last executing test programs: 1m2.804211636s ago: executing program 3 (id=2587): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) unshare(0x22020600) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) unshare(0x20000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 1m1.266719564s ago: executing program 0 (id=2599): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100001000000001dfbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="801d0000040000001c0012800b0001006d616373656300000c000280060002404e230000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x40, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015001500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a73290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab62800"/216, 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100039040000ee94a3f64415c5935647", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000000000000000000001"], 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100001000000001dfbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="801d0000040000001c0012800b0001006d616373656300000c000280060002404e230000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x40, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015001500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a73290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab62800"/216, 0xd8}], 0x1}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100039040000ee94a3f64415c5935647", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000000000000000000001"], 0x5c}}, 0x0) (async) 1m0.782387053s ago: executing program 2 (id=2603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000b00)={0x7, 0x28, '\x00', 0x1, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYRES16=r3, @ANYRES64=r1, @ANYBLOB="600359c4d9aa738d61a24c29158b2e462c00c9c53c70e64ba81df555d42f0c5ed4cc332d4e73a4b3fced0e1227e35acdd67867963d1f4aebb6", @ANYRESDEC=r1, @ANYRESOCT=0x0, @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000a0004050900010073797a31000000004c000480480001800a000100696e6e65720000003800028008000440000000121400058004000100696d6d656469617465000000080003400000000f080002400000008408000140000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) r4 = socket(0x6, 0x3, 0x7) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1f, 0x2, 0x8001) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030700060000000000000800000003000480"], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c0000009a65554498", @ANYRES16=r5, @ANYBLOB="00042dbd7000fcdbdf2504000000180002800800010004000000040004000800010005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x81) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000940)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000500)}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)='/', 0x1}], 0x10000000000001fa) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) close(r3) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x304}, "cd67a686fffb7fbf", "706ffed2480f4abe441de82a17b3936f", "d7aac457", "526e7703e063736b"}, 0x28) 1m0.420581977s ago: executing program 4 (id=2606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000005c0)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000600)=0x100, 0x4) write(r1, &(0x7f0000000640)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4814) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000940)=""/4060, 0xfdc}, {&(0x7f0000001940)=""/131, 0x83}, {&(0x7f0000001a00)=""/194, 0xc2}], 0x4}, 0x4}], 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x1}, 0xc) write(r3, &(0x7f0000000400)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000480)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000700)={"1b72e763836cc642ba005019043af51f", r4, 0x0, {0x3, 0x5}, {0x7, 0x3}, 0x8001, [0x7fff, 0xffffffffffffffff, 0x7, 0x7, 0xfffffffffffffffd, 0x7, 0x8000, 0x5316bb7b, 0x1, 0xd99, 0x0, 0x1, 0x3d, 0xfffffffffffffffc, 0x9, 0xffffffffffffffff]}) connect$netlink(r3, &(0x7f0000000440)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000006c0)=0x8, 0x4) sendmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="7816", 0x2}], 0x1}}], 0x1, 0x20040020) syz_genetlink_get_family_id$team(&(0x7f0000000580), r3) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffcd, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7400100006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0xfed5}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) 1m0.311268331s ago: executing program 2 (id=2607): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x19}, 0x1, 0x0, 0x0, 0x20000010}, 0x8a1) 1m0.255473577s ago: executing program 1 (id=2608): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x57) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000140)) recvmsg(r0, &(0x7f0000001a80)={&(0x7f0000001640)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000016c0)=""/184, 0xb8}, {&(0x7f0000001780)=""/79, 0x4f}, {&(0x7f0000001800)=""/248, 0xf8}, {&(0x7f0000001900)=""/52, 0x34}, {&(0x7f0000001940)=""/166, 0xa6}], 0x5}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x400) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4800) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x5, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0x8}, 0x20) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) read(r6, &(0x7f0000000440)=""/4096, 0x1000) listen(r0, 0x402) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x12, "78edb14a560664000000000000000000"}]}}}}}}}}, 0x0) 1m0.087646627s ago: executing program 2 (id=2609): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400c00, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0xec7fa000) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x8001) write$ppp(r0, &(0x7f0000000400)="077973519718e94c834a77261212eb32d29d6bb6ba25ae695ea7b519ef9cf4e40a0c138a0808e2f316d3ccc5b807ee618c8a078ef53fb97a565b88874dcd289c18848499dcb63d2318bff809c4ad2403ee360c82f97a993177a4710191d8ba8e7528f3d3f19a2a4121ddcb68c6b439cd75b068e000e31854893423c4f511ed23012d70a30b40b3bffbbd2f03b53b1ec3", 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@gettfilter={0x5c, 0x2e, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x10, 0xc}, {0x9, 0xe}, {0xffe0, 0xfff2}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x1197}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc5}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000b7000000020000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000ec0)={&(0x7f0000000980)=@isdn, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a00)=""/108, 0x6c}, {&(0x7f0000000a80)=""/21, 0x15}, {&(0x7f0000000ac0)=""/141, 0x8d}, {&(0x7f0000000b80)=""/86, 0x56}, {&(0x7f0000000c00)=""/255, 0xff}, {&(0x7f0000000d00)=""/240, 0xf0}], 0x6, &(0x7f0000000e80)=""/28, 0x1c}, 0x10000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) socket$nl_rdma(0x10, 0x3, 0x14) 59.993654945s ago: executing program 1 (id=2610): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000b7000000020000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000080), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x20, 0x0, &(0x7f0000000500)='\x00'/32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.92362988s ago: executing program 3 (id=2611): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xec, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmmsg$sock(r1, 0x0, 0x0, 0x4008804) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r5, 0x534, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x48081) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x40888) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 59.506328428s ago: executing program 4 (id=2612): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newnexthop={0x2c, 0x68, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@loopback}]}, 0x2c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x25}, @remote, 0xf, 0x1}}}, {{@arp={@multicast1, @multicast2, 0x0, 0xff000000, 0xc, 0xe, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x10, 0x3, 0x8, 0x2, 0x81, 0x1ff, 'syzkaller1\x00', 'bridge_slave_1\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0xffffffff}}}, {{@arp={@local, @remote, 0xffffffff, 0xffffff00, 0x3, 0x5, {@mac=@local, {[0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff]}}, 0x6, 0x4, 0x1, 0x5, 0xfec, 0x5, 'dummy0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x20e}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 59.488273845s ago: executing program 1 (id=2613): close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="68000000000905060000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c00048008001d80262e51efb12c1b010000bfffff7f00000000000100706f6c50f279300008000200000000", 0x68}], 0x1}, 0x0) (async) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="68000000000905060000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c00048008001d80262e51efb12c1b010000bfffff7f00000000000100706f6c50f279300008000200000000", 0x68}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x60d, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) (async) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x60d, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) 59.346838695s ago: executing program 0 (id=2614): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x2, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5, 0x0, 0x100000000}, 0x6, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) 59.223962423s ago: executing program 4 (id=2615): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000009c0)={0x0, 0x10, &(0x7f0000000a00)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000a40)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000a80)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000b40)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000b80)={r3, 0x2}, 0x8) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x8807, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000940)={{r7, &(0x7f0000000780)=':%\x00', 0x2200, &(0x7f00000007c0)={@align=0x7, {0x9, 0x40, 0x80000000, 0x9}}, 0x5, &(0x7f0000000800), &(0x7f0000000840)=0x5}, {[0xfffffff7, 0x37, 0x200000, 0xe1b]}, 0x80000001, 0xa4, &(0x7f00000000c0)=""/164}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000940)={{r7, &(0x7f0000000780)=':%\x00', 0x2200, &(0x7f00000007c0)={@align=0x7, {0x9, 0x40, 0x80000000, 0x9}}, 0x5, &(0x7f0000000800), &(0x7f0000000840)=0x5}, {[0xfffffff7, 0x37, 0x200000, 0xe1b]}, 0x80000001, 0xa4, &(0x7f00000000c0)=""/164}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x0, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x30, 0x5f, 0x2e, 0x61, 0x5f, 0x30]}}, &(0x7f00000006c0)=""/128, 0x2d, 0x80, 0x1, 0x6, 0x10000, @value=r9}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x0, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x30, 0x5f, 0x2e, 0x61, 0x5f, 0x30]}}, &(0x7f00000006c0)=""/128, 0x2d, 0x80, 0x1, 0x6, 0x10000, @value=r9}, 0x28) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0xf98, r10, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) (async) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0xf98, r10, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000600)={@empty, @rand_addr, 0x0}, &(0x7f0000000640)=0xc) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x44}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10) (async) bind$tipc(r12, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10) bind$tipc(r13, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r14 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r14, &(0x7f0000000300)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) setsockopt$inet6_mtu(r5, 0x29, 0x4e, &(0x7f0000000080), 0x4) (async) setsockopt$inet6_mtu(r5, 0x29, 0x4e, &(0x7f0000000080), 0x4) 59.078232717s ago: executing program 3 (id=2616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffffffc, 0x2344edab, 0x8000, 0x4, 0x6, 0xe8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x100, 0xd, 0xfffffff6, 0x80000000000, 0xffffffffffffc148}}]}}}]}, 0x78}}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 59.027612651s ago: executing program 1 (id=2617): r0 = socket$igmp6(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'geneve1\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "e1a4df85181bfbc4c1e30aea57856a20f95d4816d6d1909e36294d4a26e48196", "a94afd3c6761d8c189ba4416c20619af33da236f32d8105fc4e83a55b1ae83a7", "242cceda0f7f52455782629808ab8ff69bb175ff217581adfa4970ae915218c7", "84cd7ab832dd393ed9251dd2bba1c90b16802468174a3c4fd13e05a54af5d9be", "81c4839450d41c9be76ff19b07440169751edb23b7fa5b57ffa540780d73a3c7", "5565cecf39917b652fce7f75", 0x50, 0x8, 0x6, 0xccae, 0x1}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf25010000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000540)=""/222}, 0x78) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000740)={r0, &(0x7f0000000640)='(\x00', 0x400, &(0x7f0000000680)={@_ha_fsid={[0x5, 0x2]}, {0xf, 0x81, 0x6, 0x1ff}}, 0x9, &(0x7f00000006c0), &(0x7f0000000700)}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x24, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20b5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x6}, 0x94) 58.943099749s ago: executing program 0 (id=2618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) (rerun: 32) 58.796965272s ago: executing program 2 (id=2619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x25, &(0x7f0000000000), 0x4) (async, rerun: 64) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (rerun: 64) 58.746632223s ago: executing program 1 (id=2620): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0xfffffffd, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@random="ff67b7e6a058", @local, @void, {@mpls_uc={0x8847, {[], @ipv4=@igmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x67, 0x0, 0x4, 0x2, 0x0, @multicast1, @broadcast}, {0x22, 0x0, 0x0, @broadcast}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc64}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0xc0189436, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4af}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0xdd218724d4300957) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="8211", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000640)="4fcbbdc1ef42e1d91e83ccb41c900a4c683755b9e8092e0901666dc8dbef4ea1218fe54bdce49c277bbc9fa2f52e6b01ab5d64694a96ae9cf5bb685fd9c6107e80e425695b648026a2bcf35473ef00ba0df8f68fafb7f4d4712b8b91b827ddb813957600e6b6ef7d6f42fd393e4668422b1d80d858192cb97a7bfa1fd8c405e3c3f934a0b21bdd1613cc12ad54e65fd6d2d6fb4adf0448c8253082527acac7ad8a07b0f9e4ec5566a1534a4075a156840f5973d1622ed4379ebf22f52cffdaf4f3b9c7bb6a0470fffa2c6040e2248750cb6352b2a043e3733ae973876b3b0d6714b9404748a49769e83e0d2aa0540eb5", 0xf0}, {&(0x7f0000000740)="c94742da3465659420a4dbb42bc5dd9cede9da760874f71b6724014d5cae89a003d443f274261922d655d14878ec22b2f5d8066da4e2ef1cbfdc3b45fe318d965ba12c25d8797dcc9aedfa5fb45ffcf5f7c1e2f0e16d323f7c436ef9d3ecdfccc8c328285c04f9fd224968f4497451170ff5d168044c6846b595a5de0fc041130a59520e7bda0e14f1f5e78f0d5f55e5b1452cf23f6470fd65e4f8aff5f3ce8470e68db8ffdc3c97c0b1203c11d50836f6652eaf03a7ed726d01571f9c8bf4e38c", 0xc1}, {&(0x7f0000000840)="161f4b867f56691725609307dc3c5b6a", 0x10}, {&(0x7f0000000880)="6e068588f44830bea76d40d856f24315ee1c37cb16d2ecee16f8060427970326c5fa758bc25a89f59c88ee6d05cc809fb6ed38d175a46aed669ce6f86374ebd24d3490c537d850eaeb61c86a8c07ac6d4839f5b95a2b5b3296ef54db616324acf8ae30711479b31aa224dffbaaa218d90152e4632e5f294cfc322158754ac5f1f8596e2652fb7d483631bf003f5d3096f00598365f499eaaa1bc0aa50246e0d0ae19b354b45c80ca0bff1823db696aba3121a5e447009fa58cf0eff57a89377a", 0xc0}, {&(0x7f0000000940)="61e83b6ac4be2f47f3c8e7fbccd0d62cf4772fd91938e0d566b35bbcd0910b", 0x1f}, {&(0x7f0000000980)="490acc97e6ad5902202f337e2b95de10323101f5ca426b337f591d84c5c5beac4242e16c60f66914e5c86fe046ca8a6cb841645e59881dee6abf56c2420396a1e8a9e739f5fc4ecd4dc8857840c43d394c6239ee817543d3a620cbe02c8e8e5685fddebec9cbba3002340dc77a346bb92b9118a55566386a86330dae2a5e7d09268eade53732374f9b4d973463ea3ed82932f362eac8766493e12603a2a7f319bd9ceb164375fc8cdab059129d34225218d81936200b3508b3554cfd1407e5930dd33fae75fffd19286002a703ebfccca17f32bfe30685c8bd59", 0xda}], 0x6, &(0x7f0000000c00)=[@hopopts={{0x90, 0x29, 0x36, {0x2f, 0xe, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xa5, 0x1, [0x1fd, 0x8]}}, @enc_lim={0x4, 0x1, 0x6a}, @generic={0x9, 0x4e, "1c50e60e8e6e0e7aac55cc0b972792b28ce8a87956c6d5c43f7a805f87c6d544e6411dcba65616736240a877f0dfde9e23ab52743a3bf27a98e3d9c44146c56936855af3f2a74a3795a6b4b71804"}, @jumbo={0xc2, 0x4, 0x4}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0xa8}}], 0x2, 0x4400c800) sendto$inet6(r5, &(0x7f00000003c0), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000cc0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x0, 'pim6reg0\x00'}) 58.666394378s ago: executing program 4 (id=2621): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) sendmsg$sock(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000e80)="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", 0x1000}], 0x1}, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) 58.546456296s ago: executing program 2 (id=2622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000580)="900000001d001f4d154a817393278bff0a80a578020200000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r4, &(0x7f0000000680)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x4}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000010802110000000602020202020300"/44], 0x2c) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) write(0xca, &(0x7f00000006c0)="0404e70000000004de92050000", 0xd) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000c80)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000cc0)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/686], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001180), 0x8, 0x10, &(0x7f00000011c0), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r7, 0x0, 0x10ff, 0x300, &(0x7f0000001280)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f00000012c0)="b8"}, 0x3a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) listen(r6, 0xffffffff) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r1, 0x400, 0x4, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x61bf, 0x15}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xff}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x51) r9 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xa}, &(0x7f0000000540)=0x8) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan0\x00'}) 58.138193932s ago: executing program 1 (id=2623): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000000000000c0000000c000000020000000000000000000011ffffde000000"], 0x0, 0x26}, 0x20) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x802, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f00000004c0)='^', 0x34000, 0x0, &(0x7f0000000600)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xfff) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000640)={0x85ff, 0x3, 0x204, 0xee6, 0x2, 0xffff7fff, 0x1, 0xb}, 0x20) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000340)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x2b) (async) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @local}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @remote}, 0x1c) shutdown(r4, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x64}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabb3a438f5b22c956f3456ac5d3bbbbbbbb04000000008600140640fe800000000000bbfe0800be8e0000000000040000f6ffaa4e214e2200a8033ce5a07cc15c9f3e05cf7999e109b39d1c81e8a216141ac88f073778b4e364a610d9e15d9f28d5c607e433a88569b57a0300000000000000cd67fd008327e6b2c2904a4c93", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040100090780000"], 