last executing test programs: 2.729404517s ago: executing program 0 (id=11025): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "2d803cbaa5aae486", "903bb7657ea639d98874edaba18d7c9e", "cd980586", "2c1b832fa08d85bc"}, 0x1) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) (async) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r6}, 0x20) (async) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r4, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (rerun: 64) 2.420995228s ago: executing program 0 (id=11029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000014c0)={0xac000000, {{0x2, 0x4e22, @loopback}}}, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r5], 0x6e) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYRES64=r6, @ANYRESOCT=r6, @ANYRES16=r6, @ANYBLOB="6e21e450d59e6121095d5ee7f10364be18ddfe1b9b212fdba4c10abedf8a1724de4e9cb89ad645838b9c9047fff72a736a382f118ae86ed3cfd97facfd6aeee6378a8df9fe730f83875747f194043b4f9b1f3038b5931ea2c7392ea84ef51b71b015f167204a0231b468cc12e540fe6d3b911c3dd793d56e51da1202c423f23e37054b279882d3f300cbbb4fd5f1a180cb462d3358d6685d41803b7cf6630e053777e17770a163806c", @ANYBLOB="9601045aa2e9b8bc0d205cb430b601430c0581f2fb1088f1c5efff48b739777af7ff6ee886827ba028f70fcfc926aef34169a5e4366d6d807e1e22f37802bbf3cae826ea6f013cc71d995c7fea9dce88528635d842b45004fc7a4fe2fae5cb2d8b06ced35a114c7d89c8e6b2073c753168603805eb90bc85927201658d6a418393d5e16531ec00fdb6fa395d9027c8db12dfba750aaaf9ce11f1b6b91b2f3324f7bae3b8ec7e8f0510e2086daa6b64732fa9ec193fc2e5da5d93f1894035251ad5209028672d767dfe224b34312d2747668afd4302278ac8b00d5422e1363e98"], 0x14}}, 0x44014) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x12, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000000c0)={'vlan1\x00', @link_local}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.003807616s ago: executing program 3 (id=11034): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x100, @mcast1, 0x782}, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, @in={0x2, 0x4e21, @multicast1}], 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000d6d96a862051f617a37bafbed35903ec1509c60a32096365b2e5300876db6e2ff82bfa3ab594763355a013fc40bde7543e7f58606ff7a13aa4ce796edc7c60175a8d642d548f2057b2fdc504c9e28935aebb3f8a6f56c74256b9cea52eeb456bdae8389ca71c96c6cea3dd57afc4fc82afaea2d5e98b54e35e87f8", @ANYRES64=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800050001"], 0x40}, 0x1, 0x0, 0x0, 0x400c0c5}, 0x20040040) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='-.$/-(,{\x00', 0x0, &(0x7f0000000080)={@align=0xfff, {0x5, 0xba9, 0x4, 0x6}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r4) 1.749355833s ago: executing program 4 (id=11038): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000240)=""/233, 0xe9, 0x0, &(0x7f0000000340)=""/50, 0x32}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x5, &(0x7f0000001cc0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0xcb}, @generic={0x7, 0xd, "064d291a00000000d05c49"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x9}, {0x10, 0x3}]}]}, {0x0, [0x5f, 0x30, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x45, 0xff9, 0x8, 0x1}, 0x28) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r3, r2}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x2, 0x78, 0x0, 0x0, 0x192, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x800000}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 1.661397154s ago: executing program 4 (id=11039): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16], 0xa0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0xfc, 0x3b, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0xe8, 0x1, 0x0, 0x1, [@generic="ecff9a279e7a980c6e32ac26ba9f78162450c084d18b222496fd0c1f1e5c89b18104f3941eb4faeb3a7ec0bcc07d9aa4e3cc7b1d2423fe29a8ba125fbfd089ecd208d50ad7497e190aca6445200b780c24026ab6d21d4250abcec7a9a76d6d9ecb5b23b76a4c19b7b63e86b5b83a087aeee11224c54a4ea658e2bb1f9c60c840fd8ff36c9538f0ebcca1339f43e82c4c392f993d0373da8cb4abfdca3c0afbea6ad8161930f0facffc12a52fb53f60ede5c65c5a70d28b5f0988f844211d9bc1356a469b2b9a28566e808cd4223021c814d4be83b8447820725883600021eef0dd1ac08c"]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) 1.578141133s ago: executing program 1 (id=11041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000040040000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f00000000c0)={0x3, {0x8, 0x8, 0x2, 0x9, 0x8000}}) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (rerun: 32) 1.506888996s ago: executing program 4 (id=11042): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x10, &(0x7f0000000fc0)=""/4096, &(0x7f0000000140)=0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) 1.427607143s ago: executing program 0 (id=11043): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xf8}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb7}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.272457309s ago: executing program 2 (id=11044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05001900000000000000010000000900010073797a30000000002c000000080a01010000000000000000010000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0xc84e8000) 1.270093009s ago: executing program 1 (id=11045): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000001000)=""/4096, &(0x7f0000000080)=0xffffffffffffffe6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000040), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xaa, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)) 1.179083497s ago: executing program 0 (id=11046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be000000000095"], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1.178054907s ago: executing program 2 (id=11047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000880)=0xffffffffffffffff, 0x4) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r1, 0x8888094d5ed87de7, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.133455732s ago: executing program 1 (id=11048): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0xffff, 0xbc}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 985.191752ms ago: executing program 2 (id=11049): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x14, 0x0, 0x111, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @mcast2, 0x4}, 0x1c) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x3b0, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xe}, 0xa}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x248, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "29846129df11e2f814ecb32dd5ca889a2e269154bf"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "d45f8ebbfca73cfb2695b9f91c80ae616c099299095d687ba0decd91e7bd3d00c2be0e63"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "e7d72d67baf4e57371497b742793805f8a45984037fbd09d0843a3144f9bc2de97e1596a97c74cd17ba4f4740b693252a4d4de25f558584836feaf6109e4d83092da1cb15dfd49a717078a6ca5ecb7dad3d54e2ef44ac47855afa81323ace5b8a33f7c67c1c491f3c11de57d4906ef6c097b42f28b88a8d9c7aab96b01eb063f7a8c23529e753401"}, @TIPC_NLA_NODE_ID={0x59, 0x3, "0c44a95f9f61c249a222d770b87e693c754da7b44ec532a856fc14ce5557aff92e6516f984b98a209033a043e0d074e0fa03a60aec97b0b35c267b75c821aa13c03770716783c59ff5adefa6500e929ace6d01993e"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_ID={0xac, 0x3, "e002432be61524486784f225c9911104591d2715e88a42dfd3c4895b46a863cf8a8a4addb38a06d411bfbb2df8495ae963ce3599f41379eb2b4e5f20cb5463ac5dbf5d79dc8adf3a1a1ab39090d3bfe0fc671da194b10be49981615ee4dd8ecb63361c4f502d0b3c22b9cce1af43845dfce2118922baf0b46f9279d7ddd4b0f287fc690895cec5d27ecb58e12ce0c0d7f39fdf21bb5e0659a31141884507ca26c60b1be2a398ee63"}]}]}, 0x3b0}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000100)={0x10, 0x2, 0x6, 0xd}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 984.886639ms ago: executing program 0 (id=11050): socket$inet6(0xa, 0x3, 0x5) (async) r0 = socket$inet6(0xa, 0x3, 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x8, @any, 0xfdff}, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x400000, 0x2000001, {0x0, 0x0, 0x0, r3, {0x2}, {0xd, 0xfff2}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xa055}, 0x20008014) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvfrom$inet(r5, 0x0, 0x0, 0x10000, 0x0, 0x0) (async) recvfrom$inet(r5, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x2, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8080) listen(r5, 0xda90) accept4(r5, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}]}, 0x50}}, 0x0) 984.570108ms ago: executing program 1 (id=11051): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x14c, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdbaf30a}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe971}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x44}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x10000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x448d8}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff86, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES8=r2, @ANYBLOB="ef90383dfc9f9572d7c93a0d01cb32629e5c7271e8f51c1fa42075174ceafd18d11e87c3c122bc31148a473e3810af2a6a2779dcb8ff9da5ff813d230222a2007cc34799ced94093a553d07042ced47ac92c86b37cb9fb0ee1913555763e5293518680e3847224d4505977fb97012e9cf5e74b4423c8d85576ed9da6e34d2ac1c343e72c9fe2ad38861f0cf470ecb2613f1be3fd4b24930b15f15a5b7f926284dd9e6397a4394e8df813623a4d1e9711b0f9e26b068c1552f3159288fdae6de6d602688967f1986525953a933e1bd13843044d82e41c07f981c5175765f5b85db8764a78a79a52c27a996ff54e98eb3d4dae2566ea", @ANYRES8=r2, @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4048010}, 0x8040) (rerun: 32) 923.723323ms ago: executing program 3 (id=11052): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 812.363446ms ago: executing program 2 (id=11053): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8681985ff97b8745e9bd4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4001, 0x80000005, 0xb51b, 0xe}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001200010a000000000200edff7f00000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x7, 0x80, 0xc94f, 0x8, {{0x30, 0x4, 0x1, 0x2, 0xc0, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x3c, 0xd2, 0x1, 0x5, [{@local, 0x3ff}, {@multicast2, 0x5}, {@private=0xa010100, 0x9}, {@empty, 0x7fff}, {@multicast2, 0x573db9ca}, {@empty, 0x8}, {@broadcast, 0x9}]}, @noop, @generic={0x88, 0x5, "61baae"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0xba, 0x0, 0x0, [0x4cb6, 0x7, 0x910, 0xc05, 0x5]}, @cipso={0x86, 0x31, 0x0, [{0x5, 0xc, "116affbf55a4bf9ccdff"}, {0x0, 0xf, "f829c526c89a10f9bc565f4954"}, {0x5, 0x10, "bd3153ff117040f50c2de10c4c24"}]}, @ssrr={0x89, 0x1b, 0x12, [@empty, @rand_addr=0x64010102, @rand_addr=0x64010101, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}]}}}}}) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x99, 0x6, 0xd, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x700, 0x1, 0x3, 0x8}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xcb}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r0, 0x4000, r0}, 0x18) 701.296699ms ago: executing program 3 (id=11054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e00000000740002800600010002000000340004800c00010005000000090000000c0001003a00000002000000060001"], 0xac}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130005002dbd70000003000007000000", @ANYRES32=r4, @ANYBLOB="01000000000000001c001a801800048014"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)="2ed2bcdc90d4e34c24d10d120d7e5c8c41501cce58060e7f74dd6dadf8fa18efe553fb0f48f329e6515e3b53005300557493baa12d91389230b2675b81bddb4adfd735f77aeb1fb63b6eb90c4b40430a3e0c494dc99b547f6c40dcb43b1efe83a14596cd87f0f695b2a207c7715e3f2d653124f497713543da79", &(0x7f0000000200), 0xce, r5}, 0x38) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) (async) r8 = socket(0x2e, 0x3, 0x8) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r9], 0x28}}, 0x802) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 700.338342ms ago: executing program 4 (id=11055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@deltaction={0x14, 0x18, 0x1, 0x70bd2d, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040840) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x80000, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f000000aac0)={'ip6gre0\x00', 0x0}) 591.915289ms ago: executing program 1 (id=11056): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2d22, 0x8268}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xffffff7f}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x40}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x50, 0x24, 0x800, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b8aca04}, @TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x50}}, 0x4040) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="54ffb7cad7837d50e2f267c55c888312a61ff010312ac01693ba9b167449d1dba96f0f2ce3d0e98671d4f79b6095d8385c1a73fc241903ff1b38a87a8531f98835b83c1043f6cf4fa22d897e4c50bc6628fb986505c9307f83a5d356b802e1d8e74f5f561e5509e2b0e028e7100d16125a") 570.685535ms ago: executing program 3 (id=11057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x103}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb7}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 509.41122ms ago: executing program 2 (id=11058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006d00)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x64, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x55}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0x3}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001300310327bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04460200016004001400030064756d6d793000000000000000000000050027002600000014001a800800028004"], 0x50}, 0x1, 0x0, 0x0, 0x20008810}, 0x24040840) 364.157808ms ago: executing program 3 (id=11059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)=0x1) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) 332.492075ms ago: executing program 4 (id=11060): syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffffb88}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 205.343877ms ago: executing program 2 (id=11061): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x1c0, 0x1c0, 0x0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @local, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe6, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0x0, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x600}, 0x8000000, 0x0, 0x3, 0x0, 0x4, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000a40), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000340)=r7, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'wg2\x00', {0x2}, 0x8001}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r9) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4048050) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) getpeername(r9, &(0x7f00000001c0)=@xdp, &(0x7f00000000c0)=0x80) sendmmsg$inet(r0, &(0x7f0000001740), 0x2, 0x2090) 185.862585ms ago: executing program 4 (id=11062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x18}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) shutdown(r3, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032508000300"/18, @ANYRES32=r6, @ANYBLOB="0c009900000000004d000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x400c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 132.374509ms ago: executing program 0 (id=11063): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000095c0)=ANY=[@ANYBLOB="7c3800002e00010325bd7000fcffffff06"], 0x387c}, 0x1, 0x0, 0x0, 0x448c3}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060006000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000023c0), r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250f000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000) (async, rerun: 64) r5 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r7) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) (async, rerun: 32) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async, rerun: 64) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r10, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x25b30bd30637e5c6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000c0) (rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="10002fbd7000ffdbdf25010000003c000c80fa000b8008000900ef4615222c000b8008000a00de77000008000a00c6150000080009003c8f6b1e08000a007cbb000008000a00057c0000"], 0x50}, 0x1, 0x0, 0x0, 0x24040814}, 0x20000000) 130.099519ms ago: executing program 1 (id=11064): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4008040}, 0x814) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r6, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000810a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000589361ea211c11e4768d2ef29971000000000000000000"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x30, r10, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0xfffffffffffffdde}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r12, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x0) 0s ago: executing program 3 (id=11065): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x2c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): 1104.345220][ T9774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.355921][ T9774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.364394][ T9774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.373411][ T9774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.382642][ T9774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.395766][ T9774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.410108][ T9774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.434556][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9413'. [ 1104.444455][ T9774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.510174][ T9774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.665048][ T9352] veth0_vlan: entered promiscuous mode [ 1104.684345][ T9352] veth1_vlan: entered promiscuous mode [ 1104.753490][ T9352] veth0_macvtap: entered promiscuous mode [ 1104.766116][ T9352] veth1_macvtap: entered promiscuous mode [ 1104.792045][ T9352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.832920][ T9352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.873884][T32177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.921145][T32177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.940246][T32177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.967369][T32177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.987996][T32177] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.034446][T32177] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.310737][ T9795] lo speed is unknown, defaulting to 1000 [ 1105.320248][T30607] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.392726][T32177] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.412137][ T9795] wlan1 speed is unknown, defaulting to 1000 [ 1105.684013][T30608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.717967][T30608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.866856][T30608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.889505][T30608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.143118][T24678] IPVS: starting estimator thread 0... [ 1106.235482][ T9836] IPVS: using max 25 ests per chain, 60000 per kthread [ 1106.655965][ T9857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9428'. [ 1106.717891][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9428'. [ 1106.984334][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9430'. [ 1107.110571][ T9869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9430'. [ 1107.177752][ T9867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9430'. [ 1107.207045][T28434] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1107.236278][T28434] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1107.247553][T28434] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1107.262361][T28434] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1107.271481][T28434] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1107.295104][T30296] bridge0: port 3(syz_tun) entered disabled state [ 1107.381745][T30296] syz_tun (unregistering): left allmulticast mode [ 1107.389716][T30296] syz_tun (unregistering): left promiscuous mode [ 1107.396669][T30296] bridge0: port 3(syz_tun) entered disabled state [ 1107.553801][ T9871] lo speed is unknown, defaulting to 1000 [ 1107.700679][ T9871] wlan1 speed is unknown, defaulting to 1000 [ 1107.949848][T29703] IPVS: starting estimator thread 0... [ 1108.008435][ T9875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9427'. [ 1108.055460][ T9898] IPVS: using max 28 ests per chain, 67200 per kthread [ 1108.097616][ T9875] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9427'. [ 1108.174662][ T9875] ..0{X: renamed from gretap0 (while UP) [ 1108.203928][ T9875] ..0{X: entered allmulticast mode [ 1108.271368][ T9871] chnl_net:caif_netlink_parms(): no params data found [ 1108.719751][ T9871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.755639][ T9871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.768161][ T9871] bridge_slave_0: entered allmulticast mode [ 1108.798067][ T9871] bridge_slave_0: entered promiscuous mode [ 1108.819474][ T9871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.844953][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.862652][ T9871] bridge_slave_1: entered allmulticast mode [ 1108.874532][ T9871] bridge_slave_1: entered promiscuous mode [ 1108.880758][ T9935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9441'. [ 1109.094480][ T9871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.162687][ T9871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.263779][ T9871] team0: Port device team_slave_0 added [ 1109.294731][ T9871] team0: Port device team_slave_1 added [ 1109.376262][ T5836] Bluetooth: hci2: command tx timeout [ 1109.400512][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.407813][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.435013][ T9871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.478140][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.485156][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.545597][ T9963] Bluetooth: MGMT ver 1.23 [ 1109.550784][ T9871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.666530][ T9964] syzkaller0: entered promiscuous mode [ 1109.693041][ T9964] syzkaller0: entered allmulticast mode [ 1109.739893][ T9976] netlink: 'syz.2.9451': attribute type 1 has an invalid length. [ 1109.759410][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9448'. [ 1109.816475][ T9976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1109.855871][ T29] net_ratelimit: 180 callbacks suppressed [ 1109.855893][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.644945][T10013] netlink: 212 bytes leftover after parsing attributes in process `syz.3.9454'. [ 1110.898840][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.455424][ T5836] Bluetooth: hci2: command tx timeout [ 1111.830487][T10030] delete_channel: no stack [ 1111.945971][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.179938][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.985789][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.191590][ T9977] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1113.208312][ T9976] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1113.216346][ T9976] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1113.345291][ T9871] hsr_slave_0: entered promiscuous mode [ 1113.354468][ T9871] hsr_slave_1: entered promiscuous mode [ 1113.535497][ T5836] Bluetooth: hci2: command tx timeout [ 1113.546853][T10073] delete_channel: no stack [ 1113.566195][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.577547][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.588419][T10074] netlink: 'syz.2.9460': attribute type 16 has an invalid length. [ 1113.629516][T10074] netlink: 'syz.2.9460': attribute type 17 has an invalid length. [ 1113.716939][T10074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1114.019883][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.081759][T10094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.091094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.352842][T10100] bond1: option all_slaves_active: invalid value (13) [ 1114.370244][T10100] bond1 (unregistering): Released all slaves [ 1114.595072][ T9871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1114.620119][ T9871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1114.637283][ T9871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1114.657825][ T9871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1114.805087][T10113] __nla_validate_parse: 2 callbacks suppressed [ 1114.805113][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9472'. [ 1114.911846][T10136] netlink: 'syz.3.9477': attribute type 8 has an invalid length. [ 1115.056166][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.288648][T24678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.314863][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9481'. [ 1115.370564][T10155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.379089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.459658][ T9871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.470311][T10157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.496655][T10159] netlink: 'syz.4.9484': attribute type 49 has an invalid length. [ 1115.526508][T10159] netlink: 'syz.4.9484': attribute type 49 has an invalid length. [ 1115.543310][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9484'. [ 1115.549916][ T9871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.583662][T10159] : entered promiscuous mode [ 1115.600808][T30607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.608063][T30607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.616121][ T5836] Bluetooth: hci2: command tx timeout [ 1115.638325][T30607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.645549][T30607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.694323][T10159] syzkaller0: entered promiscuous mode [ 1115.712005][T10159] syzkaller0: entered allmulticast mode [ 1115.731314][T10171] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9487'. [ 1115.866157][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.885676][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1115.898626][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1115.986792][T10179] pim6reg1: entered promiscuous mode [ 1116.005499][T10179] pim6reg1: entered allmulticast mode [ 1116.096265][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.248624][T10193] netlink: 'syz.3.9494': attribute type 3 has an invalid length. [ 1116.257111][T10193] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9494'. [ 1116.281928][T10193] netlink: 'syz.3.9494': attribute type 4 has an invalid length. [ 1116.328365][T10193] netlink: 'syz.3.9494': attribute type 4 has an invalid length. [ 1116.487119][T10202] netlink: 'syz.3.9497': attribute type 10 has an invalid length. [ 1116.496404][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1116.522786][T10202] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9497'. [ 1116.661350][T10208] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9498'. [ 1116.922325][ T9871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.041817][ T9871] veth0_vlan: entered promiscuous mode [ 1117.079488][ T9871] veth1_vlan: entered promiscuous mode [ 1117.137327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.148085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.190001][ T9871] veth0_macvtap: entered promiscuous mode [ 1117.214933][ T9871] veth1_macvtap: entered promiscuous mode [ 1117.262607][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.292774][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.338955][T32167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.372291][T32167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.399529][T32167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.426801][T32167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.626268][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9504'. [ 1117.650943][T32167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.661307][T10227] netlink: 'syz.3.9504': attribute type 4 has an invalid length. [ 1117.677166][T32167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.699110][T10227] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9504'. [ 1117.787998][T30607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.806063][T30607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.910542][T10232] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.9506'. [ 1118.142961][T10238] lo speed is unknown, defaulting to 1000 [ 1118.168657][T10238] wlan1 speed is unknown, defaulting to 1000 [ 1118.400411][T10252] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1118.476907][T10252] bond1 (unregistering): Released all slaves [ 1118.803792][T10262] netlink: 'syz.1.9514': attribute type 1 has an invalid length. [ 1118.888513][T10262] veth3: entered promiscuous mode [ 1119.042516][T10274] lo: entered allmulticast mode [ 1119.109389][T10273] lo: left allmulticast mode [ 1119.115109][T10276] netlink: 'syz.4.9518': attribute type 13 has an invalid length. [ 1119.731317][T10312] nbd: nbd64 already in use [ 1119.862531][T10319] geneve2: entered promiscuous mode [ 1119.877046][T10319] geneve2: entered allmulticast mode [ 1119.929242][T10317] __nla_validate_parse: 9 callbacks suppressed [ 1119.929264][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9531'. [ 1119.943475][T10329] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9534'. [ 1120.012502][ T29] IPVS: starting estimator thread 0... [ 1120.136767][T10332] IPVS: using max 29 ests per chain, 69600 per kthread [ 1120.227754][T10338] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1120.256068][ T29] net_ratelimit: 6 callbacks suppressed [ 1120.256101][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.297028][T10343] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9538'. [ 1120.363019][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9543'. [ 1120.373521][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9543'. [ 1120.477515][T10354] validate_nla: 1 callbacks suppressed [ 1120.477539][T10354] netlink: 'syz.0.9544': attribute type 1 has an invalid length. [ 1120.493643][T10354] netlink: 'syz.0.9544': attribute type 2 has an invalid length. [ 1120.509652][T10354] netlink: 'syz.0.9544': attribute type 1 has an invalid length. [ 1120.524623][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9544'. [ 1120.548347][T10354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9544'. [ 1120.602015][T10361] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9547'. [ 1120.602423][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9545'. [ 1120.642489][T10359] IPVS: length: 35 != 24 [ 1120.652397][T10356] nbd: must specify a device to reconfigure [ 1120.712979][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9549'. [ 1120.905911][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1120.914001][ C1] lec:lec_tx_timeout: lec0 [ 1121.090741][T10391] netlink: 'syz.2.9554': attribute type 1 has an invalid length. [ 1121.303955][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.525878][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.754101][T10427] siw: device registration error -23 [ 1121.865933][T10429] tipc: Started in network mode [ 1121.891875][T10429] tipc: Node identity 96e8f92419d1, cluster identity 4711 [ 1121.900039][T10429] tipc: Enabled bearer , priority 0 [ 1121.916558][T10429] syzkaller0: entered promiscuous mode [ 1121.948748][T10408] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1121.956267][T10429] syzkaller0: entered allmulticast mode [ 1122.001011][T10429] tipc: Resetting bearer [ 1122.041628][T10428] tipc: Resetting bearer [ 1122.114315][T10428] tipc: Disabling bearer [ 1122.266084][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.281495][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.337536][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.371750][T10442] lo speed is unknown, defaulting to 1000 [ 1122.397811][T10442] wlan1 speed is unknown, defaulting to 1000 [ 1122.542321][T32158] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.561427][T32158] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.593593][T32158] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.650042][T32158] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1122.880496][T10476] netlink: 'syz.3.9576': attribute type 29 has an invalid length. [ 1122.908670][T10476] netlink: 'syz.3.9576': attribute type 29 has an invalid length. [ 1123.295764][ T5836] Bluetooth: hci0: command 0x0c20 tx timeout [ 1123.375721][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.297598][T10524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.322553][T10524] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1124.373770][T10524] bond0: (slave xfrm1): Error -95 calling set_mac_address [ 1124.416638][T31875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.610038][T10530] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1124.750743][T10541] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1124.952166][T10547] __nla_validate_parse: 14 callbacks suppressed [ 1124.952189][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9597'. [ 1124.997414][T32158] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.006865][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9597'. [ 1125.025061][T32158] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.034689][T32158] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.047192][T32158] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.155648][T10556] sctp: [Deprecated]: syz.0.9601 (pid 10556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1125.155648][T10556] Use struct sctp_sack_info instead [ 1125.176504][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9600'. [ 1125.185549][T10558] sctp: [Deprecated]: syz.0.9601 (pid 10558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1125.185549][T10558] Use struct sctp_sack_info instead [ 1125.298413][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.462820][T31875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.497840][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9605'. [ 1125.744225][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9608'. [ 1125.778421][T10589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1125.824480][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9608'. [ 1125.846991][T10589] macsec1: entered promiscuous mode [ 1125.852445][T10589] bond1: entered promiscuous mode [ 1125.860225][T10589] macsec1: entered allmulticast mode [ 1125.867575][T10589] bond1: entered allmulticast mode [ 1125.874992][T10589] bond1: left allmulticast mode [ 1125.880725][T10589] bond1: left promiscuous mode [ 1126.502332][T31875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.539667][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.299144][T10572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1128.317754][T10610] netlink: 