last executing test programs: 3m0.983121798s ago: executing program 3 (id=10762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"}]}}]}, 0x148}}, 0x0) 3m0.75345737s ago: executing program 3 (id=10765): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x1010, r0, 0xce0ce000) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0xcc, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x5}, 0x40) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0xcc, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x5}, 0x40) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}}}, 0x10) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r8, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10) bind$tipc(r8, 0x0, 0x0) (async) bind$tipc(r8, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000440), 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="22162abd7000fcdbdf25020000001c00018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="280001801400020064766d7270310000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030001000000180001801400020076657468315f746f5f627269646765000ed24d521be83c8f35afccc7ba7b3456f0c53919e08c77933bf89050167be050341a09f01fb5c7c7f4009ddaf58cb6c86f5b1bf2d4cc821b4f74f6356e32db9317055af1402c808c960b03bb81ecceb1518b0b552bbd51db0c0d04855b727327525e4a789b3febc9dc91bcae454cc86ff76ef000450791c39d7480037bb536"], 0x70}}, 0x80010) sendto$inet6(r4, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m59.633485456s ago: executing program 3 (id=10775): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff100000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"}]}}]}, 0x148}}, 0x0) 2m59.203763514s ago: executing program 3 (id=10779): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)={0x14, 0x22, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x4, 0x69}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r10, @ANYBLOB="0800c300741300000800c400010000000c00c58008"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x24, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x24058001}, 0x20000004) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r14, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_STATS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r5, @ANYBLOB="000128bd7000ffdbdf252300000008000300000000007400028004000100040001004f000500961ac4bf8a0048bece82713074cee0dfa9362c8c4b4d484ba62b9a67f650ea467eab9d86aa2dc5771c6e9392f3d50059fef8a4ac19962098a1e62020ac0f93ab9be72c9edf01781b198b040004000100080002000800000004000100080002000800000018000180140002007465616d30000000000000000000000008000300020000005400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030002000000080003000300000008000300010000001400020076657468305f746f5f626f6e640000001400020074756e6c3000000000000000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0xa0}, 0x800) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x24, 0x0, 0xccef29c74e5b005f, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x2, 0xb, 0x15}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) 2m58.680813596s ago: executing program 3 (id=10783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0xc, 0x9, 0x6, 0x50, 0x10}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffff}], &(0x7f00000001c0)='GPL\x00', 0x1, 0x18, &(0x7f00000002c0)=""/24, 0x41000, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x4, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r0], &(0x7f0000000480)=[{0x4, 0x3, 0xc, 0x1}, {0x5, 0x2, 0xf, 0x5}, {0x2, 0x1, 0x1, 0xb}]}, 0x94) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000000200)=@raw=[@generic={0xb7}, @generic={0x63, 0xa, 0x0, 0xfffc}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @generic={0x15, 0x0, 0x0, 0x7}, @generic={0x7, 0x0, 0x0, 0x0, 0xfcc}, @generic={0xbf, 0x1}, @generic={0xb7, 0x2, 0x0, 0x0, 0x4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @call={0x85, 0x0, 0x0, 0x1c}, @generic={0xb7}, @exit], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m58.363550961s ago: executing program 3 (id=10788): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x10) listen(r1, 0xfffffffb) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) syz_emit_ethernet(0x5a, &(0x7f0000000700)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x6, 0x6, 0x40}]}}}}}}}}, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2m42.5573758s ago: executing program 32 (id=10788): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x10) listen(r1, 0xfffffffb) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) syz_emit_ethernet(0x5a, &(0x7f0000000700)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x6, 0x6, 0x40}]}}}}}}}}, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2m39.578466252s ago: executing program 0 (id=10926): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd7000000000000301ffffffff00004400010000112233445566778899abbb86dd2cf9ff1b00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b08820000ffffff840000001d2bffc1264d04000280040003"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1c0000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r5, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0xe, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 2m38.598062153s ago: executing program 0 (id=10931): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @random="6a5d0e8f64aa", @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @local, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000045e4d344b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) 2m36.617361553s ago: executing program 0 (id=10934): r0 = socket$inet(0xa, 0x801, 0x84) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00000001c0)) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0xffffffff) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x80000001, 0x7}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000100)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9, 0x4, 0xb90, 0x25240, r3, 0x8, '\x00', r4, r5, 0x4, 0x1, 0x5, 0x1}, 0x50) 2m35.267075076s ago: executing program 0 (id=10941): r0 = socket$kcm(0x11, 0x3, 0x0) tee(r0, 0xffffffffffffffff, 0x8000000000000000, 0x2) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f00000039c0)=@gettaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) 2m31.213400526s ago: executing program 0 (id=10946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYRES64=r2, @ANYRES8=r0, @ANYRES16=r1, @ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x48002}, 0x4004000) (async) r3 = socket$inet6(0xa, 0x5, 0x7df3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r7, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140204011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@deltclass={0x4c, 0x29, 0xe1fecaad7b077be6, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff5, 0x3}, {0x1, 0x6}, {0xffe0, 0xc9b2ccbd6f573891}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xe0}}, @tclass_kind_options=@c_cake={0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000040}, 0x48080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "688636340cbc1eb3", "851ded6ee5965acbe832a307de76119c", "9de3d98f", "006aa594b35c8628"}, 0x28) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x7, 0x1, 0x5, &(0x7f0000000340), 0x6, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)}, 0xffffffffffffff4d) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x1) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000400), &(0x7f0000000480)=0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$TUNSETTXFILTER(r9, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x110}, 0x8000) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c000780060004404e2400000500050002080000050004000100000012000300686173683a6e65742c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 2m30.629408339s ago: executing program 0 (id=10949): syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 2m15.445242568s ago: executing program 33 (id=10949): syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1m48.997581428s ago: executing program 2 (id=11032): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="7800000010000104000000000300000001000000112ecb3e6b30d277a2312c570f9c9f6a5b2fd46aaa39bd8655b3f8fd28032bd9670a1268a31b5d5d91b731081fabeef8bf98", @ANYRES32=0x0, @ANYRESHEX], 0x78}, 0x1, 0x0, 0x0, 0x4040014}, 0x2000c000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r5, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=""/41, 0x29}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0) r7 = accept4$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80000) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000080)=0x1, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fbffffff", 0x4) 1m46.967666277s ago: executing program 2 (id=11034): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x1c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r4, 0x28, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000b00006110200000000000d40500002000000095000000000000009abb1723bf2c203831c9545b21c751ee4024f479cbe4b89f9807836ea5847c95ffc926c2e182c7a3221481f5009edaf5f542a715b99fb3d2a73dd02584a54ee68c70dbfbcdcea76ee541e318cbe84cd4f5381f522e258a4d9aeb9b16feb66bf40fdf73be95633dc5de907f2ffdcc18494f09c327abd3a76fee11357181f05f7ac06d6a9078df8bc21f00cd8ac4109850ce4aa147beacafecd5c7ccdeecb146ca1e7611f8b3adb41b39029c1b9b59fbf1b4a80167ca6b113a1600000000000000000000cdb7fe6d684423596ee2bdad7787936c24c84d4721327a695ed24946de35ff5e000091e0610ac2d72b9b6f453f98e7b5a25941905bd564aac36dbe7d1db9f5561ad6f7c2e79fb80b6949d626024b5fb96e3da0d7113b1c826f49a2cbc18001d315aaf280a8a762689f8c6fee958836002f48815ad19ee99d81c9e3cda430cef4a75e5c4dd14c3cbb6af58e3f3b3f8cbd858532b02995d79ca5dac0fd49aa150f6e212e3f46e4f37f372ee43f136e4d3af6cc4a0ce2379cc1010d8483b82e54feeefa1e89d6a3b74fbb4b619c43984223674b40fbe29ea5752c76a5e6a44d95382a9e04f9a51881aedb6d6242d0fe2e7dcf1f8b22f46c37fb010f8e86c62a4c72327c7eaaf720aff72529429aed45219cb1b6476e53b650927d193b4062c4640de2781643edc5e59280c59332e92b52675a02009db11b3829d8424fdf33ccdb7f89bfa14f9c2a17f9183cb48222e685f49340891845efdac175d90c116eaa013315165865f9a3785e21b41fd4b5eda7eb5a7462307fe72a3fe53eb02c75867e6eeebfc3037683f66d407fc28c4735a221bb5b78a6f966474a98ceceb20f0d4757b8e81ab14d29bad2b19aa5aff53ee333009688b401064898f58f88226f0e675cc74f0adaf4b97315e12e88b5eabd519e523a7f0e839fe91774f85a65068de244a78687c12e4e6dffb556c8d30b8ee73faaac455701569da7ae1a4e44fdd2cf28965a9f5e09acf476e07e5ea768c558a5622601742b27b91724dde6a0f96d3e53e67db57bbd0d3f2dd8439192dfc71f9e5f289c7f519e8b794fb09b64fb3c1bcd46731051de09510ebd717eb57655d447753fd2ff052a9d6889ddb5a5f68564bd00a5ff58a75805eadb00000000000000006a9af2471aada1ad164502199e0a668ad4daa53e5658f82733b3c7f36fcf3146adf7025dfd79c5a67c27395f5ca5a90d45402e58b42946b5a977a56385f31083a4b65d61ec4991cd6c91a02bd788825a"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 1m44.255332185s ago: executing program 2 (id=11037): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_newaddr={0x18, 0x14, 0x385, 0x0, 0x0, {0x2, 0x80, 0x48}}, 0x18}}, 0x0) syz_emit_ethernet(0x101a, &(0x7f0000002340)={@local, @random="467b5543f090", @void, {@mpls_uc={0x8847, {[{0x28c2d, 0x0, 0x1}], @llc={@snap={0x0, 0xab, "ab", "b42e0b", 0x809b, "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"}}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) (async) write(r3, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x410) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r5}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) (async) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) (async) sendmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001300)="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", 0x240}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1m40.61409113s ago: executing program 2 (id=11041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x14}}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000020000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m38.930976604s ago: executing program 2 (id=11044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"}]}}]}, 0x148}, 0x1, 0x2000}, 0x0) 1m35.413543975s ago: executing program 2 (id=11046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x20, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x850) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = socket(0x1a, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) sendmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000400)="cafe0a47f43c11962f78e9479f200ee8ce3b2f180264097ad53d35fabf9795fe1fc2c356d1b1a814a77869bbc67902244c3e8dd15c73f706d93e9f04744f175f00e7e7ca8de95f8fc8ce07143bf568d385495b092facea14a9593e0daa474fe4254e5d69a33afb2e97d160aed64c3921a39cd10bf832ffe5be98e1b0d3220181dfd3fe54ea9ca582bd36113e79fb6e13edf62f94d1c3a767f3af58fff58bfc349cb5af", 0xa3}, {&(0x7f00000004c0)="5d09e3ea0338b5c4a8abcc0760f4202874cc62de502ccc16be864b57415d3cc3555fcda106cfbb347d2aa891256c56d6922514a87ddaac6edbe2b54dd0edf0f1c79bf89fa95e0a5bf1af45b49eb29b607bb100401bc9fbe35f604d7130bcfacfa4a6eb95b14034492479a0ca59e492bc793e9a368dbf1ee4623ec2dcc43e59ed12e3c64c9b1209ff6c23901c853d6b4cf4b9e7091e87f923", 0x98}, {&(0x7f0000000580)="176e02de051d5a72a71c1af917966d02043f775c89cfb12be46cf9904cea5243061c89f47990dc2c7a4694460db1409d88ef5a63955d48233a6e58114a95", 0x3e}, {&(0x7f00000005c0)="2c5943cc0ec0aa96c49f51323dc9cf445709708e5dc99b2f89e0e1626d2a13aa2c1cc21cba4901d0b560a98cf9de8fcc7aca1cc9bd4efe2122d6b295f5a452269c14981f3bd3e05bcfa96e3a140a799912b181ed1f19aaf6c294c4380ad916f0f9f4f501aaa48f1517a5aa599b3edc3fc8b6d98434dc8306cb3bb90d155fcf5aa510f46cb217adffe150b59b935fe3a64bbdaa34495d881febfdecc55daecd9eb5e4c80d7f9ab3870bdd891faa25bf9a862d95b78caae8198c35003bd0b6509661ac1b86126b1481", 0xc8}], 0x5, &(0x7f0000000740)=[{0xb8, 0x10f, 0x80, "0c24f2a851bb606b0c4b34b46d20fe2a152c0c199e35b88e731e1feefdf366196274052bdb0bd00261dfc00b0ba904c08df534d1136ee1882f9a88cc3bd2e8ff499a38ee69923db1b60fe5f3d01e2698a343c5d64a36f2736eb35bc8ac3063a340dd5fa7f8711f2ced361e0518f854205ed0f823ecb79940233295479805fa6bc10ba2cc70bcf3dd77eefc4e2770dd50bc353c8f334cf7d04584cbb89c689d54e8"}, {0xa0, 0x113, 0x2ba, "17c6873e81ff61b9e2662f4fc538693914f6fd2bae667322deb725048781009317ff8feea6326af00540f30a0cba5b3394433061b74c650260739088761e5d53844a92779790f2ea166aee49fc0d963712ab2f4b83ee4e5a92a3c45f3ce493da2084534d593bcccb5c2bc5f1def12dabbb34b7d54bf07cddf79552b2780c01e1b9b3b4747d0497fe9ced889e4a0d"}], 0x158}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r8) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080009"], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48090}, 0x20004000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r5, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}}, 0x4000080) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getchain={0x44, 0x66, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffff, 0x10}, {0x2, 0x4}, {0xb, 0x9}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xb2}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xb3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0xffff, 0x2}, 0xc) 1m18.794765438s ago: executing program 34 (id=11046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x20, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x850) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = socket(0x1a, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) sendmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000400)="cafe0a47f43c11962f78e9479f200ee8ce3b2f180264097ad53d35fabf9795fe1fc2c356d1b1a814a77869bbc67902244c3e8dd15c73f706d93e9f04744f175f00e7e7ca8de95f8fc8ce07143bf568d385495b092facea14a9593e0daa474fe4254e5d69a33afb2e97d160aed64c3921a39cd10bf832ffe5be98e1b0d3220181dfd3fe54ea9ca582bd36113e79fb6e13edf62f94d1c3a767f3af58fff58bfc349cb5af", 0xa3}, {&(0x7f00000004c0)="5d09e3ea0338b5c4a8abcc0760f4202874cc62de502ccc16be864b57415d3cc3555fcda106cfbb347d2aa891256c56d6922514a87ddaac6edbe2b54dd0edf0f1c79bf89fa95e0a5bf1af45b49eb29b607bb100401bc9fbe35f604d7130bcfacfa4a6eb95b14034492479a0ca59e492bc793e9a368dbf1ee4623ec2dcc43e59ed12e3c64c9b1209ff6c23901c853d6b4cf4b9e7091e87f923", 0x98}, {&(0x7f0000000580)="176e02de051d5a72a71c1af917966d02043f775c89cfb12be46cf9904cea5243061c89f47990dc2c7a4694460db1409d88ef5a63955d48233a6e58114a95", 0x3e}, {&(0x7f00000005c0)="2c5943cc0ec0aa96c49f51323dc9cf445709708e5dc99b2f89e0e1626d2a13aa2c1cc21cba4901d0b560a98cf9de8fcc7aca1cc9bd4efe2122d6b295f5a452269c14981f3bd3e05bcfa96e3a140a799912b181ed1f19aaf6c294c4380ad916f0f9f4f501aaa48f1517a5aa599b3edc3fc8b6d98434dc8306cb3bb90d155fcf5aa510f46cb217adffe150b59b935fe3a64bbdaa34495d881febfdecc55daecd9eb5e4c80d7f9ab3870bdd891faa25bf9a862d95b78caae8198c35003bd0b6509661ac1b86126b1481", 0xc8}], 0x5, &(0x7f0000000740)=[{0xb8, 0x10f, 0x80, "0c24f2a851bb606b0c4b34b46d20fe2a152c0c199e35b88e731e1feefdf366196274052bdb0bd00261dfc00b0ba904c08df534d1136ee1882f9a88cc3bd2e8ff499a38ee69923db1b60fe5f3d01e2698a343c5d64a36f2736eb35bc8ac3063a340dd5fa7f8711f2ced361e0518f854205ed0f823ecb79940233295479805fa6bc10ba2cc70bcf3dd77eefc4e2770dd50bc353c8f334cf7d04584cbb89c689d54e8"}, {0xa0, 0x113, 0x2ba, "17c6873e81ff61b9e2662f4fc538693914f6fd2bae667322deb725048781009317ff8feea6326af00540f30a0cba5b3394433061b74c650260739088761e5d53844a92779790f2ea166aee49fc0d963712ab2f4b83ee4e5a92a3c45f3ce493da2084534d593bcccb5c2bc5f1def12dabbb34b7d54bf07cddf79552b2780c01e1b9b3b4747d0497fe9ced889e4a0d"}], 0x158}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r8) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080009"], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48090}, 0x20004000) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r5, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}}, 0x4000080) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getchain={0x44, 0x66, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffff, 0x10}, {0x2, 0x4}, {0xb, 0x9}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xb2}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xb3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0xffff, 0x2}, 0xc) 27.563982009s ago: executing program 1 (id=11096): unshare(0x4000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000200101030000001da70a6c00000000000200a8a3e8ed6600"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x6, 0x0, 0x3, 0x2, 0x2, 0x2a}, 0x20) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newaddr={0x3c, 0x14, 0x200, 0x70bd26, 0x25dfdbfd, {0xa, 0x78, 0x51, 0xff, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x390}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 27.070016899s ago: executing program 5 (id=11098): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf2501000000000000000c4100001014001462726f6164636173742d6c696eff0000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2004800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000003c0)=@get={0x1, &(0x7f0000000380)=""/45, 0xf40}) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000000000000b0000000005001473797a3000000000eaa538cf4f08f2d53b8f2304dabac023a543a1b62c32593962a3f61c5d4af32a0dea26b17a8b9eea54af3dccbd1d2490fbbd51e8802db02a1112a87090f7f51eac6dcbec88c66fa495625697ef152d6bee5d38ac1a753fb096aaf76307911ff87e70d70abe6b17bcb738260f09294933aac02ec32b315e777c67e5be620a49ac61249db78a1b909ae9f14c1284a5b0a02edfbb0455dfdc2eb3d951f32f3e5c35c934737f3655b9e5759019cc5b534ae5e014907f051b480199d02b3f88"], 0x28}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x40}, 0x94) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c000) 24.807708186s ago: executing program 4 (id=11099): syz_emit_ethernet(0x1e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@can={0xc, {{}, 0x6, 0x0, 0x0, 0x0, "d1c2c057a545b5b7"}}}}, 0x0) 24.006201502s ago: executing program 1 (id=11100): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000000000000000000156ccab91517762bfffc4ec843024cc64504698894ac7a0e56d5a01e8e14d9d3b4b1cd01a7726747f81a76aa1c30344f756bfeb47fc73985b749c4af4c6576f41d6d32d10209474f0e23cf5d31ca71ca1ad0c98829e737f8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000200"], 0x390) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1001, 0x16}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r5}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000cc0)={{r5, &(0x7f0000000000)='}\x00', 0x20000, &(0x7f0000000100)={@_ha_fsid={[0x6, 0x8]}, {0x5, 0xfffc, 0x9, 0x4}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000240)=0x442b}, 0x6, &(0x7f0000000c00)=[{0x2, 0xb34e, &(0x7f0000000280)='\x00', &(0x7f0000000400)="7da1a2ff3ec20f2376953cf4a0a056fb594cfc1f345ef12ee8800c8880d5d121e27f8acd99de1598a268c81332e0b117aba3106b658a80b369255986bb0e5eda63a23b7697d0daf1b713609d69e5a0a473c4874d1aacb9cc359a295a7a4c83182fe944332fcbe726dd9804502bdad37fcf999ba252a1ce953d1f872b198a87140669f3ccb83b416b3e0ce9cd", 0x8c, 0x8}, {0x1, 0x5, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="947054e84ee5e202bf2a32f5f0b5dd0e98179562e02132a07f3d8e0e5b2e232a9ee64df3750e673fedcebb53ab4877eb6cd6e813b7bd0d232ed32d93e0f2cd4e5b96b04ade93ab8769d625aaa1bce6b5dbad5177e49fb2e55467", 0x5a, 0x8}, {0x3, 0xffffffc0, &(0x7f0000000580)='\x00', &(0x7f00000007c0)="7d7f3eafe2ca45b92691d3de278c8fbc7b588f0d42e4b1f9ff0b4f1c72d40b34a6a588d7681efdcceae15a6c5863f49b4a953fafb4e8f734e65bdb95140d1f30266c0539724a1f04aef0def60774919a61a72e645afe62474b7118b98cbf89be895d168c2ae9d6274b0a559635c89f6fb1b830921720af31a1f6aca12d70ff3aefb39b5eefe86847f9fab6b18357606afc6a59c9ef98856658fe66529859aab50e5b3ce3bb2f47ff59addc5a66456621dcc317dfcec857164f0eb10f9018a37d314d6e437fbee7d9820fb657e5", 0xcd}, {0x3, 0x3, &(0x7f00000008c0)='%\\$/!