last executing test programs: 19.938831115s ago: executing program 2 (id=2811): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0xffffffffffffffe5, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x349c41, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 19.747431708s ago: executing program 1 (id=2815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xfffffffffffffeff, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x800) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r10, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r11, 0x29, 0x15, &(0x7f0000000340)={@remote}, 0x14) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) write$nci(r9, &(0x7f0000000980)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x6}, 0x4) write$nci(r1, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x2, @f={0x7, 0x5, 0x2, 0xe5, {0x5, 0x2, "c71d"}, 0x2}}, 0xc) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r14 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r14, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=@getchain={0x44, 0x66, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0xfff2, 0x9}, {0x5, 0xfff2}, {0x8, 0x5}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x4626}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x804) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) ioctl$AUTOFS_IOC_ASKUMOUNT(r16, 0x80049370, &(0x7f0000000a00)) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x5}}}}]}, 0x30}}, 0x0) r17 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r17], 0x3c}}, 0x0) 19.166553556s ago: executing program 4 (id=2818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x40000000, 0x25dfdbfe, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x0, 0x2000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x20004004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)=""/151, 0x97}, {&(0x7f0000000a00)=""/189, 0xbd}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000840)=""/206, 0xce}, {&(0x7f0000002f00)=""/4083, 0xff3}], 0x5}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @broadcast}, &(0x7f0000000080)=0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000030000000500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001000000010000557b"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001c40)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001d40)=0xe8) r9 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001d80)={0xffffffffffffffff, r8, r9}, 0xc) r10 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x0, 0xfff, 0x30, @mcast1, @local, 0x80, 0x20, 0x1000, 0x157891a8}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000005500)=ANY=[@ANYBLOB="02", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf250e0000002800018008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468305f6d61637674617000000008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="0c0001800800030003000000"], 0x16d4}, 0x1, 0x0, 0x0, 0x480c0}, 0xc001) setsockopt$bt_BT_RCVMTU(r10, 0x112, 0xd, &(0x7f0000000600)=0x2d6, 0x2) 18.878404264s ago: executing program 2 (id=2820): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d9, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000180)=0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x6, 0x1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x40, 0x480, 0x7fffffff, 0x2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=@delqdisc={0x2c, 0x25, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0x1c}, {0xa, 0x1}, {0xe, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000580)=@gcm_256={{0x304}, "14f87481ea6773e9", "aa0a45708eea247e74ca2b932f2dbfbfac50db6680f92b9842de431c274cbdc7", "6aaa1e35", "dbb77c01e0650bc0"}, 0x38) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x0, 0x7, 0xfffffffd}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r2, @ANYBLOB="000229bd7000ffdbdf25150000009c0001801400020076657468300000000000000000000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r3, @ANYBLOB="14000200626f6e643000000000000000000000001400020076657468305f766c616e0000000000000800030001000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="45140100e6efbfc500fc715442e662832831645c410da2c2a1a1d04bbf3ef7afbbd6dc1bf23a5edce9003378ccc4ba3c70ebe1fe5f7962a308f500c51ae967b04152b2b282851a6ca6722613f3672a08efcefbfcc44750ea4ed993e51c500ecac67d065baa098bc76891d8a93e0063edc15d851adf8840fd03fd3d3cff17765190fdbb1359a8e4ae8426c34758caa2bfec5345509254bd2f72f1c76f4241a4856091aa361de006e780e435abff325f1c0a2dd728c5e0444b1aa23068dcbfc432ec2843b67329af470f00b4c65702e60452aeb5580c2a54557ee30fa622b4d39e1af1d6b265ec0b2b4ccabeeed2d249eb142fc18f4e20fc1d7c23f7482ee9", @ANYRES32=r7, @ANYBLOB="14000200776c616e3100000000000000000000000c0001800800030000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) 18.742946073s ago: executing program 1 (id=2822): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) r5 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r1, r4, r5}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x54, 0x2, 0xb8, 0x80, 0x85, 0x9, 0x21, 0x80, 0x8, 0x82, 0x4e, 0xff, 0x3}, 0xe) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 18.621306139s ago: executing program 4 (id=2825): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x8}}}, 0x84) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x1, r6, 0x0, r4}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async, rerun: 32) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a80)={0x2c4, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff800000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xddd}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd49}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x19400000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x127}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}]}, 0x2c4}}, 0x4000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'geneve0\x00', 0x0}) (async, rerun: 64) r9 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendto$packet(r9, &(0x7f0000000780)="800000800000210ee7decd7a000000008100", 0x12, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 18.414340217s ago: executing program 4 (id=2827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711009000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 18.306722365s ago: executing program 4 (id=2829): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfff, 0x0, 0x0, 0xffffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfff, 0x0, 0x0, 0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010000000000007f0ba3d594315ab500000c000000000000000000"], 0x24}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) (async) listen(r3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000400)={r3, 0x7}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000400)={r3, 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmmsg(r2, &(0x7f0000008c00)=[{{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b00)=""/197, 0xc5}, {&(0x7f0000000c00)=""/99, 0x63}, {&(0x7f0000000c80)=""/155, 0x9b}, {&(0x7f0000000280)=""/26, 0x1a}], 0x4, &(0x7f0000000d80)=""/24, 0x18}, 0x4}, {{&(0x7f0000000dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003500)=[{&(0x7f0000000e40)=""/201, 0xc9}, {&(0x7f0000000f40)=""/201, 0xc9}, {&(0x7f0000001040)=""/86, 0x56}, {&(0x7f00000010c0)=""/170, 0xaa}, {&(0x7f0000001180)=""/217, 0xd9}, {&(0x7f0000001280)=""/138, 0x8a}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/133, 0x85}, {&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, &(0x7f00000035c0)=""/234, 0xea}, 0x4}, {{&(0x7f00000036c0)=@tipc=@name, 0x80, &(0x7f0000003840)=[{&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000003740)=""/234, 0xea}], 0x2, &(0x7f0000004940)=""/253, 0xfd}, 0xff}, {{&(0x7f0000003880)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004a40)=""/28, 0x1c}, {&(0x7f0000004a80)=""/120, 0x78}, {&(0x7f0000004b00)=""/28, 0x1c}, {&(0x7f0000004b40)=""/102, 0x66}], 0x4, &(0x7f0000004c00)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000005c00)=@phonet, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005c80)=""/177, 0xb1}, {&(0x7f0000005d40)=""/196, 0xc4}, {&(0x7f0000005e40)}], 0x3}, 0x9}, {{&(0x7f0000005ec0)=@nl=@unspec, 0x80, &(0x7f0000006340), 0x0, &(0x7f00000063c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f00000073c0)=@caif=@dgm, 0x80, &(0x7f0000007540)=[{&(0x7f0000007440)=""/244, 0xf4}], 0x1, &(0x7f0000007580)=""/61, 0x3d}, 0x7}, {{0x0, 0x0, &(0x7f0000007800)=[{&(0x7f00000075c0)=""/172, 0xac}, {&(0x7f0000007680)=""/66, 0x42}, {&(0x7f0000007700)=""/190, 0xbe}, {&(0x7f00000077c0)=""/63, 0x3f}], 0x4, &(0x7f0000007840)=""/28, 0x1c}, 0x1}, {{&(0x7f0000007880)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000008ac0)=[{&(0x7f0000007900)=""/18, 0x12}, {&(0x7f0000007940)=""/99, 0x63}, {&(0x7f00000079c0)=""/4096, 0x1000}, {&(0x7f00000089c0)=""/64, 0x40}, {&(0x7f0000005e40)=""/48, 0x30}, {&(0x7f0000008a40)=""/10, 0xa}, {&(0x7f0000008a80)=""/58, 0x3a}], 0x7, &(0x7f0000008b40)=""/143, 0x8f}}], 0x9, 0x20, &(0x7f0000008e80)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b07020000f8ffff5cffb703000008000000b704000001000000850000006d000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000880)={r0, 0x0, 0x2}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000880)={r0, 0x0, 0x2}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x2e, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000d2000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7038000000000000200000083000000bf090000000000005509010000000000950000000000000004000020", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018000000010000000000000009000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000500000018470000f8ffffff000000000000000018250000", @ANYRES32=r5, @ANYBLOB="000000000700000018430000faffffff0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x8, 0x4e, &(0x7f0000000780)=""/78, 0x40f00, 0x10, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000800)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x1, 0x40, 0x10000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000940)=[r7, 0x1, r8, r9, r10], &(0x7f0000000980)=[{0x1, 0x3, 0x1, 0x3}, {0x5, 0x3, 0x6, 0x2}, {0x2, 0x2, 0x2, 0x2}, {0x0, 0x4, 0x4, 0xb}, {0x0, 0x2, 0xb, 0x8}, {0x3, 0x1, 0x9, 0x5}, {0x0, 0x5, 0x7, 0xb}, {0x5, 0x5, 0x3}, {0x3, 0x4, 0x0, 0xb}], 0x10, 0x10001}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) (async) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r11, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800ff8100005f1017351572ddc9f3da00000000000000000000000000ff02000000000017fc433ecfcbf3022da67b1c0000000000000001242081b130000000000000000800000086dd080088be86ddffffff0000000100000000000000210022eb000000002000e0000200000000000000000000f7080065580000000005cf0402669c8478d81d31db79e19ccbd6f4977fc10a43337ca9898bcbbb81f7a899440e7748954a5cdfef4292cca23bb60768dd"], 0x0) (async) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800ff8100005f1017351572ddc9f3da00000000000000000000000000ff02000000000017fc433ecfcbf3022da67b1c0000000000000001242081b130000000000000000800000086dd080088be86ddffffff0000000100000000000000210022eb000000002000e0000200000000000000000000f7080065580000000005cf0402669c8478d81d31db79e19ccbd6f4977fc10a43337ca9898bcbbb81f7a899440e7748954a5cdfef4292cca23bb60768dd"], 0x0) r12 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r12, 0x84, 0x8, &(0x7f00000003c0)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r12, 0x84, 0x8, &(0x7f00000003c0)=0x9, 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r12, 0x0, 0x489, &(0x7f0000000180)={{0x1, @multicast1, 0x4e24, 0x1, 'fo\x00', 0x25, 0x4, 0x3c}, {@local, 0x4e22, 0x3, 0x2, 0x0, 0x3ff}}, 0x44) 17.942763268s ago: executing program 3 (id=2832): unshare(0x600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711093000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 17.81401036s ago: executing program 3 (id=2833): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[], 0x6) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010008000000430100008000000088a800001400"], 0x68}}, 0x24040800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 17.812385799s ago: executing program 2 (id=2834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x510, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xb}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4e4, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}, @TCA_FW_ACT={0x4cc, 0x4, [@m_csum={0x128, 0x2, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x3, 0x2, 0x0, 0x2}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xdde, 0x101, 0xffffffffffffffff, 0x2, 0x6}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x10, 0x0, 0x1ff, 0x9}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x2, 0x5, 0xad, 0xd9b}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x72fe, 0x1, 0x0, 0x0, 0x10000}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7fff, 0x1, 0x10001, 0x54}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x3, 0x80000001, 0x6}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x6, 0xe7, 0xb}, 0x9}}]}, {0x1a, 0x6, "3fc183587249ba353c8f032bff405d4c6ee773e6ebbe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x190, 0x1f, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x2, 0x5, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x1, 0x7, 0x2, 0xfffff48f}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x2, 0x3, 0x452eaf69, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb71}]}, {0xdd, 0x6, "73f3378d3cb8093731d54d6625d5e40e26989cad7b3678722a72f4a05de58d6c360c36489dbefbd67c3266534a2af385ee347a8656965af6eee4a599793e8ec1819a62087d0ee81ac70e8766be7df34dbe9e4d10d75c401e054737f54ffedd32f272188a9222b2a6a90ee4eef545456fc6c6f45a7a42793466b642393f4d965964839018f70a295718a218e591ecbbe8ce9b72f1646ae8abd75444d6c687e8c03e4838ae69e632fb70dfdf24a55600ffafb459506e6503cfb0e3c6bbeeb5188e24b76b219a0714b16e19bafbc5bfc4ca46a13c777c46f13e8e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xcc, 0xc, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xe342, 0x7, 0x20000000, 0x9, 0x7}}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x9, 0x1, 0x2}}, @TCA_DEF_DATA={0xf, 0x3, '+*\\\'.