'syz.1.9614': attribute type 1 has an invalid length. [ 1128.335799][T10610] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9614'. [ 1128.337088][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.553752][T10618] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.589713][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.657142][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.738513][T10618] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.776265][T10634] netlink: 'syz.2.9623': attribute type 1 has an invalid length. [ 1128.784355][T10634] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.9623'. [ 1128.827045][T10618] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.855068][T10640] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9625'. [ 1128.864862][T10640] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9625'. [ 1128.886063][T10640] netlink: 'syz.0.9625': attribute type 5 has an invalid length. [ 1128.952734][T10618] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.103631][T32163] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.163319][T32179] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.207662][T32179] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.229270][T10654] vlan2: entered promiscuous mode [ 1129.234388][T10654] geneve1: entered promiscuous mode [ 1129.276488][T10654] vlan2: entered allmulticast mode [ 1129.281670][T10654] geneve1: entered allmulticast mode [ 1129.391183][T32163] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.626831][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.668598][T10664] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1129.676872][T10669] netlink: 'syz.1.9634': attribute type 13 has an invalid length. [ 1130.001823][T10686] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!' [ 1130.033537][T10686] CPU: 1 UID: 0 PID: 10686 Comm: syz.2.9639 Not tainted syzkaller #0 PREEMPT(full) [ 1130.033571][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1130.033588][T10686] Call Trace: [ 1130.033598][T10686] [ 1130.033608][T10686] dump_stack_lvl+0xe8/0x150 [ 1130.033650][T10686] sysfs_warn_dup+0x8e/0xa0 [ 1130.033683][T10686] sysfs_do_create_link_sd+0xc0/0x110 [ 1130.033725][T10686] device_add_class_symlinks+0x1cf/0x240 [ 1130.033910][T10686] device_add+0x475/0xb70 [ 1130.033950][T10686] wiphy_register+0x1d73/0x2d50 [ 1130.034060][T10686] ? __pfx_wiphy_register+0x10/0x10 [ 1130.034087][T10686] ? __pfx_netdev_run_todo+0x10/0x10 [ 1130.034140][T10686] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1130.034216][T10686] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1130.034308][T10686] ieee80211_register_hw+0x35ff/0x42e0 [ 1130.034371][T10686] ? ieee80211_register_hw+0x1451/0x42e0 [ 1130.034406][T10686] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1130.034449][T10686] ? __hrtimer_setup+0x181/0x200 [ 1130.034487][T10686] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1130.034563][T10686] mac80211_hwsim_new_radio+0x3334/0x5b60 [ 1130.034658][T10686] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1130.034700][T10686] ? kstrndup+0xbf/0x160 [ 1130.034741][T10686] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1130.034803][T10686] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1130.034850][T10686] ? rcu_is_watching+0x15/0xb0 [ 1130.034884][T10686] ? trace_kmalloc+0x2a/0x110 [ 1130.034914][T10686] ? __nla_parse+0x40/0x60 [ 1130.034975][T10686] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1130.035026][T10686] genl_family_rcv_msg_doit+0x22a/0x330 [ 1130.035068][T10686] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1130.035117][T10686] ? bpf_lsm_capable+0x9/0x20 [ 1130.035146][T10686] ? security_capable+0x7e/0x2c0 [ 1130.035208][T10686] genl_rcv_msg+0x61c/0x7a0 [ 1130.035250][T10686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.035283][T10686] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1130.035321][T10686] ? __lock_acquire+0x6b5/0x2cf0 [ 1130.035362][T10686] netlink_rcv_skb+0x232/0x4b0 [ 1130.035391][T10686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.035426][T10686] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1130.035474][T10686] ? down_read+0x272/0x2e0 [ 1130.035498][T10686] ? genl_rcv+0xd/0x40 [ 1130.035532][T10686] genl_rcv+0x28/0x40 [ 1130.035564][T10686] netlink_unicast+0x80f/0x9b0 [ 1130.035600][T10686] ? __pfx_netlink_unicast+0x10/0x10 [ 1130.035639][T10686] ? netlink_sendmsg+0x650/0xb40 [ 1130.035667][T10686] ? skb_put+0x11b/0x210 [ 1130.035712][T10686] netlink_sendmsg+0x813/0xb40 [ 1130.035753][T10686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.035788][T10686] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1130.035818][T10686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1130.035845][T10686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.035873][T10686] ____sys_sendmsg+0xa68/0xad0 [ 1130.035914][T10686] ? futex_unqueue+0x211/0x240 [ 1130.035951][T10686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1130.035997][T10686] ? import_iovec+0x73/0xa0 [ 1130.036037][T10686] ___sys_sendmsg+0x2a5/0x360 [ 1130.036078][T10686] ? __pfx____sys_sendmsg+0x10/0x10 [ 1130.036122][T10686] ? futex_wait+0x29a/0x380 [ 1130.036185][T10686] ? __fget_files+0x2a/0x420 [ 1130.036217][T10686] ? __fget_files+0x3a0/0x420 [ 1130.036262][T10686] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1130.036301][T10686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1130.036346][T10686] ? rcu_is_watching+0x15/0xb0 [ 1130.036393][T10686] do_syscall_64+0x14d/0xf80 [ 1130.036430][T10686] ? trace_irq_disable+0x3b/0x150 [ 1130.036469][T10686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.036492][T10686] ? clear_bhb_loop+0x40/0x90 [ 1130.036522][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.036546][T10686] RIP: 0033:0x7f1083f9c799 [ 1130.036569][T10686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.036590][T10686] RSP: 002b:00007f1084dbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1130.036615][T10686] RAX: ffffffffffffffda RBX: 00007f1084215fa0 RCX: 00007f1083f9c799 [ 1130.036633][T10686] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1130.036648][T10686] RBP: 00007f1084032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1130.036663][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.036676][T10686] R13: 00007f1084216038 R14: 00007f1084215fa0 R15: 00007ffc54ef7aa8 [ 1130.036722][T10686] [ 1130.499556][T10700] __nla_validate_parse: 2 callbacks suppressed [ 1130.499572][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9639'. [ 1130.539114][T10684] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1130.553578][T10702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.593665][T10702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.663392][T31875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.695186][T10705] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 1130.755577][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9644'. [ 1131.051818][T10727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9650'. [ 1131.094220][T10731] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1131.129800][T10727] bond1: entered promiscuous mode [ 1131.164254][T10727] vcan1: entered promiscuous mode [ 1131.175092][T10727] vcan1: entered allmulticast mode [ 1131.198250][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9654'. [ 1131.207566][T10738] netlink: 'syz.2.9654': attribute type 20 has an invalid length. [ 1131.229798][T10738] netlink: 'syz.2.9654': attribute type 21 has an invalid length. [ 1131.240733][T10739] xt_bpf: check failed: parse error [ 1131.301657][T10743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9655'. [ 1131.344436][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9656'. [ 1131.376016][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.429792][T10747] bridge0: entered allmulticast mode [ 1131.436688][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9657'. [ 1131.446060][T10747] bridge_slave_1: left allmulticast mode [ 1131.451825][T10747] bridge_slave_1: left promiscuous mode [ 1131.459818][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.476294][T10749] netlink: 'syz.0.9659': attribute type 1 has an invalid length. [ 1131.509207][T10747] bridge_slave_0: left allmulticast mode [ 1131.515031][T10747] bridge_slave_0: left promiscuous mode [ 1131.521242][T10747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.560237][T10747] bridge0 (unregistering): left allmulticast mode [ 1131.660348][T10756] netlink: 'syz.0.9660': attribute type 1 has an invalid length. [ 1131.703224][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.836548][T10764] netlink: 272 bytes leftover after parsing attributes in process `syz.2.9663'. [ 1131.990428][T10779] netlink: 'syz.1.9666': attribute type 10 has an invalid length. [ 1131.990426][T10778] netlink: 'syz.1.9666': attribute type 10 has an invalid length. [ 1132.027959][T10779] team0: Port device dummy0 added [ 1132.083187][T10780] team0: Port device dummy0 removed [ 1132.093112][T10780] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1132.284121][T10791] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9668'. [ 1132.852801][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.861524][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.260059][T10810] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1133.275627][T10810] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1133.695901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.704979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.786223][T10834] validate_nla: 1 callbacks suppressed [ 1133.786245][T10834] netlink: 'syz.3.9678': attribute type 13 has an invalid length. [ 1133.843623][T10834] netlink: 'syz.3.9678': attribute type 17 has an invalid length. [ 1134.157847][T10838] lo: entered allmulticast mode [ 1134.248627][T10837] lo: left allmulticast mode [ 1134.480460][T10849] wg1: entered promiscuous mode [ 1134.499245][T10849] wg1: entered allmulticast mode [ 1135.171058][T10882] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1135.277310][T10885] delete_channel: no stack [ 1135.426255][T10896] 8021q: VLANs not supported on tunl0 [ 1135.599659][T10902] syzkaller0: entered promiscuous mode [ 1135.608173][T10902] syzkaller0: entered allmulticast mode [ 1135.707581][T10902] lo speed is unknown, defaulting to 1000 [ 1135.733917][T10902] wlan1 speed is unknown, defaulting to 1000 [ 1135.742184][T10908] __nla_validate_parse: 2 callbacks suppressed [ 1135.742204][T10908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9704'. [ 1135.936098][T24681] net_ratelimit: 4 callbacks suppressed [ 1135.936119][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.343180][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.423066][T10929] netlink: 'syz.0.9710': attribute type 10 has an invalid length. [ 1136.454639][T10929] bridge0: port 1(netdevsim0) entered blocking state [ 1136.474811][T10929] bridge0: port 1(netdevsim0) entered disabled state [ 1136.526581][T10929] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1136.569506][T10929] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1136.578172][T10929] bridge0: port 1(netdevsim0) entered blocking state [ 1136.585020][T10929] bridge0: port 1(netdevsim0) entered forwarding state [ 1136.693311][T10937] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9713'. [ 1136.708453][T29703] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1136.789897][T10934] block nbd0: NBD_DISCONNECT [ 1136.795136][T10934] block nbd0: Send disconnect failed -104 [ 1136.829519][T10934] block nbd0: shutting down sockets [ 1136.915639][T10947] netlink: 'syz.3.9715': attribute type 10 has an invalid length. [ 1136.934342][T10947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.963491][T10947] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1137.063859][T32179] dummy0: left allmulticast mode [ 1137.084546][T32179] dummy0: left promiscuous mode [ 1137.108467][T32179] bridge0: port 4(dummy0) entered disabled state [ 1137.150556][T32179] bridge_slave_1: left allmulticast mode [ 1137.162043][T32179] bridge_slave_1: left promiscuous mode [ 1137.171870][T32179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.190061][T32179] bridge_slave_0: left allmulticast mode [ 1137.211250][T32179] bridge_slave_0: left promiscuous mode [ 1137.228893][T32179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.286598][T29703] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1137.394066][T29703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.907243][T32179] batman_adv: batadv0: Removing interface: gretap1 [ 1138.256277][T24679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.432753][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.591772][T32179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.606742][T32179] bond0 (unregistering): Released all slaves [ 1138.631016][T32179] bond1 (unregistering): Released all slaves [ 1138.658430][T32179] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1138.674721][T32179] bond2 (unregistering): Released all slaves [ 1138.693141][T32179] bond3 (unregistering): Released all slaves [ 1138.714237][T32179] bond4 (unregistering): Released all slaves [ 1138.748011][T32179] bond5 (unregistering): (slave lo): Releasing backup interface [ 1138.757075][T32179] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1138.769984][T32179] bond5 (unregistering): Released all slaves [ 1138.792615][T32163] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1138.897012][T24679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.975929][T24678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.000175][T32179] m1Ie5n: left promiscuous mode [ 1139.114595][T10992] macvtap0: entered promiscuous mode [ 1139.176441][T32179] tipc: Disabling bearer [ 1139.214925][T32179] tipc: Left network mode [ 1139.215456][T10987] macvtap0: left promiscuous mode [ 1139.290577][T32179] IPVS: stopping master sync thread 2778 ... [ 1139.358816][T11001] bridge_slave_0: left allmulticast mode [ 1139.364552][T11001] bridge_slave_0: left promiscuous mode [ 1139.382269][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.430221][T11005] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9724'. [ 1139.461677][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.488039][T11001] bridge_slave_1: left allmulticast mode [ 1139.493775][T11001] bridge_slave_1: left promiscuous mode [ 1139.528992][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.606815][T11001] bond0: (slave bond_slave_0): Releasing backup interface [ 1139.667576][T11001] bond0: (slave bond_slave_1): Releasing backup interface [ 1139.712283][T11001] team0: Port device team_slave_0 removed [ 1139.779456][T11001] team0: Port device team_slave_1 removed [ 1139.801872][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1139.834394][T11001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.845219][T11001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1139.858183][T11001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.870561][T11001] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1139.942986][T32167] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1139.964341][T32167] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1140.156332][T24681] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1140.501498][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.517953][T11030] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.720055][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1140.879542][T11053] syzkaller0: entered promiscuous mode [ 1140.885100][T11053] syzkaller0: entered allmulticast mode [ 1140.960663][T11030] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.010534][T11052] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1141.017610][T11052] syzkaller1: linktype set to 778 [ 1141.024563][T11053] tipc: Started in network mode [ 1141.040731][T11053] tipc: Node identity ea69c578fe48, cluster identity 4711 [ 1141.082408][T11053] tipc: Enabled bearer , priority 0 [ 1141.149474][T11044] tipc: Resetting bearer [ 1141.229575][T11044] tipc: Disabling bearer [ 1141.287438][T11030] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.381672][T32179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.534281][T32179] pim6reg (unregistering): left allmulticast mode [ 1141.551226][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.011567][T32179] team0 (unregistering): Port device team_slave_1 removed [ 1142.022375][T24678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.061483][T32179] team0 (unregistering): Port device team_slave_0 removed [ 1142.165152][T11085] xt_hashlimit: size too large, truncated to 1048576 [ 1142.175687][T11085] xt_hashlimit: max too large, truncated to 1048576 [ 1142.314836][T11030] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.414245][T11081] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1142.422023][T11081] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1142.474022][T11091] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9744'. [ 1142.586541][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.683775][T11083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.697737][T11083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.743880][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.752607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.158081][T32186] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.172981][T32186] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.210761][T32186] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.242766][T32186] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.267798][T11108] syzkaller0: entered promiscuous mode [ 1143.276840][T11108] syzkaller0: entered allmulticast mode [ 1143.386105][T32186] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.409440][T32186] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.531052][T11104] lo speed is unknown, defaulting to 1000 [ 1143.547199][T32186] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.576466][T32186] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.621391][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.655465][T11104] wlan1 speed is unknown, defaulting to 1000 [ 1143.769110][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9750'. [ 1143.791848][T17165] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.855561][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1143.971638][T17165] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.982380][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9750'. [ 1143.993820][T17165] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.091597][T17165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.103340][T32179] IPVS: stop unused estimator thread 0... [ 1144.128792][T11139] tipc: Started in network mode [ 1144.133723][T11139] tipc: Node identity 865d76297842, cluster identity 4711 [ 1144.178202][T11139] tipc: Enabled bearer , priority 0 [ 1144.255888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.309408][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9755'. [ 1144.331937][T11139] syzkaller0: entered promiscuous mode [ 1144.352855][T11139] syzkaller0: entered allmulticast mode [ 1144.364871][T11139] tipc: Resetting bearer [ 1144.402232][T11138] tipc: Resetting bearer [ 1144.462444][T11151] netlink: 'syz.4.9756': attribute type 1 has an invalid length. [ 1144.610101][T11158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9759'. [ 1144.674490][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.765815][T11165] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9761'. [ 1145.056084][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.712011][T31875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.739388][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.166352][T11138] tipc: Disabling bearer [ 1147.178187][T11151] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1147.212200][ T29] tipc: Node number set to 4263474729 [ 1147.221473][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1147.342325][T11193] netlink: 'syz.2.9766': attribute type 4 has an invalid length. [ 1147.360143][T11194] geneve2: entered promiscuous mode [ 1147.392068][T11194] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9767'. [ 1147.401339][T11196] netlink: 'syz.2.9766': attribute type 4 has an invalid length. [ 1147.623897][T11213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.632507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.720149][T11218] tipc: Enabling of bearer rejected, failed to enable media [ 1147.782618][T31856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.859704][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9778'. [ 1147.883437][T11225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9778'. [ 1148.095816][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.215221][T11251] netlink: 'syz.4.9786': attribute type 1 has an invalid length. [ 1148.347096][T11251] lo speed is unknown, defaulting to 1000 [ 1148.377381][T11251] wlan1 speed is unknown, defaulting to 1000 [ 1148.502718][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.508451][T11263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9789'. [ 1148.556241][T11263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.565340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.618081][T11266] syzkaller1: entered promiscuous mode [ 1148.623625][T11266] syzkaller1: entered allmulticast mode [ 1148.872051][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.144378][T11297] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9799'. [ 1149.295449][T11315] lo speed is unknown, defaulting to 1000 [ 1149.303339][T11315] wlan1 speed is unknown, defaulting to 1000 [ 1149.425100][T11325] netlink: 'syz.0.9809': attribute type 2 has an invalid length. [ 1149.443236][T11325] netlink: 'syz.0.9809': attribute type 2 has an invalid length. [ 1149.536804][T11332] netlink: 'syz.0.9811': attribute type 1 has an invalid length. [ 1149.857071][T11346] SET target dimension over the limit! [ 1149.938566][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.091085][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9818'. [ 1150.232255][T11363] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9816'. [ 1150.326579][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9818'. [ 1150.355775][T11353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9818'. [ 1150.516709][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9824'. [ 1151.183669][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9836'. [ 1151.202027][T11428] netlink: 'syz.4.9836': attribute type 1 has an invalid length. [ 1152.019946][ T5874] net_ratelimit: 2 callbacks suppressed [ 1152.019969][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.335499][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1152.600106][T11481] tipc: Enabled bearer , priority 0 [ 1152.617597][T11481] syzkaller0: entered promiscuous mode [ 1152.627445][T11484] netlink: 'syz.0.9856': attribute type 1 has an invalid length. [ 1152.633952][T11481] syzkaller0: entered allmulticast mode [ 1152.689386][T11480] tipc: Resetting bearer [ 1152.794451][T11480] tipc: Disabling bearer [ 1152.814267][ T30] audit: type=1800 audit(1772708455.388:18): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9861" name="blkio.bfq.time_recursive" dev="tmpfs" ino=509 res=0 errno=0 [ 1152.966925][T11506] __nla_validate_parse: 9 callbacks suppressed [ 1152.966948][T11506] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9863'. [ 1152.994249][ T6798] lec:lec_start_xmit: lec0:No lecd attached [ 1153.058659][T31875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.087052][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9865'. [ 1153.096392][T11510] netlink: 'syz.1.9865': attribute type 21 has an invalid length. [ 1153.534453][T11531] macsec1: entered promiscuous mode [ 1153.703361][T11535] lo speed is unknown, defaulting to 1000 [ 1153.718439][T11533] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9874'. [ 1153.730141][T11535] wlan1 speed is unknown, defaulting to 1000 [ 1153.751990][T11533] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9874'. [ 1153.823462][T11547] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9877'. [ 1154.085806][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9877'. [ 1154.096376][T31856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.547401][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.769143][T11553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9877'. [ 1154.983920][T11576] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1155.096985][T11583] netlink: 'syz.4.9885': attribute type 10 has an invalid length. [ 1155.137081][T31875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.205784][T11589] netlink: 'syz.1.9887': attribute type 1 has an invalid length. [ 1155.472600][T11598] tipc: Started in network mode [ 1155.483581][T11598] tipc: Node identity d203daa0cff9, cluster identity 4711 [ 1155.516184][T11598] tipc: Enabled bearer , priority 0 [ 1155.525795][T11602] syzkaller0: entered promiscuous mode [ 1155.531332][T11602] syzkaller0: entered allmulticast mode [ 1155.576189][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9893'. [ 1155.596194][T11616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9893'. [ 1155.629379][T11604] netlink: 'syz.2.9890': attribute type 1 has an invalid length. [ 1155.695701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.704107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.712573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.729357][T11619] ipvlan2: entered promiscuous mode [ 1155.785574][T11602] tipc: Resetting bearer [ 1155.825490][T11602] tipc: Disabling bearer [ 1155.866110][T11628] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9896'. [ 1156.191513][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.218911][T11647] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1156.355659][T11655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.217014][T31856] net_ratelimit: 1 callbacks suppressed [ 1157.217036][T31856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.619578][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.008768][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1158.016835][ C1] lec:lec_tx_timeout: lec0 [ 1158.100638][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.266005][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.747998][T11666] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9907'. [ 1158.758408][T11666] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9907'. [ 1158.775714][T11671] netlink: 'syz.4.9908': attribute type 4 has an invalid length. [ 1158.994000][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9916'. [ 1159.027725][T11686] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9916'. [ 1159.296045][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.321504][T11709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9923'. [ 1159.371506][T11709] macvtap1: entered promiscuous mode [ 1159.381071][T11709] macvtap1: entered allmulticast mode [ 1159.387638][T11709] veth1_vlan: entered allmulticast mode [ 1159.428339][T11713] lo speed is unknown, defaulting to 1000 [ 1159.439067][T11713] wlan1 speed is unknown, defaulting to 1000 [ 1159.532317][T11719] netlink: 876 bytes leftover after parsing attributes in process `syz.0.9925'. [ 1159.557045][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9925'. [ 1159.598115][T11724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9927'. [ 1159.628862][T11724] ip6gre1: entered promiscuous mode [ 1159.634332][T11724] ip6gre1: entered allmulticast mode [ 1159.904093][T11739] netlink: 'syz.1.9931': attribute type 29 has an invalid length. [ 1159.912570][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9931'. [ 1159.923017][T11739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9931'. [ 1160.049671][T11744] nbd: device at index 64 is going down [ 1160.240784][T11750] udevd[11750]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1160.272907][T11715] udevd[11715]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1160.345888][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.386909][T11760] netlink: 'syz.0.9936': attribute type 1 has an invalid length. [ 1160.410345][T11757] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 1160.539375][T11771] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1160.588537][T11780] netlink: 'syz.4.9938': attribute type 4 has an invalid length. [ 1160.599495][T11771] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1160.644096][T11771] bond2: (slave ip6gre1): making interface the new active one [ 1160.654490][T11771] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 1160.656906][T24679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.707062][T11770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1160.738752][T11780] .`: renamed from bond0 (while UP) [ 1161.099022][T11804] netlink: 'syz.4.9949': attribute type 11 has an invalid length. [ 1161.375788][T31856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.887930][T11854] netlink: 'syz.1.9966': attribute type 83 has an invalid length. [ 1161.912744][T11857] netlink: 'syz.2.9969': attribute type 1 has an invalid length. [ 1161.945965][T11854] bond2: option updelay: invalid value (18446744072924056005) [ 1161.953886][T11854] bond2: option updelay: allowed values 0 - 2147483647 [ 1161.998702][T11854] bond2 (unregistering): Released all slaves [ 1162.192326][T11857] syzkaller1: entered promiscuous mode [ 1162.245455][T11857] syzkaller1: entered allmulticast mode [ 1162.303903][T11879] netlink: 'syz.3.9972': attribute type 8 has an invalid length. [ 1162.421846][T11882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.512404][T11887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.521392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.561879][T11885] lo speed is unknown, defaulting to 1000 [ 1162.596899][T11882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.605101][T11882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.615701][T11882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.624535][T11882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.633405][T11882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.653157][T11885] wlan1 speed is unknown, defaulting to 1000 [ 1162.703854][T11882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.719922][T11892] netlink: 'syz.2.9977': attribute type 11 has an invalid length. [ 1162.744928][T11882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.965864][T11897] netlink: 'syz.1.9979': attribute type 2 has an invalid length. [ 1163.297772][T11908] lo speed is unknown, defaulting to 1000 [ 1163.326646][T11908] wlan1 speed is unknown, defaulting to 1000 [ 1163.991847][T11940] sctp: [Deprecated]: syz.4.9989 (pid 11940) Use of int in max_burst socket option. [ 1163.991847][T11940] Use struct sctp_assoc_value instead [ 1164.058143][T11945] __nla_validate_parse: 15 callbacks suppressed [ 1164.058166][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9991'. [ 1164.133137][T11945] 8021q: VLANs not supported on ip_vti0 [ 1164.149499][T11953] netlink: 'syz.1.9990': attribute type 12 has an invalid length. [ 1164.192521][T11952] xt_hashlimit: size too large, truncated to 1048576 [ 1164.329498][T11957] syzkaller1: entered promiscuous mode [ 1164.358670][T11957] syzkaller1: entered allmulticast mode [ 1164.903207][T32182] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.956976][T17165] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.982369][T17165] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.001505][T17165] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.193420][T11981] syzkaller0: entered promiscuous mode [ 1165.217264][T11981] syzkaller0: entered allmulticast mode [ 1165.238490][T11998] netlink: 'syz.3.10007': attribute type 3 has an invalid length. [ 1165.574021][T12028] netlink: 'syz.2.10013': attribute type 1 has an invalid length. [ 1165.693717][T12035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10013'. [ 1165.941881][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10013'. [ 1167.703934][T11107] net_ratelimit: 49 callbacks suppressed [ 1167.703951][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.775869][T31856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.885403][T12036] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10011'. [ 1167.896028][T12036] ksmbd: Unknown IPC event: 1, ignore. [ 1167.903215][T12028] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1167.954547][T12037] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1167.979413][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10013'. [ 1168.105080][T12055] netlink: 'syz.3.10016': attribute type 2 has an invalid length. [ 1168.133753][T12055] netlink: 'syz.3.10016': attribute type 1 has an invalid length. [ 1168.143838][T12055] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10016'. [ 1168.212434][T12055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10016'. [ 1168.246030][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10017'. [ 1168.442844][ T30] audit: type=1804 audit(1772708471.018:19): pid=12075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.10021" name="/newroot/200/cgroup.controllers" dev="tmpfs" ino=1034 res=1 errno=0 [ 1168.505195][ T30] audit: type=1800 audit(1772708471.018:20): pid=12075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10021" name="cgroup.controllers" dev="tmpfs" ino=1034 res=0 errno=0 [ 1168.551947][T12079] bridge0: port 1(batadv1) entered blocking state [ 1168.567201][T12079] bridge0: port 1(batadv1) entered disabled state [ 1168.573919][T12079] batadv1: entered allmulticast mode [ 1168.583499][T12079] batadv1: entered promiscuous mode [ 1168.820811][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.979485][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1168.989291][T32186] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1168.999279][T32186] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1169.072801][T12109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1169.145945][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 1169.584652][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10032'. [ 1169.589048][T12098] dvmrp0: entered allmulticast mode [ 1169.761399][T12124] netlink: 'syz.0.10034': attribute type 7 has an invalid length. [ 1169.791319][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.856733][T31856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.910467][T12129] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10035'. [ 1170.180618][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10039'. [ 1170.351878][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10044'. [ 1170.359680][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10045'. [ 1170.371360][T12161] netlink: 'syz.4.10044': attribute type 1 has an invalid length. [ 1170.551926][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10048'. [ 1170.580874][T12173] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:8 [ 1170.614977][T12174] xt_TCPMSS: Only