+(\xdf\x00', &(0x7f0000000900)="a52424b46ab07d70", 0x8}, {0x3, 0x2, &(0x7f0000000940)='*P\x00', &(0x7f0000000980)="8ef64e023ac8999834a7f2ad4b6d43e39e244bbace50bd5d3115e0a21159510320401420b89a7908a87eacbb4e8fd613e051b327b9440ad271d208aec08722c55136927e7ef6ddd95f038ff5666b8389adef", 0x52}, {0x3, 0xfff, &(0x7f0000000a00)='\\$\x00', &(0x7f0000000a40)="bb83aecd8c1cd2ce8eb87f0b93aebf02cbd9e4db93265fe63d031400c62f50daddd1adee149a430d23c7504d7fdbff56e98585898e2ad67f5e82e9ceeeeafbe2925ef1a8f0ca81d29b809258ba4cbef85e3d9d0379c62bacca69194b314647724bcdc506fd8edc271b82e05afb2f577084a8370d4a674c2aae8c5221b3636b4ea56a16a7f778a50c2ad8c5a3f2f8bfd89fcb31bfcd07df16051cc044a3fb2ce79b8a3c70e5be6645b35c25699bc72c159abffba603f42d7db8f7423827e208d3d2c657ed07a27b05e0c6050c01a4a23f77cec839f3eec17750ce1bff26abd10c05d62b40c5d1a71c7c4ca40fc9bb00", 0xef, 0xa}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}}, 0x4000800) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, &(0x7f0000000d40)=0x1, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r11, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) socket$key(0xf, 0x3, 0x2) listen(0xffffffffffffffff, 0x2005) write$tun(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000002"], 0x4a) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) close(r1) 23.481297726s ago: executing program 4 (id=11101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"}]}}]}, 0x148}, 0x1, 0xfffffffffffffff1}, 0x0) 22.03073871s ago: executing program 5 (id=11102): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) socket$netlink(0x10, 0x3, 0x13) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x8, 0x24, 0x64, 0x0, 0xff, 0x21, 0x0, @multicast1, @private=0xa010101}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x1, "6e6597", 0x39, "caa267"}}}}}}, 0x0) 20.045424706s ago: executing program 4 (id=11103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5d510c8c95024873}, 0x12000) 19.089715633s ago: executing program 5 (id=11104): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_emit_ethernet(0x52, &(0x7f0000001bc0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x4, 0x6, "8c06b8", 0x1c, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[@srh={0x2b, 0x0, 0x4, 0x0, 0x1d, 0x10, 0x2}], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0xfffa, 0x0, 0x38}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10103400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x5, 0x9) 16.267516689s ago: executing program 4 (id=11105): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) (async) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 15.706175841s ago: executing program 1 (id=11106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r2, 0xffff}, 0x8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB="fefffffd00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0002, 0xe, 0x0, &(0x7f00000000c0)="2b206d074843b397737ea49da2aa", 0x0, 0xeffc, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r3, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x100000) 13.854308136s ago: executing program 5 (id=11107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@fragment={0x6, 0x0, 0x3, 0x0, 0x0, 0x3, 0x67}], {0x0, 0x0, 0x8}}}}}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180080001006c6f67001400028008000540ffffff0907020240402f00000900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x404c844}, 0x24000000) 8.969236568s ago: executing program 1 (id=11108): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000441f3bcbfcef6d1acdd65700a7c3884d1fd2dad8f0f73774aa38780c36c6ba9e8ba960bf2158fdd1468c6c22c17c966b11cdf99b50bc56eb2ddb9a0e349ffb98e5a58a60e498f206ea5a472524256bb62bddc10d349cd4c26b67d9caab2b0635f2da97f792f881e3d7a8b0f3021c8576c7ee226df6bb224b9d818842e2610e35ac276eda03b02c85ca59d8b1bc3484266f8bd609", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf258600000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x800) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x0, 0x7f}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 6.844923136s ago: executing program 5 (id=11109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="89db292cf9257178a3e87b38554f3513bb5c862835c26950b6bbadd7291328ab100d858ec9ef0aab11a8ce5964646a02a68faed65a35847041f7c647b22591128c8b94a43581ccc344eea16b1e57688a96f9bf450eed541219a0c6cc", 0x5c}], 0x1, &(0x7f00000003c0)=[{0x100, 0x118, 0x8, "6c86ae386cc5cd1f757e8ae4549b09b4b50f36e437efd3c69e0feb39a75ea1d1eb3f46291eabaf008803932fe35a7ee7039e8ff438faf30069917ea71c28b02d5a79a66581b74789d4e932cb2bc1b66ebc19e16eb77a3fe462be1f350d031a0fa46f93bbd33ee81a230531aecceb4b043f51513e859b94aa7aa495095b4eaa6820fe359d8dd03abcb78c06986e375ec4b0226727993d9c5f6057b371937e44d9b58f8ee85d8398a12cf3ed9992db1b25349d5ca77a2d8a868547de2cf6dc391a174ab2dc4b89c74e4b8e6dfdae8b985526422b1ecfeb7f7387064dcba1183a9164842e2504f69fbfcffd6697b0737103"}], 0x100}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 6.365004098s ago: executing program 4 (id=11110): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000340)=@buf={0xda, &(0x7f0000000240)="cb1b33e400c0c4a6314a4c00493810c7d0a216d6eb02dc63880b087feee03466428682462ff2670dbc8f30514b6d477a18cf6dfcd5101631e0c094bd2f2d0520c41a1ce9cca61e2ad08754b5f6f18b757d1e9ca5561ada569e3d801b7c27eaf3595465c7502503a50002543ecfea600b23a782a9d0762291fae3dedc5375fe63b60406c1bca8b869eb805f3e6401fdde1f863cf7e6aedf542f64d30e5b57159bb3c7ac6e7d29f2d6b098c159fca44e34f7607410ac1cf6742a93d027f535d5f0a439528b50a165efed0595f097ac757247f93da0fbd23fe26030"}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.870839954s ago: executing program 1 (id=11111): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="07d569eb35b45a47fd9df91404007cc3e83d122a7c0e7cca01c226cd3eec517dc053a059254bf92f9564f1f7b9be39e83a6c22b529dde41e0f12f96af4973994e50cb2c5cc30dd81ed7e060000000000000094e488714a02725449ab7f040e842c1735baec8aea304155436f9532b1109e9b219ea3981b4d3eff4ce46bfdff26b03aa867b25500768aaef5b3148267402708e9ac1eb0c8a3fc4bde4e733ab33765510d120f3c11e8d4af8f3ad65f30dac10104000065181ad4b5999800a76167e10f8759a7985e331a93a82ff9b09596d37fbf4004e2f52bb62bc40740d69b299d86868e83f036acbc4972498b777f3fbc6834336aa8a69002240c4a98dfe38993e1780ca74960e0e51d889ddae1315b59080a66b78e7acec6de293467514993505daf62d877ddc6b6fef68f108d4dfa95821fd7c99374ec7d6966f87286fc872d736c1b168eb532afa017e6b4ceb43c6aaf58c3cdaf1d735eb88b67d51be460780557629b7e6c35373a57b9a0599f648ac5dc4f1146f713bf050a2023125557c897e919d60acdb373c12f2835f6add4b43113d39be1ed61e082678037f5e8975bd694ab3946fc296b6231dfff4a16b17eed2b2a1bb815607cb4b7baa25df020ce4d5a77acc948bbaf7881c7d6d24680a86d648cb7335b6a0b8463efcfad10bb242c613e29346fff9ae1edcb78cda93574116c424dde0000000000000000e502135f869cf9377b426d73f54a2716af1e9ff17afb8e516c5fa31e72fd466196"], 0x14}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @broadcast}}], 0x1c) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r8, 0x0, 0xfffffffffffffe40, 0xc005, 0x0, 0x0) writev(r7, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98) splice(r9, 0x0, r7, 0x0, 0xfffffffc, 0xf) 2.778169225s ago: executing program 4 (id=11112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x1f, 0x5, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r2, 0x6, 0x7fffffff, 0x3ff}, &(0x7f00000000c0)=0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'wlan1\x00', 0x400}) 59.77666ms ago: executing program 5 (id=11113): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x1a043000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0xc, 0x0, @void}}}}}}}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 0s ago: executing program 1 (id=11114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xbe3) close(r2) syz_emit_ethernet(0xff76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08002c03fc00000002907800000000e000009014009078c8000000"], 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) kernel console output (not intermixed with test programs): ecursion limit reached on datapath [ 1495.375447][ T1711] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1495.377076][ T2227] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1495.377119][ T2227] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1495.377178][ T2227] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1495.472228][T13586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9858'. [ 1495.770268][T13600] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9861'. [ 1495.956775][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1496.784347][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9873'. [ 1496.810755][T13640] netlink: 'syz.4.9873': attribute type 4 has an invalid length. [ 1496.811798][T13641] netlink: 'syz.4.9873': attribute type 4 has an invalid length. [ 1497.099184][ T7507] net_ratelimit: 1 callbacks suppressed [ 1497.099209][ T7507] lwtunnel_output(): recursion limit reached on datapath [ 1497.286611][ C0] lwtunnel_output(): recursion limit reached on datapath [ 1497.328584][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9880'. [ 1497.361355][T13661] vlan2: entered promiscuous mode [ 1497.361382][T13661] geneve1: entered promiscuous mode [ 1497.361568][T13661] vlan2: entered allmulticast mode [ 1497.361584][T13661] geneve1: entered allmulticast mode [ 1498.095104][T13690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9885'. [ 1498.196357][T13690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9885'. [ 1498.207420][ T7507] lwtunnel_output(): recursion limit reached on datapath [ 1498.378695][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9889'. [ 1498.410028][T13702] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 1498.425401][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9889'. [ 1498.428319][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9889'. [ 1498.908359][T13720] mac80211_hwsim hwsim107 wlan0: entered promiscuous mode [ 1499.055242][ T7345] lwtunnel_output(): recursion limit reached on datapath [ 1499.081061][T13729] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1499.203261][T13729] netlink: 'syz.0.9894': attribute type 39 has an invalid length. [ 1500.115596][T13775] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9904'. [ 1500.219987][T13774] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1500.380162][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.459857][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1500.768989][T13790] netlink: 'syz.3.9906': attribute type 1 has an invalid length. [ 1501.578860][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1501.679483][T13817] x_tables: duplicate underflow at hook 1 [ 1501.811622][T13826] netlink: 'syz.0.9918': attribute type 32 has an invalid length. [ 1501.966211][T13822] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9918'. [ 1501.984694][T13832] : renamed from bond_slave_0 (while UP) [ 1502.097494][ T7345] lwtunnel_output(): recursion limit reached on datapath [ 1502.257508][T13839] veth1_to_bond: entered allmulticast mode [ 1502.270562][T13822] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9918'. [ 1502.383122][T13838] veth1_to_bond: left allmulticast mode [ 1502.543803][T13851] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1502.735595][ T1710] lwtunnel_output(): recursion limit reached on datapath [ 1503.452877][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9931'. [ 1503.452922][T13874] macvlan0: left promiscuous mode [ 1503.453132][T13874] netlink: 'syz.1.9931': attribute type 1 has an invalid length. [ 1503.453183][T13874] netlink: 'syz.1.9931': attribute type 2 has an invalid length. [ 1503.867239][ T1710] lwtunnel_output(): recursion limit reached on datapath [ 1503.871947][T13882] netlink: 'syz.4.9934': attribute type 1 has an invalid length. [ 1504.685488][T13905] tipc: Enabling of bearer rejected, failed to enable media [ 1504.917121][T13913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1504.987239][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1505.207150][ T7345] lwtunnel_output(): recursion limit reached on datapath [ 1505.476619][T13925] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1505.509596][T13925] bond2 (unregistering): Released all slaves [ 1505.632722][T13934] syzkaller0: left promiscuous mode [ 1505.632749][T13934] syzkaller0: left allmulticast mode [ 1506.107155][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1507.205283][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1507.743385][T14000] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9971'. [ 1507.755810][T14003] netlink: 'syz.4.9971': attribute type 12 has an invalid length. [ 1507.977646][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9973'. [ 1508.184714][ T5951] lwtunnel_output(): recursion limit reached on datapath [ 1508.245561][ T7345] lwtunnel_output(): recursion limit reached on datapath [ 1508.273357][ T2227] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 1508.305527][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1508.614323][T14027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1508.769512][T14033] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1509.318632][T14055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9984'. [ 1509.373444][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9984'. [ 1509.424972][ T1706] lwtunnel_output(): recursion limit reached on datapath [ 1509.673532][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9989'. [ 1510.653414][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1511.070775][T14112] netlink: 'syz.3.10001': attribute type 21 has an invalid length. [ 1511.257897][T14115] vlan2: entered promiscuous mode [ 1511.257924][T14115] team_slave_0: entered promiscuous mode [ 1511.258113][T14115] vlan2: entered allmulticast mode [ 1511.258129][T14115] team_slave_0: entered allmulticast mode [ 1511.297067][ T7345] lwtunnel_output(): recursion limit reached on datapath [ 1511.373569][T14124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10004'. [ 1511.373845][T14124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10004'. [ 1511.785802][ T2227] lwtunnel_output(): recursion limit reached on datapath [ 1512.145254][T14151] netlink: 3604 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1512.153109][T14151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1512.207601][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1512.208042][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1512.258837][T14151] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1512.325114][T19804] Bluetooth: hci3: command 0x0406 tx timeout [ 1512.325127][T14081] Bluetooth: hci1: command 0x0406 tx timeout [ 1512.454351][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10012'. [ 1512.454380][T14161] netlink: 'syz.1.10012': attribute type 3 has an invalid length. [ 1512.524289][T14160] netlink: 'syz.3.10011': attribute type 1 has an invalid length. [ 1512.936747][T14173] bond2: (slave veth0_to_bond): Releasing active interface [ 1513.142243][T14173] bond3: (slave veth0_to_bond): making interface the new active one [ 1513.171067][T14173] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1513.461569][T14176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1513.598466][T14184] bond0: invalid NS target :: specified for addition [ 1513.598498][T14184] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 1514.075570][ T2222] net_ratelimit: 1 callbacks suppressed [ 1514.075601][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1514.135147][T14208] veth3: entered allmulticast mode [ 1514.259672][T14219] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:20003 [ 1514.298022][T14219] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004 [ 1514.325009][ T7345] lwtunnel_output(): recursion limit reached on datapath [ 1514.361044][T14215] ip_tables: iptables: counters copy to user failed while replacing table [ 1514.794456][T14235] __nla_validate_parse: 1 callbacks suppressed [ 1514.794480][T14235] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10026'. [ 