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 57.934761578s ago: executing program 4 (id=2624): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000400000000000a20000000000a01010000000000000000010000050900010073797a30000000002c000000030a010200000000000000000100ffff0900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c00028008000440000000160500030000000000080002"], 0xc8}}, 0x48800) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000000)='wlan0\x00', 0x480, &(0x7f0000000140)={@_ha_fsid={[0x4, 0x3]}, {0x1000, 0x2, 0x3, 0x4}}, 0x3, &(0x7f0000000180), &(0x7f0000000200)=0x10001}) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x154, 0x15, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0xee, 0x8, "684db0ea27957a56afba432223d9886e9aec8c53ea7437851f3fd4525f5f0dbef6c5dc00c1037fe312c62c638997b82384e581d51f55d2ac85dd209806e0908fa7c15e7215c2b3ab988c8c70c34188b542860a7fc0956eef6c3358644c998a6035f95cb7adc712c26fa1d8487898fe81685e6cad00626a6c67a5bfa135714aa56179e2295b906ee1ac7b380e7e7ffa246b040ac84df0689509e51c0934108cf80efa37c0f080c04174322999b4f92dbbd2f5c4a9eaa6a7d2c92e72d7d07c45095130d3a405084149887dc8c6559a8c72ada3ed6debea433aaa227827b11a7d5de05ac803b02c49968165"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(r4, 0x1, 0x5, &(0x7f00000006c0)=""/51, &(0x7f0000000700)=0x33) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="0100fcfffffffcdbdf2507000000080003003a838a9d994da3e826d158", @ANYRES32=r3, @ANYRES64], 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 57.870159816s ago: executing program 0 (id=2625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300f8ffffffffffff05"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005001a0004"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300f8ffffffffffff05"], 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005001a0004"], 0x24}}, 0x0) (async) 57.682876916s ago: executing program 3 (id=2626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="660a0000000000006911ba000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x2, 0x0, 0xfd3c) getsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r4 = socket(0xa, 0x3, 0x3a) ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, 0x0) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000140)=[{&(0x7f0000000180)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x2, 0x8}, {0xf, 0xc}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) 57.647588276s ago: executing program 4 (id=2627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x40, r1, 0x100, 0x0, 0x0, {0x30}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x40}}, 0x48800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xe, 0x3, &(0x7f0000000440)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 57.609607951s ago: executing program 0 (id=2628): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000300), 0x40000000000009f, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x2, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10001, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x90) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 56.92264733s ago: executing program 2 (id=2629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007"], 0x5c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x0, 'veth0_to_bond\x00', {0x3}, 0xa000}) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) 56.879908925s ago: executing program 3 (id=2630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYBLOB="d7"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 47.471859167s ago: executing program 0 (id=2631): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x46, 0x4f, 0x0, &(0x7f00000001c0)=""/74, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000f327001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0002000055b9156e08001f0009"], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r4) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000400)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r6) 44.159054028s ago: executing program 3 (id=2632): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0xc0189436, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1288b00}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4) 33.116628746s ago: executing program 32 (id=2623): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000000000000c0000000c000000020000000000000000000011ffffde000000"], 0x0, 0x26}, 0x20) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x802, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f00000004c0)='^', 0x34000, 0x0, &(0x7f0000000600)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xfff) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000640)={0x85ff, 0x3, 0x204, 0xee6, 0x2, 0xffff7fff, 0x1, 0xb}, 0x20) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000340)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x2b) (async) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @local}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @remote}, 0x1c) shutdown(r4, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x64}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabb3a438f5b22c956f3456ac5d3bbbbbbbb04000000008600140640fe800000000000bbfe0800be8e0000000000040000f6ffaa4e214e2200a8033ce5a07cc15c9f3e05cf7999e109b39d1c81e8a216141ac88f073778b4e364a610d9e15d9f28d5c607e433a88569b57a0300000000000000cd67fd008327e6b2c2904a4c93", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040100090780000"], 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 25.020813546s ago: executing program 33 (id=2629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007"], 0x5c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x0, 'veth0_to_bond\x00', {0x3}, 0xa000}) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) 17.65395587s ago: executing program 34 (id=2627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x40, r1, 0x100, 0x0, 0x0, {0x30}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x40}}, 0x48800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xe, 0x3, &(0x7f0000000440)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.265568756s ago: executing program 35 (id=2631): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x46, 0x4f, 0x0, &(0x7f00000001c0)=""/74, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000f327001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0002000055b9156e08001f0009"], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r4) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000400)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r6) 0s ago: executing program 36 (id=2632): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0xc0189436, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1288b00}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4) kernel console output (not intermixed with test programs): 180.847189][T11014] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1310'. [ 181.205913][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1317'. [ 181.386516][T10979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1303'. [ 181.386560][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 181.582799][T11057] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1325'. [ 182.473885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.474109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.474288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.474463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.474639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.474842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.538874][T11110] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1345'. [ 182.882272][T11126] 2N: renamed from vcan0 (while UP) [ 182.978206][T11121] tipc: Enabled bearer , priority 0 [ 182.979484][T11125] syzkaller0: MTU not usable for tipc bearer [ 182.979502][T11125] tipc: Disabling bearer [ 183.241003][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1357'. [ 183.536218][T11172] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 183.542815][T11173] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 183.980700][T11186] bond2: option fail_over_mac: invalid value (16) [ 183.999449][T11186] bond2 (unregistering): Released all slaves [ 184.518666][T11220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1370'. [ 184.571276][T11225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1369'. [ 184.600554][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 184.637817][T11224] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 184.718935][T11232] block nbd2: not configured, cannot reconfigure [ 184.838740][T11229] pimreg: left allmulticast mode [ 184.903547][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.905756][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.906068][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.919300][T11240] bond12: entered allmulticast mode [ 184.919722][T11240] 8021q: adding VLAN 0 to HW filter on device bond12 [ 184.932783][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.932985][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.933129][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.933372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.933462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.953733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.085160][T11240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.088379][T11240] bond_slave_0: left promiscuous mode [ 185.113102][T11240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.123240][T11240] bond_slave_1: left promiscuous mode [ 185.137666][T11256] netlink: 'syz.1.1377': attribute type 7 has an invalid length. [ 185.140128][T11240] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 185.141355][T11240] syz_tun: left promiscuous mode [ 185.168759][T11240] bond0 (unregistering): Released all slaves [ 185.504140][T11270] ipt_ECN: cannot use operation on non-tcp rule [ 185.595411][T11272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.802671][T11277] IPVS: Scheduler module ip_vs_sip not found [ 185.870095][T11291] __nla_validate_parse: 8 callbacks suppressed [ 185.870113][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 185.877015][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 185.877054][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 186.271381][T11282] syzkaller0: entered promiscuous mode [ 186.271403][T11282] syzkaller0: entered allmulticast mode [ 186.318218][T11304] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 186.321663][T11304] bond2 (unregistering): Released all slaves [ 188.309664][T11324] netlink: 'syz.3.1395': attribute type 4 has an invalid length. [ 188.383913][T11357] netlink: 'syz.0.1399': attribute type 8 has an invalid length. [ 188.505420][T11359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 188.611629][T11362] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 188.613369][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 188.613398][T11362] netlink: 'syz.2.1400': attribute type 10 has an invalid length. [ 188.613412][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'. [ 188.653041][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'. [ 188.716002][T11363] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 188.807203][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 188.963474][T11393] netlink: 'syz.1.1411': attribute type 4 has an invalid length. [ 188.976092][T11393] tls_set_device_offload_rx: netdev not found [ 189.172813][T11407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1415'. [ 189.220267][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1414'. [ 189.605810][T11429] syzkaller0: MTU not usable for tipc bearer [ 189.605849][T11429] tipc: Enabling of bearer rejected, failed to enable media [ 189.607010][T11429] syzkaller0: entered promiscuous mode [ 189.607028][T11429] syzkaller0: entered allmulticast mode [ 189.668679][T11435] bond2: option mode: invalid value (10) [ 189.676628][T11435] bond2 (unregistering): Released all slaves [ 189.751461][T11440] bond2: option mode: invalid value (10) [ 189.773322][T11440] bond2 (unregistering): Released all slaves [ 190.129522][T11465] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 190.186100][T11471] sctp: [Deprecated]: syz.1.1433 (pid 11471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.186100][T11471] Use struct sctp_sack_info instead [ 190.216065][T11471] net_ratelimit: 5413 callbacks suppressed [ 190.216082][T11471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.216256][T11471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.216454][T11471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.218062][T11471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.218209][T11471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.218348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.218527][T11471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.218662][T11471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.222794][T11471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.227595][T11471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.399207][T11485] netlink: 'syz.4.1434': attribute type 17 has an invalid length. [ 191.078100][T11524] __nla_validate_parse: 9 callbacks suppressed [ 191.078135][T11524] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1445'. [ 191.079573][T11524] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1445'. [ 191.263035][T11531] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 191.607359][T11539] batman_adv: batadv0: Adding interface: syzkaller0 [ 191.607377][T11539] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.607405][T11539] batman_adv: batadv0: Interface activated: syzkaller0 [ 192.189646][T11537] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 192.276134][T11537] batman_adv: batadv0: Removing interface: syzkaller0 [ 192.395271][ T992] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec [ 192.562289][T11555] syzkaller1: entered promiscuous mode [ 192.562311][T11555] syzkaller1: entered allmulticast mode [ 192.733817][T11579] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1457'. [ 192.734439][T11579] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1457'. [ 193.102170][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1460'. [ 193.368008][T11614] tipc: MTU too low for tipc bearer [ 193.379543][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 193.420290][T11614] tipc: MTU too low for tipc bearer [ 193.750802][T11634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1468'. [ 193.750827][T11634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1468'. [ 194.146608][T11650] netlink: 'syz.1.1471': attribute type 1 has an invalid length. [ 194.172658][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.259373][T11650] 8021q: adding VLAN 0 to HW filter on device bond11 [ 194.392527][T11650] bond11: (slave geneve2): making interface the new active one [ 194.409347][T11650] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 195.251888][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'. [ 195.529186][T11709] net_ratelimit: 66 callbacks suppressed [ 195.529205][T11709] ip_tables: iptables: counters copy to user failed while replacing table [ 195.716383][T11713] xt_hashlimit: size too large, truncated to 1048576 [ 195.829368][T11719] netlink: 'syz.1.1491': attribute type 3 has an invalid length. [ 196.557278][T11744] xt_limit: Overflow, try lower: 536871034/0 [ 196.632754][T11750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1500'. [ 196.646101][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 196.646267][T11749] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 196.841286][T11760] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1502'. [ 196.861151][T11760] bridge0: port 3(syz_tun) entered disabled state [ 196.862269][T11760] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.940410][T11764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1505'. [ 196.940441][T11764] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1505'. [ 196.970819][T11763] veth0_macvtap: entered allmulticast mode [ 197.111847][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 197.146714][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1507'. [ 197.250181][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 197.484791][T11794] ip_tables: iptables: counters copy to user failed while replacing table [ 197.509644][T11800] bridge_slave_1: entered promiscuous mode [ 197.510271][T11800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1512'. [ 197.576761][T11799] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1513'. [ 197.716508][T11806] netlink: 'syz.0.1515': attribute type 83 has an invalid length. [ 197.843295][T11814] batman_adv: batadv0: Adding interface: veth0 [ 197.843313][T11814] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.843339][T11814] batman_adv: batadv0: Interface activated: veth0 [ 197.848711][T11810] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.906896][T11814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.906915][T11814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.912533][T11814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.912551][T11814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.925768][T11814] batman_adv: batadv0: Interface deactivated: veth0 [ 197.925786][T11814] batman_adv: batadv0: Removing interface: veth0 [ 197.981186][T11814] batadv0 (unregistering): left promiscuous mode [ 198.183093][T11833] Bluetooth: hci0: unsupported parameter 5135 [ 198.183114][T11833] Bluetooth: hci0: unsupported parameter 8192 [ 198.183125][T11833] Bluetooth: hci0: unsupported parameter 5135 [ 198.183136][T11833] Bluetooth: hci0: unsupported parameter 8192 [ 198.370423][T11841] syzkaller0: entered promiscuous mode [ 198.370455][T11841] syzkaller0: entered allmulticast mode [ 198.519349][T11853] netlink: 'syz.3.1530': attribute type 21 has an invalid length. [ 198.634022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.634257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.634422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.634566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.634737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.634880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.635044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.635204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.743495][T11858] netlink: 'syz.2.1534': attribute type 5 has an invalid length. [ 198.761748][T11858] geneve2: entered promiscuous mode [ 198.761768][T11858] geneve2: entered allmulticast mode [ 198.781080][T11858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.781094][T11858] IPv6: NLM_F_CREATE should be set when creating new route [ 198.781117][T11858] IPv6: NLM_F_CREATE should be set when creating new route [ 198.782596][T11858] block nbd1: Unsupported socket: should be TCP or UNIX. [ 198.784112][ T248] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 198.784149][ T248] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 198.784179][ T248] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 198.784208][ T248] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 199.475334][T11904] netlink: 'syz.0.1546': attribute type 10 has an invalid length. [ 199.517431][T11904] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 200.401566][T11965] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 