}/(@-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffd, 0xffffff38, 0x7, 0x1, 0x4}}, @TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '\\\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x144, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7f}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x510}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000140)="4307ed2e", 0x4}], 0x2}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r6, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000001c0)={r8, r7}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r10, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x460, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x430, 0x2, [@TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xb, 0x7, 0x7}, {{0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x81, 0x2, 0x59c8}, {0x6, 0x4, 0x7e336fb016bcb104, "b39fb824"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{}, {0x0, 0x3, 0x3, "805071"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa, 0x8, 0x7}, {0x0, 0x5, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5253, 0x3, 0x7}, {0xff, 0xffff88fc, 0x3886000, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0x619a, 0x3, 0xbb, 0x6, 0x8, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1}, {{0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x81}, {0x40, 0x7, 0x1, "de518bb0be703d"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_BASIC_EMATCHES={0x360, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x264, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x4}, {0x9, 0x7, 0x2e, 0x5, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x9}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0xf8, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xd1, 0x5, "8e53c00a304351adba662afce8c85077d30f98e6375cc999c715130c25f26e87226246e3b6fe8b099be87b56810724b4ac09342602ea05e16f013b2d91a70839c40fba6ec1480a0bee7324abacca2686740aa1189a8c4b988ecd6d0bb4c86bf6515f99bdfdeda784a8fd8e771cbe5e704daca7cd7866e53304a358e4265c88f065b739efc8ae4dfbd0807843ba6222aeeb4948428344eb2df6e598a4fb6c11a26599c396447350c9b5dd906826715b63ba874ee5d40c7bd774a335cff40a3be727f154def5fcef23a0b559a1ce"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x9}, {0x21, 0x4, 0x2, "4181c5ef"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x9}, {0x7, 0x0, 0x8000, 0x2, 0xd}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfffd, 0x3, 0x8000}, {0x5, 0x3, 0x3, 0x6}}}, @TCF_EM_CONTAINER={0xc4, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x2}, "62c9219bee12c4159283cabfbfd5e2b3f39d4a23d37dcbeda640d97c1994d146da8d1c3a0e992209b8d9141d055cc172b38c16202b8edeb4de94298c421977b26be68291a07c9739f70b27d5af75e081bc14246b7e3eeb5920fec0595680976d7ca34360f800bb3cc9928c569a231e23cb1835d85cf14606a82a776945ab78e57b2bd433472d1becb9ef5496374c6984168ce42b37f17ed318e18d16d84f3d6a3d4c85b1305509e48e07f8e0672814c7dbf66f63ba"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0xff}, {0x0, 0x4c252b80, 0x6, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9}, {{0x4, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc5, 0x8, 0x3}, {0x1, 0x3, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x2, 0x1}, {0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xfff, 0x2, 0x9}, {0x8001, 0x1, 0x0, 'C'}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0xffff}, {0x2, 0x1, 0x6}}}, @TCF_EM_CONTAINER={0x7c, 0x3, 0x0, 0x0, {{0xcc}, "3cd5571179f6d6a5e1ddf8757dcc190ae0b7775c83ea80cd48409661007487c909f51612051d609bdcd41d18f0e39b13c0e5287bd6f2928fb07ff3881feadd3bc8318dbf8431c2d64e1ac0816c473f457efb1f99b82d311d461bc753f37f7949b432e8f60f9b4ac3e5572e7576205c"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x401, 0x1, 0xfff0}, {0x9, 0x9341, 0x531, 0x3, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getpeername$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000040)=0x1c) r11 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r11, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 17.739548647s ago: executing program 2 (id=2836): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="06000011", @ANYRES16=r5, @ANYBLOB="100026bd7000fedbdf256600000008000300", @ANYRES32=r6, @ANYBLOB="0c00990006000000520000000800b9800400bb005400b9800a00ba000002f2ff7f0000000c00bb000300090008000b000e00ba0009000b00ff0f0100ff0100000600ba00060000001400bb000800080009000800050027df008001000a00ba000300ff0109000000"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x40080) close(r1) r7 = socket(0xa, 0x2, 0x0) close(r7) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x21, 0x0, &(0x7f0000003c00)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x40) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r7) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r9, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xca}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r12, 0x400448e1, &(0x7f0000000a80)="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"/436) 17.666927062s ago: executing program 1 (id=2837): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async, rerun: 64) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffffe, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7d, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 17.666066196s ago: executing program 3 (id=2838): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x1}, &(0x7f0000000600)=0x8) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000", @ANYRES8, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRESOCT=r5, @ANYRESDEC=r5], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0x6, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r10, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x809, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x0, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000500000000000000020000e418110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x12, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r12, 0x1, 0xd8, 0x6, @broadcast}, 0x14) listen(r4, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000008c0)={&(0x7f0000000440), 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'erspan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 17.589616932s ago: executing program 1 (id=2839): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1}, {{@in6=@mcast1, 0x0, 0x6c}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0x23c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000006111900000000000c6000000ffff00009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 17.582076536s ago: executing program 0 (id=2840): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) close(0x3) 17.446487491s ago: executing program 0 (id=2841): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, r6, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0xffffe000) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e22, @multicast1}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) 17.444110905s ago: executing program 2 (id=2842): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="00214717a7070000000003060000000000000000aaa6729043098c737d317c447bd55c0b041d5874f72cf86d73d3b92ef9d7", 0x32}], 0x1, 0x7, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03030000000000000000020000000c00024000000000000000020900010073797a30"], 0x54}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x10}, {0x6, 0x0, 0x0, 0x8007}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) 17.430562497s ago: executing program 1 (id=2843): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004"], 0x0, 0x34}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @random="0385e214711f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 17.350274531s ago: executing program 4 (id=2844): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x90) 17.234456617s ago: executing program 1 (id=2845): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000f9dbdf25440000f7159e6c91703510c3f7856997000800030016cb1620d054cf057284cee2286162c42685ea72e44d88d4be9ef85db01fdf9c5392701daf32581f7228b1d57a2ff82d6a8bb34ee9ad022e4c0121c1c83f493208ed9503b8c8f931c54e28d34149", @ANYRES32=r1, @ANYBLOB="14007000050002000000000005000100000000000a0018000303030303030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c001}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r7], 0x1c}}, 0x8004) write$nci(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r9], 0x4) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}}}, 0x0) 17.207503555s ago: executing program 4 (id=2846): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x1e, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x84010) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/net\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair(0x18, 0x1, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02002bbd7000fcdbdf25010000000000000007410000004c00180000000562726f6164636173742d6c696e6b00000000000000000000000000000100"/98], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) connect$tipc(r5, &(0x7f0000000000), 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 15.777848643s ago: executing program 0 (id=2847): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0x8, 0xf}, {0xffe5, 0xd}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402148006"], 0x1bbc}}, 0x20008054) 15.63436922s ago: executing program 2 (id=2848): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000002c0), &(0x7f0000000440)=r0}, 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002e00090027bd7000000000000400000004000e"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 15.633529797s ago: executing program 3 (id=2849): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xd1a3, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x8, 0xb, 0x7, 0x3, 0x7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x900}, @alu={0x7, 0x0, 0x7, 0x4, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xd1a3, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) (async) pipe(&(0x7f0000000140)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) (async) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x8, 0xb, 0x7, 0x3, 0x7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x900}, @alu={0x7, 0x0, 0x7, 0x4, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) 15.548142933s ago: executing program 3 (id=2850): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 15.444091091s ago: executing program 3 (id=2851): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) close(r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r8, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010100000000fcffffff2b00000008000300", @ANYRES32=r12, @ANYBLOB="0400460005003400c4000000080026006c0900002400518020000080050002000000000011000500e840c03cd5d9"], 0x54}, 0x1, 0x0, 0x0, 0x4044015}, 0x48000) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r11, 0x8002f515, &(0x7f0000000200)) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="dc0000001e17503fd04a848a5f085bc063ae5df9730000000002"], 0xdc}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 32) connect$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @bcast, 0x5}, [@default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e0000040002800800050007faad6cef4c63c7659fb717023f61f4a59eaf4af255d49e546bf30704e87e77aa194cc6c52e194a122ad7cc9db7182fcbc7baf93c819e3c04b4627307ca8042b8", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 15.206395918s ago: executing program 0 (id=2852): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, 0x1, 0x0, 0x60, 0x0, [{}, {}, {@multicast2}, {}, {@multicast2}, {@remote}]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="f8b00e6315fa7165cb7a9cb574d000000000000065727370616e0000002c000280140018020000000000000000000000000000000105001601020000000400120005001700000000"], 