works on TCP SYN packets [ 1170.643101][T12176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.654480][T12176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.665747][T12176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.675934][T12176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.762998][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10051'. [ 1171.038609][T12187] netlink: 'syz.1.10052': attribute type 1 has an invalid length. [ 1171.057168][T12187] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10052'. [ 1171.177973][T12192] vti0: entered promiscuous mode [ 1171.193238][T12192] vti0: entered allmulticast mode [ 1171.311748][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10056'. [ 1171.484414][T12204] netlink: 'syz.2.10059': attribute type 21 has an invalid length. [ 1171.496001][T12204] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10059'. [ 1171.517362][T12204] netlink: 'syz.2.10059': attribute type 4 has an invalid length. [ 1171.525273][T12204] netlink: 'syz.2.10059': attribute type 3 has an invalid length. [ 1171.533439][T12207] netlink: 'syz.1.10060': attribute type 11 has an invalid length. [ 1171.585754][T12210] netlink: 'syz.1.10060': attribute type 21 has an invalid length. [ 1171.606937][T12207] netlink: 'syz.1.10060': attribute type 4 has an invalid length. [ 1171.626363][T12210] netlink: 'syz.1.10060': attribute type 4 has an invalid length. [ 1171.640380][T12210] netlink: 'syz.1.10060': attribute type 5 has an invalid length. [ 1171.816486][T12213] lo speed is unknown, defaulting to 1000 [ 1171.877928][T12213] wlan1 speed is unknown, defaulting to 1000 [ 1172.060402][T12227] lo speed is unknown, defaulting to 1000 [ 1172.071524][T12227] wlan1 speed is unknown, defaulting to 1000 [ 1172.330538][T12236] syzkaller0: entered promiscuous mode [ 1172.393132][T12236] syzkaller0: entered allmulticast mode [ 1172.817969][T11107] net_ratelimit: 1023 callbacks suppressed [ 1172.817990][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.822230][T12251] lo speed is unknown, defaulting to 1000 [ 1172.882100][T12251] wlan1 speed is unknown, defaulting to 1000 [ 1172.975984][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.052529][T12257] netlink: 'syz.3.10072': attribute type 13 has an invalid length. [ 1173.084978][T12257] netlink: 'syz.3.10072': attribute type 12 has an invalid length. [ 1173.533451][T12281] lo speed is unknown, defaulting to 1000 [ 1173.712557][T12287] bond0: (slave veth3): Enslaving as an active interface with a down link [ 1173.745763][T12281] wlan1 speed is unknown, defaulting to 1000 [ 1173.791421][T12289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1173.999398][T12291] bond1: option primary_reselect: invalid value (4) [ 1174.015617][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.042618][T12291] bond1 (unregistering): Released all slaves [ 1174.599348][T12281] dvmrp0: entered allmulticast mode [ 1174.609112][T12331] __nla_validate_parse: 8 callbacks suppressed [ 1174.609132][T12331] netlink: 364 bytes leftover after parsing attributes in process `syz.1.10093'. [ 1174.669380][T12331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10093'. [ 1174.705871][T12333] netlink: 364 bytes leftover after parsing attributes in process `syz.1.10093'. [ 1174.792510][T32186] dvmrp0: left allmulticast mode [ 1174.924604][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10094'. [ 1174.991625][T12341] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10095'. [ 1175.056221][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.404222][T12363] tipc: Enabled bearer , priority 10 [ 1175.849122][T12395] xt_TCPMSS: Only works on TCP SYN packets [ 1175.856983][T24679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.870861][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10109'. [ 1176.097480][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.293799][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10114'. [ 1176.356469][T12425] openvswitch: netlink: Unknown key attributes 2 [ 1176.406631][ T29] tipc: Node number set to 502979232 [ 1176.441666][T12430] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10117'. [ 1176.461180][T12433] IPVS: set_ctl: invalid protocol: 15192 172.20.20.63:20000 [ 1176.592334][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10121'. [ 1176.614745][T12438] netlink: 216 bytes leftover after parsing attributes in process `syz.4.10121'. [ 1176.635122][T12438] macvtap0: entered allmulticast mode [ 1176.967538][T12457] vlan2: entered promiscuous mode [ 1176.992920][T12457] bridge0: entered promiscuous mode [ 1177.135726][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.301302][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1177.311687][T24679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.321996][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1177.354574][T12489] lo: Caught tx_queue_len zero misconfig [ 1177.390002][T12489] netem: invalid attributes len -1 [ 1177.395197][T12489] netem: change failed [ 1177.633573][T12496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1177.799266][T12501] validate_nla: 1 callbacks suppressed [ 1177.799290][T12501] netlink: 'syz.3.10141': attribute type 13 has an invalid length. [ 1177.829834][T12501] netlink: 'syz.3.10141': attribute type 17 has an invalid length. [ 1177.905774][T12501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1178.010715][T12486] lo speed is unknown, defaulting to 1000 [ 1178.018586][T12486] wlan1 speed is unknown, defaulting to 1000 [ 1178.180920][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.226728][T12487] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1178.232711][T12487] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1178.352017][T12487] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1178.427089][T12510] netlink: 'syz.2.10143': attribute type 1 has an invalid length. [ 1178.437169][T12487] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1178.456175][T12510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1178.660228][T12487] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1178.748831][T12487] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1178.896871][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.936452][T12487] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1178.953134][T12487] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1178.994510][T12539] bond0: entered promiscuous mode [ 1179.001323][T12539] batadv0: entered promiscuous mode [ 1179.009225][T12539] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1179.031438][T12539] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1179.063421][T12539] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1179.094427][T12539] bond0: left promiscuous mode [ 1179.134075][T12539] batadv0: left promiscuous mode [ 1179.217622][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.682925][T12561] __nla_validate_parse: 5 callbacks suppressed [ 1179.682947][T12561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10157'. [ 1179.969691][T12569] netlink: 'syz.4.10159': attribute type 64 has an invalid length. [ 1180.164168][T12578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1180.197846][T12580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.206387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.257385][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.420907][T12587] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10163'. [ 1180.493381][T12591] netlink: 'syz.3.10165': attribute type 4 has an invalid length. [ 1180.557035][T12596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.943460][T12608] lo speed is unknown, defaulting to 1000 [ 1180.974601][T12611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10171'. [ 1181.021236][T12610] lo speed is unknown, defaulting to 1000 [ 1181.028816][T12608] wlan1 speed is unknown, defaulting to 1000 [ 1181.087452][T12611] nbd: socks must be embedded in a SOCK_ITEM attr [ 1181.140463][T12610] wlan1 speed is unknown, defaulting to 1000 [ 1181.169928][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10171'. [ 1181.199926][T12616] nbd: device at index 64 is going down [ 1181.376195][T12446] udevd[12446]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1181.558450][T12631] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10176'. [ 1181.867319][T12648] netlink: 'syz.3.10183': attribute type 3 has an invalid length. [ 1181.977419][T12650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10184'. [ 1182.009906][T12650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10184'. [ 1182.047301][T12650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10184'. [ 1182.070379][T12653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1182.277943][T12665] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 1182.292545][T12661] vlan3: entered promiscuous mode [ 1182.296839][T12666] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10188'. [ 1182.313399][T12661] macvlan0: entered promiscuous mode [ 1182.815421][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 1182.823579][ C1] lec:lec_tx_timeout: lec0 [ 1182.958166][T12681] : renamed from veth0_to_bond (while UP) [ 1183.382614][ T29] net_ratelimit: 8 callbacks suppressed [ 1183.382639][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.411299][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10197'. [ 1183.492072][T12692] Bluetooth: MGMT ver 1.23 [ 1183.509591][T12692] netlink: 'syz.2.10198': attribute type 18 has an invalid length. [ 1183.636153][T12695] syzkaller1: entered promiscuous mode [ 1183.641740][T12695] syzkaller1: entered allmulticast mode [ 1183.768448][T12702] vxcan1: entered promiscuous mode [ 1183.882716][T12710] openvswitch: netlink: Flow key attr not present in new flow. [ 1184.204879][T12721] geneve2: entered promiscuous mode [ 1184.223527][T12721] geneve2: entered allmulticast mode [ 1184.241370][T30607] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1184.261517][T30607] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1184.279142][T30607] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1184.300107][T30607] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1184.416079][T31856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.500524][T12735] syzkaller0: entered promiscuous mode [ 1184.506644][T12735] syzkaller0: entered allmulticast mode [ 1184.534004][T12741] netlink: 'syz.2.10214': attribute type 3 has an invalid length. [ 1185.041942][T12767] netlink: 'syz.0.10221': attribute type 21 has an invalid length. [ 1185.059773][T12765] netlink: 'syz.0.10221': attribute type 21 has an invalid length. [ 1185.077332][T12767] IPv6: NLM_F_CREATE should be specified when creating new route [ 1185.093180][T12769] __nla_validate_parse: 5 callbacks suppressed [ 1185.093203][T12769] netlink: 436 bytes leftover after parsing attributes in process `syz.1.10222'. [ 1185.136381][T12765] IPv6: NLM_F_CREATE should be specified when creating new route [ 1185.147462][T12773] netlink: 'syz.0.10221': attribute type 21 has an invalid length. [ 1185.179892][T12773] IPv6: NLM_F_CREATE should be specified when creating new route [ 1185.215025][T12773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1185.222378][T12773] IPv6: NLM_F_CREATE should be set when creating new route [ 1185.229703][T12773] IPv6: NLM_F_CREATE should be set when creating new route [ 1185.237024][T12773] IPv6: NLM_F_CREATE should be set when creating new route [ 1185.244455][T12765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1185.300480][T12778] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10224'. [ 1185.420327][T12767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1185.456975][T31856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.499945][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.514272][T12784] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1185.565483][T12784] bridge1: entered allmulticast mode [ 1185.758328][T12792] lo speed is unknown, defaulting to 1000 [ 1185.782154][T12792] lo speed is unknown, defaulting to 1000 [ 1185.796805][T12792] lo speed is unknown, defaulting to 1000 [ 1185.863489][T12795] syzkaller1: entered allmulticast mode [ 1185.882336][T12797] netlink: 83 bytes leftover after parsing attributes in process `syz.0.10232'. [ 1186.056560][T12803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10233'. [ 1186.056834][T12804] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10234'. [ 1186.113395][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10233'. [ 1186.168866][T12813] netlink: 'syz.3.10236': attribute type 2 has an invalid length. [ 1186.188814][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10233'. [ 1186.227790][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10233'. [ 1186.262021][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10233'. [ 1186.296092][T12805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10233'. [ 1186.357669][T12792] infiniband syz0: set down [ 1186.369967][T12792] infiniband syz0: added lo [ 1186.382876][T31856] lo speed is unknown, defaulting to 1000 [ 1186.499323][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.540367][T12792] RDS/IB: syz0: added [ 1186.567791][T12792] smc: adding ib device syz0 with port count 1 [ 1186.638512][T12792] smc: ib device syz0 port 1 has no pnetid [ 1186.788516][ T5874] lo speed is unknown, defaulting to 1000 [ 1186.828187][T12792] lo speed is unknown, defaulting to 1000 [ 1187.204860][T12852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.242980][T12852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.512548][T12852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.563717][T12852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.613570][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.803997][T12875] bond1 (unregistering): Released all slaves [ 1187.879436][T12792] lo speed is unknown, defaulting to 1000 [ 1188.047669][T12852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.081187][T12852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.241234][T12852] bridge0: port 1(netdevsim0) entered disabled state [ 1188.353523][T12852] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1188.384867][T12852] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1188.427783][T12852] bridge0: port 1(netdevsim0) entered disabled state [ 1188.490252][T12852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.549130][T12852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.572746][T12916] netlink: 'syz.1.10256': attribute type 21 has an invalid length. [ 1188.576350][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.606034][T12916] netlink: 'syz.1.10256': attribute type 20 has an invalid length. [ 1188.642727][T12792] lo speed is unknown, defaulting to 1000 [ 1188.669233][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.708219][T12904] syzkaller0: entered promiscuous mode [ 1188.713988][T12904] syzkaller0: entered allmulticast mode [ 1188.733044][ T5488] veth1_macvtap: left promiscuous mode [ 1188.935646][T12922] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002 [ 1189.713776][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.745981][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.523909][T12792] lo speed is unknown, defaulting to 1000 [ 1191.617212][T24679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.627935][T32179] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1191.667828][T32179] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.770910][T32179] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1191.785950][T31875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.796849][T32179] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.839305][T32179] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1191.877123][T32179] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.987209][T32179] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1191.999736][T32179] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.017162][T24679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.076171][T12943] syzkaller1: entered promiscuous mode [ 1192.081721][T12943] syzkaller1: entered allmulticast mode [ 1192.235714][T12963] netlink: 'syz.2.10263': attribute type 1 has an invalid length. [ 1192.416223][T12971] __nla_validate_parse: 33 callbacks suppressed [ 1192.416246][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1192.459011][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1192.473256][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1192.489477][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1192.501465][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1192.547272][T12973] x_tables: duplicate underflow at hook 2 [ 1192.561463][T12975] netlink: 'syz.0.10268': attribute type 2 has an invalid length. [ 1192.576575][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1192.596172][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1192.619111][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1192.633479][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1192.644770][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1192.662610][T12980] netlink: 'syz.0.10268': attribute type 2 has an invalid length. [ 1192.675061][T31875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.688392][T17165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.699148][T24679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.713624][T12971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.723635][T12971] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.739905][T12792] lo