1514.798331][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10028'. [ 1515.069647][T14239] can: request_module (can-proto-4) failed. [ 1515.113250][T14242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10031'. [ 1515.114871][T14243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10031'. [ 1515.195867][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1515.428759][T14253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10034'. [ 1515.467631][T14253] team0: Device 26±ÿÇl¡­ˆiý is loopback device. Loopback devices can't be added as a team port [ 1515.468114][T14253] A link change request failed with some changes committed already. Interface 26±ÿÇl¡­ˆiý may have been left with an inconsistent configuration, please check. [ 1515.629728][T14260] Bluetooth: hci1: too big key_count value 32778 [ 1515.906225][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10040'. [ 1515.906256][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10040'. [ 1516.053169][T14282] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1516.078200][ T2222] IPVS: starting estimator thread 0... [ 1516.125008][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10041'. [ 1516.175221][T14283] IPVS: using max 37 ests per chain, 88800 per kthread [ 1516.315670][ T6628] lwtunnel_output(): recursion limit reached on datapath [ 1516.394568][T14289] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1516.835498][T14296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10048'. [ 1517.070733][T14302] tipc: Failed to obtain node identity [ 1517.070771][T14302] tipc: Enabling of bearer rejected, failed to enable media [ 1517.262992][T14308] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 1517.365654][ T7358] lwtunnel_output(): recursion limit reached on datapath [ 1517.421478][T14311] vlan0: entered promiscuous mode [ 1517.422380][T14311] vlan0: entered allmulticast mode [ 1517.422447][T14311] veth0_vlan: entered allmulticast mode [ 1517.546937][ T1711] lwtunnel_output(): recursion limit reached on datapath [ 1518.182743][T14337] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1518.452493][T14337] virt_wifi0 speed is unknown, defaulting to 1000 [ 1518.899621][T14362] mac80211_hwsim hwsim111 wlan0: entered promiscuous mode [ 1519.777475][ T723] net_ratelimit: 2 callbacks suppressed [ 1519.777500][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1520.030803][T14389] ip_tables: iptables: counters copy to user failed while replacing table [ 1520.051776][T14389] netlink: 'syz.3.10074': attribute type 1 has an invalid length. [ 1520.052056][T14389] block nbd296: server does not support multiple connections per device. [ 1520.052487][T14389] block nbd296: shutting down sockets [ 1520.407530][ T7358] lwtunnel_output(): recursion limit reached on datapath [ 1520.408461][T14400] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1520.457799][T14401] netlink: 'syz.3.10076': attribute type 1 has an invalid length. [ 1520.476669][T14402] xt_esp: unknown flags DD [ 1520.534344][T14407] __nla_validate_parse: 1 callbacks suppressed [ 1520.534366][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10076'. [ 1520.562209][T14399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.595716][T14399] Bluetooth: hci0: unsupported parameter 5134 [ 1520.595741][T14399] Bluetooth: hci0: unsupported parameter 8192 [ 1520.595756][T14399] Bluetooth: hci0: unsupported parameter 5134 [ 1520.595770][T14399] Bluetooth: hci0: unsupported parameter 8192 [ 1520.730588][T14401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1520.805299][T14410] bond4: (slave geneve2): making interface the new active one [ 1520.835700][T14410] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1520.909689][ T2226] lwtunnel_output(): recursion limit reached on datapath [ 1521.062708][T14412] bond0: entered promiscuous mode [ 1521.062743][T14412] bond_slave_0: entered promiscuous mode [ 1521.062963][T14412] bond_slave_1: entered promiscuous mode [ 1521.164245][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10081'. [ 1521.749224][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10084'. [ 1521.749279][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10084'. [ 1521.923864][T14081] Bluetooth: hci0: command 0x0c13 tx timeout [ 1521.928115][ T53] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 1522.025453][ T2225] lwtunnel_output(): recursion limit reached on datapath [ 1522.033474][T14425] syzkaller0: entered promiscuous mode [ 1522.033499][T14425] syzkaller0: entered allmulticast mode [ 1522.495381][T26526] lwtunnel_output(): recursion limit reached on datapath [ 1522.668892][T14454] can: request_module (can-proto-4) failed. [ 1523.038426][T14464] can: request_module (can-proto-0) failed. [ 1523.136903][ T1706] lwtunnel_output(): recursion limit reached on datapath [ 1523.204655][T14479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10092'. [ 1523.446534][ T7358] lwtunnel_output(): recursion limit reached on datapath [ 1523.573368][T14487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10094'. [ 1523.731324][T14491] geneve3: entered promiscuous mode [ 1523.962728][T14501] pim6reg: left allmulticast mode [ 1523.974194][T14505] netlink: 'syz.0.10099': attribute type 3 has an invalid length. [ 1524.031849][T14510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1524.090338][T14511] netlink: 'syz.3.10101': attribute type 1 has an invalid length. [ 1524.401805][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10101'. [ 1524.618851][T14512] veth3: entered allmulticast mode [ 1524.657774][T14512] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1524.740949][T14516] bond3: (slave veth0_to_bond): Releasing active interface [ 1524.798796][T14516] bond5: (slave veth0_to_bond): making interface the new active one [ 1524.802620][T14516] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1525.371643][ T723] net_ratelimit: 1 callbacks suppressed [ 1525.371670][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1525.772564][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10114'. [ 1525.824606][T14564] ip6t_srh: unknown srh match flags 4000 [ 1526.464902][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1526.634589][ T7358] lwtunnel_output(): recursion limit reached on datapath [ 1527.565251][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1527.727785][T14562] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1527.966734][T14570] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10116'. [ 1528.426541][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10121'. [ 1528.475425][T14600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10125'. [ 1528.518000][T14600] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10125'. [ 1528.544906][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10124'. [ 1528.686133][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1528.784230][T14612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1529.126584][ T2226] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1529.130716][T14619] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1529.340247][T14625] netlink: 'syz.1.10130': attribute type 49 has an invalid length. [ 1529.558575][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10132'. [ 1529.558604][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10132'. [ 1529.706238][ T7358] lwtunnel_output(): recursion limit reached on datapath [ 1529.848303][T14635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1529.881070][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1530.141610][T14652] nbd: couldn't find a device at index 0 [ 1530.574944][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1530.604780][ T7357] lwtunnel_output(): recursion limit reached on datapath [ 1530.986257][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1531.261685][T14678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1531.481553][T14697] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.10148'. [ 1531.482663][T14697] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.10148'. [ 1531.483669][T14697] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.10148'. [ 1531.491729][T14697] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.10148'. [ 1531.495285][T14697] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.10148'. [ 1531.639753][T14692] netlink: 12927 bytes leftover after parsing attributes in process `syz.4.10147'. [ 1531.686106][T14705] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10150'. [ 1531.801385][T14710] netlink: 548 bytes leftover after parsing attributes in process `syz.0.10150'. [ 1531.902275][T14715] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10151'. [ 1532.106786][ T1711] lwtunnel_output(): recursion limit reached on datapath [ 1532.172998][T14698] vlan3: entered promiscuous mode [ 1532.173023][T14698] macsec0: entered promiscuous mode [ 1532.187151][T14698] vlan3: entered allmulticast mode [ 1532.187174][T14698] macsec0: entered allmulticast mode [ 1532.334341][T14707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10150'. [ 1532.484894][ C0] lwtunnel_output(): recursion limit reached on datapath [ 1532.650167][T14081] Bluetooth: hci2: command 0x0406 tx timeout [ 1533.044085][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1533.206986][ T2226] lwtunnel_output(): recursion limit reached on datapath [ 1533.299123][T14760] ip6t_hbh: too many supported opts specified [ 1533.918568][T14778] netlink: 'syz.4.10166': attribute type 12 has an invalid length. [ 1534.145879][T14779] syzkaller0: entered promiscuous mode [ 1534.145903][T14779] syzkaller0: entered allmulticast mode [ 1534.346001][ T2226] lwtunnel_output(): recursion limit reached on datapath [ 1534.668203][T14794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1535.423545][T14809] IPVS: Unknown mcast interface: dvmrp1 [ 1535.435232][T14812] IPVS: Unknown mcast interface: dvmrp1 [ 1535.453505][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1535.760573][T14822] IPVS: length: 194 != 24 [ 1536.111574][T14837] tipc: Started in network mode [ 1536.111613][T14837] tipc: Node identity ac1414aa, cluster identity 4711 [ 1536.111898][T14837] tipc: New replicast peer: 172.20.20.187 [ 1536.147302][T14837] tipc: Enabled bearer , priority 10 [ 1536.575802][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1536.800972][T14861] lwtunnel_output(): recursion limit reached on datapath [ 1536.894331][T14863] __nla_validate_parse: 5 callbacks suppressed [ 1536.894354][T14863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10190'. [ 1536.955507][T14863] ip6gre1: entered promiscuous mode [ 1536.955535][T14863] ip6gre1: entered allmulticast mode [ 1536.981805][T26500] lwtunnel_output(): recursion limit reached on datapath [ 1536.986646][ T2225] lwtunnel_output(): recursion limit reached on datapath [ 1537.228092][T26500] tipc: Node number set to 2886997162 [ 1537.526104][T14879] netlink: Failed to add helper -22 [ 1537.526163][T14879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1537.696570][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1537.742118][T14885] netlink: Failed to add helper -22 [ 1537.742180][T14885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1538.111920][T14907] syzkaller0: entered promiscuous mode [ 1538.111948][T14907] syzkaller0: entered allmulticast mode [ 1538.138040][T14906] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10201'. [ 1538.387373][T14919] syzkaller1: entered promiscuous mode [ 1538.387399][T14919] syzkaller1: entered allmulticast mode [ 1538.548922][T14935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10207'. [ 1538.548975][T14935] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 1538.862524][T14945] tipc: Enabling of bearer rejected, media not registered [ 1539.174110][T14956] netlink: 'syz.1.10215': attribute type 24 has an invalid length. [ 1539.253296][T14956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10215'. [ 1539.353953][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10214'. [ 1539.789277][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10223'. [ 1539.934369][T14987] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10219'. [ 1540.186294][T15000] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10225'. [ 1540.481544][T15004] x_tables: unsorted entry at hook 2 [ 1540.805165][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1540.810169][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1541.007279][T15017] IPv6: NLM_F_CREATE should be specified when creating new route [ 1541.007560][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10230'. [ 1541.349630][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10233'. [ 1541.457347][T15031] netlink: 'syz.2.10233': attribute type 7 has an invalid length. [ 1541.457467][T15031] netlink: 'syz.2.10233': attribute type 8 has an invalid length. [ 1542.144704][ T2222] net_ratelimit: 4 callbacks suppressed [ 1542.144728][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1542.260928][T15057] __nla_validate_parse: 3 callbacks suppressed [ 1542.260953][T15057] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.10243'. [ 1542.260973][T15057] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.10243'. [ 1542.394981][ T53] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1542.519418][T15061] macvtap1: entered promiscuous mode [ 1542.521619][T15061] macvtap1: entered allmulticast mode [ 1542.521644][T15061] veth1_vlan: entered allmulticast mode [ 1542.602129][T15069] netlink: 'syz.0.10247': attribute type 1 has an invalid length. [ 1542.647946][T15069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1542.675494][T15069] bond2: (slave bridge1): making interface the new active one [ 1542.677041][T15069] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1542.788808][ T2228] lwtunnel_output(): recursion limit reached on datapath [ 1543.326905][ T6628] lwtunnel_output(): recursion limit reached on datapath [ 1543.519612][T15081] netlink: 368 bytes leftover after parsing attributes in process `syz.3.10251'. [ 1544.139965][T15109] sock: sock_timestamping_bind_phc: sock not bind to device [ 1544.160103][T15109] sock: sock_timestamping_bind_phc: sock not bind to device [ 1544.438715][ T723] lwtunnel_output(): recursion limit reached on datapath [ 1544.458569][T15113] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10250'. [ 1544.458597][T15113] netlink: 'syz.4.10250': attribute type 1 has an invalid length. [ 1544.458614][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10250'. [ 1544.458630][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10250'. [ 1544.630845][T15120] netlink: 'syz.2.10257': attribute type 1 has an invalid length. [ 1544.630872][T15120] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10257'. [ 1545.173888][T15136] netlink: 'syz.4.10261': attribute type 10 has an invalid length. [ 1545.216388][T15136] team0: Port device dummy0 added [ 1545.240937][T15138] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1545.270581][T15138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1545.556519][ T2225] lwtunnel_output(): recursion limit reached on datapath [ 1546.518692][T15186] ip_tables: iptables: counters copy to user failed while replacing table [ 1546.660012][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1547.565657][T15230] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.10285'. [ 1547.565688][T15230] netlink: 'syz.2.10285': attribute type 2 has an invalid length. [ 1547.788143][T15240] dvmrp8: entered allmulticast mode [ 1547.815256][ T1706] lwtunnel_output(): recursion limit reached on datapath [ 1547.995380][T15250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10290'. [ 1548.302648][T15253] bond3: invalid ARP target 0.0.0.0 specified for addition [ 1548.302680][T15253] bond3: option arp_ip_target: invalid value (0) [ 1548.358527][T15263] netlink: 'syz.2.10288': attribute type 1 has an invalid length. [ 1548.438411][T15253] bond3 (unregistering): Released all slaves [ 1548.513356][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1548.632265][T15265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1548.711120][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10293'. [ 1548.864634][T15272] lwtunnel_output(): recursion limit reached on datapath [ 1548.940419][ T2222] lwtunnel_output(): recursion limit reached on datapath [ 1548.971835][T15276] netlink: 'syz.0.10296': attribute type 1 has an invalid length. [ 1549.031288][T15276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1549.353873][T15291] netlink: 'syz.1.10299': attribute type 58 has an invalid length. [ 1549.353899][T15291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10299'. [ 1550.075686][ T2226] lwtunnel_output(): recursion limit reached on datapath [ 1550.432027][T15318] netlink: 'syz.3.10308': attribute type 21 has an invalid length. [ 1550.432057][T15318] IPv6: NLM_F_CREATE should be specified when creating new route [ 1550.432151][T15318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1550.432164][T15318] IPv6: NLM_F_CREATE should be set when creating new route [ 1550.432207][T15318] IPv6: NLM_F_CREATE should be set when creating new route [ 1550.432234][T15318] IPv6: NLM_F_CREATE should be set when creating new route [ 1550.498458][T15319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10308'. [ 1550.498499][T15319] netlink: 'syz.3.10308': attribute type 7 has an invalid length. [ 1550.498532][T15319] netlink: 'syz.3.10308': attribute type 8 has an invalid length. [ 1550.498547][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10308'. [ 1550.571554][T15315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.780950][T15315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.970943][T15321] erspan0: entered promiscuous mode [ 1551.078170][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10307'. [ 1551.569329][T15340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1551.982590][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10318'. [ 1552.013913][T15357] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.10321'. [ 1552.260868][T15353] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1552.297521][T15353] bond3 (unregistering): Released all slaves [ 1552.381078][T15359] netlink: 'syz.1.10318': attribute type 3 has an invalid length. [ 1552.748342][T15375] netlink: 'syz.3.10325': attribute type 21 has an invalid length. [ 1552.748370][T15375] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10325'. [ 1552.796159][T15375] netlink: 'syz.3.10325': attribute type 4 has an invalid length. [ 1552.796193][T15375] netlink: 'syz.3.10325': attribute type 5 has an invalid length. [ 1552.796209][T15375] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10325'. [ 1553.128103][T14081] Bluetooth: hci5: command 0x0406 tx timeout [ 1554.709380][T15431] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1554.746668][T15431] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1554.929861][T15440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10337'. [ 1555.058902][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10337'. [ 1555.340345][T15448] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1555.410113][T15458] sctp: [Deprecated]: syz.0.10338 (pid 15458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1555.410113][T15458] Use struct sctp_sack_info instead [ 1555.543119][ T2228] bond0: (slave bond_slave_0): interface is now down [ 1555.543156][ T2228] bond0: (slave bond_slave_1): interface is now down [ 1555.659337][T15448] netlink: 'syz.3.10336': attribute type 1 has an invalid length. [ 1555.659362][T15448] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10336'. [ 1557.337772][T15480] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10343'. [ 1557.337778][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10344'. [ 1557.337803][T15480] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10343'. [ 1557.337811][T15484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10344'. [ 1557.712226][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10349'. [ 1557.811128][T15508] SET target dimension over the limit! [ 1558.113703][ T2225] bond0: (slave bond_slave_0): interface is now down [ 1558.113732][ T2225] bond0: (slave bond_slave_1): interface is now down [ 1558.298615][ T2225] bond0: now running without any active interface! [ 1558.412226][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10354'. [ 1558.816020][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10359'. [ 1558.863323][T15530] bond3: option mode: invalid value (10) [ 1558.939150][T15530] bond3 (unregistering): Released all slaves [ 1559.020029][T15545] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1559.020068][T15545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1559.214137][T15549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10363'. [ 1559.214178][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10363'. [ 1559.312438][T15551] xt_CT: No such helper "netbios-ns" [ 1559.810190][T15566] netlink: 'syz.1.10369': attribute type 32 has an invalid length. [ 1559.960436][T15573] netlink: 'syz.1.10369': attribute type 1 has an invalid length. [ 1560.232920][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10374'. [ 1560.232946][T15583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10374'. [ 1560.264968][T15573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1560.370736][T15566] bond3: (slave veth3): Enslaving as an active interface with an up link [ 1561.169413][T15607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10379'. [ 1561.169452][T15607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10379'. [ 1561.306955][T15607] gretap1: entered promiscuous mode [ 1561.306984][T15607] gretap1: entered allmulticast mode [ 1561.678218][T15613] pimreg3: entered allmulticast mode [ 1562.071166][T15631] netlink: 'syz.2.10385': attribute type 16 has an invalid length. [ 1562.071193][T15631] netlink: 'syz.2.10385': attribute type 17 has an invalid length. [ 1562.205102][T15628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.251442][T15628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.923022][T15631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.923164][T15631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.960034][T15631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.960168][T15631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.420780][T15631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1563.521134][T15631] macvtap1: left promiscuous mode [ 1563.521332][T15631] macvtap1: left allmulticast mode [ 1563.521441][T15631] veth1_vlan: left allmulticast mode [ 1563.638260][T15631] vlan2: left promiscuous mode [ 1563.638286][T15631] team_slave_0: left promiscuous mode [ 1563.638476][T15631] vlan2: left allmulticast mode [ 1563.638492][T15631] team_slave_0: left allmulticast mode [ 1564.203135][T15667] xt_recent: Unsupported userspace flags (000000b1) [ 1564.939527][T15703] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1564.990578][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10401'. [ 1565.013293][T15703] syz_tun: entered allmulticast mode [ 1565.258354][T15692] syz_tun: left allmulticast mode [ 1565.563236][ T723] IPVS: starting estimator thread 0... [ 1565.644607][T15717] IPVS: using max 24 ests per chain, 57600 per kthread [ 1565.932318][T15723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10406'. [ 1565.932353][T15723] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1566.142232][T15735] mac80211_hwsim hwsim107 wlan0: left promiscuous mode [ 1566.406937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.689675][T15754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10415'. [ 1566.915434][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10414'. [ 1567.420457][T15773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10418'. [ 1567.420504][T15773] netlink: 'syz.2.10418': attribute type 7 has an invalid length. [ 1567.420524][T15773] netlink: 'syz.2.10418': attribute type 8 has an invalid length. [ 1567.420541][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10418'. [ 1567.479085][T15773] erspan0: entered promiscuous mode [ 1567.495726][T15773] erspan0: left promiscuous mode [ 1567.582791][T15774] xt_CT: No such helper "pptp" [ 1568.102324][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10427'. [ 1568.181074][T15808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10427'. [ 1568.243388][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10427'. [ 1568.264703][T15810] team0: Port device dummy0 removed [ 1568.268741][T15810] bridge_slave_0: left allmulticast mode [ 1568.268768][T15810] bridge_slave_0: left promiscuous mode [ 1568.269085][T15810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.316029][T15810] bridge_slave_1: left allmulticast mode [ 1568.316058][T15810] bridge_slave_1: left promiscuous mode [ 1568.316267][T15810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.396688][T15810] bond1: (slave veth0_to_bond): Releasing active interface [ 1568.463798][T15810] bond0: (slave 30): Releasing backup interface [ 1568.618647][T15810] bond0: (slave bond_slave_1): Releasing backup interface [ 1568.707378][T15819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1568.779948][T15810] team0: Port device team_slave_0 removed [ 1568.856873][T15810] team0: Port device team_slave_1 removed [ 1568.858808][T15810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.858945][T15810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.866060][T15810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1568.948330][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10429'. [ 1569.099322][T15821] batman_adv: batadv0: Adding interface: syzkaller0 [ 1569.099345][T15821] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.099383][T15821] batman_adv: batadv0: Interface activated: syzkaller0 [ 1569.155879][T15817] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1569.501395][T15817] batman_adv: batadv0: Removing interface: syzkaller0 [ 1570.039646][T15856] __nla_validate_parse: 1 callbacks suppressed [ 1570.039669][T15856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10440'. [ 1570.571929][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10445'. [ 1571.097187][T15897] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.10451'. [ 1571.625250][ T2228] bridge_slave_1: left allmulticast mode [ 1571.625281][ T2228] bridge_slave_1: left promiscuous mode [ 1571.625521][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.631897][ T2228] bridge_slave_0: left allmulticast mode [ 1571.631925][ T2228] bridge_slave_0: left promiscuous mode [ 1571.647018][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.725517][T15926] ip_tables: iptables: counters copy to user failed while replacing table [ 1571.774743][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10457'. [ 1571.805470][ T2228] pim6reg: left allmulticast mode [ 1571.805635][ T2228] dvmrp0: left allmulticast mode [ 1572.167671][ T53] Bluetooth: hci0: command 0x0c13 tx timeout [ 1572.408888][ T2228] bond8 (unregistering): (slave erspan1): Releasing active interface [ 1572.408921][ T2228] erspan1 (unregistering): left promiscuous mode [ 1572.770772][ T2228] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1572.889526][ T2228] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1572.889561][ T2228] bridge3 (unregistering): left promiscuous mode [ 1572.982212][ T2228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.997848][ T2228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.999168][ T2228] bond0 (unregistering): Released all slaves [ 1573.025404][ T2228] bond1 (unregistering): Released all slaves [ 1573.048909][ T2228] bond2 (unregistering): Released all slaves [ 1573.071788][ T2228] bond3 (unregistering): Released all slaves [ 1573.099954][ T2228] bond4 (unregistering): Released all slaves [ 1573.125979][ T2228] bond5 (unregistering): Released all slaves [ 1573.151146][ T2228] bond6 (unregistering): Released all slaves [ 1573.179487][ T2228] bond7 (unregistering): Released all slaves [ 1573.202111][ T2228] bond8 (unregistering): Released all slaves [ 1573.227207][ T2228] bond9 (unregistering): Released all slaves [ 1573.257141][ T2228] bond10 (unregistering): Released all slaves [ 1573.278968][ T2228] bond11 (unregistering): Released all slaves [ 1573.300925][ T2228] bond12 (unregistering): Released all slaves [ 1573.342011][ T2228] bond13 (unregistering): Released all slaves [ 1573.401566][ T2228] bond14 (unregistering): Released all slaves [ 1573.631594][T15928] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 1573.654883][T15928] bond3 (unregistering): Released all slaves [ 1573.895413][ T2228] tipc: Left network mode [ 1574.241415][T15967] ip_tables: iptables: counters copy to user failed while replacing table [ 1574.471202][T15971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10466'. [ 1574.669018][T15976] netlink: 'syz.1.10463': attribute type 1 has an invalid length. [ 1574.779003][T15982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10469'. [ 1574.911400][T15976] bond4: entered promiscuous mode [ 1574.913292][T15976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1575.242168][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10471'. [ 1575.281895][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10471'. [ 1575.491971][T15998] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1575.500026][ T53] block nbd7: Receive control failed (result -32) [ 1575.888083][ T2228] veth0_macvtap: left allmulticast mode [ 1577.111055][ T6628] smbdirect: ib_dev[syz2] removed [ 1577.127308][T16034] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1577.499540][ T2228] team0 (unregistering): Port device team_slave_1 removed [ 1577.569366][ T2228] team0 (unregistering): Port device team_slave_0 removed [ 1577.683543][T16048] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1577.719491][T16051] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1578.012521][T16058] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10481'. [ 1578.148216][T16062] ip_tables: iptables: counters copy to user failed while replacing table [ 1578.275247][T16009] A link change request failed with some changes committed already. Interface 26±ÿÇl¡­ˆiý may have been left with an inconsistent configuration, please check. [ 1578.321307][T16058] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10481'. [ 1578.543591][T16066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1578.600165][T16066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1578.652010][T16066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1578.817131][ T2228] IPVS: stop unused estimator thread 0... [ 1578.831382][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10485'. [ 1578.957466][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10485'. [ 1578.957717][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10485'. [ 1578.957975][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10485'. [ 1578.958202][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10485'. [ 1578.958438][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10485'. [ 1579.014026][T16085] Unknown options in mask 4 [ 1579.578602][T16109] netlink: 'syz.1.10491': attribute type 12 has an invalid length. [ 1579.578630][T16109] netlink: 'syz.1.10491': attribute type 29 has an invalid length. [ 1583.485121][T16189] __nla_validate_parse: 32 callbacks suppressed [ 1583.485145][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10501'. [ 1583.758373][T16201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10504'. [ 1583.773926][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10504'. [ 1584.211112][T16208] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10506'. [ 1584.213537][T16211] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10506'. [ 1584.503229][T16208] bond3 (unregistering): Released all slaves [ 1584.806288][T16223] netlink: 'syz.4.10511': attribute type 4 has an invalid length. [ 1584.841405][T16211] bond3 (unregistering): Released all slaves [ 1585.411083][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10516'. [ 1585.411377][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10516'. [ 1585.411647][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10516'. [ 1585.411963][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10516'. [ 1585.412230][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10516'. [ 1585.524007][T14081] Bluetooth: hci0: command 0x0c13 tx timeout [ 1585.669572][T16252] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1586.398723][T16266] block nbd8: Unsupported socket: should be TCP or UNIX. [ 1586.990889][T16279] netlink: 'syz.2.10527': attribute type 1 has an invalid length. [ 1586.990914][T16279] netlink: 'syz.2.10527': attribute type 7 has an invalid length. [ 1586.990929][T16279] netlink: 'syz.2.10527': attribute type 8 has an invalid length. [ 1586.990947][T16279] NCSI netlink: No device for ifindex 65584 [ 1587.085311][T16282] x_tables: duplicate underflow at hook 2 [ 1587.123210][T16284] nbd: socks must be embedded in a SOCK_ITEM attr [ 1587.169730][T16285] netlink: 'syz.2.10527': attribute type 1 has an invalid length. [ 1587.169755][T16285] netlink: 'syz.2.10527': attribute type 7 has an invalid length. [ 1587.169770][T16285] netlink: 'syz.2.10527': attribute type 8 has an invalid length. [ 1587.169788][T16285] NCSI netlink: No device for ifindex 65584 [ 1587.299964][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804feb5800: rx timeout, send abort [ 1587.954787][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 1588.445181][T16318] x_tables: unsorted entry at hook 4 [ 1588.899925][T16338] __nla_validate_parse: 67 callbacks suppressed [ 1588.899947][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10543'. [ 1588.899974][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10543'. [ 1588.900009][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10543'. [ 1589.001475][T16341] netlink: 'syz.4.10542': attribute type 5 has an invalid length. [ 1589.387820][T16360] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1589.388207][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10543'. [ 1589.388235][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10543'. [ 1589.388273][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10543'. [ 1589.507185][T16358] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1590.254268][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10554'. [ 1591.569538][T16434] IPv6: NLM_F_CREATE should be specified when creating new route [ 1592.130134][T16458] netlink: 260 bytes leftover after parsing attributes in process `syz.4.10571'. [ 1592.144902][T16458] netlink: 71 bytes leftover after parsing attributes in process `syz.4.10571'. [ 1592.223085][T16462] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10571'. [ 1592.256497][T16462] netlink: 'syz.4.10571': attribute type 30 has an invalid length. [ 1592.571626][T16462] bond4: option arp_missed_max: invalid value (0) [ 1592.571657][T16462] bond4: option arp_missed_max: allowed values 1 - 255 [ 1592.777091][T16462] bond4 (unregistering): Released all slaves [ 1593.495130][T16492] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1593.555472][T16479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1593.785036][T16499] netlink: 'syz.2.10578': attribute type 1 has an invalid length. [ 1593.791451][T16505] netlink: 'syz.2.10578': attribute type 1 has an invalid length. [ 1593.978383][T16499] bond3: entered promiscuous mode [ 1593.979119][T16499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1593.982354][T16503] __nla_validate_parse: 1 callbacks suppressed [ 1593.982373][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10580'. [ 1593.982500][T16503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1594.073182][T16503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.152899][T16508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1594.153371][T16508] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1594.153394][T16508] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1594.194682][T16508] bond3: (slave ip6gre1): making interface the new active one [ 1594.194712][T16508] ip6gre1: entered promiscuous mode [ 1594.197715][T16508] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 1594.768358][T16531] netlink: 'syz.2.10587': attribute type 1 has an invalid length. [ 1594.855680][T16536] netlink: 'syz.2.10587': attribute type 35 has an invalid length. [ 1594.901374][T16539] netlink: 'syz.2.10587': attribute type 35 has an invalid length. [ 1594.942768][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10588'. [ 1594.954685][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10588'. [ 1594.988925][T16541] netlink: 'syz.1.10592': attribute type 12 has an invalid length. [ 1595.038292][T16531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10587'. [ 1595.139487][T16541] bond5: option primary_reselect: invalid value (255) [ 1595.160867][T16541] bond5 (unregistering): Released all slaves [ 1595.810050][T16566] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10596'. [ 1595.836700][T16566] syzkaller1: entered promiscuous mode [ 1595.836727][T16566] syzkaller1: entered allmulticast mode [ 1595.991632][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10597'. [ 1596.044270][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10597'. [ 