200.444059][T11965] 8021q: adding VLAN 0 to HW filter on device bond12 [ 200.483232][T11965] bond12: (slave bridge22): making interface the new active one [ 200.492647][T11965] bond12: (slave bridge22): Enslaving as an active interface with an up link [ 200.653321][T11976] netlink: 'syz.0.1570': attribute type 3 has an invalid length. [ 200.669822][T11979] netlink: 'syz.0.1570': attribute type 3 has an invalid length. [ 201.388258][T12018] netlink: 'syz.3.1583': attribute type 11 has an invalid length. [ 201.722992][T12031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.753879][ C1] net_ratelimit: 7 callbacks suppressed [ 201.753897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.754116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.754336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.754520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.754705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.754893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.755094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.755303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.755529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.755716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.079615][T12045] netlink: 'syz.1.1591': attribute type 9 has an invalid length. [ 202.079636][T12045] __nla_validate_parse: 21 callbacks suppressed [ 202.079648][T12045] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1591'. [ 202.398862][T12053] syzkaller1: entered promiscuous mode [ 202.398882][T12053] syzkaller1: entered allmulticast mode [ 202.460672][T12053] syzkaller1: left promiscuous mode [ 202.460692][T12053] syzkaller1: left allmulticast mode [ 202.870596][T12074] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1598'. [ 202.959697][T12079] bond4: entered promiscuous mode [ 202.959722][T12079] bond4: entered allmulticast mode [ 202.961206][T12079] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.050349][T12087] bond5: entered promiscuous mode [ 203.050370][T12087] bond5: entered allmulticast mode [ 203.050669][T12087] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.412727][T12058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.582857][T12118] netlink: 'syz.4.1610': attribute type 1 has an invalid length. [ 205.582879][T12118] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1610'. [ 205.601376][T12118] netlink: 'syz.4.1610': attribute type 1 has an invalid length. [ 205.601393][T12118] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1610'. [ 205.928619][T12142] netlink: 'syz.4.1613': attribute type 11 has an invalid length. [ 205.948002][T12143] netlink: 'syz.1.1614': attribute type 11 has an invalid length. [ 206.707609][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1626'. [ 206.977797][T12204] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 206.980984][T12204] bond13 (unregistering): Released all slaves [ 207.152408][T12215] Bluetooth: MGMT ver 1.23 [ 207.184267][T12223] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1633'. [ 207.398229][T12238] xt_hashlimit: size too large, truncated to 1048576 [ 207.535251][T12244] netlink: 'syz.1.1640': attribute type 39 has an invalid length. [ 207.622716][T12246] syzkaller0 speed is unknown, defaulting to 1000 [ 207.622804][T12246] syzkaller0 speed is unknown, defaulting to 1000 [ 207.623543][T12246] syzkaller0 speed is unknown, defaulting to 1000 [ 207.636472][T12246] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 207.636504][T12246] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 207.636539][T12246] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 207.703327][T12248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1642'. [ 207.732997][T12246] syzkaller0 speed is unknown, defaulting to 1000 [ 207.740111][T12246] syzkaller0 speed is unknown, defaulting to 1000 [ 207.745513][T12246] syzkaller0 speed is unknown, defaulting to 1000 [ 207.762392][T12246] syzkaller0 speed is unknown, defaulting to 1000 [ 207.770324][T12246] syzkaller0 speed is unknown, defaulting to 1000 [ 207.900378][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 208.055644][T12279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1650'. [ 208.288416][T12298] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 208.289058][T12298] netlink: 'syz.4.1654': attribute type 21 has an invalid length. [ 208.289077][T12298] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.289156][T12298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.289165][T12298] IPv6: NLM_F_CREATE should be set when creating new route [ 208.289221][T12298] IPv6: NLM_F_CREATE should be set when creating new route [ 208.289244][T12298] IPv6: NLM_F_CREATE should be set when creating new route [ 208.508714][T12310] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.553958][ C0] net_ratelimit: 20 callbacks suppressed [ 208.553977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.554208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.554423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.554636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.554871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.555082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.555304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.555516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.555763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.555979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.807928][T12331] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1663'. [ 208.807954][T12331] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1663'. [ 209.327072][T12351] lo: left promiscuous mode [ 209.340498][T12353] Cannot find del_set index 4 as target [ 209.348453][T12351] tunl0: left promiscuous mode [ 209.359494][T12351] gre0: left promiscuous mode [ 209.398365][T12357] ip6t_srh: unknown srh invflags 4000 [ 209.416919][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 209.447530][T12351] gretap0: left promiscuous mode [ 209.452090][T12351] erspan0: left promiscuous mode [ 209.468305][T12351] ip_vti0: left promiscuous mode [ 209.495186][T12351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.550511][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 209.561827][T12363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1674'. [ 209.885797][T12381] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 209.925298][T12381] 8021q: adding VLAN 0 to HW filter on device bond13 [ 209.959467][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 209.959788][T12381] 8021q: VLANs not supported on gre0 [ 210.014880][T12381] bond13: (slave bridge7): making interface the new active one [ 210.020688][T12381] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 210.772505][T12435] netlink: 'syz.3.1695': attribute type 1 has an invalid length. [ 211.338341][T12435] bond3: entered promiscuous mode [ 211.340708][T12435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.851437][T12516] IPVS: length: 4096 != 8 [ 212.852586][T12516] IPVS: length: 4096 != 8 [ 212.864706][T12518] __nla_validate_parse: 3 callbacks suppressed [ 212.864721][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 212.889521][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1712'. [ 212.921893][T12518] batman_adv: batadv0: Interface deactivated: dummy0 [ 212.921915][T12518] batman_adv: batadv0: Removing interface: dummy0 [ 213.017893][T12523] xt_MASQUERADE: bad rangesize 2147483646 [ 213.252519][T12518] team0: Port device team_slave_0 removed [ 213.283860][T12530] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1716'. [ 213.301220][T12518] team0: Port device team_slave_1 removed [ 213.307817][T12532] netlink: 'syz.2.1717': attribute type 39 has an invalid length. [ 213.308225][T12518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.308244][T12518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.318253][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 213.318628][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 213.318957][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 213.319524][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 213.408170][T12537] netlink: 'syz.1.1718': attribute type 1 has an invalid length. [ 213.591961][T12537] bond4: (slave veth0_to_bond): Releasing active interface [ 213.607052][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 213.729958][T12545] net_ratelimit: 16 callbacks suppressed [ 213.729977][T12545] ip_tables: iptables: counters copy to user failed while replacing table [ 213.761967][T12546] tls_set_device_offload_rx: netdev not found [ 213.841259][T12548] netlink: 'syz.0.1719': attribute type 2 has an invalid length. [ 213.841280][T12548] netlink: 'syz.0.1719': attribute type 8 has an invalid length. [ 213.841292][T12548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1719'. [ 213.881853][T12555] nbd: socks must be embedded in a SOCK_ITEM attr [ 214.311802][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 214.336710][T12571] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 214.448584][T12581] xt_hashlimit: invalid interval [ 214.831134][T12589] sctp: [Deprecated]: syz.2.1728 (pid 12589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.831134][T12589] Use struct sctp_sack_info instead [ 214.953904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.954123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.954295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.954470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.954650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.954833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.955019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.955194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.955367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.306490][T12600] netlink: 'syz.2.1731': attribute type 10 has an invalid length. [ 215.494134][T12604] netlink: 'syz.1.1733': attribute type 2 has an invalid length. [ 215.624525][T12612] netlink: 'syz.2.1737': attribute type 29 has an invalid length. [ 216.428977][T12638] syzkaller0: entered promiscuous mode [ 216.428999][T12638] syzkaller0: entered allmulticast mode [ 216.672418][T12642] x_tables: duplicate underflow at hook 1 [ 218.427402][T12694] bridge0: port 3(syz_tun) entered blocking state [ 218.427535][T12694] bridge0: port 3(syz_tun) entered forwarding state [ 218.429816][T12694] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.429937][T12694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.798055][T12703] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 218.911365][T12708] __nla_validate_parse: 8 callbacks suppressed [ 218.911385][T12708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1753'. [ 219.380845][T12720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1757'. [ 219.380880][T12720] netlink: 'syz.2.1757': attribute type 7 has an invalid length. [ 219.380893][T12720] netlink: 'syz.2.1757': attribute type 8 has an invalid length. [ 219.380904][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'. [ 220.463327][T12759] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 220.463408][T12759] syzkaller1: linktype set to 823 [ 221.434461][ C0] net_ratelimit: 14 callbacks suppressed [ 221.434480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.434654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.434812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.434996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.435151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.435314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.435469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.435624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.435777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.435932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.476601][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 222.804451][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'. [ 222.826985][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1782'. [ 223.037698][T12810] veth0_macvtap (unregistering): left allmulticast mode [ 223.490900][T12837] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1784'. [ 223.894054][T12849] 8021q: adding VLAN 0 to HW filter on device bond14 [ 224.028245][T12858] 8021q: adding VLAN 0 to HW filter on device bond15 [ 224.125545][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1791'. [ 224.125713][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1791'. [ 224.493053][T12888] netlink: 'syz.1.1793': attribute type 30 has an invalid length. [ 224.650885][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 225.002993][T12902] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 225.371333][T12912] ip6gre1: entered promiscuous mode [ 225.631958][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'. [ 225.700237][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 225.700270][T12933] netlink: 'syz.3.1808': attribute type 30 has an invalid length. [ 225.700284][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 225.740368][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 225.740398][T12933] netlink: 'syz.3.1808': attribute type 30 has an invalid length. [ 225.740410][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 225.988193][T12949] netlink: 'syz.3.1814': attribute type 4 has an invalid length. [ 226.339921][T12964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1816'. [ 226.546252][T12969] netlink: 'syz.1.1818': attribute type 10 has an invalid length. [ 226.587140][T12969] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 226.614311][T12969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1818'. [ 226.641605][T12969] veth8: entered promiscuous mode [ 226.641624][T12969] veth8: entered allmulticast mode [ 226.958271][T12981] netlink: 'syz.2.1820': attribute type 4 has an invalid length. [ 227.397730][T12994] bond14: option mode: invalid value (10) [ 227.418615][T12994] bond14 (unregistering): Released all slaves [ 228.140436][T13016] Cannot find del_set index 4 as target [ 228.140576][T13016] Cannot find del_set index 4 as target [ 228.140697][T13016] Cannot find del_set index 4 as target [ 228.140818][T13016] Cannot find del_set index 4 as target [ 228.140945][T13016] Cannot find del_set index 4 as target [ 228.141065][T13016] Cannot find del_set index 4 as target [ 228.141258][T13016] Cannot find del_set index 4 as target [ 228.141380][T13016] Cannot find del_set index 4 as target [ 228.141493][T13016] Cannot find del_set index 4 as target [ 228.141613][T13016] Cannot find del_set index 4 as target [ 228.633794][ C1] net_ratelimit: 14 callbacks suppressed [ 228.633813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.634000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.634178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.634351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.634534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.634708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.634882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.635053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.635224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.635390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.837736][T13027] xt_hashlimit: size too large, truncated to 1048576 [ 229.055118][T13030] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 229.082842][T13030] 0ªX¹¦Dö»: entered allmulticast mode [ 229.427198][T13033] bond4: entered promiscuous mode [ 229.427220][T13033] bond4: entered allmulticast mode [ 229.628502][T13033] bond5: entered promiscuous mode [ 229.628523][T13033] bond5: entered allmulticast mode [ 230.082825][T13033] bond6: entered promiscuous mode [ 230.082847][T13033] bond6: entered allmulticast mode [ 231.562935][T13118] syzkaller0: entered promiscuous mode [ 231.562959][T13118] syzkaller0: entered allmulticast mode [ 232.397811][T13152] sctp: [Deprecated]: syz.4.1862 (pid 13152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.397811][T13152] Use struct sctp_sack_info instead [ 232.437672][T13148] TCP: TCP_TX_DELAY enabled [ 232.463323][T13152] netlink: 'syz.4.1862': attribute type 10 has an invalid length. [ 232.541129][T13152] __nla_validate_parse: 68 callbacks suppressed [ 232.541147][T13152] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1862'. [ 233.591047][T13193] syzkaller0: entered promiscuous mode [ 233.591069][T13193] syzkaller0: entered allmulticast mode [ 233.690242][T13193] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1873'. [ 233.952142][T13200] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1875'. [ 233.999198][T13202] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1875'. [ 234.473980][ C0] net_ratelimit: 17 callbacks suppressed [ 234.474000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.028306][T13236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.028511][T13236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.028714][T13236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.062164][T13236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.062410][T13236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.072746][T13236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.072922][T13236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.073114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.073218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.137734][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1886'. [ 235.137764][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1886'. [ 235.184609][T13245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1886'. [ 235.184643][T13245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1886'. [ 235.268629][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 235.475090][T13239] netlink: 'syz.2.1887': attribute type 83 has an invalid length. [ 237.275503][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1903'. [ 237.981156][T13323] syzkaller0: left promiscuous mode [ 237.981177][T13323] syzkaller0: left allmulticast mode [ 237.982261][ T5761] syzkaller0 speed is unknown, defaulting to 1000 [ 238.386203][T13349] __nla_validate_parse: 3 callbacks suppressed [ 238.386229][T13349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1912'. [ 239.062640][T13371] C: renamed from lo (while UP) [ 239.204111][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'. [ 239.270868][T13387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1924'. [ 240.059525][T13413] smc: removing ib device syz1 [ 240.125654][T13413] smbdirect: ib_dev[syz1] removed [ 240.839527][T13427] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1937'. [ 240.853194][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'. [ 240.941640][T13434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.005768][T13433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.753808][ C1] net_ratelimit: 1170 callbacks suppressed [ 241.753841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.754045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.754227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.754411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.754603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.754783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.754972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.755152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.755331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.755516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.903229][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 