speed is unknown, defaulting to 1000 [ 1192.756939][T12975] !9: entered promiscuous mode [ 1192.786152][T12980] !9: left promiscuous mode [ 1193.204872][T12997] netlink: 'syz.3.10276': attribute type 1 has an invalid length. [ 1193.449846][T13012] bond1: (slave geneve3): making interface the new active one [ 1193.470394][T13012] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1193.498678][T32186] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1193.519509][T32186] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1193.542723][T12792] lo speed is unknown, defaulting to 1000 [ 1193.547015][T32186] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1193.569115][T32186] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1193.875611][ T5874] net_ratelimit: 3 callbacks suppressed [ 1193.875635][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.060585][T13036] netlink: 'syz.1.10283': attribute type 5 has an invalid length. [ 1194.068670][T13035] netlink: 'syz.1.10283': attribute type 5 has an invalid length. [ 1194.272728][T12792] lo speed is unknown, defaulting to 1000 [ 1194.896349][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.956661][T13064] netlink: 'syz.3.10292': attribute type 1 has an invalid length. [ 1194.990746][T13061] syzkaller1: entered promiscuous mode [ 1194.999962][T13061] syzkaller1: entered allmulticast mode [ 1195.043485][T13064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1195.058908][T13064] bond2: (slave bond3): making interface the new active one [ 1195.070045][T13064] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1195.140906][T13070] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 1195.163768][T13064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1195.218377][T13064] vlan0: entered promiscuous mode [ 1195.223495][T13064] bond2: entered promiscuous mode [ 1195.230910][T13064] bond3: entered promiscuous mode [ 1195.283539][T13072] veth3: entered promiscuous mode [ 1195.805330][T24681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.946134][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.130407][T13121] netlink: 'syz.3.10309': attribute type 1 has an invalid length. [ 1196.447538][T13129] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1196.470419][T13129] bond4 (unregistering): Released all slaves [ 1196.799841][T13142] netlink: 'syz.2.10314': attribute type 3 has an invalid length. [ 1196.820238][T13142] netlink: 'syz.2.10314': attribute type 2 has an invalid length. [ 1196.976083][T31875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.073991][T13150] IPVS: stopping backup sync thread 10541 ... [ 1197.518267][T13164] netlink: 'syz.3.10322': attribute type 1 has an invalid length. [ 1197.562209][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1197.780402][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.876000][T13178] netlink: 'syz.3.10325': attribute type 4 has an invalid length. [ 1197.928862][T13178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1198.000108][T32179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.024101][T32179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.035128][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.089284][T32179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.113445][T32179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.437834][T13208] __nla_validate_parse: 19 callbacks suppressed [ 1198.437857][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10337'. [ 1198.524773][T13216] netlink: 'syz.4.10336': attribute type 2 has an invalid length. [ 1198.557807][T13208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1198.588403][T13211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1198.630696][T13215] macsec0: entered promiscuous mode [ 1198.638802][T13215] bond4: entered promiscuous mode [ 1198.914185][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10342'. [ 1198.924345][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10342'. [ 1199.042842][T13235] sctp: [Deprecated]: syz.3.10345 (pid 13235) Use of int in max_burst socket option deprecated. [ 1199.042842][T13235] Use struct sctp_assoc_value instead [ 1199.218662][T13244] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10346'. [ 1199.450337][T13260] bond4: option mode: unable to set because the bond device is up [ 1199.530919][T13261] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1199.573552][T13261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1199.588598][T13261] bond4: (slave lo): Enslaving as an active interface with an up link [ 1199.602085][T13261] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1199.714473][T13265] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10354'. [ 1199.755544][T13265] netlink: 35 bytes leftover after parsing attributes in process `syz.4.10354'. [ 1199.796740][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10354'. [ 1199.820052][T13265] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10354'. [ 1199.845483][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10354'. [ 1199.855177][T13265] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10354'. [ 1200.514115][T13297] bridge2: entered promiscuous mode [ 1200.703760][T13308] lo speed is unknown, defaulting to 1000 [ 1200.731246][T13308] wlan1 speed is unknown, defaulting to 1000 [ 1200.761521][T13308] lo speed is unknown, defaulting to 1000 [ 1201.372280][T13326] syzkaller0: entered promiscuous mode [ 1201.406530][T13326] syzkaller0: entered allmulticast mode [ 1201.589268][T13334] siw: device registration error -23 [ 1201.843863][T13338] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1202.267968][T13351] lo speed is unknown, defaulting to 1000 [ 1202.304971][T13351] wlan1 speed is unknown, defaulting to 1000 [ 1202.332954][T13351] lo speed is unknown, defaulting to 1000 [ 1202.822502][T13355] xfrm1: entered allmulticast mode [ 1202.895953][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1203.076219][T13373] bond5: option tlb_dynamic_lb: invalid value (5) [ 1203.088132][T13373] bond5 (unregistering): Released all slaves [ 1203.297421][T13380] ip6gretap0: entered promiscuous mode [ 1203.576375][T13380] syzkaller1: entered promiscuous mode [ 1203.581917][T13380] syzkaller1: entered allmulticast mode [ 1203.607709][T13395] __nla_validate_parse: 7 callbacks suppressed [ 1203.607733][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10386'. [ 1203.926000][T13401] bond5: (slave vcan2): refused to change device type [ 1204.035919][T13414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10388'. [ 1204.491448][T13440] netlink: 'syz.1.10396': attribute type 2 has an invalid length. [ 1204.708615][T13451] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 1204.743886][T13451] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10397'. [ 1205.204137][T13476] netlink: 'syz.3.10402': attribute type 3 has an invalid length. [ 1205.278582][T13476] dvmrp0: left allmulticast mode [ 1205.331232][T13482] siw: device registration error -23 [ 1205.411465][T13482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1205.536486][T13486] lo speed is unknown, defaulting to 1000 [ 1205.544047][T13486] wlan1 speed is unknown, defaulting to 1000 [ 1205.609001][T13486] lo speed is unknown, defaulting to 1000 [ 1205.715606][T13500] IPVS: length: 232 != 8 [ 1205.940307][T13511] Bluetooth: MGMT ver 1.23 [ 1206.120514][T13517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1206.756515][T13556] netlink: 'syz.4.10421': attribute type 10 has an invalid length. [ 1206.972446][T13565] nft_compat: unsupported protocol 0 [ 1207.548828][T13598] lo: entered allmulticast mode [ 1207.633211][T13594] lo: left allmulticast mode [ 1208.096268][T13617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10441'. [ 1208.586991][T13635] lo speed is unknown, defaulting to 1000 [ 1208.606991][T13635] wlan1 speed is unknown, defaulting to 1000 [ 1208.625242][T13635] lo speed is unknown, defaulting to 1000 [ 1208.662915][T13631] lo speed is unknown, defaulting to 1000 [ 1208.700986][T13631] wlan1 speed is unknown, defaulting to 1000 [ 1208.973635][T13631] lo speed is unknown, defaulting to 1000 [ 1209.086101][T13654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10447'. [ 1209.116956][T13655] netlink: 'syz.3.10448': attribute type 13 has an invalid length. [ 1209.125017][T13655] netlink: 'syz.3.10448': attribute type 17 has an invalid length. [ 1209.225029][T13655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1209.260782][T13659] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10449'. [ 1209.288880][T13659] bond0: Caught tx_queue_len zero misconfig [ 1209.489970][T13665] gretap1: entered promiscuous mode [ 1210.177787][T13698] netlink: 'syz.2.10458': attribute type 2 has an invalid length. [ 1210.186956][T13700] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1210.509449][T13704] lo speed is unknown, defaulting to 1000 [ 1210.657544][T13704] wlan1 speed is unknown, defaulting to 1000 [ 1210.738618][T13704] lo speed is unknown, defaulting to 1000 [ 1210.795165][T13718] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10466'. [ 1210.820224][T13718] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10466'. [ 1211.127981][T13732] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10468'. [ 1211.145496][T13732] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10468'. [ 1211.192213][T13733] syzkaller0: entered promiscuous mode [ 1211.197909][T13733] syzkaller0: entered allmulticast mode [ 1211.210035][T13730] lo speed is unknown, defaulting to 1000 [ 1211.281919][T13730] wlan1 speed is unknown, defaulting to 1000 [ 1211.341501][T13730] lo speed is unknown, defaulting to 1000 [ 1211.929009][T13748] IPVS: set_ctl: invalid protocol: 51 172.20.20.65:20003 [ 1212.111557][T13760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10477'. [ 1212.157440][T13765] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10477'. [ 1212.572582][T13779] lo speed is unknown, defaulting to 1000 [ 1212.605833][T13779] wlan1 speed is unknown, defaulting to 1000 [ 1212.638142][T13779] lo speed is unknown, defaulting to 1000 [ 1213.139031][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1213.319633][T13807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10490'. [ 1213.346380][T13810] netlink: 'syz.2.10491': attribute type 83 has an invalid length. [ 1213.387751][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10491'. [ 1213.502921][T13810] ipvlan4: entered promiscuous mode [ 1213.983388][T13834] lo speed is unknown, defaulting to 1000 [ 1213.991472][T13834] wlan1 speed is unknown, defaulting to 1000 [ 1213.997554][T13843] netlink: 'syz.4.10502': attribute type 1 has an invalid length. [ 1214.028687][T13834] lo speed is unknown, defaulting to 1000 [ 1214.198514][T13850] netlink: 'syz.0.10505': attribute type 10 has an invalid length. [ 1214.252728][T13850] veth0_vlan: left promiscuous mode [ 1214.272880][T13850] veth0_vlan: entered promiscuous mode [ 1214.310039][T13850] team0: Device veth0_vlan failed to register rx_handler [ 1215.518774][T13902] __nla_validate_parse: 5 callbacks suppressed [ 1215.518796][T13902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10519'. [ 1215.673784][T13916] netlink: 100 bytes leftover after parsing attributes in process `syz.3.10522'. [ 1215.843988][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10524'. [ 1215.874100][T13924] netlink: 'syz.1.10524': attribute type 1 has an invalid length. [ 1215.918036][T13924] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1215.994059][T13924] bond4: (slave ip6gretap1): making interface the new active one [ 1216.004908][T13924] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1216.246747][T13946] netlink: 165 bytes leftover after parsing attributes in process `syz.3.10526'. [ 1216.277031][T13943] lo speed is unknown, defaulting to 1000 [ 1216.303783][T13948] sctp: [Deprecated]: syz.4.10530 (pid 13948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1216.303783][T13948] Use struct sctp_sack_info instead [ 1216.336042][T13949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10526'. [ 1216.353994][T13950] sctp: [Deprecated]: syz.4.10530 (pid 13950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1216.353994][T13950] Use struct sctp_sack_info instead [ 1216.372125][ T6798] lec:lec_start_xmit: lec0:No lecd attached [ 1216.526675][T13943] wlan1 speed is unknown, defaulting to 1000 [ 1216.534037][T13943] lo speed is unknown, defaulting to 1000 [ 1216.607196][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10526'. [ 1216.777669][T13958] netlink: 'syz.1.10532': attribute type 1 has an invalid length. [ 1216.805449][T13958] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10532'. [ 1216.814643][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10532'. [ 1216.828364][T13962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10533'. [ 1216.891218][T13962] netlink: 11 bytes leftover after parsing attributes in process `syz.4.10533'. [ 1217.032957][T13965] netlink: 'syz.0.10535': attribute type 13 has an invalid length. [ 1217.053484][T13965] ..0{X: refused to change device tx_queue_len [ 1217.074515][T13965] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 1218.202293][T14002] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1218.533102][T14006] lo speed is unknown, defaulting to 1000 [ 1218.547611][T14006] wlan1 speed is unknown, defaulting to 1000 [ 1218.575061][T14006] lo speed is unknown, defaulting to 1000 [ 1220.188074][T14067] netlink: 'syz.0.10560': attribute type 3 has an invalid length. [ 1220.394592][T14080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1220.502403][T14085] lo: Caught tx_queue_len zero misconfig [ 1220.528018][T14085] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1220.552053][T14073] __nla_validate_parse: 7 callbacks suppressed [ 1220.552075][T14073] netlink: 296 bytes leftover after parsing attributes in process `syz.1.10562'. [ 1220.581332][T14082] lo speed is unknown, defaulting to 1000 [ 1220.618021][T14082] wlan1 speed is unknown, defaulting to 1000 [ 1220.649478][T14082] lo speed is unknown, defaulting to 1000 [ 1221.109145][T14094] lo speed is unknown, defaulting to 1000 [ 1221.119102][T14094] wlan1 speed is unknown, defaulting to 1000 [ 1221.247024][T14098] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10565'. [ 1221.278444][T14094] lo speed is unknown, defaulting to 1000 [ 1221.855433][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5480 ms [ 1221.863633][ C1] lec:lec_tx_timeout: lec0 [ 1221.886809][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10569'. [ 1222.168925][T14112] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 1222.297776][T14114] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10571'. [ 1222.413656][T14116] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1223.075155][T14135] lo speed is unknown, defaulting to 1000 [ 1223.083983][T14135] wlan1 speed is unknown, defaulting to 1000 [ 1223.104007][T14135] lo speed is unknown, defaulting to 1000 [ 1223.782934][T14161] tipc: Invalid UDP bearer configuration [ 1223.783001][T14161] tipc: Enabling of bearer rejected, failed to enable media [ 1223.841051][T14161] netlink: 'syz.2.10584': attribute type 1 has an invalid length. [ 1223.851342][T14161] netlink: 'syz.2.10584': attribute type 2 has an invalid length. [ 1224.240170][T14172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1224.247568][T14172] IPv6: NLM_F_CREATE should be set when creating new route [ 1224.254847][T14172] IPv6: NLM_F_CREATE should be set when creating new route [ 1224.262169][T14172] IPv6: NLM_F_CREATE should be set when creating new route [ 1224.379376][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10589'. [ 1224.712311][T14189] netlink: 'syz.4.10593': attribute type 32 has an invalid length. [ 1225.029482][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10597'. [ 1225.153002][T14203] lo speed is unknown, defaulting to 1000 [ 1225.162738][T14203] wlan1 speed is unknown, defaulting to 1000 [ 1225.179900][T14203] lo speed is unknown, defaulting to 1000 [ 1225.492669][T14215] tipc: Enabling of bearer rejected, failed to enable media [ 1225.569516][T14221] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1225.827293][T14229] sctp: [Deprecated]: syz.2.10606 (pid 14229) Use of int in maxseg socket option. [ 1225.827293][T14229] Use struct sctp_assoc_value instead [ 1226.171327][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10611'. [ 1226.201924][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10610'. [ 1227.451788][T14294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10624'. [ 1227.663968][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10629'. [ 1227.927823][T14314] netlink: 'syz.0.10632': attribute type 2 has an invalid length. [ 1227.963116][T14314] !: entered promiscuous mode [ 1228.002256][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10632'. [ 1228.025868][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10632'. [ 1228.154502][T14320] netlink: 'syz.1.10634': attribute type 2 has an invalid length. [ 1228.189441][T14320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10634'. [ 1228.205649][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10635'. [ 1228.227063][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10635'. [ 1228.489926][T14326] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10637'. [ 1228.990001][T14363] netlink: 'syz.4.10649': attribute type 1 has an invalid length. [ 1228.999739][T14363] netlink: 'syz.4.10649': attribute type 2 has an invalid length. [ 1229.008557][T14363] netlink: 