1596.072362][T16569] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.10597'. [ 1596.090189][T16570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10597'. [ 1596.161578][T16579] openvswitch: netlink: Unknown key attributes 1 [ 1596.497889][T16592] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20003 [ 1596.503045][T16592] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 1596.540143][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10601'. [ 1596.623284][T16592] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000 [ 1596.719085][T16598] team0: Port device bridge0 added [ 1598.213190][T16634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1599.141817][T16657] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 1599.160731][T16657] tc_dump_action: action bad kind [ 1599.917743][T16674] __nla_validate_parse: 2 callbacks suppressed [ 1599.917766][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10623'. [ 1599.967932][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10623'. [ 1600.275633][T16684] netlink: 'syz.0.10626': attribute type 1 has an invalid length. [ 1600.506306][T16688] netlink: 'syz.4.10627': attribute type 21 has an invalid length. [ 1600.506365][T16688] IPv6: NLM_F_CREATE should be specified when creating new route [ 1600.816080][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10631'. [ 1601.159614][T16708] syzkaller1: entered promiscuous mode [ 1601.159640][T16708] syzkaller1: entered allmulticast mode [ 1601.283085][T16713] netlink: 'syz.2.10634': attribute type 1 has an invalid length. [ 1601.560888][T16719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1602.186452][T16735] IPVS: Unknown mcast interface: batadv0 [ 1602.389144][T16731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1602.577170][T16752] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1602.597913][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10644'. [ 1602.786848][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10643'. [ 1603.071027][T16766] netlink: 'syz.2.10648': attribute type 4 has an invalid length. [ 1603.071275][T16766] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10648'. [ 1603.100226][T16766] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1603.651329][T16785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10652'. [ 1603.669355][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10652'. [ 1603.979889][T16801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10657'. [ 1604.122827][T16790] macvtap1: entered promiscuous mode [ 1604.122855][T16790] vlan0: entered promiscuous mode [ 1604.123365][T16790] macvtap1: entered allmulticast mode [ 1604.123382][T16790] vlan0: entered allmulticast mode [ 1604.123396][T16790] veth0_vlan: entered allmulticast mode [ 1604.878225][T16830] bond4: entered allmulticast mode [ 1604.878661][T16830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1605.017850][T16842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10667'. [ 1605.175474][T16834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10668'. [ 1605.322702][T16834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.390849][T16854] netlink: 'syz.3.10670': attribute type 39 has an invalid length. [ 1605.537946][T16857] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.10672'. [ 1605.568704][T16840] syzkaller1: entered promiscuous mode [ 1605.568729][T16840] syzkaller1: entered allmulticast mode [ 1605.956221][T16857] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1605.989743][T16857] 0ªX¹¦Dö»: entered allmulticast mode [ 1606.338721][T16880] netlink: 'syz.4.10675': attribute type 1 has an invalid length. [ 1606.338747][T16880] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10675'. [ 1606.670201][T16888] ip6gre1: entered allmulticast mode [ 1606.818544][T16897] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10679'. [ 1606.851700][T16897] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10679'. [ 1606.851944][T16897] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10679'. [ 1607.268973][T16908] A link change request failed with some changes committed already. Interface 26±ÿÇl¡­ˆiý may have been left with an inconsistent configuration, please check. [ 1607.860388][T16931] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10691'. [ 1608.439307][T16947] netlink: 6 bytes leftover after parsing attributes in process `syz.2.10697'. [ 1608.442723][T16945] netlink: 6 bytes leftover after parsing attributes in process `syz.2.10697'. [ 1608.534152][T16946] xt_connbytes: Forcing CT accounting to be enabled [ 1608.534187][T16946] set match dimension is over the limit! [ 1608.966563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.966987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.967384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.968532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.969359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.043967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.053901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.124035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.124611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.543375][T17002] nbd: couldn't find a device at index 0 [ 1610.567002][T17000] pim6reg: entered allmulticast mode [ 1610.924799][T17014] dvmrp0: entered allmulticast mode [ 1610.933636][T17013] __nla_validate_parse: 8 callbacks suppressed [ 1610.933656][T17013] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10711'. [ 1611.132568][T17013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.135514][T17013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.275257][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10714'. [ 1611.892833][T17047] netlink: 'syz.3.10719': attribute type 1 has an invalid length. [ 1611.905282][T17047] tipc: Started in network mode [ 1611.905318][T17047] tipc: Node identity ac141441, cluster identity 4711 [ 1611.934787][T17047] tipc: Enabled bearer , priority 10 [ 1612.283447][T17055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10721'. [ 1612.482601][T17058] net_ratelimit: 10 callbacks suppressed [ 1612.482624][T17058] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1612.482656][T17058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1612.711678][T17058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.715055][T17058] bond0: (slave gtp0): The slave device specified does not support setting the MAC address [ 1612.748033][T17058] bond0: (slave gtp0): Error -95 calling set_mac_address [ 1613.033606][ T7353] tipc: Node number set to 2886997057 [ 1613.390284][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10732'. [ 1613.876359][T17114] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48 [ 1613.898069][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10736'. [ 1614.005198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.005455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.006174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.006687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.083794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.083983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.145262][T17118] tls_set_device_offload_rx: netdev not found [ 1614.166813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.170503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.207195][T17125] netlink: 'syz.2.10738': attribute type 1 has an invalid length. [ 1614.240093][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10738'. [ 1614.970161][T17154] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1615.353005][T17167] netlink: 'syz.0.10748': attribute type 1 has an invalid length. [ 1615.353032][T17167] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10748'. [ 1615.353051][T17167] netlink: 'syz.0.10748': attribute type 1 has an invalid length. [ 1615.360420][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10748'. [ 1615.361033][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10748'. [ 1615.368435][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10748'. [ 1615.951276][T17181] __nla_validate_parse: 5 callbacks suppressed [ 1615.951299][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1615.952258][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1615.953182][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1615.981774][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1616.013890][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1616.014115][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1616.014305][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1616.014558][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1616.014747][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1616.014942][T17181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1616.200204][T17189] netlink: 'syz.2.10752': attribute type 4 has an invalid length. [ 1616.640445][T17202] netlink: 'syz.1.10754': attribute type 1 has an invalid length. [ 1616.884325][ T53] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1616.884819][T14081] Bluetooth: hci2: command 0x0406 tx timeout [ 1617.138300][T17214] IPVS: length: 239 != 24 [ 1617.196223][T17214] macvtap1: entered promiscuous mode [ 1617.197860][T17214] macvtap1: entered allmulticast mode [ 1617.197881][T17214] veth1_vlan: entered allmulticast mode [ 1618.299317][T17260] xfrm1: entered promiscuous mode [ 1618.299345][T17260] xfrm1: entered allmulticast mode [ 1618.602203][T17274] net_ratelimit: 1023 callbacks suppressed [ 1618.602226][T17274] netlink: NAT attribute has 4 unknown bytes [ 1618.602254][T17274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1619.044126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.044533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.045317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.045745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.123912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.123937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.166564][T17286] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1619.204195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1619.712313][T17296] netlink: 'syz.4.10780': attribute type 2 has an invalid length. [ 1620.735012][ T53] block nbd8: Receive control failed (result -107) [ 1621.022909][T17346] can: request_module (can-proto-0) failed. [ 1621.170813][T17346] can: request_module (can-proto-0) failed. [ 1621.343652][T17346] can: request_module (can-proto-0) failed. [ 1621.459803][T17346] can: request_module (can-proto-0) failed. [ 1621.587518][T17346] can: request_module (can-proto-0) failed. [ 1621.618625][T17346] can: request_module (can-proto-0) failed. [ 1622.095988][T17376] team0: Device gtp2 is up. Set it down before adding it as a team port [ 1622.149950][T17384] pim6reg1: entered promiscuous mode [ 1622.150154][T17384] pim6reg1: entered allmulticast mode [ 1622.225357][T17375] __nla_validate_parse: 61 callbacks suppressed [ 1622.225381][T17375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10803'. [ 1622.250589][T17376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10805'. [ 1622.250629][T17376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10805'. [ 1622.427103][T17393] Bluetooth: hci0: unsupported parameter 5161 [ 1622.427130][T17393] Bluetooth: hci0: unsupported parameter 8192 [ 1622.427146][T17393] Bluetooth: hci0: unsupported parameter 5161 [ 1622.427162][T17393] Bluetooth: hci0: unsupported parameter 8192 [ 1623.300441][T17419] netlink: 'syz.4.10816': attribute type 3 has an invalid length. [ 1623.915408][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10820'. [ 1624.084013][ C0] net_ratelimit: 10 callbacks suppressed [ 1624.084040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.084761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.085400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.085841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.086165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.163825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.163888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.244203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.244842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.245758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.716075][T17454] netlink: 'syz.2.10826': attribute type 49 has an invalid length. [ 1624.716378][T17453] netlink: 'syz.2.10826': attribute type 49 has an invalid length. [ 1625.154817][T17466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10830'. [ 1625.248413][T17468] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1625.459412][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10833'. [ 1625.969056][T17485] ipt_ECN: cannot use operation on non-tcp rule [ 1626.676241][T17507] netlink: 'syz.0.10846': attribute type 1 has an invalid length. [ 1626.676266][T17507] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10846'. [ 1626.676283][T17507] netlink: 'syz.0.10846': attribute type 1 has an invalid length. [ 1626.677679][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10846'. [ 1626.755758][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10847'. [ 1627.229898][T17530] netlink: 'syz.1.10852': attribute type 8 has an invalid length. [ 1627.292409][T17530] netlink: 'syz.1.10852': attribute type 8 has an invalid length. [ 1627.408587][T17541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10854'. [ 1627.727639][T17549] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10856'. [ 1627.733106][T17551] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10856'. [ 1627.760003][T17549] gretap0: entered promiscuous mode [ 1627.801559][T17551] 0ªî{X¹¦: renamed from gretap0 [ 1627.829646][T17552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1627.871621][T14081] Bluetooth: hci1: unexpected event 0x0e length: 257 > 255 [ 1627.871664][T14081] Bluetooth: hci1: unexpected event for opcode 0x1924 [ 1627.898104][T17551] 0ªî{X¹¦: left promiscuous mode [ 1627.898130][T17551] 0ªî{X¹¦: entered allmulticast mode [ 1628.533352][T17572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10862'. [ 1628.946473][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10864'. [ 1628.964385][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10864'. [ 1629.124188][ C0] net_ratelimit: 8 callbacks suppressed [ 1629.124214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.124634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.125733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.126281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.203855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.203917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.284431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.286612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.287718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.287939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.541591][T17642] Bluetooth: hci0: unsupported parameter 5134 [ 1630.541618][T17642] Bluetooth: hci0: unsupported parameter 8192 [ 1630.541634][T17642] Bluetooth: hci0: unsupported parameter 5134 [ 1630.541665][T17642] Bluetooth: hci0: unsupported parameter 8192 [ 1630.745508][T17650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10880'. [ 1630.911353][T17658] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10882'. [ 1631.444998][ T53] Bluetooth: hci0: command 0x0c13 tx timeout [ 1631.544963][T17675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10888'. [ 1632.219609][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10893'. [ 1632.677527][T17699] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1632.865770][T17707] Bluetooth: hci0: unsupported parameter 5134 [ 1632.868289][T17707] Bluetooth: hci0: unsupported parameter 8192 [ 1632.868329][T17707] Bluetooth: hci0: unsupported parameter 5134 [ 1632.868385][T17707] Bluetooth: hci0: unsupported parameter 8192 [ 1632.918487][T17699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10896'. [ 1633.255198][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10900'. [ 1634.164569][ C0] net_ratelimit: 7 callbacks suppressed [ 1634.164627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.165381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.166078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.169685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.245087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.245935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.324443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.324627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.327473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.328050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.398104][T17725] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10902'. [ 1634.548339][T17725] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10902'. [ 1634.582575][T17727] lo: entered allmulticast mode [ 1634.600070][ T53] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1634.600135][ T53] Bluetooth: unknown link type 48 [ 1634.600260][ T53] Bluetooth: hci3: connection err: -111 [ 1634.628302][T17726] lo: left allmulticast mode [ 1636.696066][T17754] xt_hashlimit: size too large, truncated to 1048576 [ 1636.696131][T17754] xt_hashlimit: max too large, truncated to 1048576 [ 1636.696166][T17754] xt_hashlimit: overflow, rate too high: 0 [ 1637.184728][T14081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1637.199893][T14081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1637.213053][T14081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1637.248256][T14081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1637.261773][T14081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1637.320504][T17764] netlink: 'syz.0.10916': attribute type 1 has an invalid length. [ 1639.204045][ C0] net_ratelimit: 9 callbacks suppressed [ 1639.204103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.206828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.207189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.213445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.214154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.283784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.283891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.364682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.365602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.366123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.368477][ T53] Bluetooth: hci4: command tx timeout [ 1639.748116][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10927'. [ 1640.607540][T17806] bond5: option xmit_hash_policy: invalid value (64) [ 1640.770402][T17806] bond5 (unregistering): Released all slaves [ 1641.445970][ T53] Bluetooth: hci4: command tx timeout [ 1642.008836][T17830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10933'. [ 1642.299009][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10935'. [ 1643.323504][ T723] veth0: left allmulticast mode [ 1643.326020][ T723] veth0: left promiscuous mode [ 1643.326637][ T723] bridge0: port 1(veth0) entered disabled state [ 1643.503235][ T723] dvmrp0: left allmulticast mode [ 1643.524142][ T723] batman_adv: batadv0: Interface deactivated: gretap0 [ 1643.524571][ T53] Bluetooth: hci4: command tx timeout [ 1643.718170][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10943'. [ 1644.244769][ C0] net_ratelimit: 7 callbacks suppressed [ 1644.244828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.245611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.246411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.247391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.323780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.324270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.404514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.406524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.407009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.414394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.021689][ T723] team0: Port device xfrm0 removed [ 1645.336349][ T723] batman_adv: batadv0: Removing interface: gretap0 [ 1645.421428][ T723] bond14 (unregistering): (slave geneve2): Releasing active interface [ 1645.588917][ T723] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1645.609036][ T53] Bluetooth: hci4: command tx timeout [ 1645.629270][ T723] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1645.654092][ T723] bond6 (unregistering): (slave bridge4): Releasing active interface [ 1645.710824][ T723] bond0 (unregistering): (slave bond7): Releasing backup interface [ 1645.713114][ T723] bond0 (unregistering): Released all slaves [ 1645.753123][ T723] bond1 (unregistering): Released all slaves [ 1645.879841][ T723] bond2 (unregistering): Released all slaves [ 1645.910156][ T723] bond3 (unregistering): Released all slaves [ 1646.024685][ T723] bond4 (unregistering): Released all slaves [ 1646.107878][ T723] bond5 (unregistering): Released all slaves [ 1646.170699][ T723] bond6 (unregistering): Released all slaves [ 1646.215576][ T723] bond7 (unregistering): Released all slaves [ 1646.278210][ T723] bond8 (unregistering): Released all slaves [ 1646.382808][ T723] bond9 (unregistering): Released all slaves [ 1646.518803][ T723] bond10 (unregistering): Released all slaves [ 1646.591652][ T723] bond11 (unregistering): Released all slaves [ 1646.681506][ T723] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1646.704445][ T723] bond12 (unregistering): Released all slaves [ 1646.782821][ T723] bond13 (unregistering): Released all slaves [ 1646.808728][ T723] bond14 (unregistering): Released all slaves [ 1647.031934][ T723] bond15 (unregistering): Released all slaves [ 1647.229957][ T1706] tipc: Resetting bearer [ 1647.711708][ T723] ovs-s: left promiscuous mode [ 1647.909093][ T723] tipc: Disabling bearer [ 1647.957065][ T723] tipc: Left network mode [ 1648.170259][T17759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.170728][T17759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.171078][T17759] bridge_slave_0: entered allmulticast mode [ 1648.181435][T17759] bridge_slave_0: entered promiscuous mode [ 1648.198673][T17759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.199827][T17759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.200749][T17759] bridge_slave_1: entered allmulticast mode [ 1648.222408][T17759] bridge_slave_1: entered promiscuous mode [ 1648.444319][T17894] tipc: Started in network mode [ 1648.444354][T17894] tipc: Node identity ac14140f, cluster identity 4711 [ 1648.454303][T17894] tipc: New replicast peer: 255.255.255.255 [ 1648.471483][T17894] tipc: Enabled bearer , priority 10 [ 1648.840450][T17909] netlink: 'syz.2.10950': attribute type 24 has an invalid length. [ 1648.963473][T17759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.973103][T17903] tipc: Enabling of bearer rejected, already enabled [ 1649.284273][ C0] net_ratelimit: 11 callbacks suppressed [ 1649.284335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.284970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.286701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.287746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.364127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.393778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.431831][T17915] netlink: 872 bytes leftover after parsing attributes in process `syz.4.10951'. [ 1649.449000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.449460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.449711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.455674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.521340][T17759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.736217][T17923] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10953'. [ 1650.056491][ T7358] tipc: Node number set to 2886997007 [ 1650.313414][T17759] team0: Port device team_slave_0 added [ 1650.402447][T17759] team0: Port device team_slave_1 added [ 1650.976503][T17759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1650.976525][T17759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1650.976557][T17759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1650.995771][T17928] digital: digital_start_poll: Unknown protocol [ 1651.054887][T17759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.054906][T17759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.054937][T17759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.136145][T17934] netlink: 'syz.1.10956': attribute type 1 has an invalid length. [ 1651.136174][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10956'. [ 1651.136191][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10956'. [ 1652.107069][T17759] hsr_slave_0: entered promiscuous mode [ 1652.111582][T17759] hsr_slave_1: entered promiscuous mode [ 1652.138620][T17759] debugfs: 'hsr0' already exists in 'hsr' [ 1652.138685][T17759] Cannot create hsr debugfs directory [ 1654.268823][T17984] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10969'. [ 1654.324838][ C0] net_ratelimit: 7 callbacks suppressed [ 1654.324899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.325461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.327645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.328735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.403690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.403909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.483863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.484642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.485213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.485728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.327844][T17995] bond5: entered promiscuous mode [ 1655.430995][T17995] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10973'. [ 1655.768729][ T723] hsr_slave_0: left promiscuous mode [ 1655.840623][ T723] veth1_macvtap: left promiscuous mode [ 1655.840667][ T723] veth0_macvtap: left promiscuous mode [ 1656.049409][T18005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10976'. [ 1659.379651][ C0] net_ratelimit: 6 callbacks suppressed [ 1659.379678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.379922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.381574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.381984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.382296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.463018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.464130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.532069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.532437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.532673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.539264][T14081] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1663.542598][T14081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1663.559322][T14081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1663.561651][T14081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1663.562359][T14081] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1664.421073][ C0] net_ratelimit: 7 callbacks suppressed [ 1664.421103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.421336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.422224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.422692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.494835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.498980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.582448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.583541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.583741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.584325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.980688][T17759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1665.058607][T17759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1665.077445][T17759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1665.117543][T17759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1665.119990][T17759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1665.163608][T17759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1665.166026][T17759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1665.208750][T17759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1665.691344][ T53] Bluetooth: hci6: command tx timeout [ 1666.110723][T18036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10982'. [ 1666.211293][T18035] team0: No ports can be present during mode change [ 1666.701248][ T723] IPVS: stop unused estimator thread 0... [ 1666.751264][T17759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.180301][T17759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.296136][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.296261][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.314438][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.314552][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1667.545121][T18051] netlink: 'syz.4.10984': attribute type 83 has an invalid length. [ 1667.763722][ T53] Bluetooth: hci6: command tx timeout [ 1668.082791][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1668.117199][T18054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1669.444851][ C0] net_ratelimit: 8 callbacks suppressed [ 1669.444898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.445397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.446101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.451582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.454077][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10990'. [ 1669.456277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.524504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.534028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.604150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.605338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.605964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.706996][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10992'. [ 1669.709711][T18084] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10992'. [ 1669.851701][ T53] Bluetooth: hci6: command tx timeout [ 1670.296997][T18008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.312948][T18008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.313479][T18008] bridge_slave_0: entered allmulticast mode [ 1670.341927][T18008] bridge_slave_0: entered promiscuous mode [ 1670.364310][T18008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.364625][T18008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.365025][T18008] bridge_slave_1: entered allmulticast mode [ 1670.369707][T18008] bridge_slave_1: entered promiscuous mode [ 1670.704253][T18098] wireguard: wg2: Could not create IPv4 socket [ 1670.729385][T18008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.746526][T18099] : renamed from bond_slave_0 (while UP) [ 1670.815985][T18008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1670.892502][T18008] team0: Port device team_slave_0 added [ 1670.895583][T18008] team0: Port device team_slave_1 added [ 1671.056881][T18008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.056939][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.057003][T18008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.062344][T18008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.062381][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.062444][T18008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.432673][T18008] hsr_slave_0: entered promiscuous mode [ 1671.455669][T18008] hsr_slave_1: entered promiscuous mode [ 1671.462595][T18008] debugfs: 'hsr0' already exists in 'hsr' [ 1671.462657][T18008] Cannot create hsr debugfs directory [ 1671.924667][ T53] Bluetooth: hci6: command tx timeout [ 1672.279477][T18127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11003'. [ 1672.542565][T17759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1672.952299][T18135] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11005'. [ 1673.205990][T18142] netlink: 'syz.1.11007': attribute type 20 has an invalid length. [ 1673.206054][T18142] IPv6: NLM_F_CREATE should be specified when creating new route [ 1673.533126][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11009'. [ 1674.118219][T18148] bond6: Invalid ad_actor_system MAC address. [ 1674.118284][T18148] bond6: option ad_actor_system: invalid value (1) [ 1674.230623][T18148] bond6 (unregistering): Released all slaves [ 1674.485964][ C0] net_ratelimit: 7 callbacks suppressed [ 1674.486011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.486799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.487884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.488872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.563960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.564248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.644103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.646028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.646583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.654625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.474727][T18168] bond5 (unregistering): Released all slaves [ 1675.653908][T18008] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1675.685293][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1675.688964][T18008] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1675.782032][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1675.888537][T18008] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1675.978779][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1676.003097][T18008] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1676.064431][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1676.578391][T18198] netlink: 'syz.4.11017': attribute type 4 has an invalid length. [ 1676.578456][T18198] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11017'. [ 1676.709071][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11017'. [ 1677.173240][T18203] netlink: 'syz.2.11018': attribute type 11 has an invalid length. [ 1677.173305][T18203] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11018'. [ 1679.531164][ C0] net_ratelimit: 7 callbacks suppressed [ 1679.531188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.531529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.604202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.604998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.690324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.771981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.772370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.849436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.072749][T17759] veth0_vlan: entered promiscuous mode [ 1684.564618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.565076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.566018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.567041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.644338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.653774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.725671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.727680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.728326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.734565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.875556][T18225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11022'. [ 1685.030325][T17759] veth1_vlan: entered promiscuous mode [ 1685.294383][T18221] macvlan1: entered promiscuous mode [ 1685.294443][T18221] macvlan1: entered allmulticast mode [ 1686.223475][T18229] sctp: [Deprecated]: syz.1.11023 (pid 18229) Use of int in maxseg socket option. [ 1686.223475][T18229] Use struct sctp_assoc_value instead [ 1686.380669][T17759] veth0_macvtap: entered promiscuous mode [ 1686.471455][T17759] veth1_macvtap: entered promiscuous mode [ 1686.989127][T18008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.162085][T17759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.480897][T17759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1687.591717][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11027'. [ 1687.752898][T18008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.869038][T14189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.869155][T14189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.033500][ T7507] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.037506][ T2224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.039426][ T6628] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.039476][ T6628] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.343982][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.344186][ T7507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1688.731155][T18262] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11030'. [ 1689.613988][ C0] net_ratelimit: 7 callbacks suppressed [ 1689.614044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.614776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.616872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.617982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.684120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.684157][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.764502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.765549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.765645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.766070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.943423][T18276] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11032'. [ 