0x60}}, 0x0) 15.19093238s ago: executing program 0 (id=2853): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 15.166387215s ago: executing program 0 (id=2854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f0000000200), &(0x7f0000000240)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @device_a, @device_a, @random="4d63d4a04260", {0x3, 0x6}}, 0x1, 0x0, 0x4c, @void, [{0xdd, 0x6f, "5a1f8d5999e733c88d0eecc8d98bd1aa85b77fe5d12c15eb51575a9f606a2be364c95c392d856e189a96e223b4f0dfa2d79784de92e1c2743f70839812492d261823076136fb8981ee6bb3ccfb513d7dbb0e250c1454d8224b4d97cab2c33a64f1e28beb2972ddaecaea42633e7556"}]}, 0x8f) 2.130804904s ago: executing program 32 (id=2845): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000f9dbdf25440000f7159e6c91703510c3f7856997000800030016cb1620d054cf057284cee2286162c42685ea72e44d88d4be9ef85db01fdf9c5392701daf32581f7228b1d57a2ff82d6a8bb34ee9ad022e4c0121c1c83f493208ed9503b8c8f931c54e28d34149", @ANYRES32=r1, @ANYBLOB="14007000050002000000000005000100000000000a0018000303030303030000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c001}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r7], 0x1c}}, 0x8004) write$nci(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r9], 0x4) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}}}, 0x0) 2.085816848s ago: executing program 33 (id=2846): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x1e, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x84010) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/net\x00') preadv(r4, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair(0x18, 0x1, 0x7fff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02002bbd7000fcdbdf25010000000000000007410000004c00180000000562726f6164636173742d6c696e6b00000000000000000000000000000100"/98], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) connect$tipc(r5, &(0x7f0000000000), 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 59.296494ms ago: executing program 34 (id=2854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f0000000200), &(0x7f0000000240)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @device_a, @device_a, @random="4d63d4a04260", {0x3, 0x6}}, 0x1, 0x0, 0x4c, @void, [{0xdd, 0x6f, "5a1f8d5999e733c88d0eecc8d98bd1aa85b77fe5d12c15eb51575a9f606a2be364c95c392d856e189a96e223b4f0dfa2d79784de92e1c2743f70839812492d261823076136fb8981ee6bb3ccfb513d7dbb0e250c1454d8224b4d97cab2c33a64f1e28beb2972ddaecaea42633e7556"}]}, 0x8f) 46.421204ms ago: executing program 35 (id=2848): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000002c0), &(0x7f0000000440)=r0}, 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002e00090027bd7000000000000400000004000e"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 0s ago: executing program 36 (id=2851): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) close(r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r8, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010100000000fcffffff2b00000008000300", @ANYRES32=r12, @ANYBLOB="0400460005003400c4000000080026006c0900002400518020000080050002000000000011000500e840c03cd5d9"], 0x54}, 0x1, 0x0, 0x0, 0x4044015}, 0x48000) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r11, 0x8002f515, &(0x7f0000000200)) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="dc0000001e17503fd04a848a5f085bc063ae5df9730000000002"], 0xdc}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 32) connect$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @bcast, 0x5}, [@default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e0000040002800800050007faad6cef4c63c7659fb717023f61f4a59eaf4af255d49e546bf30704e87e77aa194cc6c52e194a122ad7cc9db7182fcbc7baf93c819e3c04b4627307ca8042b8", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) kernel console output (not intermixed with test programs): 4': attribute type 21 has an invalid length. [ 192.738220][ T8484] netlink: 'syz.2.746': attribute type 13 has an invalid length. [ 192.880200][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.880956][ T8494] openvswitch: netlink: Flow key attr not present in new flow. [ 192.922222][ T8484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.058675][ T8501] macvlan2: entered promiscuous mode [ 193.064248][ T8501] macvlan2: entered allmulticast mode [ 193.070969][ T8501] bond3: entered promiscuous mode [ 193.077611][ T8501] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.089874][ T8501] bond3: left promiscuous mode [ 193.583871][ T8544] veth0_to_batadv: entered allmulticast mode [ 193.653277][ T8547] batadv_slave_1: entered promiscuous mode [ 193.721880][ T8547] batadv_slave_1: left promiscuous mode [ 193.778896][ T8567] validate_nla: 8 callbacks suppressed [ 193.778916][ T8567] netlink: 'syz.3.771': attribute type 1 has an invalid length. [ 193.825013][ T8570] syzkaller1: entered promiscuous mode [ 193.844411][ T8570] syzkaller1: entered allmulticast mode [ 193.898470][ T8570] netlink: 'syz.1.773': attribute type 1 has an invalid length. [ 194.077097][ T8587] lo: entered promiscuous mode [ 194.086081][ T8587] tunl0: entered promiscuous mode [ 194.093741][ T8587] gre0: entered promiscuous mode [ 194.140415][ T8587] gretap0: entered promiscuous mode [ 194.159544][ T8587] erspan0: entered promiscuous mode [ 194.204526][ T8587] ip_vti0: entered promiscuous mode [ 194.263215][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.287074][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.484880][ T8617] nla_validate_range_unsigned: 23 callbacks suppressed [ 194.484897][ T8617] netlink: 'syz.0.785': attribute type 11 has an invalid length. [ 194.720241][ T8644] __nla_validate_parse: 9 callbacks suppressed [ 194.720257][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 194.806187][ T8652] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 194.901069][ T129] IPVS: starting estimator thread 0... [ 194.919188][ T8662] openvswitch: netlink: Message has 8 unknown bytes. [ 194.934484][ T8666] netlink: 184 bytes leftover after parsing attributes in process `syz.3.799'. [ 194.972846][ T8662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.996051][ T8659] IPVS: using max 28 ests per chain, 67200 per kthread [ 195.218988][ T8682] netlink: 32 bytes leftover after parsing attributes in process `syz.3.807'. [ 195.432832][ T8694] pimreg3: entered allmulticast mode [ 195.539387][ T8706] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 195.561938][ T8702] can: request_module (can-proto-0) failed. [ 195.620086][ T8706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.630804][ T8707] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 195.685351][ T8707] bond4: entered allmulticast mode [ 195.763197][ T8708] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 195.838753][ T8727] openvswitch: netlink: IP tunnel dst address not specified [ 196.132581][ T8749] Driver unsupported XDP return value 0 on prog (id 148) dev N/A, expect packet loss! [ 196.339529][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 196.340186][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 196.346249][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 196.352007][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 196.549817][ T8772] nft_compat: unsupported protocol 0 [ 196.779648][ T8777] "syz.0.833" (8777) uses obsolete ecb(arc4) skcipher [ 196.799357][ T8786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.902927][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 196.927786][ T8786] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 197.019627][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.839'. [ 197.039089][ T8799] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 197.196334][ T8816] openvswitch: netlink: Actions may not be safe on all matching packets [ 197.492382][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 197.519478][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 197.521539][ T8838] netlink: 220 bytes leftover after parsing attributes in process `syz.4.851'. [ 197.561559][ T8838] netlink: 220 bytes leftover after parsing attributes in process `syz.4.851'. [ 197.623062][ T8847] gre0: entered promiscuous mode [ 197.783616][ T8855] pim6reg: entered allmulticast mode [ 197.853772][ T8862] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.887720][ T8861] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 198.114369][ T8874] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 198.598294][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 198.669030][ T8915] syzkaller0: entered promiscuous mode [ 198.683729][ T8915] syzkaller0: entered allmulticast mode [ 198.844763][ T8932] IPVS: length: 115 != 24 [ 198.930717][ T8941] netlink: 'syz.4.883': attribute type 58 has an invalid length. [ 199.030884][ T8944] ip6t_rpfilter: unknown options [ 199.418066][ T8972] netlink: 'syz.2.892': attribute type 11 has an invalid length. [ 199.508411][ T8982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.653789][ T8989] tipc: Started in network mode [ 199.664105][ T8989] tipc: Node identity ac14140f, cluster identity 4711 [ 199.683299][ T8989] tipc: New replicast peer: 255.255.255.255 [ 199.690209][ T8989] tipc: Enabled bearer , priority 10 [ 199.966440][ T8998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.009097][ T6085] hid-generic 0005:0C45:000D.0001: unknown main item tag 0x0 [ 200.024790][ T6085] hid-generic 0005:0C45:000D.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 200.116745][ T9010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.139788][ T9014] __nla_validate_parse: 11 callbacks suppressed [ 200.139805][ T9014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.906'. [ 200.331415][ T9030] xt_l2tp: missing protocol rule (udp|l2tpip) [ 200.806139][ T5996] tipc: Node number set to 2886997007 [ 200.828416][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 200.851625][ T9053] bridge_slave_1: left allmulticast mode [ 200.863555][ T9053] bridge_slave_1: left promiscuous mode [ 200.877825][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.914712][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'. [ 200.924746][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.919'. [ 200.936396][ T9053] bridge_slave_0: left allmulticast mode [ 200.942417][ T9053] bridge_slave_0: left promiscuous mode [ 200.945716][ T9038] infiniband !yz!: set active [ 200.949836][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.956409][ T9038] infiniband !yz!: added team_slave_0 [ 201.088143][ T9038] RDS/IB: !yz!: added [ 201.098120][ T9069] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 201.125551][ T9038] smc: adding ib device !yz! with port count 1 [ 201.149338][ T9038] smc: ib device !yz! port 1 has no pnetid [ 201.170854][ T9069] bond4: entered promiscuous mode [ 201.205271][ T9069] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.219795][ T9079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 201.294171][ T9075] bond4: (slave bridge2): making interface the new active one [ 201.304012][ T9075] bridge2: entered promiscuous mode [ 201.315057][ T9075] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 201.399047][ T9090] tipc: Enabling of bearer rejected, already enabled [ 201.609838][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 201.622618][ T9105] netlink: 'syz.3.930': attribute type 21 has an invalid length. [ 201.683271][ T9110] netlink: 14 bytes leftover after parsing attributes in process `syz.3.930'. [ 202.075754][ T9133] netlink: 14 bytes leftover after parsing attributes in process `syz.2.938'. [ 202.126863][ T9133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.938'. [ 202.205336][ T9129] netlink: 56 bytes leftover after parsing attributes in process `syz.1.937'. [ 202.221924][ T9142] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 202.311308][ T9148] bond4 (unregistering): Released all slaves [ 202.732383][ T9167] lo: left promiscuous mode [ 202.737972][ T9167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.207197][ T9194] lo speed is unknown, defaulting to 1000 [ 203.941121][ T9233] tipc: Enabled bearer , priority 0 [ 203.979945][ T9234] syzkaller0: entered promiscuous mode [ 203.990287][ T9234] syzkaller0: entered allmulticast mode [ 204.123213][ T9235] tipc: Resetting bearer [ 204.181872][ T9235] tipc: Disabling bearer [ 204.338616][ T9259] : entered promiscuous mode [ 204.344817][ T9256] netlink: 'syz.2.973': attribute type 39 has an invalid length. [ 205.211256][ T9292] __nla_validate_parse: 12 callbacks suppressed [ 205.211275][ T9292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.982'. [ 205.372128][ T9294] syzkaller1: entered promiscuous mode [ 205.384441][ T9294] syzkaller1: entered allmulticast mode [ 205.946212][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 205.973204][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.993'. [ 205.986084][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 