242.319942][T13465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.319959][T13465] IPv6: NLM_F_CREATE should be set when creating new route [ 242.320001][T13465] IPv6: NLM_F_CREATE should be set when creating new route [ 242.320025][T13465] IPv6: NLM_F_CREATE should be set when creating new route [ 242.520248][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1946'. [ 242.538022][T13474] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 242.538041][T13474] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1946'. [ 242.538059][T13474] nbd: couldn't find device at index 767 [ 243.615809][T13495] erspan0: entered promiscuous mode [ 244.562559][T13520] tipc: Enabling of bearer rejected, media not registered [ 245.097656][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 245.097680][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'. [ 245.142616][T13543] xt_hashlimit: size too large, truncated to 1048576 [ 245.359008][T13553] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1966'. [ 245.379458][T13553] netlink: 'syz.2.1966': attribute type 16 has an invalid length. [ 245.379477][T13553] netlink: 'syz.2.1966': attribute type 17 has an invalid length. [ 245.404712][T13553] 0ªX¹¦Dö»: left allmulticast mode [ 245.450026][T13553] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.369185][T13568] bond7: entered promiscuous mode [ 246.369208][T13568] bond7: entered allmulticast mode [ 246.460537][T13576] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 246.793939][ C0] net_ratelimit: 14 callbacks suppressed [ 246.793959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.934406][T13591] netlink: 'syz.4.1975': attribute type 21 has an invalid length. [ 247.170815][T13591] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 247.197954][T13591] bond6 (unregistering): Released all slaves [ 247.494605][T13599] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 247.525761][T13599] gtp0: entered promiscuous mode [ 247.525941][T13599] gtp0: entered allmulticast mode [ 248.658080][T13625] nbd: must specify a size in bytes for the device [ 248.691139][T13624] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.754334][T13625] nbd: must specify a size in bytes for the device [ 248.782963][T13631] netlink: 'syz.4.1986': attribute type 1 has an invalid length. [ 248.873807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.874033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.874228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.874418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.874612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.874795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.874980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.875177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.875375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.038146][T13631] bond6: entered promiscuous mode [ 249.038171][T13631] bond6: entered allmulticast mode [ 249.038571][T13631] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.558072][T13649] batman_adv: batadv0: Adding interface: syzkaller0 [ 249.558090][T13649] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.558117][T13649] batman_adv: batadv0: Interface activated: syzkaller0 [ 249.593633][T13655] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1990'. [ 249.650917][T13656] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1988'. [ 249.711423][T13644] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 249.952242][T13644] batman_adv: batadv0: Removing interface: syzkaller0 [ 250.070541][T13670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1994'. [ 250.172374][T13672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1994'. [ 250.192633][T13674] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 250.718283][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'. [ 251.503111][T13709] bond14: option arp_all_targets: invalid value (18446744073709551613) [ 251.550988][T13709] bond14 (unregistering): Released all slaves [ 251.585783][T13720] netlink: 'syz.3.2007': attribute type 1 has an invalid length. [ 251.733896][T13720] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.738127][T13714] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2007'. [ 252.153817][ C1] net_ratelimit: 2 callbacks suppressed [ 252.153838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.154039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.154242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.154447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.154634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.154818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.154991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.155182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.155393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.155590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.620985][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 252.699250][T13745] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2013'. [ 252.699288][T13745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2013'. [ 252.699302][T13745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2013'. [ 252.729130][T13758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2015'. [ 252.729161][T13758] netlink: 'syz.3.2015': attribute type 7 has an invalid length. [ 252.729173][T13758] netlink: 'syz.3.2015': attribute type 8 has an invalid length. [ 252.729183][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 252.824727][T13763] sctp: [Deprecated]: syz.2.2018 (pid 13763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.824727][T13763] Use struct sctp_sack_info instead [ 253.027764][T13763] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.721214][T13784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2025'. [ 254.352189][T13793] 8021q: adding VLAN 0 to HW filter on device bond14 [ 254.365021][T13793] bond14: entered promiscuous mode [ 254.386143][T13793] bond0: (slave bond14): Enslaving as an active interface with an up link [ 255.294285][T13830] __nla_validate_parse: 2 callbacks suppressed [ 255.294303][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 255.433151][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 255.517378][ T29] audit: type=1800 audit(1792929472.867:4): pid=13834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2032" name=680B20 dev="tmpfs" ino=2095 res=0 errno=-22 [ 255.555649][T13838] tipc: Trying to set illegal importance in message [ 255.631052][T13843] netlink: 'syz.1.2035': attribute type 21 has an invalid length. [ 255.631075][T13843] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2035'. [ 255.631153][T13843] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2035'. [ 255.783236][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2038'. [ 255.806438][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 255.855806][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'. [ 255.856651][T13845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2034'. [ 256.043297][T13855] sock: sock_timestamping_bind_phc: sock not bind to device [ 256.360888][T13864] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2041'. [ 256.482535][T13863] wireguard0: entered promiscuous mode [ 256.826649][T13886] syzkaller0: entered promiscuous mode [ 256.826672][T13886] syzkaller0: entered allmulticast mode [ 257.731397][T13905] x_tables: duplicate entry at hook 3 [ 258.793795][ C1] net_ratelimit: 83 callbacks suppressed [ 258.793815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.794016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.794206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.794406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.794590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.794773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.794966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.795149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.795331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.795534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.928482][T13935] IPVS: Unknown mcast interface: nicvf0 [ 259.043649][T13941] netlink: 'syz.3.2059': attribute type 1 has an invalid length. [ 259.286188][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 259.832126][T13950] bond9: (slave bridge3): making interface the new active one [ 259.832556][T13950] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 260.092429][T13972] 8021q: VLANs not supported on wg0 [ 261.384537][T14009] netlink: 'syz.2.2074': attribute type 6 has an invalid length. [ 261.777074][T14024] __nla_validate_parse: 2 callbacks suppressed [ 261.777093][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 261.777111][T14024] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2076'. [ 261.871419][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 261.871446][T14032] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2076'. [ 262.272503][T14047] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2081'. [ 262.382142][T14054] syzkaller1: entered promiscuous mode [ 262.382166][T14054] syzkaller1: entered allmulticast mode [ 262.801064][T14065] netlink: 'syz.1.2085': attribute type 1 has an invalid length. [ 262.801086][T14065] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2085'. [ 263.141865][T14067] bond8: option mode: invalid value (10) [ 263.234952][T14067] bond8 (unregistering): Released all slaves [ 263.272382][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 263.628354][T14086] syzkaller0: entered promiscuous mode [ 263.628527][T14086] syzkaller0: entered allmulticast mode [ 263.932656][T14100] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2092'. [ 263.932682][T14100] nbd: illegal input index -8454144 [ 264.378360][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2096'. [ 264.823383][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2101'. [ 264.920310][T14130] No such timeout policy "syz0" [ 264.982642][T14117] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 265.092282][T14143] net_ratelimit: 9 callbacks suppressed [ 265.092297][T14143] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.187080][T14145] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 265.190673][T14145] xt_LOG: prefix is not null-terminated [ 265.687790][T14159] ip_tables: iptables: counters copy to user failed while replacing table [ 265.736681][T14161] netlink: 'syz.2.2109': attribute type 21 has an invalid length. [ 265.841026][T14169] netlink: 'syz.4.2112': attribute type 2 has an invalid length. [ 266.393993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.394208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.394393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.394576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.394761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.394958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.395138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.267035][T14193] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 267.267070][T14193] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.557373][T14211] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 268.209341][T14220] __nla_validate_parse: 4 callbacks suppressed [ 268.209360][T14220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2123'. [ 268.844059][T14236] sch_tbf: burst 0 is lower than device gre0 mtu (32793) ! [ 269.619803][T14261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2135'. [ 269.804647][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2135'. [ 269.841935][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2137'. [ 270.351763][T14290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2141'. [ 270.711959][T14297] net_ratelimit: 9 callbacks suppressed [ 270.711980][T14297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 270.732692][ T5292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 270.870095][T14303] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 270.897325][T14303] syzkaller1: entered promiscuous mode [ 270.897345][T14303] syzkaller1: entered allmulticast mode [ 270.897399][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2142'. [ 270.938228][T14311] Cannot find add_set index 0 as target [ 271.472437][T14322] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2150'. [ 271.563219][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'. [ 271.610610][T14330] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 271.610916][T14330] netlink: 'syz.3.2152': attribute type 10 has an invalid length. [ 271.610932][T14330] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2152'. [ 272.250874][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 272.793518][T14366] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 273.273914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.274128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.274356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.274550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.274741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.274939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.275148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.916297][T14392] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 273.916543][T14390] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 274.117740][T14398] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 274.120388][T14403] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 274.308985][T14407] __nla_validate_parse: 2 callbacks suppressed [ 274.309005][T14407] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2165'. [ 274.427753][T14412] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2168'. [ 274.510209][T14412] veth1_vlan: entered promiscuous mode [ 274.510286][T14412] macvlan0: entered promiscuous mode [ 274.638089][T14415] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.2167'. [ 274.677381][T14412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2168'. [ 274.677401][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 275.766916][T14433] IPVS: Unknown mcast interface: netpci0 [ 275.926129][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2178'. [ 275.970257][T14459] xt_HMARK: spi-set and port-set can't be combined [ 276.307508][T14475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2183'. [ 276.311045][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'. [ 276.355063][T14474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2181'. [ 276.355581][T14474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2181'. [ 276.633836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.634048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.634239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.634457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.634645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.634841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.635045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.635234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.418985][T14501] netlink: 'syz.3.2185': attribute type 1 has an invalid length. [ 277.481931][T14506] netlink: 'syz.1.2186': attribute type 11 has an invalid length. [ 277.528641][T14511] nbd: illegal input index -8454144 [ 278.897826][T14547] veth7: entered allmulticast mode [ 278.917638][T14557] netlink: 'syz.1.2200': attribute type 4 has an invalid length. [ 279.147810][T14557] .`: renamed from bond0 (while UP) [ 279.688584][T14586] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.859068][T14588] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.538755][T14601] __nla_validate_parse: 64 callbacks suppressed [ 280.538783][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'. [ 281.729339][T14630] raw_sendmsg: syz.0.2214 forgot to set AF_INET. Fix it! [ 282.303318][T14639] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 282.335918][T14639] bond0 (unregistering): Released all slaves [ 282.778093][T14652] hsr0: entered allmulticast mode [ 282.778116][T14652] hsr_slave_0: entered allmulticast mode [ 282.778133][T14652] hsr_slave_1: entered allmulticast mode [ 282.866825][T14655] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2220'. [ 283.189859][T14664] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 283.428428][T14667] syzkaller1: entered allmulticast mode [ 283.633443][T14676] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2227'. [ 284.180767][T14697] netlink: 127 bytes leftover after parsing attributes in process `syz.4.2232'. [ 284.181015][T14697] netlink: 127 bytes leftover after parsing attributes in process `syz.4.2232'. [ 284.181242][T14697] netlink: 127 bytes leftover after parsing attributes in process `syz.4.2232'. [ 284.181462][T14697] netlink: 127 bytes leftover after parsing attributes in process `syz.4.2232'. [ 284.181681][T14697] netlink: 127 bytes leftover after parsing attributes in process `syz.4.2232'. [ 284.181913][T14697] netlink: 127 bytes leftover after parsing attributes in process `syz.4.2232'. [ 284.224020][T14697] netlink: 127 bytes leftover after parsing attributes in process `syz.4.2232'. [ 284.313882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.314076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.314318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.314542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.314725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.314907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.315095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.365249][T14729] netlink: 'syz.1.2235': attribute type 32 has an invalid length. [ 285.629877][T14729] bond0: option coupled_control: invalid value (192) [ 285.671283][T14729] bond0 (unregistering): Released all slaves [ 286.242256][T14755] __nla_validate_parse: 27 callbacks suppressed [ 286.242276][T14755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2241'. [ 286.385284][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 287.404149][T14802] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 287.435628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.435824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.657439][T14807] bridge10: entered promiscuous mode [ 287.657478][T14807] bridge10: entered allmulticast mode [ 288.319161][T14817] bond0: (slave syz_tun): Enslaving as a backup interface with an up link [ 288.576479][T14832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2259'. [ 288.782468][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2258'. [ 288.963853][T14843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2260'. [ 289.083533][T14848] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2262'. [ 289.192852][T14848] veth1_to_team: entered promiscuous mode [ 289.200922][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2262'. [ 289.234341][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2260'. [ 289.273840][T14853] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2263'. [ 289.273861][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2263'. [ 289.608659][T14848] team0: Port device team_slave_1 removed [ 290.271347][T14861] workqueue: Failed to create a rescuer kthread for wq "nfc11_nci_tx_wq": -EINTR [ 290.713822][ C0] net_ratelimit: 6 callbacks suppressed [ 