463][T27867] tipc: Node number set to 3490385157 [ 1743.415381][ T1150] netdevsim netdevsim3 netdevsim2 (unregistering): left allmulticast mode [ 1743.459678][ T1150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1743.470747][ T1150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.481551][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15909'. [ 1743.531922][ T1150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1743.781246][ T1150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1743.838851][ T1150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.866359][ T1150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1744.023346][ T1150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1744.045366][ T1150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.054734][ T1429] netlink: 'syz.0.15915': attribute type 3 has an invalid length. [ 1744.068767][ T1429] netlink: 666 bytes leftover after parsing attributes in process `syz.0.15915'. [ 1744.074532][ T1150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1744.253133][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15917'. [ 1744.291356][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15917'. [ 1744.348723][ T1433] netlink: zone id is out of range [ 1744.368314][ T1433] netlink: zone id is out of range [ 1744.379204][ T1433] netlink: zone id is out of range [ 1744.393462][ T1433] netlink: zone id is out of range [ 1744.424110][ T1433] netlink: zone id is out of range [ 1744.451019][ T1433] netlink: zone id is out of range [ 1744.474097][ T1433] netlink: zone id is out of range [ 1744.495418][ T1433] netlink: zone id is out of range [ 1744.519827][ T1433] netlink: zone id is out of range [ 1744.534132][ T1433] netlink: zone id is out of range [ 1744.632702][ T1456] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.15923'. [ 1744.653148][ T1456] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15923'. [ 1744.786868][ T1150] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1744.829037][ T1469] netlink: 'syz.1.15926': attribute type 1 has an invalid length. [ 1744.829164][ T1150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1744.849579][ T1150] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1744.857422][ T1469] netlink: 'syz.1.15926': attribute type 2 has an invalid length. [ 1744.873326][ T1150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1744.890300][ T1469] netlink: 'syz.1.15926': attribute type 1 has an invalid length. [ 1744.907446][ T1150] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1744.959864][ T1469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15926'. [ 1744.976103][ T1150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1744.999764][ T1150] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1745.022348][T32366] IPVS: starting estimator thread 0... [ 1745.033086][ T1150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1745.117136][ T1484] IPVS: using max 28 ests per chain, 67200 per kthread [ 1745.198536][ T1467] batman_adv: batadv0: Interface deactivated: wlan0 [ 1745.395786][ T1453] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1745.472807][ T1511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15936'. [ 1745.487705][ T1512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15934'. [ 1745.503879][ T1510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15936'. [ 1745.719095][ T1520] Bluetooth: MGMT ver 1.23 [ 1746.855784][ T1546] xt_HMARK: proto mask must be zero with L3 mode [ 1747.626830][ T1150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.398455][ T1150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1748.509673][ T1568] __nla_validate_parse: 1 callbacks suppressed [ 1748.509691][ T1568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15947'. [ 1748.608445][ T1591] netlink: 'syz.4.15951': attribute type 10 has an invalid length. [ 1748.622588][ T1574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15947'. [ 1748.706975][ T1591] netlink: 228 bytes leftover after parsing attributes in process `syz.4.15951'. [ 1748.849798][T23179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.857023][T23179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.031178][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.038467][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1749.048919][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15953'. [ 1749.104963][ T1603] netlink: 'syz.4.15954': attribute type 23 has an invalid length. [ 1749.304601][ T1610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15955'. [ 1749.355249][ T1610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15955'. [ 1749.400526][ T1610] netlink: 'syz.4.15955': attribute type 1 has an invalid length. [ 1749.441938][ T1610] netlink: 'syz.4.15955': attribute type 3 has an invalid length. [ 1749.470540][ T1610] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15955'. [ 1750.063635][ T1619] net_ratelimit: 50 callbacks suppressed [ 1750.063654][ T1619] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1750.144639][ T1621] netlink: 'syz.4.15956': attribute type 1 has an invalid length. [ 1750.753057][ T1635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15958'. [ 1750.824065][ T1635] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1751.533118][ T1650] netlink: 'syz.4.15962': attribute type 10 has an invalid length. [ 1751.603286][ T1650] ipvlan0: entered allmulticast mode [ 1751.631877][ T1650] veth0_vlan: entered allmulticast mode [ 1751.685806][ T1650] team0: Device ipvlan0 failed to register rx_handler [ 1751.850024][ T1150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1752.135286][T12972] hsr0: entered promiscuous mode [ 1752.236476][ T1661] xt_hashlimit: size too large, truncated to 1048576 [ 1752.349709][ T1664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15964'. [ 1752.372506][ T1150] veth0_vlan: entered promiscuous mode [ 1752.493002][ T1150] veth1_vlan: entered promiscuous mode [ 1752.895536][ T1150] veth0_macvtap: entered promiscuous mode [ 1752.963800][ T1150] veth1_macvtap: entered promiscuous mode [ 1752.995222][ T1677] netlink: 'syz.1.15968': attribute type 4 has an invalid length. [ 1753.189315][ T1150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1753.302043][ T1150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1753.440215][T24472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.512080][T24472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.567765][T24472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.716899][T24472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.109902][ T1693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15971'. [ 1754.471540][ T1704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15973'. [ 1755.188028][ T4628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.304072][ T4628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.359726][ T1713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15974'. [ 1755.686279][ T1722] xt_hashlimit: size too large, truncated to 1048576 [ 1756.442672][T23179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.500193][T23179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.564224][ T1740] veth0: entered promiscuous mode [ 1756.671937][ T1738] veth0: left promiscuous mode [ 1759.896232][ T1809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15985'. [ 1763.006165][T24213] Bluetooth: hci2: command 0x0406 tx timeout [ 1765.325539][ C1] sched: DL replenish lagged too much [ 1777.568356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1779.767945][ T1975] netlink: 388 bytes leftover after parsing attributes in process `syz.3.15991'. [ 1792.820322][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1815.998605][T24213] Bluetooth: hci1: command 0x0406 tx timeout [ 1843.674200][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 1853.102404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1855.579946][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1868.458184][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1868.470049][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1868.482422][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1868.497919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1868.510304][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1868.525606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1868.537989][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1868.553594][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1868.566016][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1868.581937][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1868.594333][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1873.478210][ C1] net_ratelimit: 2478 callbacks suppressed [ 1873.478229][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1873.496448][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1873.511169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1873.523624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1873.538378][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1873.550774][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1873.568594][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1873.581001][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1873.596759][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1873.609171][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1878.486519][ C1] net_ratelimit: 2840 callbacks suppressed [ 1878.486539][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1878.504754][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1878.519849][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1878.532244][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1878.547455][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1878.559833][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1878.574536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1878.586933][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1878.603101][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1878.615571][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1883.497106][ C1] net_ratelimit: 2794 callbacks suppressed [ 1883.497125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1883.515331][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1883.530167][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1883.542594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1883.557757][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1883.570179][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1883.585335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1883.598602][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1883.613675][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1883.626127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1888.508867][ C1] net_ratelimit: 2238 callbacks suppressed [ 1888.508887][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1888.527659][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1888.550313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1888.562801][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1888.579584][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1888.592101][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1888.608491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1888.620952][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1888.642775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1888.655305][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1893.517957][ C1] net_ratelimit: 2176 callbacks suppressed [ 1893.517976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1893.536258][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1893.552697][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1893.565177][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1893.581153][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1893.593577][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1893.609589][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1893.621995][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1893.638983][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1893.651468][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1898.527257][ C1] net_ratelimit: 2206 callbacks suppressed [ 1898.527277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1898.545469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1898.563048][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1898.575435][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1898.592130][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1898.604536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1898.620493][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1898.632968][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1898.648994][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1898.661471][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1903.537184][ C1] net_ratelimit: 2216 callbacks suppressed [ 1903.537204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1903.555390][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1903.571608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1903.584030][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1903.600192][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1903.612575][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1903.629923][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1903.642303][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1903.658318][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1903.670674][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1908.548283][ C1] net_ratelimit: 2857 callbacks suppressed [ 1908.548301][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1908.567469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1908.579879][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1908.595419][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1908.608401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1908.620814][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1908.636732][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1908.649781][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1908.662203][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1908.679397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1913.559324][ C1] net_ratelimit: 3158 callbacks suppressed [ 1913.559345][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1913.578139][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1913.590541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1913.606147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1913.619043][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1913.631440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1913.646553][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1913.659446][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1913.671823][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1913.691826][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1918.568255][ C1] net_ratelimit: 3105 callbacks suppressed [ 1918.568275][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1918.587099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1918.599761][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1918.615537][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1918.628452][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1918.640944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1918.656685][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1918.669671][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1918.683539][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1918.699154][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1923.578084][ C1] net_ratelimit: 2927 callbacks suppressed [ 1923.578104][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1923.596833][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1923.609213][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1923.624588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1923.637494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1923.649892][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1923.665529][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1923.678506][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1923.690890][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1923.708168][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1924.199664][ T2001] Bluetooth: hci5: command tx timeout [ 1928.588078][ C1] net_ratelimit: 3080 callbacks suppressed [ 1928.588097][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1928.606846][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1928.619233][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1928.636227][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1928.649272][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1928.661652][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1928.677577][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1928.690539][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1928.702950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1928.718440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1933.598944][ C1] net_ratelimit: 2981 callbacks suppressed [ 1933.598963][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1933.617755][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1933.630169][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1933.646118][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1933.659097][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1933.671504][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1933.688286][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1933.701583][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1933.714003][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1933.729440][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1936.775530][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1936.782513][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1991/1:b.el [ 1936.791103][ C0] rcu: (detected by 0, t=10503 jiffies, g=374341, q=857217 ncpus=2) [ 1936.799189][ C0] task:syz.3.15997 state:R running task stack:25720 pid:1991 tgid:1990 ppid:1150 task_flags:0x40054c flags:0x00080003 [ 1936.814453][ C0] Call Trace: [ 1936.817760][ C0] [ 1936.820703][ C0] __schedule+0x1821/0x5740 [ 1936.825231][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1936.830449][ C0] ? finish_task_switch+0x41f/0xbe0 [ 1936.835666][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 1936.840877][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1936.845845][ C0] ? __pfx___schedule+0x10/0x10 [ 1936.850731][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1936.856125][ C0] preempt_schedule_common+0x82/0xd0 [ 1936.861433][ C0] ? cfg80211_mlme_unregister_socket+0x2ce/0x690 [ 1936.867788][ C0] preempt_schedule_thunk+0x16/0x30 [ 1936.873020][ C0] __local_bh_enable_ip+0xe1/0x130 [ 1936.878143][ C0] cfg80211_mlme_unregister_socket+0x2ce/0x690 [ 1936.884320][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1936.889724][ C0] nl80211_netlink_notify+0x356/0x840 [ 1936.895121][ C0] ? nl80211_netlink_notify+0x74/0x840 [ 1936.900611][ C0] notifier_call_chain+0x1ad/0x3d0 [ 1936.905746][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 1936.911534][ C0] netlink_release+0x123b/0x1ad0 [ 1936.916507][ C0] ? netlink_release+0x101/0x1ad0 [ 1936.921557][ C0] ? __pfx_netlink_release+0x10/0x10 [ 1936.926861][ C0] ? down_write+0x16d/0x200 [ 1936.931472][ C0] ? __pfx_down_write+0x10/0x10 [ 1936.936356][ C0] sock_close+0xc3/0x240 [ 1936.940627][ C0] ? __pfx_sock_close+0x10/0x10 [ 1936.945495][ C0] __fput+0x44f/0xa60 [ 1936.949520][ C0] task_work_run+0x1d9/0x270 [ 1936.954137][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1936.957625][ T30] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 1936.959262][ C0] ? do_exit+0x70a/0x22c0 [ 1936.971254][ C0] ? kmem_cache_free+0x182/0x650 [ 1936.976214][ C0] ? put_net+0x191/0x260 [ 1936.980563][ C0] do_exit+0x70f/0x22c0 [ 1936.981037][ T30] Not tainted syzkaller #0 [ 1936.984749][ C0] ? cgroup1_freezing+0x20/0x350 [ 1936.984778][ C0] ? __pfx_do_exit+0x10/0x10 [ 1936.984805][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1936.984841][ C0] do_group_exit+0x21b/0x2d0 [ 1936.984864][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1936.984895][ C0] get_signal+0x1284/0x1330 [ 1936.984935][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 1936.984969][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1936.985007][ C0] ? exc_page_fault+0x6a/0xc0 [ 1936.985043][ C0] exit_to_user_mode_loop+0x8c/0x4d0 [ 1936.985064][ C0] ? rcu_is_watching+0x15/0xb0 [ 1936.985089][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.985118][ C0] do_syscall_64+0x33e/0xf80 [ 1936.985137][ C0] ? trace_irq_disable+0x3b/0x140 [ 1936.985166][ C0] ? clear_bhb_loop+0x40/0x90 [ 1936.985191][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.985213][ C0] RIP: 0033:0x7fe6ad99ce59 [ 1936.985232][ C0] RSP: 002b:00007fe6abbee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1936.985255][ C0] RAX: fffffffffffffe00 RBX: 00007fe6adc15fa8 RCX: 00007fe6ad99ce59 [ 1936.985270][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6adc15fa8 [ 1936.985284][ C0] RBP: 00007fe6adc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1936.985298][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1936.985308][ C0] R13: 00007fe6adc16038 R14: 00007ffd377161e0 R15: 00007ffd377162c8 [ 1936.985341][ C0] [ 1936.985352][ C0] rcu: rcu_preempt kthread starved for 348 jiffies! g374341 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1936.985375][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1936.985387][ C0] rcu: RCU grace-period kthread stack dump: [ 1936.985395][ C0] task:rcu_preempt state:R running task stack:26880 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1936.985459][ C0] Call Trace: [ 1936.985467][ C0] [ 1936.985480][ C0] __schedule+0x1821/0x5740 [ 1936.985514][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1936.985559][ C0] ? __pfx___schedule+0x10/0x10 [ 1936.985596][ C0] ? schedule+0x90/0x360 [ 1936.985624][ C0] schedule+0x164/0x360 [ 1936.985654][ C0] schedule_timeout+0x158/0x2c0 [ 1936.985683][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1936.985710][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1936.985744][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1936.985771][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1936.985805][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1936.985841][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1936.985864][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1936.985883][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1936.985924][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1936.985948][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1936.985968][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1936.985997][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1936.986021][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1936.986050][ C0] kthread+0x389/0x470 [ 1936.986076][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1936.986096][ C0] ? __pfx_kthread+0x10/0x10 [ 1936.986121][ C0] ret_from_fork+0x514/0xb70 [ 1936.986145][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1936.986168][ C0] ? __switch_to+0xc79/0x1410 [ 1936.986199][ C0] ? __pfx_kthread+0x10/0x10 [ 1936.986225][ C0] ret_from_fork_asm+0x1a/0x30 [ 1936.986265][ C0] [ 1936.986272][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1936.986297][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1936.986325][ C1] NMI backtrace for cpu 1 [ 1936.986338][ C1] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1936.986357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1936.986367][ C1] RIP: 0010:__lock_acquire+0x324/0x2cf0 [ 1936.986386][ C1] Code: 0d c1 e6 0e 09 d6 8b 54 24 20 c1 e2 0f 0f b7 d2 09 f2 41 83 e5 03 41 c1 e5 10 41 09 d5 8b 54 24 10 83 e2 01 c1 e2 12 44 09 ea e3 14 09 d3 8b 14 24 c1 e2 13 41 c1 e4 15 41 09 d4 41 09 cc 41 [ 1936.986400][ C1] RSP: 0018:ffffc90000a08020 EFLAGS: 00000006 [ 1936.986415][ C1] RAX: 000000000000000f RBX: 0000000000000000 RCX: 000000000000015f [ 1936.986426][ C1] RDX: 0000000000042000 RSI: 0000000000002000 RDI: 0000000000000000 [ 1936.986436][ C1] RBP: 0000000000000003 R08: ffffffff89758031 R09: ffff8880b8738ba0 [ 1936.986447][ C1] R10: dffffc0000000000 R11: fffff52000141084 R12: 0000000000000000 [ 1936.986459][ C1] R13: 0000000000002000 R14: ffff88801f2cbd80 R15: ffff88801f2cc910 [ 1936.986471][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 1936.986485][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1936.986497][ C1] CR2: 0000555578c4b4e8 CR3: 000000007e46e000 CR4: 00000000003526f0 [ 1936.986512][ C1] Call Trace: [ 1936.986518][ C1] [ 1936.986529][ C1] ? __pfx___skb_flow_dissect+0x10/0x10 [ 1936.986554][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1936.986578][ C1] ? kasan_save_track+0x4f/0x80 [ 1936.986600][ C1] ? kasan_save_track+0x3e/0x80 [ 1936.986620][ C1] ? kasan_save_free_info+0x46/0x50 [ 1936.986639][ C1] ? napi_skb_cache_get+0x151/0x780 [ 1936.986660][ C1] lock_acquire+0x106/0x350 [ 1936.986677][ C1] ? napi_skb_cache_get+0x151/0x780 [ 1936.986701][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1936.986719][ C1] ? napi_skb_cache_get+0x151/0x780 [ 1936.986741][ C1] napi_skb_cache_get+0x169/0x780 [ 1936.986768][ C1] ? napi_skb_cache_get+0x151/0x780 [ 1936.986788][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1936.986805][ C1] ? __alloc_skb+0x186/0x7d0 [ 1936.986826][ C1] __alloc_skb+0x19a/0x7d0 [ 1936.986849][ C1] synproxy_send_client_synack+0x172/0xe30 [ 1936.986872][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1936.986889][ C1] ? nft_tproxy_eval+0x5c0/0x1c40 [ 1936.986904][ C1] ? synproxy_pernet+0x45/0x270 [ 1936.986924][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 1936.986944][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1936.986963][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1936.986984][ C1] nft_synproxy_do_eval+0x305/0x580 [ 1936.987004][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1936.987020][ C1] ? nft_trace_init+0x283/0x4c0 [ 1936.987046][ C1] nft_do_chain+0x48d/0x1ae0 [ 1936.987068][ C1] ? __pfx_nft_osf_eval+0x10/0x10 [ 1936.987084][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1936.987102][ C1] ? trace_packet+0x32b/0x4a0 [ 1936.987124][ C1] ? ipt_do_table+0x2b2/0x1630 [ 1936.987148][ C1] ? nf_nat_inet_fn+0x95b/0xbf0 [ 1936.987174][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1936.987192][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1936.987210][ C1] ? ipt_do_table+0x2b2/0x1630 [ 1936.987231][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1936.987256][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1936.987275][ C1] nf_hook_slow+0xc5/0x220 [ 1936.987292][ C1] NF_HOOK+0x21f/0x3c0 [ 1936.987314][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1936.987336][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1936.987357][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1936.987376][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1936.987400][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1936.987424][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1936.987448][ C1] NF_HOOK+0x336/0x3c0 [ 1936.987469][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1936.987490][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1936.987511][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1936.987532][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1936.987556][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1936.987577][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1936.987597][ C1] ? process_backlog+0x3eb/0x1950 [ 1936.987618][ C1] process_backlog+0xaa3/0x1950 [ 1936.987646][ C1] __napi_poll+0xae/0x340 [ 1936.987664][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1936.987685][ C1] net_rx_action+0x627/0xf70 [ 1936.987704][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1936.987732][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1936.987770][ C1] handle_softirqs+0x22a/0x840 [ 1936.987788][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1936.987808][ C1] __irq_exit_rcu+0xca/0x220 [ 1936.987825][ C1] irq_exit_rcu+0x9/0x30 [ 1936.987840][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1936.987864][ C1] [ 1936.987869][ C1] [ 1936.987876][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1936.987893][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1936.987916][ C1] Code: 0f 84 44 ff ff ff e8 92 28 21 00 fb eb 44 e8 8a 28 21 00 e8 e5 b8 04 0a 4d 85 f6 74 94 e8 7b 28 21 00 fb 48 c7 c7 c0 f0 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 cb 18 [ 1936.987929][ C1] RSP: 0018:ffffc90000a67ba0 EFLAGS: 00000293 [ 1936.987943][ C1] RAX: ffffffff81a49c45 RBX: ffffffff81a49abf RCX: ffff88801f2cbd80 [ 1936.987956][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e94f0c0 [ 1936.987966][ C1] RBP: ffffc90000a67c50 R08: ffffffff9030d4f7 R09: 1ffffffff2061a9e [ 1936.987979][ C1] R10: dffffc0000000000 R11: fffffbfff2061a9f R12: 0000000000000000 [ 1936.987990][ C1] R13: 000000000000001e R14: 0000000000000200 R15: 1ffff9200014cf78 [ 1936.988004][ C1] ? vprintk_emit+0x2cf/0x560 [ 1936.988025][ C1] ? vprintk_emit+0x455/0x560 [ 1936.988051][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1936.988072][ C1] ? __asan_memcpy+0x40/0x70 [ 1936.988094][ C1] _printk+0xdd/0x130 [ 1936.988117][ C1] ? __pfx__printk+0x10/0x10 [ 1936.988144][ C1] watchdog+0xb84/0x1030 [ 1936.988170][ C1] ? watchdog+0x1c9/0x1030 [ 1936.988196][ C1] kthread+0x389/0x470 [ 1936.988216][ C1] ? __pfx_watchdog+0x10/0x10 [ 1936.988237][ C1] ? __pfx_kthread+0x10/0x10 [ 1936.988258][ C1] ret_from_fork+0x514/0xb70 [ 1936.988277][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1936.988293][ C1] ? __switch_to+0xc79/0x1410 [ 1936.988317][ C1] ? __pfx_kthread+0x10/0x10 [ 1936.988338][ C1] ret_from_fork_asm+0x1a/0x30 [ 1936.988364][ C1] [ 1938.611252][ C1] net_ratelimit: 2624 callbacks suppressed [ 1938.611272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1938.612133][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1938.612524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1938.616234][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1938.617098][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1938.617482][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1938.620762][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1938.621652][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1938.622033][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1938.630455][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1943.615692][ C1] net_ratelimit: 7264 callbacks suppressed [ 1943.615712][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1943.615913][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1943.622421][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1943.634232][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1943.645920][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1943.658032][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1943.673202][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:52:82:52:e7:65:09, vlan:0) [ 1943.681928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1943.694098][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1943.708276][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)