206.023940][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 206.037096][ T9329] netlink: 10 bytes leftover after parsing attributes in process `syz.1.995'. [ 206.092471][ T3860] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.102764][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 206.119648][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.995'. [ 206.134144][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.993'. [ 206.159811][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 206.168871][ T9329] netlink: 'syz.1.995': attribute type 11 has an invalid length. [ 206.169220][ T9329] tc_dump_action: action bad kind [ 206.183729][ T3860] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.194175][ T3860] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.224803][ T3860] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.307412][ T9344] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 206.382404][ T9344] bond4: (slave bridge1): making interface the new active one [ 206.394610][ T9344] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 206.429414][ T9348] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 206.479734][ T9348] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 206.507836][ T9347] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 206.548549][ T9347] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 207.255098][ T9391] openvswitch: netlink: IP tunnel TTL not specified. [ 207.380793][ T9396] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 207.748629][ T9411] tipc: Enabling of bearer rejected, already enabled [ 207.774860][ T9409] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 207.800917][ T9409] netlink: 'syz.0.1024': attribute type 2 has an invalid length. [ 207.835933][ T9409] netlink: 'syz.0.1024': attribute type 9 has an invalid length. [ 207.853773][ T9409] netlink: 'syz.0.1024': attribute type 11 has an invalid length. [ 208.071365][ T9428] ip_vti0: entered promiscuous mode [ 208.179948][ T9439] xt_SECMARK: invalid mode: 9 [ 208.593450][ T9470] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 208.700802][ T9477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 208.761950][ T9481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.008423][ T9494] openvswitch: netlink: Message has 6 unknown bytes. [ 209.178157][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88814dc72800: rx timeout, send abort [ 209.450904][ T9528] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 209.481504][ T9528] bond5: (slave lo): Enslaving as a backup interface with an up link [ 209.490788][ T9528] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 209.528065][ T5885] lo speed is unknown, defaulting to 1000 [ 209.534053][ T5996] lo speed is unknown, defaulting to 1000 [ 209.550496][ T5996] syz2: Port: 1 Link ACTIVE [ 209.612383][ T9541] set match dimension is over the limit! [ 209.678856][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88814dc70c00: rx timeout, send abort [ 209.687781][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88814dc72800: abort rx timeout. Force session deactivation [ 209.742130][ T9546] validate_nla: 2 callbacks suppressed [ 209.742147][ T9546] netlink: 'syz.4.1068': attribute type 1 has an invalid length. [ 209.864717][ T9546] bond6: entered promiscuous mode [ 209.870887][ T9546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 209.961726][ T9546] bond6: (slave bridge2): making interface the new active one [ 209.971928][ T9546] bridge2: entered promiscuous mode [ 209.979461][ T9546] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 209.991647][ T9561] v: renamed from vlan0 (while UP) [ 210.013646][ T9564] "syz.2.1072" (9564) uses obsolete ecb(arc4) skcipher [ 210.187211][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88814dc70c00: abort rx timeout. Force session deactivation [ 210.387003][ T9583] vxcan1: tx address claim with dlc 0 [ 210.443169][ T9583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.477855][ T9585] netlink: 'syz.3.1078': attribute type 12 has an invalid length. [ 210.884695][ T9616] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 210.929914][ T9618] __nla_validate_parse: 21 callbacks suppressed [ 210.929933][ T9618] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1088'. [ 211.011535][ T9625] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 211.041930][ T9629] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1091'. [ 211.154583][ T9632] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1091'. [ 211.445154][ T9656] netlink: 'syz.4.1101': attribute type 26 has an invalid length. [ 211.469731][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 211.481010][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 211.491453][ T9656] netlink: 'syz.4.1101': attribute type 26 has an invalid length. [ 211.501855][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 211.509412][ T9658] gtp0: entered promiscuous mode [ 211.518878][ T9658] gtp0: entered allmulticast mode [ 211.798739][ T9685] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 211.841148][ T9685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.891317][ T9688] syzkaller0: entered promiscuous mode [ 211.899569][ T9688] syzkaller0: entered allmulticast mode [ 212.000925][ T9693] can: request_module (can-proto-0) failed. [ 212.387046][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 212.417782][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 212.433167][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 212.483522][ T9720] netlink: 'syz.0.1123': attribute type 10 has an invalid length. [ 212.499214][ T12] bond4: (slave bond0): link status definitely down, disabling slave [ 212.517968][ T12] bond4: now running without any active interface! [ 212.560756][ T9735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1130'. [ 212.571265][ T9732] bond3: option lp_interval: invalid value (0) [ 212.580793][ T9732] bond3: option lp_interval: allowed values 1 - 2147483647 [ 212.594243][ T9732] bond3 (unregistering): Released all slaves [ 212.650040][ T9743] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 212.920049][ T9757] syzkaller0: entered allmulticast mode [ 213.220074][ T9781] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 213.314208][ T9783] netlink: 'syz.1.1148': attribute type 4 has an invalid length. [ 213.442069][ T9800] xt_SECMARK: invalid mode: 9 [ 213.444988][ T9803] x_tables: duplicate underflow at hook 1 [ 213.477869][ T9804] syzkaller0: entered promiscuous mode [ 213.489108][ T9804] syzkaller0: entered allmulticast mode [ 213.690323][ T9819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.784930][ T9824] x_tables: duplicate underflow at hook 1 [ 213.894774][ T9829] smc: removing ib device !yz! [ 214.337923][ T9855] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 214.705086][ T9865] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 216.298887][ T9948] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 216.359083][ T9948] bond6 (unregistering): Released all slaves [ 216.423700][ T9965] __nla_validate_parse: 4 callbacks suppressed [ 216.423711][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 216.590891][ T9974] nbd: must specify a device to reconfigure [ 216.644706][ T9979] IPv6: NLM_F_REPLACE set, but no existing node found! [ 216.652378][ T9980] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1203'. [ 216.826690][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 216.832129][ T9995] validate_nla: 2 callbacks suppressed [ 216.832147][ T9995] netlink: 'syz.0.1207': attribute type 29 has an invalid length. [ 216.882620][ T9995] netlink: 'syz.0.1207': attribute type 29 has an invalid length. [ 216.946539][ T9998] tipc: Enabled bearer , priority 10 [ 217.116851][T10006] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1213'. [ 217.202646][T10016] syzkaller1: entered promiscuous mode [ 217.212140][T10016] syzkaller1: entered allmulticast mode [ 217.230889][T10018] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 217.347712][T10016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1215'. [ 217.479307][T10037] netlink: 'syz.3.1220': attribute type 16 has an invalid length. [ 217.521341][T10037] netlink: 'syz.3.1220': attribute type 17 has an invalid length. [ 217.635362][T10037] tunl0: left promiscuous mode [ 217.644914][T10037] gre0: left promiscuous mode [ 217.668704][T10050] netlink: 'syz.2.1224': attribute type 4 has an invalid length. [ 217.714431][T10037] gretap0: left promiscuous mode [ 217.721636][T10055] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1225'. [ 217.734634][T10037] erspan0: left promiscuous mode [ 217.748068][T10037] ip_vti0: left promiscuous mode [ 217.769564][T10037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.032109][T10074] xt_l2tp: wrong L2TP version: 0 [ 218.345276][T10091] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1235'. [ 218.577224][T10109] netlink: 'syz.3.1239': attribute type 1 has an invalid length. [ 218.801324][T10125] .: renamed from bridge_slave_1 [ 218.965785][T10138] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1249'. [ 219.070678][T10136] netlink: 'syz.1.1250': attribute type 10 has an invalid length. [ 219.093614][T10136] veth0_virt_wifi: entered allmulticast mode [ 219.113648][T10136] team0: Port device veth0_virt_wifi added [ 219.190649][T10154] syzkaller0: entered promiscuous mode [ 219.196621][T10154] syzkaller0: entered allmulticast mode [ 219.268786][T10165] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 219.311426][T10167] xt_NFQUEUE: number of total queues is 0 [ 219.590647][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 219.642576][T10198] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 219.732066][T10202] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1269'. [ 219.904332][T10216] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 220.077066][T10226] syzkaller1: entered promiscuous mode [ 220.082942][T10226] syzkaller1: entered allmulticast mode [ 220.830309][T10240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.843144][T10240] x_tables: unsorted entry at hook 1 [ 221.676785][T10258] __nla_validate_parse: 4 callbacks suppressed [ 221.676800][T10258] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1293'. [ 221.815723][T10273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1294'. [ 221.854114][T10275] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 221.909347][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1295'. [ 222.012658][T10289] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1301'. [ 222.078496][T10291] validate_nla: 4 callbacks suppressed [ 222.078508][T10291] netlink: 'syz.4.1302': attribute type 13 has an invalid length. [ 222.100730][T10291] gretap0: refused to change device tx_queue_len [ 222.110139][T10291] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 222.219982][T10305] netlink: 'syz.1.1306': attribute type 1 has an invalid length. [ 222.228463][T10305] netlink: 'syz.1.1306': attribute type 7 has an invalid length. [ 222.236827][T10305] netlink: 'syz.1.1306': attribute type 8 has an invalid length. [ 222.244708][T10305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1306'. [ 222.513302][T10322] syzkaller1: entered promiscuous mode [ 222.538992][T10325] netlink: 'syz.1.1313': attribute type 10 has an invalid length. [ 222.549173][T10322] syzkaller1: entered allmulticast mode [ 222.778465][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 222.808510][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 222.881412][T10342] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1319'. [ 222.967619][T10353] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1321'. [ 222.980034][T10357] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1323'. [ 223.060246][T10356] bond7: option miimon: invalid value (18446744073709551585) [ 223.072476][T10356] bond7: option miimon: allowed values 0 - 2147483647 [ 223.084956][T10356] bond7 (unregistering): Released all slaves [ 223.122248][T10353] netlink: 'syz.3.1321': attribute type 2 has an invalid length. [ 223.251994][T10375] netlink: 'syz.0.1327': attribute type 33 has an invalid length. [ 223.279708][T10380] netlink: 'syz.0.1327': attribute type 33 has an invalid length. [ 223.378279][T10388] bond5: option mode: unable to set because the bond device has slaves [ 223.809180][T10422] netlink: 'syz.0.1340': attribute type 1 has an invalid length. [ 223.842132][T10422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.701370][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.907510][T10448] __nla_validate_parse: 6 callbacks suppressed [ 275.907529][T10448] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1345'. [ 275.939259][T10450] netlink: 'syz.4.1349': attribute type 33 has an invalid length. [ 275.959259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.961916][T10450] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1349'. [ 