290.713842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.714036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.714229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.714409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.714612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.714788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.714962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.715163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.288693][T14924] __nla_validate_parse: 3 callbacks suppressed [ 291.288713][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 291.403407][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 291.406534][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 291.406724][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 291.406901][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 291.407073][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 291.407256][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 291.442285][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 291.500064][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 291.500254][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 292.127284][T14949] netlink: 'syz.1.2278': attribute type 1 has an invalid length. [ 292.428033][T14961] Unsupported ieee802154 address type: 0 [ 292.456454][T14961] lo: entered promiscuous mode [ 292.525203][T14961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.235119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.106251][T15073] syzkaller0: entered promiscuous mode [ 297.106272][T15073] syzkaller0: entered allmulticast mode [ 297.333927][T15082] __nla_validate_parse: 99 callbacks suppressed [ 297.333947][T15082] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2307'. [ 297.624265][T15087] netlink: 'syz.0.2309': attribute type 58 has an invalid length. [ 297.624286][T15087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2309'. [ 298.393851][ C0] net_ratelimit: 7 callbacks suppressed [ 298.393871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.394098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.394298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.394495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.394697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.394893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.395086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.395281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.395474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.023473][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 299.099416][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2315'. [ 299.247557][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2316'. [ 299.590052][T15156] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2320'. [ 299.640019][T15159] netlink: 'syz.1.2321': attribute type 1 has an invalid length. [ 299.740852][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 299.784347][T15159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.828386][T15159] bond0: (slave bridge23): making interface the new active one [ 299.830294][T15159] bond0: (slave bridge23): Enslaving as an active interface with an up link [ 300.081367][T15172] netlink: 'syz.0.2323': attribute type 21 has an invalid length. [ 300.081388][T15172] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2323'. [ 300.081456][T15172] netlink: 'syz.0.2323': attribute type 4 has an invalid length. [ 300.081469][T15172] netlink: 'syz.0.2323': attribute type 5 has an invalid length. [ 300.081481][T15172] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2323'. [ 300.248702][T15172] bridge0: port 1(gretap0) entered blocking state [ 300.248810][T15172] bridge0: port 1(gretap0) entered disabled state [ 300.248969][T15172] gretap0: entered allmulticast mode [ 300.280741][T15172] gretap0: entered promiscuous mode [ 300.281413][T15172] bridge0: port 1(gretap0) entered blocking state [ 300.281539][T15172] bridge0: port 1(gretap0) entered forwarding state [ 300.773309][T15198] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 300.904595][T15202] syzkaller0: entered promiscuous mode [ 300.904616][T15202] syzkaller0: entered allmulticast mode [ 300.997749][T15204] netlink: 'syz.4.2333': attribute type 1 has an invalid length. [ 301.389889][T15204] bond8: entered promiscuous mode [ 301.407742][T15204] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.638657][T15205] bond8: (slave bridge5): making interface the new active one [ 301.638682][T15205] bridge5: entered promiscuous mode [ 301.640501][T15205] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 302.113211][T15236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2337'. [ 302.153861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.667344][T15257] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20002 [ 302.891097][T15259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2343'. [ 302.925296][T15259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2343'. [ 303.001673][T15266] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 303.003355][T15266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2345'. [ 303.511139][T15281] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 304.576979][T15311] netlink: 'syz.1.2351': attribute type 1 has an invalid length. [ 304.689227][T15314] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 304.738161][T15314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2353'. [ 304.903103][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2354'. [ 304.917496][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 305.433816][ C1] net_ratelimit: 6 callbacks suppressed [ 305.433835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.434014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.434195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.434382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.434609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.434780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.435019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.435186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.435359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.435524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.913442][T15345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.435287][T15350] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2360'. [ 307.430346][T15394] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 307.522534][T15387] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 307.523840][T15396] netlink: 'syz.4.2369': attribute type 21 has an invalid length. [ 307.523915][T15396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.523925][T15396] IPv6: NLM_F_CREATE should be set when creating new route [ 307.523967][T15396] IPv6: NLM_F_CREATE should be set when creating new route [ 307.523990][T15396] IPv6: NLM_F_CREATE should be set when creating new route [ 307.597323][T15387] bond8 (unregistering): Released all slaves [ 307.960215][T15404] syzkaller0: entered promiscuous mode [ 307.960241][T15404] syzkaller0: entered allmulticast mode [ 308.142730][T15412] veth0: entered promiscuous mode [ 308.155051][T15412] netlink: 'syz.2.2374': attribute type 2 has an invalid length. [ 308.155068][T15412] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2374'. [ 308.387884][T15411] veth0: left promiscuous mode [ 308.388650][T15427] netlink: 'syz.1.2380': attribute type 49 has an invalid length. [ 308.505594][T15429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2380'. [ 308.544327][T15427] ip6gretap0: entered promiscuous mode [ 308.544349][T15427] ip6gretap0: entered allmulticast mode [ 308.604442][T15431] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2379'. [ 310.254596][T15492] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 311.243991][T15516] 8021q: VLANs not supported on ip_vti0 [ 312.243864][ C0] net_ratelimit: 10 callbacks suppressed [ 312.243884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.244097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.244296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.244520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.244727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.244943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.245146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.440504][T15548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.423641][T15573] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2414'. [ 314.011843][T15593] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 314.011871][T15593] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 314.060363][T15595] rdma_rxe: rxe_newlink: failed to add lo [ 314.149743][T15595] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2418'. [ 314.165396][T15595] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2418'. [ 314.739672][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2424'. [ 315.637619][T15655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2432'. [ 315.674107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.674344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.081693][T15671] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2435'. [ 316.149333][T15676] netlink: 'syz.0.2435': attribute type 32 has an invalid length. [ 316.149353][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'. [ 316.569289][T15676] bond16: option coupled_control: invalid value (192) [ 316.593025][T15676] bond16 (unregistering): Released all slaves [ 317.220559][T15689] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2439'. [ 317.567971][T15711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2443'. [ 317.860305][T15727] netlink: 3560 bytes leftover after parsing attributes in process `syz.4.2445'. [ 318.208164][T15747] netlink: 'syz.4.2449': attribute type 6 has an invalid length. [ 318.793251][T15757] __nla_validate_parse: 2 callbacks suppressed [ 318.793272][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'. [ 319.033787][ C0] net_ratelimit: 5 callbacks suppressed [ 319.033808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.034017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.034217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.034440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.034638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.034833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.035028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.035229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.702623][T15795] tipc: Enabling of bearer rejected, failed to enable media [ 320.015727][T15802] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20002 [ 320.490130][T15820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2467'. [ 321.123814][T15850] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2475'. [ 321.170967][T15849] 8021q: adding VLAN 0 to HW filter on device bond16 [ 321.440013][T15859] netlink: 'syz.4.2479': attribute type 1 has an invalid length. [ 321.728467][T15868] xt_nat: multiple ranges no longer supported [ 322.403061][T15893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2487'. [ 322.483806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.484052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.947128][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2491'. [ 323.005713][ T42] IPVS: starting estimator thread 0... [ 323.103784][T15913] IPVS: using max 27 ests per chain, 64800 per kthread [ 323.549870][T15936] bridge_slave_1: entered promiscuous mode [ 323.562831][T15936] : renamed from bond0 [ 323.772458][T15942] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 323.839133][T15947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2498'. [ 324.203030][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 324.302700][T15959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2502'. [ 324.302737][T15959] netlink: 'syz.0.2502': attribute type 7 has an invalid length. [ 324.302750][T15959] netlink: 'syz.0.2502': attribute type 8 has an invalid length. [ 324.302762][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 324.321626][T15957] team0 (unregistering): Port device team_slave_0 removed [ 324.380436][T15957] team0 (unregistering): Port device team_slave_1 removed [ 324.472527][T15959] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 324.495363][T15968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.510667][T15959] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 324.515092][T15959] erspan0: entered promiscuous mode [ 324.520380][T15959] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 324.526188][T15959] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 324.574613][T15958] tipc: Enabled bearer , priority 10 [ 324.574762][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2500'. [ 324.577682][T15960] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2501'. [ 325.664165][ T5627] tipc: Node number set to 3758096385 [ 325.833849][ C0] net_ratelimit: 7 callbacks suppressed [ 325.833874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.834108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.834300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.834488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.834686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.834871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.835090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.859205][T16005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2511'. [ 325.932851][T16008] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2510'. [ 326.288084][T16015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2512'. [ 326.438760][T16024] x_tables: duplicate underflow at hook 3 [ 326.532768][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2513'. [ 326.532802][T16025] netlink: 'syz.2.2513': attribute type 7 has an invalid length. [ 326.532815][T16025] netlink: 'syz.2.2513': attribute type 8 has an invalid length. [ 329.117308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.117529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.117736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.549212][T16070] __nla_validate_parse: 2 callbacks suppressed [ 330.549233][T16070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2521'. [ 331.047824][T16091] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2528'. [ 331.047847][T16091] veth0_to_bond: default FDB implementation only supports local addresses [ 331.182890][T16098] Unknown options in mask 4 [ 331.790537][T16126] netlink: 'syz.0.2537': attribute type 1 has an invalid length. [ 331.893268][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 332.027460][T16126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.116538][T16135] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2540'. [ 332.137578][T16135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2540'. [ 332.179647][T16130] bond0: (slave bridge12): making interface the new active one [ 332.181254][T16130] bond0: (slave bridge12): Enslaving as an active interface with an up link [ 332.259402][T16131] syzkaller1: entered promiscuous mode [ 332.259587][T16131] syzkaller1: entered allmulticast mode [ 332.350449][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'. [ 332.412255][T16135] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2540'. [ 332.553888][ C0] net_ratelimit: 7 callbacks suppressed [ 332.553907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.554157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.554394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.554603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.554827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.555064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.555276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.555481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.144220][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2548'. [ 333.144242][T16169] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2548'. [ 333.159831][T16174] netlink: 'syz.1.2547': attribute type 10 has an invalid length. [ 333.188354][T16166] bond8 (unregistering): Released all slaves [ 333.331449][T16181] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 333.719868][T16190] GUP no longer grows the stack in syz.3.2554 (16190): 200000003000-20000000a000 (200000001000) [ 333.719926][T16190] CPU: 0 UID: 0 PID: 16190 Comm: syz.3.2554 Not tainted syzkaller #0 PREEMPT(full) [ 333.719949][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 333.719969][T16190] Call Trace: [ 333.719977][T16190] [ 333.719986][T16190] dump_stack_lvl+0xe8/0x150 [ 333.720022][T16190] __get_user_pages+0x23b1/0x2750 [ 333.720059][T16190] ? lock_acquire+0x115/0x350 [ 333.720099][T16190] ? __gup_longterm_locked+0xcb2/0x16f0 [ 333.720128][T16190] __gup_longterm_locked+0xe24/0x16f0 [ 333.720175][T16190] gup_fast_fallback+0x1d92/0x20e0 [ 333.720231][T16190] ? __pfx_gup_fast_fallback+0x10/0x10 [ 333.720254][T16190] ? is_valid_gup_args+0x11f/0x200 [ 333.720288][T16190] ? get_user_pages_fast+0x4d/0xb0 [ 333.720311][T16190] __iov_iter_get_pages_alloc+0x378/0xa40 [ 333.720347][T16190] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 333.720370][T16190] ? __fget_files+0x2a/0x420 [ 333.720395][T16190] iov_iter_get_pages2+0x5e/0xa0 [ 333.720426][T16190] __se_sys_vmsplice+0x844/0x16f0 [ 333.720472][T16190] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 333.720504][T16190] ? __pfx_futex_wait+0x10/0x10 [ 333.720602][T16190] do_syscall_64+0x166/0x520 [ 333.720622][T16190] ? trace_irq_disable+0x3b/0x140 [ 333.720644][T16190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.720665][T16190] ? clear_bhb_loop+0x70/0xc0 [ 333.720690][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.720713][T16190] RIP: 0033:0x7f9f61b9f559 [ 333.720736][T16190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.720753][T16190] RSP: 002b:00007f9f5fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 333.720778][T16190] RAX: ffffffffffffffda RBX: 00007f9f61e25fa0 RCX: 00007f9f61b9f559 [ 333.720794][T16190] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005 [ 333.720806][T16190] RBP: 00007f9f61c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 333.720819][T16190] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 333.720831][T16190] R13: 00007f9f61e26038 R14: 00007f9f61e25fa0 R15: 00007fff47291168 [ 333.720865][T16190] [ 333.797866][T16190] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2554'. [ 334.416543][T16203] syzkaller0: MTU not usable for tipc bearer [ 334.416593][T16203] tipc: Enabling of bearer rejected, failed to enable media [ 334.560530][T16210] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 334.724299][T16212] syzkaller0: mtu less than device minimum [ 336.093266][T16198] syzkaller0: entered promiscuous mode [ 336.093289][T16198] syzkaller0: entered allmulticast mode [ 336.773853][T16266] __nla_validate_parse: 3 callbacks suppressed [ 336.773874][T16266] netlink: 1140 bytes leftover after parsing attributes in process `syz.1.2571'. [ 336.773887][T16266] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2571'. [ 336.994002][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2572'. [ 337.203169][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2570'. [ 337.532493][T16300] netlink: 3728 bytes leftover after parsing attributes in process `syz.0.2578'. [ 337.716232][T16298] netlink: 3784 bytes leftover after parsing attributes in process `syz.0.2578'. [ 339.251086][T16316] net_ratelimit: 7 callbacks suppressed [ 339.251107][T16316] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 