'syz.4.10649': attribute type 1 has an invalid length. [ 1229.018268][T14363] netlink: 'syz.4.10649': attribute type 3 has an invalid length. [ 1229.405199][T14372] lo speed is unknown, defaulting to 1000 [ 1229.412650][T14372] wlan1 speed is unknown, defaulting to 1000 [ 1229.421186][T14372] lo speed is unknown, defaulting to 1000 [ 1229.549155][T14376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1229.969161][T14395] siw: device registration error -23 [ 1230.534796][T14428] mac80211_hwsim hwsim119 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1230.768006][T14441] netlink: 'syz.2.10672': attribute type 6 has an invalid length. [ 1231.690825][T14483] __nla_validate_parse: 10 callbacks suppressed [ 1231.690848][T14483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10678'. [ 1231.846011][T14452] lec:lec_atm_close: lec0: Shut down! [ 1232.064381][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10684'. [ 1232.074064][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10684'. [ 1232.083590][T14500] netlink: 'syz.3.10684': attribute type 1 has an invalid length. [ 1232.522265][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10694'. [ 1232.539478][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10694'. [ 1232.559485][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10694'. [ 1232.581470][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10694'. [ 1232.615754][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10694'. [ 1232.641670][T14534] bond5 (unregistering): Released all slaves [ 1232.659312][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10694'. [ 1232.709805][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10694'. [ 1233.115997][T14553] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.129698][T14556] netlink: 'syz.0.10704': attribute type 4 has an invalid length. [ 1233.155365][T14553] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1233.171174][T14553] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1233.182199][T14558] netlink: 'syz.3.10702': attribute type 11 has an invalid length. [ 1233.277526][T14553] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.305481][T14553] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1233.325464][T14553] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1233.398653][T14553] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.417990][T14553] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1233.438432][T14553] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1233.530024][T14553] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.562555][T14553] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1233.573110][T14553] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1233.672275][T30592] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1233.687604][T30592] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1233.708916][T30592] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 1233.758936][T30592] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1233.785391][T30592] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1233.802698][T30592] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 1233.850990][T17166] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1233.866891][T17166] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1233.894364][T17166] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 1233.922929][T17166] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1233.942201][T17166] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1233.956341][T17166] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 1233.965079][T14580] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 1233.975165][T14580] netlink: 'syz.4.10711': attribute type 4 has an invalid length. [ 1234.060742][T14580] netlink: 'syz.4.10711': attribute type 4 has an invalid length. [ 1234.174188][ T5874] lo speed is unknown, defaulting to 1000 [ 1234.207239][ T5874] syz0: Port: 1 Link ACTIVE [ 1234.280316][ T5874] lo speed is unknown, defaulting to 1000 [ 1234.329951][T14592] siw: device registration error -23 [ 1234.452570][T14596] vlan2: entered promiscuous mode [ 1234.465980][T14596] gretap0: entered promiscuous mode [ 1234.584770][T14604] bond3: entered promiscuous mode [ 1234.631926][T14604] macvlan5: entered promiscuous mode [ 1234.662230][T14604] macvlan5: entered allmulticast mode [ 1234.671207][T14604] bond3: (slave macvlan5): Opening slave failed [ 1235.158492][T14623] bond4: option arp_all_targets: invalid value (129) [ 1235.176625][T14623] bond4 (unregistering): Released all slaves [ 1235.503269][T14638] netlink: 'syz.2.10729': attribute type 7 has an invalid length. [ 1235.521606][T14638] netlink: 'syz.2.10729': attribute type 5 has an invalid length. [ 1235.711877][T14648] lo speed is unknown, defaulting to 1000 [ 1235.733964][T14650] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1235.743895][T14648] wlan1 speed is unknown, defaulting to 1000 [ 1235.755973][T14648] lo speed is unknown, defaulting to 1000 [ 1235.918948][T14650] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1236.855294][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1236.863376][ C1] lec:lec_tx_timeout: lec0 [ 1236.951994][T14672] sctp: [Deprecated]: syz.0.10739 (pid 14672) Use of int in max_burst socket option. [ 1236.951994][T14672] Use struct sctp_assoc_value instead [ 1237.177380][T14682] __nla_validate_parse: 69 callbacks suppressed [ 1237.177404][T14682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10742'. [ 1237.586062][T14704] netlink: 'syz.2.10748': attribute type 2 has an invalid length. [ 1237.670461][T14707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10749'. [ 1237.857456][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10753'. [ 1238.474323][T14746] netlink: 'syz.3.10757': attribute type 21 has an invalid length. [ 1238.507166][T14746] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10757'. [ 1238.589131][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10761'. [ 1238.600704][T14754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10761'. [ 1238.740838][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1238.754489][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1238.928523][T14771] xfrm1: entered allmulticast mode [ 1239.027014][T14778] netlink: 'syz.3.10767': attribute type 15 has an invalid length. [ 1239.045433][T14778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10767'. [ 1239.369891][T14795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10774'. [ 1239.389479][T14795] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10774'. [ 1239.921862][T14833] netlink: 'syz.2.10782': attribute type 1 has an invalid length. [ 1240.038570][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10786'. [ 1240.143366][T14834] bond6 (unregistering): Released all slaves [ 1240.168710][T14833] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1240.360101][T14854] SET target dimension over the limit! [ 1240.872688][T14876] bond5: option broadcast_neighbor: invalid value (30) [ 1240.890442][T14876] bond5 (unregistering): Released all slaves [ 1241.007249][T14892] netlink: 'syz.2.10795': attribute type 2 has an invalid length. [ 1241.459088][T14923] ip6tnl0: Caught tx_queue_len zero misconfig [ 1241.599473][T14924] can: request_module (can-proto-3) failed. [ 1241.634058][T14933] erspan0: entered promiscuous mode [ 1241.653735][T14933] vlan2: entered promiscuous mode [ 1241.757589][T14938] netlink: 'syz.3.10810': attribute type 16 has an invalid length. [ 1241.832944][T14940] syzkaller0: entered promiscuous mode [ 1241.841476][T14940] syzkaller0: entered allmulticast mode [ 1242.280990][T14958] tipc: Enabling of bearer rejected, failed to enable media [ 1242.598789][T14985] netlink: 'syz.4.10819': attribute type 61 has an invalid length. [ 1242.630300][T14985] netlink: 'syz.4.10819': attribute type 62 has an invalid length. [ 1242.686768][T14985] __nla_validate_parse: 8 callbacks suppressed [ 1242.686792][T14985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10819'. [ 1242.814527][T14993] syzkaller0: entered promiscuous mode [ 1242.820648][T14993] syzkaller0: entered allmulticast mode [ 1243.345672][T15024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10832'. [ 1243.367953][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10833'. [ 1243.393878][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10833'. [ 1243.406164][T15024] ip6tnl0: Caught tx_queue_len zero misconfig [ 1243.505534][T15031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10834'. [ 1243.598036][T15040] netlink: 'syz.4.10838': attribute type 32 has an invalid length. [ 1243.641273][T15043] netlink: 'syz.3.10837': attribute type 25 has an invalid length. [ 1243.666377][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10837'. [ 1243.715069][T17166] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.725549][T15043] netlink: 'syz.3.10837': attribute type 25 has an invalid length. [ 1243.733546][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10837'. [ 1243.744257][T17166] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.765958][T17166] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.774230][T17166] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.857623][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 1243.865752][ C1] lec:lec_tx_timeout: lec0 [ 1243.881863][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10840'. [ 1243.900842][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10840'. [ 1243.919870][T15052] netlink: 'syz.0.10840': attribute type 11 has an invalid length. [ 1243.944779][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10840'. [ 1243.972822][T15052] netlink: 'syz.0.10840': attribute type 11 has an invalid length. [ 1244.053643][T15049] xt_limit: Overflow, try lower: 268435456/134217728 [ 1244.564144][T15079] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1245.776859][T30592] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1245.803021][T30592] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1245.822491][T30592] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1245.851410][T15104] block nbd0: not configured, cannot reconfigure [ 1245.858703][T30592] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1246.277397][T15126] xt_hashlimit: size too large, truncated to 1048576 [ 1246.366622][T15127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.599357][T15137] lo speed is unknown, defaulting to 1000 [ 1246.622685][T15137] wlan1 speed is unknown, defaulting to 1000 [ 1246.633030][T15137] lo speed is unknown, defaulting to 1000 [ 1247.118650][T15167] netlink: 'syz.0.10873': attribute type 36 has an invalid length. [ 1247.256419][T15174] FAULT_INJECTION: forcing a failure. [ 1247.256419][T15174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.271758][T15174] CPU: 1 UID: 0 PID: 15174 Comm: syz.1.10875 Not tainted syzkaller #0 PREEMPT(full) [ 1247.271790][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1247.271806][T15174] Call Trace: [ 1247.271816][T15174] [ 1247.271827][T15174] dump_stack_lvl+0xe8/0x150 [ 1247.271868][T15174] should_fail_ex+0x412/0x560 [ 1247.271903][T15174] _copy_from_iter+0x1d3/0x1670 [ 1247.271936][T15174] ? rcu_is_watching+0x15/0xb0 [ 1247.271975][T15174] ? __pfx__copy_from_iter+0x10/0x10 [ 1247.272022][T15174] ? netlink_sendmsg+0x650/0xb40 [ 1247.272053][T15174] ? skb_put+0x11b/0x210 [ 1247.272093][T15174] netlink_sendmsg+0x6c0/0xb40 [ 1247.272132][T15174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.272164][T15174] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1247.272194][T15174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1247.272221][T15174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.272248][T15174] ____sys_sendmsg+0xa68/0xad0 [ 1247.272292][T15174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.272335][T15174] ? import_iovec+0x73/0xa0 [ 1247.272369][T15174] ___sys_sendmsg+0x2a5/0x360 [ 1247.272409][T15174] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.272481][T15174] ? __fget_files+0x2a/0x420 [ 1247.272514][T15174] ? __fget_files+0x3a0/0x420 [ 1247.272556][T15174] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1247.272592][T15174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1247.272636][T15174] ? __pfx_ksys_write+0x10/0x10 [ 1247.272674][T15174] do_syscall_64+0x14d/0xf80 [ 1247.272708][T15174] ? trace_irq_disable+0x3b/0x150 [ 1247.272740][T15174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.272763][T15174] ? clear_bhb_loop+0x40/0x90 [ 1247.272791][T15174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.272819][T15174] RIP: 0033:0x7f35d2b9c799 [ 1247.272842][T15174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.272862][T15174] RSP: 002b:00007f35d3a5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.272886][T15174] RAX: ffffffffffffffda RBX: 00007f35d2e15fa0 RCX: 00007f35d2b9c799 [ 1247.272901][T15174] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000003 [ 1247.272915][T15174] RBP: 00007f35d3a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.272930][T15174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.272942][T15174] R13: 00007f35d2e16038 R14: 00007f35d2e15fa0 R15: 00007ffeb2b97188 [ 1247.272975][T15174] [ 1247.537525][T15179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.904473][T15193] IPv6: addrconf: prefix option has invalid lifetime [ 1247.908002][T15191] __nla_validate_parse: 13 callbacks suppressed [ 1247.908066][T15191] netlink: 516 bytes leftover after parsing attributes in process `syz.1.10880'. [ 1247.911571][T15193] IPv6: addrconf: prefix option has invalid lifetime [ 1247.939113][T15193] IPv6: addrconf: prefix option has invalid lifetime [ 1247.945923][T15193] IPv6: addrconf: prefix option has invalid lifetime [ 1247.954180][T15193] IPv6: addrconf: prefix option has invalid lifetime [ 1247.961030][T15193] IPv6: addrconf: prefix option has invalid lifetime [ 1247.968635][T15193] IPv6: addrconf: prefix option has invalid lifetime [ 1247.975665][T15193] IPv6: addrconf: prefix option has invalid lifetime [ 1248.604665][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10886'. [ 1248.620690][T15214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10886'. [ 1248.631502][T15214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10886'. [ 1248.641003][T15214] netlink: 540 bytes leftover after parsing attributes in process `syz.2.10886'. [ 1248.806191][T15226] netlink: 'syz.0.10890': attribute type 10 has an invalid length. [ 1248.836356][T15226] : entered promiscuous mode [ 1248.855116][T15226] team0: Port device added [ 1248.890255][T15226] netlink: 'syz.0.10890': attribute type 10 has an invalid length. [ 1248.941159][T15226] team0: Port device removed [ 1248.953239][T15226] : left promiscuous mode [ 1248.965054][T15226] bond0: (slave ): Enslaving as an active interface with an up link [ 1249.548313][T15250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10896'. [ 1249.564589][T15250] vlan0: entered promiscuous mode [ 1249.569953][T15250] veth0_to_team: entered promiscuous mode [ 1249.576036][T15250] vlan0: entered allmulticast mode [ 1249.581552][T15250] veth0_to_team: entered allmulticast mode [ 1249.626255][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10895'. [ 1250.226677][T15286] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10903'. [ 1250.283505][T15286] syzkaller1: entered promiscuous mode [ 1250.289298][T15286] syzkaller1: entered allmulticast mode [ 1250.709268][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10910'. [ 1250.724450][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10912'. [ 1250.759199][T15313] veth0_to_team: entered promiscuous mode [ 1250.779647][T15313] veth0_to_team: left promiscuous mode [ 1250.813908][T15311] veth0_to_team: entered promiscuous mode [ 1250.821903][T15311] veth0_to_team: left promiscuous mode [ 1250.857390][T15317] netlink: 'syz.3.10914': attribute type 4 has an invalid length. [ 1250.915743][T15320] netlink: 'syz.3.10914': attribute type 4 has an invalid length. [ 1251.227896][T15330] lo speed is unknown, defaulting to 1000 [ 1251.277908][T15330] wlan1 speed is unknown, defaulting to 1000 [ 1251.284170][T15331] lo speed is unknown, defaulting to 1000 [ 1251.299726][T15331] wlan1 speed is unknown, defaulting to 1000 [ 1251.321530][T15330] lo speed is unknown, defaulting to 1000 [ 1251.360640][T15351] netlink: 'syz.4.10923': attribute type 1 has an invalid length. [ 1251.483612][T15351] bond4: entered promiscuous mode [ 1251.540260][T15351] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1251.788687][T15331] lo speed is unknown, defaulting to 1000 [ 1252.421951][T15377] netlink: 'syz.2.10932': attribute type 1 has an invalid length. [ 1252.750563][T15389] net_ratelimit: 124 callbacks suppressed [ 1252.750588][T15389] openvswitch: netlink: Tunnel attr 224 out of range max 16 [ 1253.068249][T15408] __nla_validate_parse: 8 callbacks suppressed [ 1253.068273][T15408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10942'. [ 1254.267392][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10954'. [ 1254.645405][T15460] lo speed is unknown, defaulting to 1000 [ 1254.699539][T15460] wlan1 speed is unknown, defaulting to 1000 [ 1254.741713][T15460] lo speed is unknown, defaulting to 1000 [ 1254.829452][T15468] netlink: 'syz.2.10959': attribute type 30 has an invalid length. [ 1255.288778][T15480] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1255.336717][T15481] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1255.681808][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10968'. [ 