276.060906][T10456] netlink: 'syz.4.1349': attribute type 83 has an invalid length. [ 276.200629][T10447] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1344'. [ 276.210839][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 276.268957][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 276.305538][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1351'. [ 276.314832][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 276.355686][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1351'. [ 276.487963][T10473] netlink: 'syz.4.1353': attribute type 21 has an invalid length. [ 276.525977][T10473] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1353'. [ 276.541713][T10473] netlink: 'syz.4.1353': attribute type 4 has an invalid length. [ 276.561806][T10475] block nbd3: Unsupported socket: should be TCP or UNIX. [ 276.562518][T10478] netlink: 'syz.4.1353': attribute type 21 has an invalid length. [ 276.593292][T10473] netlink: 'syz.4.1353': attribute type 5 has an invalid length. [ 276.616564][T10478] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1353'. [ 276.675874][T10473] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1353'. [ 276.737907][T10478] netlink: 'syz.4.1353': attribute type 4 has an invalid length. [ 276.757905][T10478] netlink: 'syz.4.1353': attribute type 5 has an invalid length. [ 276.823225][T10487] bridge2: entered promiscuous mode [ 276.851223][T10487] bridge2: entered allmulticast mode [ 277.098394][T10516] C: renamed from lo (while UP) [ 277.129094][T10516] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 277.341713][T10530] bridge0: entered allmulticast mode [ 277.379509][T10533] tipc: Enabling of bearer rejected, failed to enable media [ 277.398900][T10532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.406233][T10532] IPv6: NLM_F_CREATE should be set when creating new route [ 277.413570][T10532] IPv6: NLM_F_CREATE should be set when creating new route [ 277.420882][T10532] IPv6: NLM_F_CREATE should be set when creating new route [ 277.450955][T10543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.630426][T10554] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 277.956747][T10580] netlink: 'syz.2.1386': attribute type 1 has an invalid length. [ 277.979855][T10580] batadv1: entered allmulticast mode [ 277.987381][T10580] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 278.445236][T10613] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 278.445349][T10613] block (null): Could not allocate knbd recv work queue. [ 278.508587][T10613] nbd: failed to add new device [ 279.417265][T10654] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 279.446441][T10656] bridge4: entered promiscuous mode [ 279.451839][T10656] bridge4: entered allmulticast mode [ 279.460723][T10656] team0: Port device bridge4 added [ 279.509105][T10656] bridge0: port 3(team0) entered blocking state [ 279.516233][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031eb0800: rx timeout, send abort [ 279.525086][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888031eb0800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 279.546593][T10656] bridge0: port 3(team0) entered disabled state [ 279.606293][T10656] team0: entered allmulticast mode [ 279.616579][T10656] team_slave_0: entered allmulticast mode [ 279.622826][T10656] team_slave_1: entered allmulticast mode [ 279.630790][T10656] geneve0: entered allmulticast mode [ 279.639234][T10656] team0: entered promiscuous mode [ 279.644749][T10656] team_slave_0: entered promiscuous mode [ 279.652123][T10656] team_slave_1: entered promiscuous mode [ 279.659240][T10656] geneve0: entered promiscuous mode [ 280.108232][T10693] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 280.147162][T10693] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 280.218465][T10692] NCSI netlink: No device for ifindex 65584 [ 280.233247][T10686] gretap1: entered promiscuous mode [ 280.254212][T10686] bond4: (slave gretap1): making interface the new active one [ 280.284379][T10686] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 280.334796][T10693] tipc: Enabling of bearer rejected, already enabled [ 280.393969][T10686] macvlan3: entered promiscuous mode [ 280.424358][T10686] macvlan3: entered allmulticast mode [ 280.451659][T10686] bond4: entered promiscuous mode [ 280.466995][T10686] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 280.517894][T10686] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 280.578700][T10686] bond4: left promiscuous mode [ 280.613035][T10714] syzkaller0: entered promiscuous mode [ 280.620044][T10714] syzkaller0: entered allmulticast mode [ 280.787277][T10736] openvswitch: netlink: Flow key attribute not present in set flow. [ 280.787277][T10735] openvswitch: netlink: Flow key attribute not present in set flow. [ 280.815126][T10733] tipc: Failed to remove unknown binding: 66,1,1/0:1854624153/1854624155 [ 281.072975][T10746] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 281.101375][T10754] xt_limit: Overflow, try lower: 604147548/4200216962 [ 281.111513][T10746] bond6 (unregistering): Released all slaves [ 281.182203][T10754] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 281.293768][T10764] __nla_validate_parse: 28 callbacks suppressed [ 281.293784][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1443'. [ 281.349048][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 281.349397][T10769] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:3619 [ 281.378801][T10775] validate_nla: 7 callbacks suppressed [ 281.378817][T10775] netlink: 'syz.3.1446': attribute type 1 has an invalid length. [ 281.381398][T10770] hsr_slave_0: left promiscuous mode [ 281.384414][T10775] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1446'. [ 281.407961][T10775] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1446'. [ 281.418660][T10770] hsr_slave_1: left promiscuous mode [ 281.433747][T10775] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1446'. [ 281.513672][T10779] syzkaller0: entered promiscuous mode [ 281.529479][T10779] syzkaller0: entered allmulticast mode [ 281.615225][T10791] openvswitch: netlink: Flow actions attr not present in new flow. [ 281.668098][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 281.727486][T10795] ip6gre1: entered allmulticast mode [ 281.768737][T10799] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 281.778059][T10799] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1456'. [ 281.793664][T10799] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1456'. [ 281.905214][T10808] bond0: entered promiscuous mode [ 281.911645][T10808] bond_slave_0: entered promiscuous mode [ 281.918146][T10808] bond_slave_1: entered promiscuous mode [ 281.928103][T10808] batadv0: entered promiscuous mode [ 281.942083][T10808] debugfs: 'hsr0' already exists in 'hsr' [ 281.949608][T10808] Cannot create hsr debugfs directory [ 281.966602][T10808] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 282.273362][T10831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.302230][T10838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.404175][T10844] netlink: 'syz.1.1469': attribute type 27 has an invalid length. [ 282.480028][T10848] netlink: 'syz.1.1469': attribute type 27 has an invalid length. [ 282.867017][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 283.723069][T10923] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1493'. [ 283.942835][T10939] sctp: [Deprecated]: syz.0.1495 (pid 10939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.942835][T10939] Use struct sctp_sack_info instead [ 284.879420][T10981] macsec2: entered promiscuous mode [ 284.884794][T10981] bridge0: entered promiscuous mode [ 284.895161][T10981] macsec2: entered allmulticast mode [ 284.903397][T10981] bridge0: entered allmulticast mode [ 284.913550][T10981] bridge0: port 3(macsec2) entered blocking state [ 284.920658][T10981] bridge0: port 3(macsec2) entered disabled state [ 284.933198][T10981] bridge0: left allmulticast mode [ 284.942200][T10981] bridge0: left promiscuous mode [ 285.146252][T10988] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 285.428938][T11015] syzkaller0: entered promiscuous mode [ 285.434456][T11015] syzkaller0: entered allmulticast mode [ 285.490500][T11021] netlink: 'syz.4.1523': attribute type 1 has an invalid length. [ 285.839578][T11035] netlink: 'syz.3.1527': attribute type 17 has an invalid length. [ 286.197030][T11049] netlink: 'syz.4.1525': attribute type 9 has an invalid length. [ 286.451027][T11053] netlink: 'syz.3.1530': attribute type 3 has an invalid length. [ 286.515854][T11061] netlink: 'syz.1.1532': attribute type 10 has an invalid length. [ 286.800356][T11075] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 286.839888][T11075] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 286.876470][T11075] gretap3: entered promiscuous mode [ 286.891954][T11075] gretap3: entered allmulticast mode [ 286.914100][T11084] netlink: 'syz.4.1539': attribute type 12 has an invalid length. [ 286.957168][T11084] syzkaller0: entered promiscuous mode [ 286.986868][T11084] syzkaller0: entered allmulticast mode [ 286.994127][T11081] __nla_validate_parse: 8 callbacks suppressed [ 286.994144][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1538'. [ 287.042681][T11085] xt_CT: No such helper "snmp_trap" [ 287.650300][T11123] netlink: 'syz.4.1550': attribute type 3 has an invalid length. [ 287.712070][T11123] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 287.787618][T11123] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1550'. [ 288.415252][T11175] syzkaller0: entered promiscuous mode [ 288.431829][T11175] syzkaller0: entered allmulticast mode [ 288.444490][T11175] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1558'. [ 288.549213][T11182] tipc: Enabling of bearer rejected, failed to enable media [ 288.579572][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 288.748068][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 288.796861][T11193] macvtap1: entered allmulticast mode [ 288.817933][T11193] veth0_macvtap: entered allmulticast mode [ 288.957052][T11191] bond9: option xmit_hash_policy: invalid value (64) [ 288.988881][T11191] bond9 (unregistering): Released all slaves [ 289.160636][T11215] delete_channel: no stack [ 289.179017][T11214] delete_channel: no stack [ 289.328797][T11221] openvswitch: netlink: Multiple metadata blocks provided [ 289.523149][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 289.873846][T11245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1579'. [ 289.910090][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 289.990582][T11253] vcan0 (unregistering): left allmulticast mode [ 290.223346][T11265] netlink: 'syz.0.1586': attribute type 11 has an invalid length. [ 290.231936][T11265] netlink: 'syz.0.1586': attribute type 4 has an invalid length. [ 290.247308][T11265] netlink: 'syz.0.1586': attribute type 5 has an invalid length. [ 290.266770][T11265] netlink: 'syz.0.1586': attribute type 6 has an invalid length. [ 290.274541][T11265] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.1586'. [ 290.298353][T11268] netlink: 'syz.0.1586': attribute type 11 has an invalid length. [ 290.308657][T11272] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1588'. [ 290.322685][T11268] netlink: 'syz.0.1586': attribute type 4 has an invalid length. [ 290.334089][T11268] netlink: 'syz.0.1586': attribute type 5 has an invalid length. [ 290.753628][T11294] openvswitch: netlink: Flow key attr not present in new flow. [ 290.828538][T10905] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.873051][T11300] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.877644][T10905] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.933579][T10905] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.965868][T10905] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.871937][T11363] x_tables: duplicate entry at hook 1 [ 291.881763][T11363] nbd: couldn't find a device at index 0 [ 292.042242][T11348] hsr_slave_1 (unregistering): left promiscuous mode [ 292.210262][T11383] __nla_validate_parse: 10 callbacks suppressed [ 292.210280][T11383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1619'. [ 292.622891][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 292.686656][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1627'. [ 292.834550][ T5832] Bluetooth: hci4: link tx timeout [ 292.841203][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.007467][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 293.407455][T11451] lo speed is unknown, defaulting to 1000 [ 293.410803][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 293.465594][T11456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1641'. [ 293.855578][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 293.997421][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1651'. [ 