1690.636106][ T1711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.636133][ T1711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1692.769401][ T2225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.769425][ T2225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.965678][ T5281] veth1_vlan: left promiscuous mode [ 1694.644460][ C0] net_ratelimit: 6 callbacks suppressed [ 1694.644504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.648178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.649665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.650669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.651361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.723943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.742336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.804098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.805544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.806027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.288541][T18309] tipc: Started in network mode [ 1695.288576][T18309] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1695.408010][T18302] netlink: 'syz.4.11035': attribute type 4 has an invalid length. [ 1695.661176][T18309] tipc: Enabled bearer , priority 10 [ 1695.771967][T18308] netlink: 'syz.4.11035': attribute type 4 has an invalid length. [ 1696.485007][ T53] Bluetooth: hci0: command 0x0c13 tx timeout [ 1696.579295][ T7357] tipc: Node number set to 4269801488 [ 1699.683863][ C0] net_ratelimit: 8 callbacks suppressed [ 1699.683924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.684346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.684869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.686379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.687896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.763695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.763848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.844734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.845076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.846362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.036165][T18330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11040'. [ 1702.943483][T18008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.686676][T18358] lo speed is unknown, defaulting to 1000 [ 1704.720017][T18358] lo speed is unknown, defaulting to 1000 [ 1704.721071][T18358] lo speed is unknown, defaulting to 1000 [ 1704.729561][ C0] net_ratelimit: 8 callbacks suppressed [ 1704.729602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.730182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.730904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.731849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.804507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.804674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.884066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.884424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.885578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.886038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.051256][T18367] IPVS: set_ctl: invalid protocol: 41 100.1.1.2:20001 [ 1705.461617][T18369] batman_adv: batadv0: Adding interface: syzkaller0 [ 1705.461639][T18369] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.487542][T18369] batman_adv: batadv0: Interface activated: syzkaller0 [ 1705.853279][T18361] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1707.401575][T18361] batman_adv: batadv0: Removing interface: syzkaller0 [ 1708.335642][T18376] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1708.336085][T18376] gretap1: entered promiscuous mode [ 1708.336294][T18376] gretap1: entered allmulticast mode [ 1709.766780][ C0] net_ratelimit: 6 callbacks suppressed [ 1709.766835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.767336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.769407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.770326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.843703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.844500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.923986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.924405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.925059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.925509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.231095][ T7357] lo speed is unknown, defaulting to 1000 [ 1711.654012][T18358] infiniband syz0: set active [ 1711.654406][T18358] infiniband syz0: added lo [ 1713.168672][T18358] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1713.168719][T18358] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1713.168766][T18358] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1713.364348][T18396] syzkaller1: entered promiscuous mode [ 1713.364572][T18396] syzkaller1: entered allmulticast mode [ 1713.590477][T18358] RDS/IB: syz0: added [ 1713.590545][T18358] smc: adding ib device syz0 with port count 1 [ 1713.590567][T18358] smc: ib device syz0 port 1 has no pnetid [ 1713.745897][ T7357] lo speed is unknown, defaulting to 1000 [ 1713.867338][T18358] lo speed is unknown, defaulting to 1000 [ 1714.665127][T18008] veth0_vlan: entered promiscuous mode [ 1714.804222][ C0] net_ratelimit: 7 callbacks suppressed [ 1714.804268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.804845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.805566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.806777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.867526][T18008] veth1_vlan: entered promiscuous mode [ 1714.886244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.887108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.963964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.964117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.964803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.965050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.616172][T18008] veth0_macvtap: entered promiscuous mode [ 1715.941700][T18008] veth1_macvtap: entered promiscuous mode [ 1716.923521][T18008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.565464][T18008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1719.175283][T18358] lo speed is unknown, defaulting to 1000 [ 1719.843933][ C0] net_ratelimit: 6 callbacks suppressed [ 1719.843989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.844426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.845872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.846879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.923712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.924208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.004956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.010008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.011571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.012030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.417572][T18439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11059'. [ 1721.065459][ T6628] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.107330][ T1710] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.126240][ T2226] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.127214][ T2226] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.825820][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1723.923052][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1723.969677][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1724.153540][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1724.342322][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1724.884365][ C0] net_ratelimit: 6 callbacks suppressed [ 1724.884414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.884910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.885701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.886843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.963711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.963758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.043942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.045413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.045878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.054539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.224022][T18358] lo speed is unknown, defaulting to 1000 [ 1726.644869][ T53] Bluetooth: hci7: command tx timeout [ 1728.301497][T18475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.724099][ T53] Bluetooth: hci7: command tx timeout [ 1728.788529][T14081] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1728.800315][T14081] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1728.836179][T14081] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1728.882484][T14081] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1728.906037][T14081] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1729.923905][ C0] net_ratelimit: 6 callbacks suppressed [ 1729.923963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.924457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.925176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.929768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.931534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.932255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.003688][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11066'. [ 1730.007161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.015387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.084208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.084701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.851334][ T53] Bluetooth: hci7: command tx timeout [ 1731.216471][ T53] Bluetooth: hci8: command tx timeout [ 1732.919606][ T53] Bluetooth: hci7: command tx timeout [ 1733.284822][ T53] Bluetooth: hci8: command tx timeout [ 1734.550458][T18505] netlink: 'syz.1.11070': attribute type 8 has an invalid length. [ 1734.666256][T18505] netlink: 'syz.1.11070': attribute type 3 has an invalid length. [ 1734.666294][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1734.827384][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1734.854947][T18510] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11069'. [ 1734.964039][ C0] net_ratelimit: 8 callbacks suppressed [ 1734.964089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.964552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.965185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.966203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.043684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.043731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.123817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.124004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.125253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.125681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.408716][ T53] Bluetooth: hci8: command tx timeout [ 1735.503147][T18510] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11069'. [ 1735.525684][T18522] netlink: 'syz.5.11071': attribute type 1 has an invalid length. [ 1736.336806][T18532] netlink: 'syz.5.11071': attribute type 1 has an invalid length. [ 1736.427592][T18517] syz_tun: entered allmulticast mode [ 1736.428333][T18358] lo speed is unknown, defaulting to 1000 [ 1737.043141][T18524] syz_tun: left allmulticast mode [ 1737.444138][ T53] Bluetooth: hci8: command tx timeout [ 1740.004067][ C0] net_ratelimit: 6 callbacks suppressed [ 1740.004106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.004495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.006064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.006988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.086089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.086124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.164369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.165163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.165720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.182721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.671112][ T2225] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.721539][T18559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11075'. [ 1744.717299][ T2225] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.044007][ C0] net_ratelimit: 7 callbacks suppressed [ 1745.044061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.044487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.045225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.048689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.123652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.123756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.204376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.204544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.206997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.207455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.279916][T18358] lo speed is unknown, defaulting to 1000 [ 1746.489647][ T2225] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.730920][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11080'. [ 1750.085318][ C0] net_ratelimit: 6 callbacks suppressed [ 1750.085374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.085812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.087571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.088527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.168913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.174457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.244209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.244569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.244833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.245360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.893200][ T2225] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.676787][T18457] lo speed is unknown, defaulting to 1000 [ 1755.124266][ C0] net_ratelimit: 6 callbacks suppressed [ 1755.124326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.124731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.125610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.126561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.204065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.214198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.284862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.287121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.287588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.295577][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.057766][T18639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11084'. [ 1756.305443][T18643] xt_hashlimit: size too large, truncated to 1048576 [ 1756.390983][T18644] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.11085'. [ 1756.655586][T18642] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11084'. [ 1756.912145][T18644] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1757.533004][T18644] 0ªX¹¦Dö»: entered allmulticast mode [ 1757.865183][ T2222] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.934204][ T1710] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.561344][ T2227] netdevsim netdevsim6 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.565133][ T7515] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.164348][ C0] net_ratelimit: 6 callbacks suppressed [ 1760.164396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.165150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.165937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.167702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.169647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.229298][ T2225] bridge_slave_1: left allmulticast mode [ 1760.229704][ T2225] bridge_slave_1: left promiscuous mode [ 1760.230717][ T2225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.252243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.254497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.325198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.326710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.327266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.735845][ T2225] bridge_slave_0: left allmulticast mode [ 1760.736263][ T2225] bridge_slave_0: left promiscuous mode [ 1760.810448][ T2225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.063330][T14081] Bluetooth: hci4: command 0x0406 tx timeout [ 1765.204217][ C0] net_ratelimit: 7 callbacks suppressed [ 1765.204264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.207852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.208333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.208859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.209218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.286250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.293966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.364484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.364700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.365912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.093812][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1766.997401][ T2225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1767.001154][ T2225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1767.023966][ T2225] bond0 (unregistering): Released all slaves [ 1767.039476][T18483] lo speed is unknown, defaulting to 1000 [ 1769.054865][T18681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11093'. [ 1770.244468][ C0] net_ratelimit: 7 callbacks suppressed [ 1770.244525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.244986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.246437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.247377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.329043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.334107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.404639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.405758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.406211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.430965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.908128][T18695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1773.384225][T18705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1773.384250][T18705] IPv6: NLM_F_CREATE should be set when creating new route [ 1774.287600][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11098'. [ 1774.312786][T18358] lo speed is unknown, defaulting to 1000 [ 1775.284796][ C0] net_ratelimit: 6 callbacks suppressed [ 1775.284854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.285414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.286308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.287414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.363692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.364090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.445235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.450931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.451429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.462290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.729068][T18720] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11100'. [ 1777.729103][T18720] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11100'. [ 1777.729123][T18720] netlink: 'syz.1.11100': attribute type 6 has an invalid length. [ 1777.729140][T18720] netlink: 'syz.1.11100': attribute type 5 has an invalid length. [ 1777.729154][T18720] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11100'. [ 1780.323813][ C0] net_ratelimit: 6 callbacks suppressed [ 1780.323853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.324309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.325616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.326533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.404060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.406386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.484550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.485163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.485695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.502760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.821429][T18457] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1784.535438][T18358] lo speed is unknown, defaulting to 1000 [ 1785.364143][ C0] net_ratelimit: 7 callbacks suppressed [ 1785.364199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.364693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.365387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.366434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.443867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.453805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.523798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.525401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.525892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.534610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.197096][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11107'. [ 1789.795655][T14081] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1789.975162][T14081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1790.042732][T14081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1790.229186][T14081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1790.255464][T14081] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1790.404108][ C0] net_ratelimit: 6 callbacks suppressed [ 1790.404149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.404673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.405357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.407489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.409233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.488725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.494216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.564226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.564838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.565276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.678674][T18763] bond0: (slave ip6tnl0): refused to change device type [ 1791.288700][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1791.440402][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1791.462941][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1791.504043][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1791.578745][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1792.644320][T14081] Bluetooth: hci6: command tx timeout [ 1793.803341][T14081] Bluetooth: hci9: command tx timeout [ 1794.026708][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1794.736905][T14081] Bluetooth: hci6: command tx timeout [ 1795.444111][ C0] net_ratelimit: 7 callbacks suppressed [ 1795.444150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.444604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.445425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.446338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.524195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.524227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.610491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.611577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.611782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.616993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.844449][T14081] Bluetooth: hci9: command tx timeout [ 1795.958347][T18790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.049753][T18790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.830237][T14081] Bluetooth: hci6: command tx timeout [ 1797.929469][T14081] Bluetooth: hci9: command tx timeout [ 1798.892869][T14081] Bluetooth: hci6: command tx timeout [ 1800.008733][T14081] Bluetooth: hci9: command tx timeout [ 1800.024753][ T32] INFO: task syz.0.10949:17907 blocked for more than 143 seconds. [ 1800.025151][ T32] Not tainted syzkaller #0 [ 1800.025501][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1800.025513][ T32] task:syz.0.10949 state:D stack:27552 pid:17907 tgid:17895 ppid:10273 task_flags:0x400140 flags:0x00080002 [ 1800.027049][ T32] Call Trace: [ 1800.027408][ T32] [ 1800.027769][ T32] __schedule+0x17db/0x58f0 [ 1800.028951][ T32] ? __pfx___schedule+0x10/0x10 [ 1800.029732][ T32] ? schedule+0x90/0x2b0 [ 1800.030135][ T32] schedule+0x164/0x2b0 [ 1800.030526][ T32] schedule_preempt_disabled+0x13/0x30 [ 1800.031304][ T32] __mutex_lock+0x7c1/0x1550 [ 1800.032167][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1800.032559][ T32] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1800.032949][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1800.038919][ T32] ? rcu_is_watching+0x16/0xb0 [ 1800.039050][ T32] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1800.039136][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1800.039217][ T32] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1800.039295][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1800.039387][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1800.039511][ T32] genl_family_rcv_msg_doit+0x233/0x340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1800.039614][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1800.039744][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1800.039806][ T32] ? security_capable+0x7e/0x2c0 [ 1800.039900][ T32] genl_rcv_msg+0x614/0x7a0 [ 1800.039994][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1800.040069][ T32] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1800.040184][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1800.040255][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1800.040336][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1800.040442][ T32] ? down_read+0x2be/0x330 [ 1800.040545][ T32] genl_rcv+0x28/0x40 [ 1800.04062 ** replaying previous printk message ** [ 1800.040622][ T32] netlink_unicast+0x7bd/0x940 [ 1800.040739][ T32] netlink_sendmsg+0x813/0xb40 [ 1800.040845][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1800.040931][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1800.041013][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1800.041076][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1800.041150][ T32] sock_write_iter+0x2de/0x3e0 [ 1800.041222][ T32] ? __pfx_sock_write_iter+0x10/0x10 [ 1800.041310][ T32] ? bpf_lsm_file_permission+0x9/0x20 [ 1800.041393][ T32] ? security_file_permission+0x75/0x260 [ 1800.041485][ T32] vfs_write+0x612/0xba0 [ 1800.041539][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1800.041572][ T32] ? __fget_files+0x2a/0x420 [ 1800.041639][ T32] ksys_write+0x150/0x270 [ 1800.041718][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1800.079998][ T32] do_syscall_64+0x166/0x520 [ 1800.080121][ T32] ? trace_irq_disable+0x3b/0x140 [ 1800.080191][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.080254][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1800.080322][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.080385][ T32] RIP: 0033:0x7f374739e159 [ 1800.080439][ T32] RSP: 002b:00007f37455d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1800.080502][ T32] RAX: ffffffffffffffda RBX: 00007f3747626180 RCX: 00007f374739e159 [ 1800.080552][ T32] RDX: 000000000000002c RSI: 0000200000000000 RDI: 0000000000000003 [ 1800.080594][ T32] RBP: 00007f374743506b R08: 0000000000000000 R09: 0000000000000000 [ 1800.080635][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1800.080669][ T32] R13: 00007f3747626218 R14: 00007f3747626180 R15: 00007ffe8da25478 [ 1800.080785][ T32] [ 1800.080898][ T32] [ 1800.080898][ T32] Showing all locks held in the system: [ 1800.080929][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 1800.080971][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1800.081133][ T32] #1: ffffffff9ad442d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1800.081322][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1800.081363][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1800.081519][ T32] locks held by kworker/u8:6/723: 3, on CPU#1: [ 1800.081561][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1800.081727][ T32] #1: ffffc90003e8fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1800.081883][ T32] #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1800.082071][ T32] locks held by dhcpcd/5281: 2, on CPU#1: [ 1800.082119][ T32] #0: ffff888021e9b6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 1800.082291][ T32] #1: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14a0 [ 1800.082449][ T32] locks held by getty/5375: 2, on CPU#1: [ 1800.082490][ T32] #0: ffff8880366130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1800.082633][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1800.082810][ T32] locks held by kworker/0:37/26522: 3, last CPU#0: [ 1800.082852][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1800.083009][ T32] #1: ffffc900057bfc40 ((work_completion)(&w->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1800.083178][ T32] #2: ffffffff902d4fe0 (nf_conntrack_mutex){+.+.}-{4:4}, at: nf_ct_iterate_cleanup+0x3f/0x500 [ 1800.083347][ T32] locks held by kworker/u8:1/1706: 3, on CPU#1: [ 1800.083389][ T32] #0: ffff88801d76a940 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1800.083552][ T32] #1: ffffc90005537c40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1800.083718][ T32] #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xde/0x630 [ 1800.083874][ T32] locks held by kworker/u8:16/2225: 4, on CPU#0: [ 1800.083908][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1800.084071][ T32] #1: ffffc90003f1fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1800.084152][ T32] #2: ffffffff90246408 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1800.084221][ T32] #3: ffffffff8ffa1b68 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8b/0x430 [ 1800.084419][ T32] locks held by syz.3.10788/17318: 2, on CPU#1: [ 1800.084463][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1800.084613][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1800.084771][ T32] locks held by syz-executor/17759: 2, last CPU#0: [ 1800.084821][ T32] #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1800.084967][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1800.085114][ T32] locks held by syz.0.10949/17907: 2, on CPU#1: [ 1800.085155][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1800.085304][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1800.085460][ T32] locks held by syz.2.11046/18358: 7, on CPU#1: [ 1800.085502][ T32] #0: ffffffff9ad92c88 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 1800.085667][ T32] #1: ffffffff8ffb0888 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650 [ 1800.085850][ T32] #2: ffffffff8ffa19a8 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 1800.085993][ T32] #3: ffffffff8ffa1b68 (rdma_nets_rwsem){++++}-{4:4}, at: enable_device_and_get+0x27c/0x3e0 [ 1800.086121][ T32] #4: ffff88807ce79020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 1800.086275][ T32] #5: ffff88807ce79310 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 1800.086405][ T32] #6: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x8e0 [ 1800.086541][ T32] locks held by syz-executor/18769: 1, on CPU#0: [ 1800.086588][ T32] #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1800.086783][ T32] locks held by syz-executor/18775: 1, on CPU#1: [ 1800.086824][ T32] #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1800.086983][ T32] locks held by syz.4.11112/18800: 2, last CPU#0: [ 1800.087026][ T32] #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1800.136285][T18358] lo speed is unknown, defaulting to 1000 [ 1800.219053][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1800.219257][ T32] locks held by syz.1.11114/18807: 2, on CPU#0: [ 1800.219294][ T32] #0: ffff888069499380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1800.219492][ T32] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1800.219672][ T32] locks held by syz.1.11114/18810: 1, on CPU#0: [ 1800.219707][ T32] #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1800.219916][ T32] [ 1800.219930][ T32] ============================================= [ 1800.219930][ T32] [ 1800.219979][ T32] NMI backtrace for cpu 0 [ 1800.220021][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1800.220084][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1800.220125][ T32] Call Trace: [ 1800.220148][ T32] [ 1800.220171][ T32] dump_stack_lvl+0xe8/0x150 [ 1800.220267][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1800.220346][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1800.220444][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1800.220525][ T32] sys_info+0x135/0x170 [ 1800.220581][ T32] watchdog+0xfd7/0x1030 [ 1800.220666][ T32] ? watchdog+0x1c7/0x1030 [ 1800.220767][ T32] kthread+0x38b/0x480 [ 1800.220837][ T32] ? __pfx_watchdog+0x10/0x10 [ 1800.220898][ T32] ? __pfx_kthread+0x10/0x10 [ 1800.220962][ T32] ret_from_fork+0x514/0xb70 [ 1800.221025][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1800.221086][ T32] ? __switch_to+0xc89/0x1420 [ 1800.221173][ T32] ? __pfx_kthread+0x10/0x10 [ 1800.221237][ T32] ret_from_fork_asm+0x1a/0x30 [ 1800.221361][ T32] [ 1800.221390][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1800.221457][ C1] NMI backtrace for cpu 1 [ 1800.221471][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1800.221492][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1800.221504][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1800.221532][ C1] Code: e8 7e 83 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 7f 76 06 cc 44 89 f9 80 e1 07 [ 1800.221549][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1800.221566][ C1] RAX: 1ffffffff35a8800 RBX: 00000000000003fd RCX: 0000000000000000 [ 1800.221579][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1800.221592][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1800.221604][ C1] R10: dffffc0000000000 R11: ffffffff85736a40 R12: dffffc0000000000 [ 1800.221619][ C1] R13: 0000000000000000 R14: ffffffff9ad44300 R15: 0000000000000000 [ 1800.221633][ C1] FS: 0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 [ 1800.221649][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1800.221663][ C1] CR2: 000020000000f000 CR3: 000000007468c000 CR4: 00000000003526f0 [ 1800.221681][ C1] Call Trace: [ 1800.221688][ C1] [ 1800.221698][ C1] wait_for_lsr+0x184/0x2f0 [ 1800.221724][ C1] __serial8250_console_fifo_write+0x346/0x3e0 [ 1800.221759][ C1] serial8250_console_write+0xaa1/0x1200 [ 1800.221790][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1800.221811][ C1] ? __schedule+0x17f1/0x58f0 [ 1800.221846][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1800.221878][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1800.221904][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1800.221936][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1800.221963][ C1] nbcon_kthread_func+0x679/0x880 [ 1800.221988][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1800.222009][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1800.222035][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1800.222063][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1800.222094][ C1] kthread+0x38b/0x480 [ 1800.222113][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1800.222133][ C1] ? __pfx_kthread+0x10/0x10 [ 1800.222152][ C1] ret_from_fork+0x514/0xb70 [ 1800.222172][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1800.222190][ C1] ? __switch_to+0xc89/0x1420 [ 1800.222234][ C1] ? __pfx_kthread+0x10/0x10 [ 1800.222254][ C1] ret_from_fork_asm+0x1a/0x30 [ 1800.222331][ C1] [ 1800.222482][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1801.271259][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1801.280394][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1801.290476][ T32] Call Trace: [ 1801.293867][ T32] [ 1801.296818][ T32] vpanic+0x56d/0xa60 [ 1801.300834][ T32] ? __pfx_vpanic+0x10/0x10 [ 1801.305366][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 1801.310938][ T32] panic+0xc5/0xd0 [ 1801.314685][ T32] ? __pfx_panic+0x10/0x10 [ 1801.319129][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 1801.324186][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1801.330377][ T32] watchdog+0x1030/0x1030 [ 1801.334733][ T32] ? watchdog+0x1c7/0x1030 [ 1801.339188][ T32] kthread+0x38b/0x480 [ 1801.343279][ T32] ? __pfx_watchdog+0x10/0x10 [ 1801.347977][ T32] ? __pfx_kthread+0x10/0x10 [ 1801.352589][ T32] ret_from_fork+0x514/0xb70 [ 1801.357199][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1801.362358][ T32] ? __switch_to+0xc89/0x1420 [ 1801.367078][ T32] ? __pfx_kthread+0x10/0x10 [ 1801.371692][ T32] ret_from_fork_asm+0x1a/0x30 [ 1801.376507][ T32] [ 1801.380157][ T32] Kernel Offset: disabled [ 1801.384494][ T32] Rebooting in 86400 seconds..