1255.725329][T15495] team0: No ports can be present during mode change [ 1255.757275][T15493] netlink: 95 bytes leftover after parsing attributes in process `syz.2.10965'. [ 1255.786957][T15493] netlink: 95 bytes leftover after parsing attributes in process `syz.2.10965'. [ 1255.818059][T15493] netlink: 95 bytes leftover after parsing attributes in process `syz.2.10965'. [ 1255.848102][T15514] netlink: 'syz.0.10969': attribute type 1 has an invalid length. [ 1255.872983][T15493] netlink: 95 bytes leftover after parsing attributes in process `syz.2.10965'. [ 1255.958477][T15517] bond4 (unregistering): Released all slaves [ 1256.001506][T15523] netlink: 192 bytes leftover after parsing attributes in process `syz.3.10970'. [ 1256.029687][T15514] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1256.037894][T15493] netlink: 95 bytes leftover after parsing attributes in process `syz.2.10965'. [ 1256.063573][T15493] netlink: 95 bytes leftover after parsing attributes in process `syz.2.10965'. [ 1256.139999][T15529] netlink: 'syz.1.10971': attribute type 1 has an invalid length. [ 1256.264948][T15523] wg1: left promiscuous mode [ 1256.276182][T15523] wg1: left allmulticast mode [ 1256.286070][T15523] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1256.932152][T15561] netlink: 'syz.3.10977': attribute type 1 has an invalid length. [ 1257.070216][T15567] bond4: (slave lo): Releasing backup interface [ 1257.147265][T15567] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1257.200780][T15567] bond0: (slave bond_slave_0): Releasing backup interface [ 1257.222879][T15567] bond0: (slave bond_slave_1): Releasing backup interface [ 1257.238983][T15567] team0: Port device team_slave_0 removed [ 1257.248160][T15567] team0: Port device team_slave_1 removed [ 1257.254872][T15567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.264629][T15567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.272051][T15577] xt_hashlimit: size too large, truncated to 1048576 [ 1257.278533][T15576] xt_hashlimit: size too large, truncated to 1048576 [ 1257.287306][T15567] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1257.433359][T15576] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1257.455664][T15577] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1257.846800][T15607] xt_hashlimit: size too large, truncated to 1048576 [ 1257.875429][T15607] xt_hashlimit: max too large, truncated to 1048576 [ 1258.906748][T15630] __nla_validate_parse: 31 callbacks suppressed [ 1258.906772][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10999'. [ 1259.110913][T15646] No such timeout policy "syz0" [ 1259.114295][T15647] netlink: 'syz.3.11002': attribute type 33 has an invalid length. [ 1259.130197][T15647] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11002'. [ 1259.218365][T15652] bridge0: entered promiscuous mode [ 1259.234018][T15652] vlan1: entered promiscuous mode [ 1259.450825][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11007'. [ 1259.540945][T15666] netlink: 'syz.2.11009': attribute type 1 has an invalid length. [ 1259.550475][T15666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1259.568009][T15668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11010'. [ 1259.675452][T15668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11010'. [ 1259.684599][T15668] netlink: 'syz.3.11010': attribute type 5 has an invalid length. [ 1259.756560][T15681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11013'. [ 1259.786987][T15681] netem: change failed [ 1259.801112][T15681] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11013'. [ 1259.837156][T15687] bond0: (slave dummy0): Releasing backup interface [ 1259.887893][T15687] bridge_slave_0: left allmulticast mode [ 1259.893616][T15687] bridge_slave_0: left promiscuous mode [ 1259.940675][T15687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.984667][T15687] bridge_slave_1: left allmulticast mode [ 1260.004526][T15687] bridge_slave_1: left promiscuous mode [ 1260.023854][T15687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.050667][T15687] bond0: (slave bond_slave_0): Releasing backup interface [ 1260.094130][T15687] bond0: (slave bond_slave_1): Releasing backup interface [ 1260.141804][T15687] team0: Port device team_slave_0 removed [ 1260.174595][T15687] team0: Port device team_slave_1 removed [ 1260.195079][T15687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.216029][T15687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.230983][T15687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1260.310415][T15690] team0: Mode changed to "loadbalance" [ 1260.330775][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11017'. [ 1260.460871][T15705] tipc: Enabling of bearer rejected, failed to enable media [ 1260.568246][T15713] netlink: 'syz.4.11021': attribute type 39 has an invalid length. [ 1260.621065][T15714] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11021'. [ 1260.649175][T15714] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11021'. [ 1260.680156][T15714] netlink: 'syz.4.11021': attribute type 5 has an invalid length. [ 1261.014051][T15735] netlink: 'syz.2.11026': attribute type 21 has an invalid length. [ 1261.028979][T15735] netlink: 'syz.2.11026': attribute type 4 has an invalid length. [ 1261.101349][T15738] netlink: 'syz.2.11026': attribute type 1 has an invalid length. [ 1261.276282][T15752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1261.435874][T15757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1261.571269][T15757] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1261.705592][T15766] netlink: 'syz.4.11037': attribute type 10 has an invalid length. [ 1261.712181][T15769] netlink: 'syz.1.11035': attribute type 1 has an invalid length. [ 1261.809277][T15767] veth7: entered promiscuous mode [ 1261.818580][T15767] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 1261.837924][T15767] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1262.162823][T15781] bond6: (slave veth9): Enslaving as an active interface with a down link [ 1262.886928][T15819] xt_hashlimit: size too large, truncated to 1048576 [ 1263.155987][T15839] nbd: socks must be embedded in a SOCK_ITEM attr [ 1263.326418][T15843] syzkaller1: entered promiscuous mode [ 1263.353234][T15843] syzkaller1: entered allmulticast mode [ 1263.424979][T15847] 8021q: VLANs not supported on wg2 [ 1263.566395][T15854] ------------[ cut here ]------------ [ 1263.572400][T15854] !rwb [ 1263.572435][T15854] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#0: syz.0.11063/15854 [ 1263.586279][T15854] Modules linked in: [ 1263.590674][T15854] CPU: 0 UID: 0 PID: 15854 Comm: syz.0.11063 Not tainted syzkaller #0 PREEMPT(full) [ 1263.600407][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1263.610814][T15854] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 1263.617850][T15854] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 ed d3 25 fd eb 18 e8 e6 d3 25 fd eb 0d e8 df d3 25 fd 4c 89 ff e8 f7 e1 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1263.638062][T15854] RSP: 0018:ffffc900044fee30 EFLAGS: 00010282 [ 1263.644193][T15854] RAX: ad584ed3beaad300 RBX: 1ffff1100ad86c04 RCX: 0000000000000046 [ 1263.652716][T15854] RDX: 0000000000000006 RSI: ffffffff8def654c RDI: ffffffff8c27aa00 [ 1263.660828][T15854] RBP: dffffc0000000000 R08: ffffffff90112cb7 R09: 1ffffffff2022596 [ 1263.669175][T15854] R10: dffffc0000000000 R11: fffffbfff2022597 R12: ffff888056c36020 [ 1263.677561][T15854] R13: 0000000000000000 R14: ffff88807da64000 R15: ffff888056c36000 [ 1263.685645][T15854] FS: 00007f9f89a5a6c0(0000) GS:ffff88812546a000(0000) knlGS:0000000000000000 [ 1263.694637][T15854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1263.702228][T15854] CR2: 00007fbc4d477ff8 CR3: 0000000030ac0000 CR4: 00000000003526f0 [ 1263.710488][T15854] Call Trace: [ 1263.714203][T15854] [ 1263.717271][T15854] blk_register_queue+0x382/0x430 [ 1263.722548][T15854] __add_disk+0x677/0xd50 [ 1263.727224][T15854] ? down_read+0x272/0x2e0 [ 1263.731717][T15854] add_disk_fwnode+0xfb/0x480 [ 1263.736879][T15854] nbd_dev_add+0x72c/0xb50 [ 1263.741508][T15854] ? __pfx_nbd_dev_add+0x10/0x10 [ 1263.746614][T15854] ? bpf_lsm_capable+0x9/0x20 [ 1263.751392][T15854] ? security_capable+0x7e/0x2c0 [ 1263.756482][T15854] ? radix_tree_lookup+0x25c/0x290 [ 1263.761800][T15854] nbd_genl_connect+0x962/0x1cf0 [ 1263.767173][T15854] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1263.772627][T15854] ? rcu_is_watching+0x15/0xb0 [ 1263.777653][T15854] ? trace_kmalloc+0x2a/0x110 [ 1263.782415][T15854] ? __nla_parse+0x40/0x60 [ 1263.786941][T15854] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1263.793356][T15854] genl_family_rcv_msg_doit+0x22a/0x330 [ 1263.799385][T15854] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1263.805611][T15854] ? __lock_acquire+0x6b5/0x2cf0 [ 1263.810625][T15854] genl_rcv_msg+0x61c/0x7a0 [ 1263.815201][T15854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1263.820408][T15854] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1263.826233][T15854] ? __lock_acquire+0x6b5/0x2cf0 [ 1263.831253][T15854] netlink_rcv_skb+0x232/0x4b0 [ 1263.836201][T15854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1263.841307][T15854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1263.846751][T15854] ? down_read+0x272/0x2e0 [ 1263.851217][T15854] ? genl_rcv+0xd/0x40 [ 1263.856131][T15854] genl_rcv+0x28/0x40 [ 1263.860189][T15854] netlink_unicast+0x80f/0x9b0 [ 1263.865020][T15854] ? __pfx_netlink_unicast+0x10/0x10 [ 1263.870565][T15854] ? netlink_sendmsg+0x650/0xb40 [ 1263.875630][T15854] ? skb_put+0x11b/0x210 [ 1263.879944][T15854] netlink_sendmsg+0x813/0xb40 [ 1263.884775][T15854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.890619][T15854] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1263.896640][T15854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1263.901999][T15854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.907431][T15854] ____sys_sendmsg+0xa68/0xad0 [ 1263.912277][T15854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1263.918049][T15854] ? import_iovec+0x73/0xa0 [ 1263.922628][T15854] ___sys_sendmsg+0x2a5/0x360 [ 1263.927663][T15854] ? __pfx____sys_sendmsg+0x10/0x10 [ 1263.933068][T15854] ? __fget_files+0x2a/0x420 [ 1263.937907][T15854] ? __fget_files+0x3a0/0x420 [ 1263.942663][T15854] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1263.948083][T15854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1263.953610][T15854] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 1263.959470][T15854] ? do_user_addr_fault+0xc6f/0x1340 [ 1263.964870][T15854] do_syscall_64+0x14d/0xf80 [ 1263.969593][T15854] ? trace_irq_disable+0x3b/0x150 [ 1263.974685][T15854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.981185][T15854] ? clear_bhb_loop+0x40/0x90 [ 1263.986017][T15854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.992060][T15854] RIP: 0033:0x7f9f88b9c799 [ 1263.996607][T15854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.016884][T15854] RSP: 002b:00007f9f89a5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.025417][T15854] RAX: ffffffffffffffda RBX: 00007f9f88e16090 RCX: 00007f9f88b9c799 [ 1264.033463][T15854] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1264.041589][T15854] RBP: 00007f9f88c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1264.050062][T15854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.058185][T15854] R13: 00007f9f88e16128 R14: 00007f9f88e16090 R15: 00007fffe54328a8 [ 1264.066441][T15854] [ 1264.069533][T15854] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1264.076861][T15854] CPU: 0 UID: 0 PID: 15854 Comm: syz.0.11063 Not tainted syzkaller #0 PREEMPT(full) [ 1264.086370][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1264.096483][T15854] Call Trace: [ 1264.099817][T15854] [ 1264.102809][T15854] vpanic+0x56c/0xa60 [ 1264.106885][T15854] ? __pfx__printk+0x10/0x10 [ 1264.111674][T15854] ? __pfx_vpanic+0x10/0x10 [ 1264.116236][T15854] ? is_bpf_text_address+0x292/0x2b0 [ 1264.121669][T15854] ? is_bpf_text_address+0x26/0x2b0 [ 1264.127019][T15854] panic+0xc5/0xd0 [ 1264.130808][T15854] ? __pfx_panic+0x10/0x10 [ 1264.135289][T15854] __warn+0x315/0x4f0 [ 1264.139334][T15854] ? wbt_init_enable_default+0x18a/0x220 [ 1264.145028][T15854] ? wbt_init_enable_default+0x18a/0x220 [ 1264.150732][T15854] __report_bug+0x29a/0x540 [ 1264.155399][T15854] ? netlink_rcv_skb+0x232/0x4b0 [ 1264.160429][T15854] ? genl_rcv+0x28/0x40 [ 1264.164650][T15854] ? netlink_unicast+0x80f/0x9b0 [ 1264.169644][T15854] ? wbt_init_enable_default+0x18a/0x220 [ 1264.175326][T15854] ? __pfx___report_bug+0x10/0x10 [ 1264.180412][T15854] ? wbt_init_enable_default+0x18a/0x220 [ 1264.186180][T15854] report_bug+0x16a/0x220 [ 1264.190543][T15854] ? wbt_init_enable_default+0x18a/0x220 [ 1264.196229][T15854] ? wbt_init_enable_default+0x18c/0x220 [ 1264.201912][T15854] handle_bug+0x98/0x200 [ 1264.206186][T15854] exc_invalid_op+0x1a/0x50 [ 1264.210716][T15854] asm_exc_invalid_op+0x1a/0x20 [ 1264.215594][T15854] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 1264.221863][T15854] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 ed d3 25 fd eb 18 e8 e6 d3 25 fd eb 0d e8 df d3 25 fd 4c 89 ff e8 f7 e1 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1264.241506][T15854] RSP: 0018:ffffc900044fee30 EFLAGS: 00010282 [ 1264.247610][T15854] RAX: ad584ed3beaad300 RBX: 1ffff1100ad86c04 RCX: 0000000000000046 [ 1264.255614][T15854] RDX: 0000000000000006 RSI: ffffffff8def654c RDI: ffffffff8c27aa00 [ 1264.263619][T15854] RBP: dffffc0000000000 R08: ffffffff90112cb7 R09: 1ffffffff2022596 [ 1264.271717][T15854] R10: dffffc0000000000 R11: fffffbfff2022597 R12: ffff888056c36020 [ 1264.279731][T15854] R13: 0000000000000000 R14: ffff88807da64000 R15: ffff888056c36000 [ 1264.287807][T15854] blk_register_queue+0x382/0x430 [ 1264.292901][T15854] __add_disk+0x677/0xd50 [ 1264.297288][T15854] ? down_read+0x272/0x2e0 [ 1264.301744][T15854] add_disk_fwnode+0xfb/0x480 [ 1264.306465][T15854] nbd_dev_add+0x72c/0xb50 [ 1264.310922][T15854] ? __pfx_nbd_dev_add+0x10/0x10 [ 1264.315950][T15854] ? bpf_lsm_capable+0x9/0x20 [ 1264.320849][T15854] ? security_capable+0x7e/0x2c0 [ 1264.325819][T15854] ? radix_tree_lookup+0x25c/0x290 [ 1264.330974][T15854] nbd_genl_connect+0x962/0x1cf0 [ 1264.335975][T15854] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1264.341502][T15854] ? rcu_is_watching+0x15/0xb0 [ 1264.346316][T15854] ? trace_kmalloc+0x2a/0x110 [ 1264.351030][T15854] ? __nla_parse+0x40/0x60 [ 1264.355491][T15854] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1264.361867][T15854] genl_family_rcv_msg_doit+0x22a/0x330 [ 1264.367715][T15854] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1264.373849][T15854] ? __lock_acquire+0x6b5/0x2cf0 [ 1264.378826][T15854] genl_rcv_msg+0x61c/0x7a0 [ 1264.383378][T15854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1264.388443][T15854] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1264.393853][T15854] ? __lock_acquire+0x6b5/0x2cf0 [ 1264.398839][T15854] netlink_rcv_skb+0x232/0x4b0 [ 1264.403644][T15854] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1264.408711][T15854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1264.414040][T15854] ? down_read+0x272/0x2e0 [ 1264.418500][T15854] ? genl_rcv+0xd/0x40 [ 1264.422608][T15854] genl_rcv+0x28/0x40 [ 1264.426621][T15854] netlink_unicast+0x80f/0x9b0 [ 1264.431434][T15854] ? __pfx_netlink_unicast+0x10/0x10 [ 1264.437008][T15854] ? netlink_sendmsg+0x650/0xb40 [ 1264.441978][T15854] ? skb_put+0x11b/0x210 [ 1264.446265][T15854] netlink_sendmsg+0x813/0xb40 [ 1264.451077][T15854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1264.456401][T15854] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1264.461410][T15854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1264.466732][T15854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1264.472054][T15854] ____sys_sendmsg+0xa68/0xad0 [ 1264.476869][T15854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1264.482206][T15854] ? import_iovec+0x73/0xa0 [ 1264.486755][T15854] ___sys_sendmsg+0x2a5/0x360 [ 1264.491484][T15854] ? __pfx____sys_sendmsg+0x10/0x10 [ 1264.496765][T15854] ? __fget_files+0x2a/0x420 [ 1264.501410][T15854] ? __fget_files+0x3a0/0x420 [ 1264.506132][T15854] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1264.511110][T15854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1264.517561][T15854] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 1264.523236][T15854] ? do_user_addr_fault+0xc6f/0x1340 [ 1264.528649][T15854] do_syscall_64+0x14d/0xf80 [ 1264.533293][T15854] ? trace_irq_disable+0x3b/0x150 [ 1264.538351][T15854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.544445][T15854] ? clear_bhb_loop+0x40/0x90 [ 1264.549170][T15854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.555088][T15854] RIP: 0033:0x7f9f88b9c799 [ 1264.559550][T15854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.579187][T15854] RSP: 002b:00007f9f89a5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.587631][T15854] RAX: ffffffffffffffda RBX: 00007f9f88e16090 RCX: 00007f9f88b9c799 [ 1264.595627][T15854] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1264.603626][T15854] RBP: 00007f9f88c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1264.611625][T15854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.619619][T15854] R13: 00007f9f88e16128 R14: 00007f9f88e16090 R15: 00007fffe54328a8 [ 1264.627636][T15854] [ 1264.631286][T15854] Kernel Offset: disabled [ 1264.635641][T15854] Rebooting in 86400 seconds..