294.071663][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1652'. [ 294.279506][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 294.455240][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 294.467761][T11512] validate_nla: 3 callbacks suppressed [ 294.467777][T11512] netlink: 'syz.3.1661': attribute type 30 has an invalid length. [ 294.499533][T11514] netlink: 'syz.4.1660': attribute type 30 has an invalid length. [ 294.689764][T11514] bond9: option arp_missed_max: invalid value (0) [ 294.696379][T11514] bond9: option arp_missed_max: allowed values 1 - 255 [ 294.720750][T11514] bond9 (unregistering): Released all slaves [ 294.895570][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 295.407033][T11553] netlink: 'syz.0.1673': attribute type 10 has an invalid length. [ 295.443904][T11553] team0: Port device hsr0 added [ 295.604633][T11560] netlink: 'syz.2.1676': attribute type 1 has an invalid length. [ 295.910503][T11583] x_tables: duplicate underflow at hook 3 [ 296.105834][T11605] nbd: couldn't find a device at index 0 [ 296.524685][T11631] xt_hashlimit: size too large, truncated to 1048576 [ 296.893965][T11648] ieee802154 phy0 wpan0: encryption failed: -90 [ 297.147734][T11661] netlink: 'syz.2.1701': attribute type 32 has an invalid length. [ 297.293758][T11661] bond5: Setting coupled_control to off (0) [ 297.561491][T11683] __nla_validate_parse: 15 callbacks suppressed [ 297.561511][T11683] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1707'. [ 297.998729][T11698] xt_ecn: cannot match TCP bits for non-tcp packets [ 298.002171][T11700] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 298.007452][T11700] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 298.206495][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 298.284085][T11702] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 298.349037][T11702] bond6 (unregistering): Released all slaves [ 298.787316][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 299.144413][T11739] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 299.456254][T11755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1729'. [ 299.752872][T11777] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 299.838257][T11783] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1738'. [ 299.890887][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'. [ 300.042247][T11784] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.051094][T11784] bond6: (slave bond7): making interface the new active one [ 300.065402][T11784] bond6: (slave bond7): Enslaving as an active interface with an up link [ 300.093971][T11783] vxcan2: entered allmulticast mode [ 300.208440][T11807] netlink: 'syz.2.1742': attribute type 29 has an invalid length. [ 300.213521][T11783] syzkaller0: entered promiscuous mode [ 300.245601][T11783] syzkaller0: entered allmulticast mode [ 300.385210][T11817] x_tables: duplicate underflow at hook 1 [ 300.393920][T11817] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1745'. [ 301.424976][T11864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1761'. [ 301.434148][T11864] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 301.682881][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'. [ 301.697956][T11881] x_tables: duplicate underflow at hook 1 [ 301.774254][T11883] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 301.800306][T11885] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 301.859563][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'. [ 301.883885][T11896] netlink: 'syz.4.1770': attribute type 13 has an invalid length. [ 302.034188][T11866] netlink: 'syz.1.1763': attribute type 1 has an invalid length. [ 302.207313][T11908] netlink: 'syz.3.1773': attribute type 1 has an invalid length. [ 302.217021][T11908] netlink: 'syz.3.1773': attribute type 2 has an invalid length. [ 302.360292][T11917] netlink: 'syz.3.1775': attribute type 1 has an invalid length. [ 303.741027][T11917] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 303.756671][T11924] : entered promiscuous mode [ 303.910486][T11941] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 304.053948][T11953] batadv0: left promiscuous mode [ 304.155924][T11953] vlan2: left promiscuous mode [ 304.160741][T11953] geneve1: left promiscuous mode [ 304.306432][T11971] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 304.531332][T11991] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 304.557744][T11993] veth0_to_team: mtu greater than device maximum [ 304.676601][T12003] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 304.858979][T12011] bond6: Removing last arp target with arp_interval on [ 305.311362][T12051] Cannot find add_set index 65532 as target [ 305.324731][ T30] audit: type=1800 audit(1766933035.278:2): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1815" name="memory.events" dev="tmpfs" ino=1825 res=0 errno=0 [ 305.383661][ T30] audit: type=1804 audit(1766933035.308:3): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1815" name="/newroot/356/memory.events" dev="tmpfs" ino=1825 res=1 errno=0 [ 305.444655][T12058] __nla_validate_parse: 6 callbacks suppressed [ 305.444673][T12058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1805'. [ 305.740658][T12077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.859118][T12088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1827'. [ 305.963984][T12095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1830'. [ 305.974050][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 305.988701][T12091] bond9: option lp_interval: invalid value (0) [ 305.994989][T12091] bond9: option lp_interval: allowed values 1 - 2147483647 [ 306.011891][T12099] netlink: 'syz.4.1829': attribute type 2 has an invalid length. [ 306.017019][T12095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.030846][T12091] bond9 (unregistering): Released all slaves [ 306.159343][T12099] 9: entered promiscuous mode [ 306.239028][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1836'. [ 306.278727][T12113] IPv6: Can't replace route, no match found [ 306.298588][T12118] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 306.317443][T12118] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 306.325823][T12118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1839'. [ 306.380489][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'. [ 306.417458][T12113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1836'. [ 306.664035][T12133] netlink: 'syz.2.1844': attribute type 1 has an invalid length. [ 306.808687][T12143] bond6: (slave ip6gretap1): making interface the new active one [ 306.831389][T12143] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 306.840592][T12143] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 306.849560][T12143] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 306.877646][T12153] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 306.910655][T12160] openvswitch: netlink: Tunnel attr 195 out of range max 16 [ 306.920230][T12167] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1847'. [ 306.954721][T12167] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 307.005342][T12164] netlink: 'syz.4.1850': attribute type 11 has an invalid length. [ 307.134922][T12180] netlink: 'syz.1.1852': attribute type 11 has an invalid length. [ 307.226148][T12164] syzkaller0: entered promiscuous mode [ 307.231663][T12164] syzkaller0: entered allmulticast mode [ 307.239938][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'. [ 307.568153][T12206] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 308.573372][T12206] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 308.602733][T12208] bond0: entered promiscuous mode [ 308.629560][T12208] bond_slave_0: entered promiscuous mode [ 308.646157][T12208] bond_slave_1: entered promiscuous mode [ 308.652174][T12208] bond0: left promiscuous mode [ 308.662501][T12208] bond_slave_0: left promiscuous mode [ 308.686282][T12208] bond_slave_1: left promiscuous mode [ 308.737687][T12209] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 308.873495][T12226] can: request_module (can-proto-0) failed. [ 309.117940][T12247] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 309.187672][T12247] xt_ipcomp: unknown flags 1D [ 309.201004][T12247] unsupported nlmsg_type 40 [ 309.496878][T12267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.504189][T12267] IPv6: NLM_F_CREATE should be set when creating new route [ 309.511514][T12267] IPv6: NLM_F_CREATE should be set when creating new route [ 309.518773][T12267] IPv6: NLM_F_CREATE should be set when creating new route [ 309.538854][T12267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.421353][T12314] tunl0: Caught tx_queue_len zero misconfig [ 310.821955][T12348] syzkaller1: entered promiscuous mode [ 310.827884][T12348] syzkaller1: entered allmulticast mode [ 310.920659][T12350] __nla_validate_parse: 10 callbacks suppressed [ 310.920677][T12350] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1907'. [ 311.120082][T12362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.163205][ T30] audit: type=1800 audit(1766933041.118:4): pid=12371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1912" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1929 res=0 errno=0 [ 311.219156][ T30] audit: type=1800 audit(1766933041.148:5): pid=12372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1912" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1929 res=0 errno=0 [ 311.721690][T12380] batadv0: left allmulticast mode [ 311.856719][T12380] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 312.012202][T12412] syzkaller1: entered promiscuous mode [ 312.045086][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1928'. [ 312.051119][T12412] syzkaller1: entered allmulticast mode [ 312.068204][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1928'. [ 312.229240][T12435] netlink: 'syz.4.1932': attribute type 1 has an invalid length. [ 312.352627][T12441] pimreg3: entered allmulticast mode [ 312.441400][T12448] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 312.500028][T12456] netlink: 'syz.2.1937': attribute type 15 has an invalid length. [ 312.508972][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'. [ 312.529136][T12456] netlink: 'syz.2.1937': attribute type 15 has an invalid length. [ 312.529895][ T1102] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 312.537144][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'. [ 312.556135][ T1102] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 312.575150][ T1102] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 312.587754][ T1102] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 312.623234][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 312.775863][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1944'. [ 312.853324][T12470] xt_hashlimit: invalid interval [ 312.965825][T12476] netlink: 'syz.4.1949': attribute type 1 has an invalid length. [ 312.974960][T12482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 313.064085][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1952'. [ 313.090455][T12484] syzkaller1: entered promiscuous mode [ 313.096432][T12484] syzkaller1: entered allmulticast mode [ 313.226186][T12498] tipc: Enabling of bearer rejected, failed to enable media [ 313.238966][T12501] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 313.454370][T12514] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1962'. [ 313.485975][T12514] xt_policy: neither incoming nor outgoing policy selected [ 313.507979][T12515] Bluetooth: MGMT ver 1.23 [ 313.521199][T12518] netlink: 'syz.0.1964': attribute type 21 has an invalid length. [ 313.539487][T12518] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1964'. [ 313.564436][T12520] lo: Caught tx_queue_len zero misconfig [ 313.588078][T12518] netlink: 'syz.0.1964': attribute type 4 has an invalid length. [ 313.598338][T12518] netlink: 'syz.0.1964': attribute type 5 has an invalid length. [ 313.685564][T12531] netlink: 'syz.3.1967': attribute type 1 has an invalid length. [ 313.762001][T12531] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.784492][T12532] macvlan3: entered promiscuous mode [ 313.815948][T12532] macvlan3: entered allmulticast mode [ 313.828822][T12532] bond6: entered allmulticast mode [ 313.835370][T12532] bond6: entered promiscuous mode [ 313.844879][T12532] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 313.858290][T12532] team0: Port device macvlan3 added [ 314.417738][T12588] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20004 [ 315.062482][T12637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.515282][T12667] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 315.574777][T12667] bond7 (unregistering): Released all slaves [ 315.798171][T12679] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 315.939299][T12690] team0: Caught tx_queue_len zero misconfig [ 315.978341][T12694] __nla_validate_parse: 