339.433845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.434037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.434262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.434438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.434641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.434820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.435021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.418587][T16337] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 340.917168][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'. [ 340.917189][T16358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2587'. [ 341.260101][T16363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2589'. [ 341.522173][T16369] syzkaller0: left promiscuous mode [ 341.522195][T16369] syzkaller0: left allmulticast mode [ 341.522860][T16367] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 341.816423][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2591'. [ 341.821850][T16376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2591'. [ 343.087969][T16416] ip_tables: iptables: counters copy to user failed while replacing table [ 343.113855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.036570][T16451] x_tables: duplicate entry at hook 4 [ 344.369306][T16458] x_tables: duplicate underflow at hook 1 [ 344.516634][T16460] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2613'. [ 344.516920][T16463] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2613'. [ 345.143103][T16467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.191238][T16467] net_ratelimit: 9 callbacks suppressed [ 345.191256][T16467] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 345.223291][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.223436][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.369017][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 346.169959][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2626'. [ 346.393803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.394028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.394232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.394482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.394689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.394886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.395123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.395322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.395528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.686187][T16502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2627'. [ 346.686221][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2627'. [ 352.285831][T16502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2627'. [ 352.286052][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2627'. [ 353.443804][ C0] net_ratelimit: 5 callbacks suppressed [ 353.443827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.444027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.444221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.043868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.044072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.044259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.044444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.044629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.995406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.373619][ C1] sched: DL replenish lagged too much [ 360.483786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.483990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.484176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.678879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.679080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.679260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.679437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.679619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.153797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.154010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.154194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.154376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.913885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.914125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.914314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.353833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.354039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.354223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.354407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.354597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.683785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.683993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.684208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.684401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.363944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.364169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.364358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.033813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.034019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.034207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.034396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.034583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.034775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.193824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.194025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.194250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.194433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.194613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.194802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.553830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.554038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.554226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.243788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.243989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.244174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.244434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.244620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.313864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.314063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.314243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.314429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.314608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.833814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.834013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.834189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.834365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.443824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.444023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.444206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.444388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.444572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.713797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.713994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.714173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.714347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.323934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.324142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.324338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.324522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.324707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.273865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.274078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.274271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.274454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.274681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.233935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.234151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.234339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.234525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.674947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.675150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.675339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.675548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.675744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.243691][ T53] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 434.244608][T16546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.873840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.874035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.874214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.874388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.874560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.103725][T16546] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 435.105257][T16546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 435.336030][T16546] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 435.484967][T16546] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 436.168751][T16546] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 436.171044][ T4947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 436.173001][ T4947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 436.285283][T16546] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 436.694127][ T4947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 438.243812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.244016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.244201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.244386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.244568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.089807][T16546] Bluetooth: hci5: command tx timeout [ 441.453922][T16546] Bluetooth: hci5: command tx timeout [ 442.633813][ C0] net_ratelimit: 1 callbacks suppressed [ 442.633835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.634030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.634215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.684188][T16546] Bluetooth: hci5: command tx timeout [ 445.905970][ T53] Bluetooth: hci5: command tx timeout [ 446.393848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.394061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.394255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.394440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.394623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.839527][T16546] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 449.101343][T16563] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 449.204427][T16563] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 449.205535][T16563] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 449.207528][T16563] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 449.403844][T16563] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 449.971438][ T53] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 450.115776][T16546] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 450.133172][T16546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 450.149750][T16546] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 450.537548][T16546] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 450.559024][T16546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 451.683827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.684036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.684224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.684410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.684604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.684790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.684974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.523924][T16546] Bluetooth: hci8: command tx timeout [ 454.133669][T16546] Bluetooth: hci7: command tx timeout [ 454.573908][T16546] Bluetooth: hci8: command 0x041b tx timeout [ 454.866518][T16545] Bluetooth: hci8: Opcode 0x0c1a failed: -110 [ 454.866544][T16545] Bluetooth: hci8: Error when powering off device on rfkill (-110) [ 456.296924][T16546] Bluetooth: hci7: command tx timeout [ 456.739535][T16546] Bluetooth: hci8: command 0x041b tx timeout [ 458.073816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.074019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.074208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.074399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.074582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.383036][T16546] Bluetooth: hci7: command tx timeout [ 460.573052][T16546] Bluetooth: hci7: command tx timeout [ 461.273838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.274061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.274246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.274430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.274616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.353802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.354008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.354197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.354380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.648568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.648785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.648971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.649154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.649379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.649563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.153854][ C0] net_ratelimit: 1 callbacks suppressed [ 472.153875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.154068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.154276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.154462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.563826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.564033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.564218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.564403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.003786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.003987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.004170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.004359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.004541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.004725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.443842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.444051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.444232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.793867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.794059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.794236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.794412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.923830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.924062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.924252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.924438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.908542][T16546] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 492.756695][T16546] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 493.946143][T16546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 494.121533][T16546] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 494.133121][T16546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 494.149818][T16546] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 494.393879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.394084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.394273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.394456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.553989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.554198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.554382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.554560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.873697][T16546] Bluetooth: hci4: command tx timeout [ 501.924404][T16546] Bluetooth: hci4: command tx timeout [ 502.393864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.394049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.394217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.394381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.106579][T16546] Bluetooth: hci4: command tx timeout [ 505.843908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.844117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.844314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.844499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.190616][T16546] Bluetooth: hci4: command tx timeout [ 506.930875][T16546] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 507.647618][T16546] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 507.916236][T16546] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 508.090898][T16563] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 508.092196][T16563] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 508.133198][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 508.743561][T16589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.740057][T16589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 509.926735][T16589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.233833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.234060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.234354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.234594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.234864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.381471][T16589] Bluetooth: hci6: command tx timeout [ 510.382971][ T4947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.388496][T16589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.496104][T16546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 510.497742][T16546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 510.551885][T16589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 510.716589][T16589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 512.393715][T16563] Bluetooth: hci6: command tx timeout [ 512.564395][T16563] Bluetooth: hci0: command tx timeout [ 513.637885][T16563] Bluetooth: hci2: command tx timeout [ 514.552457][T16589] Bluetooth: hci6: command tx timeout [ 514.553893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.554120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.554332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.554544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.554766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.609704][T16589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.693528][T16589] Bluetooth: hci0: command tx timeout [ 515.270097][T16589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 515.274779][T16589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 515.636541][T16589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 515.733633][T16589] Bluetooth: hci2: command tx timeout [ 515.734463][T16589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 516.820464][T16563] Bluetooth: hci6: command tx timeout [ 516.820497][T16563] Bluetooth: hci0: command tx timeout [ 517.722928][T16589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.732437][T16589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.748863][T16589] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.754194][T16589] Bluetooth: hci2: command tx timeout [ 517.923859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.924065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.924252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.924443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.157382][T16589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 519.157482][T16589] Bluetooth: hci0: command tx timeout [ 519.344219][T16563] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 519.538209][T16563] Bluetooth: hci1: command tx timeout [ 519.834224][T16563] Bluetooth: hci2: command tx timeout [ 521.619005][T16563] Bluetooth: hci1: command tx timeout [ 521.923804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.924006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.924196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.924394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.924578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.924760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.826327][T16563] Bluetooth: hci1: command tx timeout [ 524.446663][T16546] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 525.912218][T16546] Bluetooth: hci1: command tx timeout [ 527.114069][T16546] Bluetooth: hci3: command tx timeout [ 527.603880][ C0] net_ratelimit: 1 callbacks suppressed [ 527.603901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.604102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.604287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.604471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.304078][T16546] Bluetooth: hci3: command tx timeout [ 530.793849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.794053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.794262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.794466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.466355][T16546] Bluetooth: hci3: command tx timeout [ 533.683891][T16546] Bluetooth: hci3: command tx timeout [ 534.553810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.554022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.554207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.554391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.554574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.554759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.993810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.994012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.994198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.994381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.994567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.513870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.514074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.514257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.514469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.514661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.437213][ T5639] bond0: (slave syz_tun): Releasing backup interface [ 548.713947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.714142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.714326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.714504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.714729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.273835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.274039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.274292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.274478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.274666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.793835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.794042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.794227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.794413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.794597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.300278][T16563] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 562.125028][T16589] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 562.153959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.154156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.154344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.154527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.154718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.566012][T16589] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 564.197132][T16563] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 564.202720][T16563] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 564.466271][T16563] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 564.491556][T16563] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 564.576972][T16563] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 565.147576][T16563] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 565.249928][T16563] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 565.433818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.434082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.434270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.434456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.121805][T16563] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 568.873826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.874046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.874257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.874444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.043672][T16589] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 570.992546][T16632] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 571.483759][T16632] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 571.587360][T16632] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 571.595521][T16632] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 571.596887][T16632] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 573.833829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.834028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.834220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.834400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.834580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.834766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.078363][T16632] Bluetooth: hci9: command tx timeout [ 574.079031][T16632] Bluetooth: hci8: command tx timeout [ 574.079304][T16632] Bluetooth: hci10: command tx timeout [ 576.293758][T16563] Bluetooth: hci10: command tx timeout [ 576.293794][T16563] Bluetooth: hci8: command tx timeout [ 576.293817][T16563] Bluetooth: hci9: command tx timeout [ 578.155639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.155851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.156081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.156265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.156449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.355096][T16632] Bluetooth: hci9: command tx timeout [ 578.355131][T16632] Bluetooth: hci8: command tx timeout [ 578.355153][T16632] Bluetooth: hci10: command tx timeout [ 580.493640][T16563] Bluetooth: hci10: command tx timeout [ 580.493675][T16563] Bluetooth: hci8: command tx timeout [ 580.493696][T16563] Bluetooth: hci9: command tx timeout [ 583.276638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.276840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.276987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.277125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.277267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.277405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.277565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.443794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.444002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.444194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.444376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.444566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.154790][T16563] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 590.826751][T16563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 592.397802][T16563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 592.401885][T16563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 592.497125][T16563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 594.803894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.804097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.804284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.804471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.393795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.394002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.394188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.394389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.712811][T16632] Bluetooth: hci5: command tx timeout [ 600.381284][ T5625] tipc: Resetting bearer [ 601.145322][T16563] Bluetooth: hci5: command tx timeout [ 602.873967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.874172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.874355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.874538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.874720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.874906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.268083][T16563] Bluetooth: hci5: command tx timeout [ 605.283330][T16563] Bluetooth: hci5: command tx timeout [ 607.034072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.034274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.034467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.034652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.363810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.364017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.364203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.364387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.364571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.364758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.364954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.393854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.394058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.394237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.394423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.394607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.394797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.683830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.684029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.684216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.464565][T16632] Bluetooth: hci4: command 0x0406 tx timeout [ 624.235934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.323805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.324007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.324190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.324371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.324560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.666443][ T5625] tipc: Disabling bearer [ 628.793863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.794065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.794244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.794426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.533711][T16563] Bluetooth: hci6: command 0x0406 tx timeout [ 632.554096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.554299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.554488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.554668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.554847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.473841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.474045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.474246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.474449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.474631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.608336][T16546] Bluetooth: hci2: command 0x0406 tx timeout [ 638.334681][ T31] INFO: task syz-executor:5631 blocked for more than 143 seconds. [ 638.334708][ T31] Not tainted syzkaller #0 [ 638.334718][ T31] Blocked by coredump. [ 638.334724][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.334749][ T31] task:syz-executor state:D stack:22120 pid:5631 tgid:5631 ppid:1 task_flags:0x40054c flags:0x00080003 [ 638.334809][ T31] Call Trace: [ 638.334816][ T31] [ 638.334830][ T31] __schedule+0x17dd/0x5820 [ 638.334879][ T31] ? stack_depot_save_flags+0x33/0x7f0 [ 638.334920][ T31] ? __pfx___schedule+0x10/0x10 [ 638.334956][ T31] ? schedule+0x90/0x2b0 [ 638.334985][ T31] schedule+0x164/0x2b0 [ 638.335014][ T31] schedule_preempt_disabled+0x13/0x30 [ 638.335040][ T31] __mutex_lock+0x7c4/0x15a0 [ 638.335064][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 638.335088][ T31] ? tun_chr_close+0x3e/0x1c0 [ 638.335118][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 638.335164][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 638.335191][ T31] tun_chr_close+0x3e/0x1c0 [ 638.335217][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 638.335243][ T31] __fput+0x408/0xa40 [ 638.335271][ T31] fput_close_sync+0x11f/0x240 [ 638.335291][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 638.335320][ T31] filp_close_sync+0x6e/0xa0 [ 638.335341][ T31] put_files_struct+0x230/0x3c0 [ 638.335371][ T31] do_exit+0x6f0/0x2360 [ 638.335409][ T31] ? __pfx_do_exit+0x10/0x10 [ 638.335439][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 638.335475][ T31] do_group_exit+0x22d/0x2f0 [ 638.335492][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 638.335522][ T31] get_signal+0x1216/0x12c0 [ 638.335567][ T31] arch_do_signal_or_restart+0xbb/0x860 [ 638.335601][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 638.335636][ T31] ? ksys_read+0x1fc/0x270 [ 638.335666][ T31] exit_to_user_mode_loop+0x10e/0x770 [ 638.335689][ T31] ? rcu_is_watching+0x16/0xb0 [ 638.335718][ T31] do_syscall_64+0x328/0x520 [ 638.335736][ T31] ? trace_irq_disable+0x3b/0x140 [ 638.335758][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.335777][ T31] ? clear_bhb_loop+0x70/0xc0 [ 638.335801][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.335820][ T31] RIP: 0033:0x7fb6e835fd8e [ 638.335838][ T31] RSP: 002b:00007fff830d9e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 638.335858][ T31] RAX: fffffffffffffe00 RBX: 000055556f14a500 RCX: 00007fb6e835fd8e [ 638.335872][ T31] RDX: 0000000000000030 RSI: 00007fff830d9f10 RDI: 00000000000000f9 [ 638.335885][ T31] RBP: 00007fff830d9ebc R08: 0000000000000000 R09: 0000000000000000 [ 638.335897][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001fe [ 638.335908][ T31] R13: 000055556f15da00 R14: 00000000000554e7 R15: 00007fff830d9f10 [ 638.335942][ T31] [ 638.336025][ T31] [ 638.336025][ T31] Showing all locks held in the system: [ 638.336035][ T31] locks held by kworker/0:0/9: 3, last CPU#0: [ 638.336048][ T31] #0: ffff888059b5c148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.336111][ T31] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.336182][ T31] #2: ffff888035659480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 638.336236][ T31] locks held by kworker/0:1/10: 3, on CPU#0: [ 638.336249][ T31] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.336299][ T31] #1: ffffc900000f7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.336348][ T31] #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 638.336395][ T31] locks held by kworker/u8:0/12: 4, last CPU#0: [ 638.336408][ T31] #0: ffff88807aa26148 ((wq_completion)krds_cp_wq#5/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.336458][ T31] #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.336508][ T31] #2: ffff88807ab56180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.336561][ T31] #3: ffff888053b88260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 638.336615][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 638.336628][ T31] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 638.336675][ T31] locks held by kworker/u8:3/51: 3, on CPU#1: [ 638.336688][ T31] #0: ffff88801d74a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.336737][ T31] #1: ffffc90000bb7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.336787][ T31] #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 638.336836][ T31] locks held by kworker/u8:4/62: 4, last CPU#0: [ 638.336848][ T31] #0: ffff88807c425948 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.336898][ T31] #1: ffffc9000204fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.336949][ T31] #2: ffff88807bca5480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 638.337000][ T31] #3: ffff8880768c1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 638.337052][ T31] locks held by kworker/u8:5/93: 8, last CPU#1: [ 638.337064][ T31] #0: ffff888035a46948 ((wq_completion)krds_cp_wq#2/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.337114][ T31] #1: ffffc9000252fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.337170][ T31] #2: ffff8880582fb680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.337222][ T31] #3: ffff888077e5c720 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 638.337273][ T31] #4: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 638.337323][ T31] #5: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 638.337370][ T31] #6: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 638.337418][ T31] #7: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 638.337476][ T31] locks held by kworker/u8:8/3002: 3, on CPU#0: [ 638.337489][ T31] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.337539][ T31] #1: ffffc9000d9bfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.337588][ T31] #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 638.337635][ T31] locks held by kworker/u8:9/4369: 3, last CPU#0: [ 638.337649][ T31] #0: ffff888026a58148 ((wq_completion)krds_cp_wq#2/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.337698][ T31] #1: ffffc9000f51fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.337747][ T31] #2: ffff8880582fa480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.337801][ T31] locks held by udevd/4997: 4, last CPU#0: [ 638.337814][ T31] #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 638.337860][ T31] #1: ffff88807e412800 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 638.337907][ T31] #2: ffff88802a83c080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 638.337957][ T31] #3: ffff88803515c598 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: dup_mmap+0xe4c/0x1dc0 [ 638.338003][ T31] locks held by dhcpcd/5292: 1, last CPU#0: [ 638.338016][ T31] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 638.338063][ T31] locks held by getty/5384: 2, on CPU#1: [ 638.338076][ T31] #0: ffff888036e410a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 638.338126][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 638.338177][ T31] locks held by syz-executor/5624: 1, on CPU#0: [ 638.338191][ T31] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 638.338243][ T31] locks held by syz-executor/5625: 1, on CPU#0: [ 638.338255][ T31] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 638.338307][ T31] locks held by kworker/0:3/5627: 3, on CPU#0: [ 638.338320][ T31] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.338370][ T31] #1: ffffc90004787c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.338419][ T31] #2: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 638.338471][ T31] locks held by syz-executor/5631: 1, on CPU#1: [ 638.338484][ T31] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 638.338533][ T31] locks held by syz-executor/5632: 1, on CPU#0: [ 638.338545][ T31] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 638.338595][ T31] locks held by kworker/1:5/5745: 3, last CPU#1: [ 638.338608][ T31] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.338656][ T31] #1: ffffc90004ddfc40 ((work_completion)(&data->dm_alert_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.338706][ T31] #2: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 638.338756][ T31] locks held by kworker/0:6/5761: 2, last CPU#0: [ 638.338769][ T31] #0: ffff88801c069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.338819][ T31] #1: ffffc90004f2fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.338870][ T31] locks held by kworker/u8:12/8985: 4, last CPU#0: [ 638.338883][ T31] #0: ffff88807aa24948 ((wq_completion)krds_cp_wq#5/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.338933][ T31] #1: ffffc9000dd7fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.338983][ T31] #2: ffff88807ab55880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.339035][ T31] #3: ffff888053b8c720 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_nodelay+0x2a/0x180 [ 638.339086][ T31] locks held by kworker/u8:14/13066: 3, last CPU#0: [ 638.339099][ T31] #0: ffff888026a59148 ((wq_completion)krds_cp_wq#2/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339149][ T31] #1: ffffc9000fdc7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339205][ T31] #2: ffff8880582faa80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.339258][ T31] locks held by kworker/u8:15/13729: 3, last CPU#0: [ 638.339271][ T31] #0: ffff888032e76948 ((wq_completion)krds_cp_wq#2/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339320][ T31] #1: ffffc900033d7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339370][ T31] #2: ffff8880582fb080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.339422][ T31] locks held by kworker/u8:16/13730: 2, last CPU#0: [ 638.339435][ T31] #0: ffff888032fd2948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339485][ T31] #1: ffffc90003977c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339536][ T31] locks held by kworker/u8:17/13731: 3, last CPU#0: [ 638.339549][ T31] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339603][ T31] #1: ffffc900033c7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339655][ T31] #2: ffff88807f775258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 638.339713][ T31] locks held by kworker/u8:18/13732: 3, last CPU#0: [ 638.339726][ T31] #0: ffff888035a47948 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339775][ T31] #1: ffffc90003327c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339825][ T31] #2: ffff8880582fb980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.339879][ T31] locks held by kworker/u8:22/16538: 3, last CPU#0: [ 638.339892][ T31] #0: ffff888026a18148 ((wq_completion)krds_cp_wq#2/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339942][ T31] #1: ffffc90003ed7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.339992][ T31] #2: ffff8880582fb380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.340045][ T31] locks held by kworker/u8:23/16542: 4, last CPU#0: [ 638.340058][ T31] #0: ffff88807aa25948 ((wq_completion)krds_cp_wq#5/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.340108][ T31] #1: ffffc90003467c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.340164][ T31] #2: ffff88807ab55e80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.340216][ T31] #3: ffff88801cf19de0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_nodelay+0x2a/0x180 [ 638.340264][ T31] locks held by syz-executor/16545: 1, on CPU#1: [ 638.340276][ T31] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 638.340328][ T31] locks held by syz-executor/16560: 1, on CPU#0: [ 638.340341][ T31] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 638.340392][ T31] locks held by kworker/u9:3/16563: 5, on CPU#0: [ 638.340404][ T31] #0: ffff88802cde2148 ((wq_completion)hci2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.340459][ T31] #1: ffffc9001b317c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.340509][ T31] #2: ffff888073348ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 638.340555][ T31] #3: ffff8880733480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 638.340606][ T31] #4: ffffffff913f28a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 638.340655][ T31] locks held by kworker/u8:24/16569: 3, last CPU#0: [ 638.340666][ T31] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.340714][ T31] #1: ffffc90004777c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.340765][ T31] #2: ffff8880355b4258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 638.340822][ T31] locks held by syz-executor/16583: 1, on CPU#0: [ 638.340835][ T31] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 638.340885][ T31] locks held by kworker/1:0/16586: 1, last CPU#1: [ 638.340898][ T31] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 638.340948][ T31] locks held by syz-executor/16592: 3, on CPU#0: [ 638.340961][ T31] #0: ffff8880447d4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x232/0x5c0 [ 638.341006][ T31] #1: ffff8880447d40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5e6/0xf90 [ 638.341056][ T31] #2: ffffffff913f28a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 638.341108][ T31] locks held by syz-executor/16594: 4, on CPU#0: [ 638.341120][ T31] #0: ffff88807a958ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x232/0x5c0 [ 638.341172][ T31] #1: ffff88807a9580b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5e6/0xf90 [ 638.341222][ T31] #2: ffffffff913f28a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 638.341273][ T31] #3: ffff888056edcaf8 (_T->lock#5){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x630 [ 638.341330][ T31] locks held by kworker/u8:25/16602: 4, last CPU#0: [ 638.341343][ T31] #0: ffff88807aa27148 ((wq_completion)krds_cp_wq#5/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.341393][ T31] #1: ffffc9001b347c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.341440][ T31] #2: ffff88807ab56780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.341492][ T31] #3: ffff888053b8e2a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_nodelay+0x2a/0x180 [ 638.341540][ T31] locks held by kworker/u8:26/16606: 4, last CPU#0: [ 638.341553][ T31] #0: ffff888026a59948 ((wq_completion)krds_cp_wq#2/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.341603][ T31] #1: ffffc9000538fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.341653][ T31] #2: ffff8880582fad80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.341705][ T31] #3: ffff88807d722ba0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 638.341756][ T31] locks held by syz-executor/16607: 1, last CPU#0: [ 638.341769][ T31] #0: ffff88807ee7d900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 638.341813][ T31] locks held by kworker/u8:27/16610: 3, last CPU#0: [ 638.341826][ T31] #0: ffff888026a58948 ((wq_completion)krds_cp_wq#2/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.341875][ T31] #1: ffffc900053efc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.341925][ T31] #2: ffff8880582fa780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.341978][ T31] locks held by kworker/u8:28/16615: 5, last CPU#0: [ 638.341991][ T31] #0: ffff888036b26148 ((wq_completion)krds_cp_wq#5/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.342040][ T31] #1: ffffc90005e07c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.342090][ T31] #2: ffff88807ab55580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 638.342142][ T31] #3: ffffffff8feaa030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 638.342196][ T31] #4: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 638.342245][ T31] locks held by syz-executor/16621: 1, on CPU#0: [ 638.342258][ T31] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 638.342308][ T31] locks held by syz-executor/16622: 1, on CPU#0: [ 638.342322][ T31] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 638.342372][ T31] locks held by syz-executor/16630: 1, on CPU#0: [ 638.342385][ T31] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 638.342435][ T31] locks held by kworker/u9:5/16632: 5, on CPU#0: [ 638.342448][ T31] #0: ffff888035421948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.342497][ T31] #1: ffffc90003cf7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 638.342547][ T31] #2: ffff888054be0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 638.342591][ T31] #3: ffff888054be00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 638.342642][ T31] #4: ffffffff913f28a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 638.342691][ T31] locks held by dhcpcd/16651: 1, on CPU#0: [ 638.342704][ T31] #0: ffff88807f292260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 638.342751][ T31] locks held by syz-executor/16652: 1, last CPU#0: [ 638.342764][ T31] #0: ffff888033870340 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 638.342815][ T31] locks held by udevd/16653: 2, last CPU#0: [ 638.342827][ T31] #0: ffff888033877180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 638.342872][ T31] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 638.342921][ T31] locks held by syz-executor/16654: 2, last CPU#0: [ 638.342934][ T31] #0: ffff888033874cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 638.342984][ T31] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 638.343028][ T31] locks held by dhcpcd/16655: 1, on CPU#0: [ 638.343040][ T31] #0: ffff88807f47c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 638.343087][ T31] locks held by dhcpcd/16657: 1, on CPU#0: [ 638.343100][ T31] #0: ffff88807f408260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 638.343142][ T31] locks held by syz-executor/16658: 2, last CPU#0: [ 638.343161][ T31] #0: ffff88807e359bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 638.343208][ T31] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 638.343252][ T31] [ 638.343258][ T31] ============================================= [ 638.343258][ T31] [ 638.343278][ T31] NMI backtrace for cpu 0 [ 638.343294][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 638.343314][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 638.343325][ T31] Call Trace: [ 638.343332][ T31] [ 638.343340][ T31] dump_stack_lvl+0xe8/0x150 [ 638.343369][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 638.343394][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 638.343417][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 638.343445][ T31] sys_info+0x135/0x170 [ 638.343467][ T31] watchdog+0xfd2/0x1030 [ 638.343496][ T31] ? watchdog+0x1c7/0x1030 [ 638.343525][ T31] kthread+0x38b/0x480 [ 638.343544][ T31] ? __pfx_watchdog+0x10/0x10 [ 638.343563][ T31] ? __pfx_kthread+0x10/0x10 [ 638.343586][ T31] ret_from_fork+0x514/0xb70 [ 638.343607][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 638.343626][ T31] ? __switch_to+0xc78/0x1410 [ 638.343655][ T31] ? __pfx_kthread+0x10/0x10 [ 638.343675][ T31] ret_from_fork_asm+0x1a/0x30 [ 638.343709][ T31] [ 638.343798][ T31] Sending NMI from CPU 0 to CPUs 1: [ 638.343836][ C1] NMI backtrace for cpu 1 [ 638.343851][ C1] CPU: 1 UID: 0 PID: 93 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 638.343872][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 638.343885][ C1] Workqueue: krds_cp_wq#2/1 rds_connect_worker [ 638.343911][ C1] RIP: 0010:__lock_acquire+0x5a1/0x2de0 [ 638.343933][ C1] Code: 49 8d 1c c6 48 81 c3 d0 0b 00 00 eb 1d 44 89 e0 49 ff c7 49 63 8e a0 0b 00 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c5 00 00 00 <49> 83 ff 31 0f 83 84 00 00 00 48 8b 03 25 ff 1f 00 00 48 0f a3 05 [ 638.343950][ C1] RSP: 0018:ffffc90000a07db8 EFLAGS: 00000097 [ 638.343966][ C1] RAX: 0000000000000003 RBX: ffff88801f3f2bb0 RCX: 0000000000000005 [ 638.343979][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 6300000000000000 [ 638.343992][ C1] RBP: ffff88801f3f2bb8 R08: ffffffff8178699f R09: 0000000000000000 [ 638.344006][ C1] R10: ffffc90000a08098 R11: ffffffff81b301f0 R12: 0000000000000003 [ 638.344020][ C1] R13: 0000000000000000 R14: ffff88801f3f1f40 R15: 0000000000000004 [ 638.344032][ C1] FS: 0000000000000000(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000 [ 638.344048][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.344062][ C1] CR2: 000055b503d36f18 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 638.344079][ C1] Call Trace: [ 638.344086][ C1] [ 638.344102][ C1] ? lock_acquire+0x115/0x350 [ 638.344125][ C1] lock_acquire+0x115/0x350 [ 638.344144][ C1] ? unwind_next_frame+0x8f/0x2550 [ 638.344172][ C1] ? unwind_next_frame+0x8f/0x2550 [ 638.344196][ C1] ? NF_HOOK+0x336/0x3c0 [ 638.344217][ C1] ? unwind_next_frame+0x8f/0x2550 [ 638.344242][ C1] unwind_next_frame+0xac/0x2550 [ 638.344265][ C1] ? unwind_next_frame+0x8f/0x2550 [ 638.344291][ C1] ? NF_HOOK+0x21f/0x3c0 [ 638.344312][ C1] ? unwind_next_frame+0x8f/0x2550 [ 638.344337][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 638.344360][ C1] arch_stack_walk+0x11b/0x150 [ 638.344386][ C1] ? NF_HOOK+0x336/0x3c0 [ 638.344409][ C1] stack_trace_save+0xa9/0x100 [ 638.344429][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 638.344453][ C1] ? __lock_acquire+0x747/0x2de0 [ 638.344475][ C1] kasan_save_track+0x3e/0x80 [ 638.344500][ C1] ? kasan_save_track+0x3e/0x80 [ 638.344524][ C1] ? kasan_save_free_info+0x40/0x50 [ 638.344544][ C1] ? __kasan_slab_free+0x5c/0x80 [ 638.344569][ C1] ? kmem_cache_free+0x182/0x650 [ 638.344592][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 638.344614][ C1] ? nft_synproxy_do_eval+0x389/0x5d0 [ 638.344635][ C1] ? nft_do_chain+0x48d/0x1b10 [ 638.344663][ C1] ? nft_do_chain_ipv4+0x195/0x290 [ 638.344684][ C1] ? nf_hook_slow+0xc5/0x220 [ 638.344710][ C1] ? NF_HOOK+0x21f/0x3c0 [ 638.344730][ C1] ? NF_HOOK+0x336/0x3c0 [ 638.344773][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 638.344795][ C1] kasan_save_free_info+0x40/0x50 [ 638.344815][ C1] __kasan_slab_free+0x5c/0x80 [ 638.344841][ C1] kmem_cache_free+0x182/0x650 [ 638.344870][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 638.344894][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 638.344918][ C1] ? nf_ip_checksum+0x13c/0x510 [ 638.344940][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 638.344962][ C1] ? __lock_acquire+0x747/0x2de0 [ 638.344984][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 638.345015][ C1] nft_do_chain+0x48d/0x1b10 [ 638.345045][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 638.345066][ C1] ? __lock_acquire+0x747/0x2de0 [ 638.345089][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 638.345112][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 638.345145][ C1] nft_do_chain_ipv4+0x195/0x290 [ 638.345166][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 638.345186][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 638.345209][ C1] ? iptable_mangle_hook+0x18a/0x4c0 [ 638.345234][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 638.345256][ C1] nf_hook_slow+0xc5/0x220 [ 638.345286][ C1] NF_HOOK+0x21f/0x3c0 [ 638.345308][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 638.345331][ C1] ? NF_HOOK+0x9e/0x3c0 [ 638.345351][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 638.345374][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 638.345400][ C1] ? ip_local_deliver+0x113/0x190 [ 638.345423][ C1] NF_HOOK+0x336/0x3c0 [ 638.345446][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 638.345468][ C1] ? NF_HOOK+0x9e/0x3c0 [ 638.345489][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 638.345512][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 638.345534][ C1] ? ip_rcv_core+0x88d/0xd50 [ 638.345558][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 638.345579][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 638.345601][ C1] process_backlog+0xa6b/0x18b0 [ 638.345630][ C1] ? process_backlog+0x3de/0x18b0 [ 638.345660][ C1] ? ktime_get+0x45/0x220 [ 638.345688][ C1] __napi_poll+0xaa/0x330 [ 638.345714][ C1] net_rx_action+0x61d/0xf50 [ 638.345746][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 638.345771][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 638.345805][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 638.345834][ C1] handle_softirqs+0x265/0x8d0 [ 638.345861][ C1] ? __inet6_bind+0x386/0xf30 [ 638.345889][ C1] do_softirq+0x77/0xd0 [ 638.345910][ C1] [ 638.345917][ C1] [ 638.345924][ C1] __local_bh_enable_ip+0x100/0x140 [ 638.345947][ C1] __inet6_bind+0x386/0xf30 [ 638.345980][ C1] kernel_bind+0x13e/0x1c0 [ 638.346001][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 638.346028][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 638.346060][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 638.346095][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 638.346128][ C1] ? lock_acquire+0x115/0x350 [ 638.346153][ C1] rds_connect_worker+0x1d8/0x290 [ 638.346176][ C1] ? process_scheduled_works+0x97a/0x1630 [ 638.346201][ C1] process_scheduled_works+0xc3d/0x1630 [ 638.346241][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 638.346270][ C1] ? assign_work+0x3cf/0x5d0 [ 638.346297][ C1] worker_thread+0xa47/0xfb0 [ 638.346335][ C1] kthread+0x38b/0x480 [ 638.346353][ C1] ? __pfx_worker_thread+0x10/0x10 [ 638.346378][ C1] ? __pfx_kthread+0x10/0x10 [ 638.346396][ C1] ret_from_fork+0x514/0xb70 [ 638.346417][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 638.346436][ C1] ? __switch_to+0xc78/0x1410 [ 638.346465][ C1] ? __pfx_kthread+0x10/0x10 [ 638.346483][ C1] ret_from_fork_asm+0x1a/0x30 [ 638.346509][ C1] [ 641.363797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.363999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.364185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.364379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.364565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.178186][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 645.349177][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 645.358284][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 645.368343][ T31] Call Trace: [ 645.371621][ T31] [ 645.374550][ T31] vpanic+0x56d/0xa60 [ 645.378549][ T31] ? __pfx___schedule+0x10/0x10 [ 645.383411][ T31] ? __pfx_vpanic+0x10/0x10 [ 645.387935][ T31] panic+0xc5/0xd0 [ 645.391667][ T31] ? __pfx_panic+0x10/0x10 [ 645.396088][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 645.401558][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 645.406940][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 645.413106][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 645.419274][ T31] watchdog+0x102b/0x1030 [ 645.423620][ T31] ? watchdog+0x1c7/0x1030 [ 645.428048][ T31] kthread+0x38b/0x480 [ 645.432121][ T31] ? __pfx_watchdog+0x10/0x10 [ 645.436798][ T31] ? __pfx_kthread+0x10/0x10 [ 645.441393][ T31] ret_from_fork+0x514/0xb70 [ 645.445986][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 645.451100][ T31] ? __switch_to+0xc78/0x1410 [ 645.455791][ T31] ? __pfx_kthread+0x10/0x10 [ 645.460384][ T31] ret_from_fork_asm+0x1a/0x30 [ 645.465166][ T31] [ 645.468485][ T31] Kernel Offset: disabled [ 645.472817][ T31] Rebooting in 86400 seconds..