12 callbacks suppressed [ 315.978361][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2015'. [ 316.083284][T12704] xt_CT: No such helper "snmp_trap" [ 316.298735][T12722] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2021'. [ 316.349162][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2026'. [ 316.459446][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'. [ 316.544871][T12747] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2031'. [ 316.554786][T12746] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2031'. [ 316.594456][T12747] netlink: 'syz.2.2031': attribute type 19 has an invalid length. [ 316.647736][T12751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2032'. [ 316.942316][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'. [ 316.966805][T12770] netlink: 'syz.4.2040': attribute type 8 has an invalid length. [ 316.991395][T12770] syzkaller0: entered promiscuous mode [ 317.008427][T12770] syzkaller0: entered allmulticast mode [ 317.139434][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.281979][T12796] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 317.292273][T12796] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 317.325982][T12796] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 317.380555][T12801] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2049'. [ 317.625996][T12822] netlink: 'syz.4.2056': attribute type 2 has an invalid length. [ 317.641305][T12822] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2056'. [ 318.163881][T12851] tipc: Enabled bearer , priority 0 [ 318.173554][T12853] syzkaller0: entered promiscuous mode [ 318.210312][T12853] syzkaller0: entered allmulticast mode [ 318.290871][T12853] tipc: Resetting bearer [ 318.301816][T12848] tipc: Resetting bearer [ 318.332953][T12848] tipc: Disabling bearer [ 318.467605][T12873] Cannot find add_set index 0 as target [ 318.720232][T12893] bond4: option mode: unable to set because the bond device has slaves [ 318.785721][T12893] bond4: option mode: unable to set because the bond device has slaves [ 319.080628][T12916] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 319.109724][T12877] lec:lec_atm_send: lec0: Unknown message type -1 [ 319.127512][T12877] lec:lec_atm_send: lec0: Unknown message type 20 [ 319.186628][T12877] lec:lec_atm_close: lec0: Shut down! [ 319.361115][ T3510] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 319.400634][T12951] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 319.495011][T12960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.207671][T12979] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 320.668154][T13011] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 320.836725][T13024] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 321.051423][T13032] __nla_validate_parse: 18 callbacks suppressed [ 321.051442][T13032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2123'. [ 321.116839][T13036] bond0: Caught tx_queue_len zero misconfig [ 321.412282][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2131'. [ 321.444344][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2131'. [ 321.472955][T13060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2133'. [ 321.488429][T13053] nbd3: detected capacity change from 0 to 63 [ 321.494639][T13055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.508869][T13055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.509647][T13061] block nbd3: NBD_DISCONNECT [ 321.523684][T13055] bond0 (unregistering): Released all slaves [ 321.529055][T13061] block nbd3: Disconnected due to user request. [ 321.540859][T13061] block nbd3: shutting down sockets [ 321.555396][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.565222][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.575246][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.575813][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.584759][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 321.594237][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 321.597555][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.619211][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 321.648950][T12901] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.668158][T12901] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.679655][T12901] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.689499][T12901] Buffer I/O error on dev nbd3, logical block 1, async page read [ 321.698548][T12901] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.708422][T12901] Buffer I/O error on dev nbd3, logical block 2, async page read [ 321.752274][T12901] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.775876][T12901] Buffer I/O error on dev nbd3, logical block 3, async page read [ 321.786845][T12901] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.806010][T12901] Buffer I/O error on dev nbd3, logical block 0, async page read [ 321.814080][T12901] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.824582][T13073] netlink: 'syz.2.2136': attribute type 1 has an invalid length. [ 321.835007][T12901] Buffer I/O error on dev nbd3, logical block 1, async page read [ 321.852016][T13075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2138'. [ 321.865028][T12901] ldm_validate_partition_table(): Disk read failed. [ 321.877485][T12901] Dev nbd3: unable to read RDB block 0 [ 321.883686][T12901] nbd3: unable to read partition table [ 321.895272][T13073] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.918106][T12901] ldm_validate_partition_table(): Disk read failed. [ 321.938785][T13080] sctp: [Deprecated]: syz.4.2137 (pid 13080) Use of int in max_burst socket option. [ 321.938785][T13080] Use struct sctp_assoc_value instead [ 321.952114][T12901] Dev nbd3: unable to read RDB block 0 [ 321.961428][T12901] nbd3: unable to read partition table [ 321.969772][T13073] bond7: entered allmulticast mode [ 322.062419][T13073] bond7: (slave ip6gretap2): making interface the new active one [ 322.072639][T13073] ip6gretap2: entered allmulticast mode [ 322.084040][T13073] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 322.402810][T13117] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 322.617166][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 322.682800][T13138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2155'. [ 322.802622][T13144] sctp: [Deprecated]: syz.2.2158 (pid 13144) Use of int in maxseg socket option. [ 322.802622][T13144] Use struct sctp_assoc_value instead [ 322.858698][T13148] netlink: 'syz.1.2159': attribute type 1 has an invalid length. [ 323.234983][T13155] infiniband !yz!: set active [ 323.239859][T13155] infiniband !yz!: added team_slave_0 [ 323.256545][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2164'. [ 323.325145][T13155] RDS/IB: !yz!: added [ 323.332560][T13155] smc: adding ib device !yz! with port count 1 [ 323.340222][T13155] smc: ib device !yz! port 1 has no pnetid [ 323.482287][T13185] tipc: Invalid UDP bearer configuration [ 323.482343][T13185] tipc: Enabling of bearer rejected, failed to enable media [ 323.563798][T13188] netlink: 'syz.3.2167': attribute type 10 has an invalid length. [ 323.590043][T13188] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.605027][T13188] bond0: (slave team0): Enslaving as an active interface with an up link [ 323.738973][T13196] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2170'. [ 323.955056][T13211] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2170'. [ 325.591814][T13246] !€ÿ: renamed from bond_slave_0 (while UP) [ 325.795856][T13257] lo: entered promiscuous mode [ 325.810997][T13257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.033721][T13268] block nbd4: not configured, cannot reconfigure [ 326.242064][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 326.251751][T13280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2193'. [ 326.296499][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 326.312921][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 326.324736][T13280] bond0: (slave wlan1): Releasing backup interface [ 326.332902][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 326.352084][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 326.362671][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 326.389129][T13284] veth1_macvtap: left promiscuous mode [ 326.395338][T13284] macsec0: entered promiscuous mode [ 326.416389][T13284] macsec0: entered allmulticast mode [ 326.446906][T13285] veth1_macvtap: entered promiscuous mode [ 326.452690][T13285] veth1_macvtap: entered allmulticast mode [ 326.458761][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 326.460642][T13285] macsec0: left promiscuous mode [ 326.472809][T13285] macsec0: left allmulticast mode [ 326.478749][T13285] veth1_macvtap: left allmulticast mode [ 326.537418][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'. [ 326.537428][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 326.854059][T13303] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 327.382549][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.857780][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 327.868512][T13371] netlink: 'syz.2.2219': attribute type 8 has an invalid length. [ 328.237093][T13362] bond0: (slave team0): Releasing backup interface [ 328.572926][T13362] bond0: (slave 1!€ÿ): Releasing backup interface [ 328.605014][T13362] bond0: (slave bond_slave_1): Releasing backup interface [ 328.673575][T13362] team0: Port device team_slave_0 removed [ 328.706195][T13362] team0: Port device team_slave_1 removed [ 328.723026][T13362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.740188][T13362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.757911][T13362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.765369][T13362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.775945][T13362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.800114][ T5885] syû: Port: 1 Link DOWN [ 328.902777][T13391] xt_TPROXY: Can be used only with -p tcp or -p udp [ 329.098372][T13413] xt_ecn: cannot match TCP bits for non-tcp packets [ 329.475086][T13443] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 329.542175][T13434] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 329.631896][T13449] geneve3: entered promiscuous mode [ 329.680940][T13434] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 329.691247][T13451] !€ÿ: renamed from xfrm0 [ 329.883995][T13468] netlink: 'syz.1.2247': attribute type 33 has an invalid length. [ 329.904893][T13470] netlink: 'syz.1.2247': attribute type 33 has an invalid length. [ 330.646293][T13527] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 330.814611][T13551] syz.0.2272 uses old SIOCAX25GETINFO [ 330.863336][T13551] bond8: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 330.878200][T13551] bond8 (unregistering): Released all slaves [ 330.905327][T13543] xfrm0: entered promiscuous mode [ 330.910517][T13543] xfrm0: entered allmulticast mode [ 331.040267][T13564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.334739][T13576] netlink: 'syz.1.2281': attribute type 12 has an invalid length. [ 331.582293][T13541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.710453][T13579] __nla_validate_parse: 75 callbacks suppressed [ 331.710470][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2282'. [ 331.783662][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2284'. [ 331.809162][T13584] netlink: 'syz.2.2283': attribute type 1 has an invalid length. [ 331.977983][T13603] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 331.994648][T13603] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2290'. [ 332.096527][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2291'. [ 332.203543][T13618] syzkaller1: entered promiscuous mode [ 332.223820][T13618] syzkaller1: entered allmulticast mode [ 332.248403][T13622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2296'. [ 332.282315][T13623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2296'. [ 333.225087][T13695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2318'. [ 333.289929][T13700] netlink: 'syz.0.2319': attribute type 21 has an invalid length. [ 333.311167][T13700] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2319'. [ 333.327905][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'. [ 333.344013][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'. [ 333.517925][T13711] netlink: 'syz.3.2325': attribute type 5 has an invalid length. [ 334.131005][T13734] netlink: 'syz.1.2331': attribute type 10 has an invalid length. [ 334.259201][T13743] tipc: Enabled bearer , priority 0 [ 334.316707][T13737] syzkaller0: entered promiscuous mode [ 334.322224][T13737] syzkaller0: entered allmulticast mode [ 334.395815][T13737] tipc: Resetting bearer [ 334.427702][T13756] xt_hashlimit: size too large, truncated to 1048576 [ 334.448556][T13737] tipc: Disabling bearer [ 334.567708][ T5885] IPVS: starting estimator thread 0... [ 334.666145][T13765] IPVS: using max 28 ests per chain, 67200 per kthread [ 334.929634][T13789] netlink: 'syz.4.2348': attribute type 1 has an invalid length. [ 334.949042][T13786] bond0: entered promiscuous mode [ 335.024212][T13796] netlink: 'syz.2.2350': attribute type 2 has an invalid length. [ 335.176474][T13796] pim6reg1: entered promiscuous mode [ 335.181808][T13796] pim6reg1: entered allmulticast mode [ 335.652810][T13834] netlink: 'syz.4.2362': attribute type 1 has an invalid length. [ 336.177189][T13881] xfrm1: entered allmulticast mode [ 336.343039][ T6207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.352501][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.366581][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.377340][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.385508][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.403307][T13894] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 336.781074][T13932] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 336.905974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.096678][T13941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.135937][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.512378][T13948] ip6tnl0: Caught tx_queue_len zero misconfig [ 337.548123][T13946] ip6t_srh: unknown srh invflags 4000 [ 337.736715][T13958] __nla_validate_parse: 21 callbacks suppressed [ 337.736733][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'. [ 337.771108][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'. [ 337.870748][T13963] IPVS: set_ctl: invalid protocol: 92 172.30.0.2:20002 [ 337.891501][T13967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2402'. [ 337.921625][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2402'. [ 337.935668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.962635][T13972] netlink: 'syz.4.2404': attribute type 1 has an invalid length. [ 338.022822][T13972] bond11: entered promiscuous mode [ 338.029183][T13972] 8021q: adding VLAN 0 to HW filter on device bond11 [ 338.052656][T13973] sctp: [Deprecated]: syz.4.2404 (pid 13973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.052656][T13973] Use struct sctp_sack_info instead [ 338.091993][T13972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2404'. [ 338.159441][T13986] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2407'. [ 338.254742][T13990] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2409'. [ 338.442525][T14010] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2412'. [ 338.472553][T14010] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2412'. [ 338.694341][T14030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.725129][T14030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2420'. [ 338.799048][ T5832] block nbd3: Receive control failed (result -107) [ 338.930017][T14044] tipc: Enabling of bearer rejected, failed to enable media [ 339.431222][ T6229] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 339.531890][T14087] lo speed is unknown, defaulting to 1000 [ 340.222803][T14134] nbd: couldn't find a device at index 1 [ 340.435095][T14141] netem: change failed [ 340.459516][T14141] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 340.736886][T14150] team0 (unregistering): Port device team_slave_0 removed [ 340.749674][T14150] team0 (unregistering): Port device team_slave_1 removed [ 340.762519][T14150] team0 (unregistering): Port device hsr0 removed [ 340.831869][T14158] syzkaller1: entered promiscuous mode [ 340.875669][T14158] syzkaller1: entered allmulticast mode [ 340.953670][ T5996] !yz!: Port: 1 Link DOWN [ 341.265057][T14184] syzkaller0: entered promiscuous mode [ 341.291442][T14184] syzkaller0: entered allmulticast mode [ 341.334075][T14190] netlink: 'syz.4.2454': attribute type 1 has an invalid length. [ 341.454011][T14190] 8021q: adding VLAN 0 to HW filter on device bond12 [ 341.618948][ T6085] net_ratelimit: 10 callbacks suppressed [ 341.618968][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.844028][T14214] veth0: entered promiscuous mode [ 341.962515][T14223] veth7: entered promiscuous mode [ 342.096105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.110408][ T6207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.130727][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.140080][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.342505][T14213] infiniband syz1: set down [ 342.356165][T14213] infiniband syz1: added ipvlan0 [ 342.487737][T14213] RDS/IB: syz1: added [ 342.491814][T14213] smc: adding ib device syz1 with port count 1 [ 342.544931][T14213] smc: ib device syz1 port 1 has no pnetid [ 342.580330][T14252] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 342.609067][T14264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.616129][T14252] bond8: (slave lo): Enslaving as a backup interface with an up link [ 342.632997][T14252] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 342.657146][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.696132][T14212] veth0: left promiscuous mode [ 342.815125][T14272] FAULT_INJECTION: forcing a failure. [ 342.815125][T14272] name failslab, interval 1, probability 0, space 0, times 1 [ 342.830201][T14272] CPU: 1 UID: 0 PID: 14272 Comm: syz.2.2476 Not tainted syzkaller #0 PREEMPT(full) [ 342.830226][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.830243][T14272] Call Trace: [ 342.830251][T14272] [ 342.830260][T14272] dump_stack_lvl+0x189/0x250 [ 342.830286][T14272] ? __pfx____ratelimit+0x10/0x10 [ 342.830304][T14272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.830324][T14272] ? __pfx__printk+0x10/0x10 [ 342.830349][T14272] ? __lock_acquire+0x6b6/0x2cf0 [ 342.830377][T14272] should_fail_ex+0x414/0x560 [ 342.830408][T14272] should_failslab+0xa8/0x100 [ 342.830431][T14272] kmem_cache_alloc_noprof+0x88/0x710 [ 342.830454][T14272] ? __netlink_lookup+0xbd/0x8a0 [ 342.830476][T14272] ? skb_clone+0x212/0x3a0 [ 342.830502][T14272] skb_clone+0x212/0x3a0 [ 342.830527][T14272] __netlink_deliver_tap+0x404/0x850 [ 342.830561][T14272] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.830584][T14272] netlink_deliver_tap+0x19c/0x1b0 [ 342.830616][T14272] netlink_unicast+0x7fa/0x9e0 [ 342.830644][T14272] ? __pfx_netlink_unicast+0x10/0x10 [ 342.830666][T14272] ? netlink_sendmsg+0x642/0xb30 [ 342.830685][T14272] ? skb_put+0x11b/0x210 [ 342.830707][T14272] netlink_sendmsg+0x805/0xb30 [ 342.830739][T14272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.830764][T14272] ? aa_sock_msg_perm+0xf1/0x1b0 [ 342.830788][T14272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.830805][T14272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.830827][T14272] __sock_sendmsg+0x21c/0x270 [ 342.830854][T14272] ____sys_sendmsg+0x505/0x820 [ 342.830881][T14272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.830911][T14272] ? import_iovec+0x74/0xa0 [ 342.830936][T14272] ___sys_sendmsg+0x21f/0x2a0 [ 342.830959][T14272] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.830987][T14272] ? rcu_read_lock_any_held+0xb3/0x120 [ 342.831040][T14272] ? __fget_files+0x2a/0x420 [ 342.831060][T14272] ? __fget_files+0x3a0/0x420 [ 342.831092][T14272] __x64_sys_sendmsg+0x19b/0x260 [ 342.831115][T14272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.831146][T14272] ? __pfx_ksys_write+0x10/0x10 [ 342.831167][T14272] ? do_syscall_64+0xbe/0xf80 [ 342.831189][T14272] do_syscall_64+0xfa/0xf80 [ 342.831208][T14272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.831226][T14272] ? clear_bhb_loop+0x60/0xb0 [ 342.831247][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.831264][T14272] RIP: 0033:0x7f90c598f749 [ 342.831280][T14272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.831295][T14272] RSP: 002b:00007f90c67c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.831320][T14272] RAX: ffffffffffffffda RBX: 00007f90c5be5fa0 RCX: 00007f90c598f749 [ 342.831332][T14272] RDX: 0000000004006008 RSI: 0000200000000300 RDI: 0000000000000004 [ 342.831344][T14272] RBP: 00007f90c67c2090 R08: 0000000000000000 R09: 0000000000000000 [ 342.831355][T14272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.831366][T14272] R13: 00007f90c5be6038 R14: 00007f90c5be5fa0 R15: 00007ffe9afa4b78 [ 342.831398][T14272] [ 343.146015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.360612][T14276] netlink: 'syz.2.2478': attribute type 39 has an invalid length. [ 343.490276][T14276] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 343.696076][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.830728][T14300] __nla_validate_parse: 27 callbacks suppressed [ 343.830745][T14300] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2483'. [ 343.926695][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'. [ 344.185925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.195482][T14267] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 344.349066][T14317] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2489'. [ 344.387626][T14320] FAULT_INJECTION: forcing a failure. [ 344.387626][T14320] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 344.412636][T14320] CPU: 1 UID: 0 PID: 14320 Comm: syz.2.2491 Not tainted syzkaller #0 PREEMPT(full) [ 344.412661][T14320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.412672][T14320] Call Trace: [ 344.412680][T14320] [ 344.412688][T14320] dump_stack_lvl+0x189/0x250 [ 344.412713][T14320] ? __pfx____ratelimit+0x10/0x10 [ 344.412731][T14320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.412751][T14320] ? __pfx__printk+0x10/0x10 [ 344.412794][T14320] should_fail_ex+0x414/0x560 [ 344.412824][T14320] _copy_to_user+0x31/0xb0 [ 344.412848][T14320] simple_read_from_buffer+0xe1/0x170 [ 344.412874][T14320] proc_fail_nth_read+0x1b3/0x220 [ 344.412897][T14320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.412920][T14320] ? rw_verify_area+0x2a6/0x4d0 [ 344.412937][T14320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.412957][T14320] vfs_read+0x200/0xa30 [ 344.412973][T14320] ? fdget_pos+0x247/0x320 [ 344.412998][T14320] ? __pfx___mutex_lock+0x10/0x10 [ 344.413018][T14320] ? __pfx_vfs_read+0x10/0x10 [ 344.413037][T14320] ? __fget_files+0x2a/0x420 [ 344.413062][T14320] ? __fget_files+0x3a0/0x420 [ 344.413081][T14320] ? __fget_files+0x2a/0x420 [ 344.413112][T14320] ksys_read+0x145/0x250 [ 344.413132][T14320] ? __pfx_ksys_read+0x10/0x10 [ 344.413153][T14320] ? do_syscall_64+0xbe/0xf80 [ 344.413176][T14320] do_syscall_64+0xfa/0xf80 [ 344.413195][T14320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.413213][T14320] ? clear_bhb_loop+0x60/0xb0 [ 344.413234][T14320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.413251][T14320] RIP: 0033:0x7f90c598e15c [ 344.413268][T14320] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 344.413283][T14320] RSP: 002b:00007f90c67c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.413302][T14320] RAX: ffffffffffffffda RBX: 00007f90c5be5fa0 RCX: 00007f90c598e15c [ 344.413315][T14320] RDX: 000000000000000f RSI: 00007f90c67c20a0 RDI: 0000000000000004 [ 344.413327][T14320] RBP: 00007f90c67c2090 R08: 0000000000000000 R09: 0000000000000000 [ 344.413338][T14320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.413348][T14320] R13: 00007f90c5be6038 R14: 00007f90c5be5fa0 R15: 00007ffe9afa4b78 [ 344.413381][T14320] [ 344.641724][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2490'. [ 344.678934][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2490'. [ 344.774628][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2495'. [ 344.817875][ T3510] wlan1: Trigger new scan to find an IBSS to join [ 344.837392][T14329] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2495'. [ 345.078099][T14351] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 345.107779][T14351] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 345.326911][T14361] netlink: 'syz.2.2505': attribute type 1 has an invalid length. [ 345.454562][T14378] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2511'. [ 345.460951][T14361] 8021q: adding VLAN 0 to HW filter on device bond9 [ 345.582943][T14384] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 345.598005][T14384] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2512'. [ 345.708716][T14397] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2517'. [ 345.806662][T14397] bond13 (unregistering): Released all slaves [ 345.932311][T14400] tipc: Enabling of bearer rejected, failed to enable media [ 346.260577][T14435] netlink: 'syz.2.2527': attribute type 30 has an invalid length. [ 346.293801][T14435] bond10: option arp_missed_max: invalid value (0) [ 346.300724][T14435] bond10: option arp_missed_max: allowed values 1 - 255 [ 346.312638][T14435] bond10 (unregistering): Released all slaves [ 346.815756][ T795] net_ratelimit: 6 callbacks suppressed [ 346.815773][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.056848][T14488] xt_hashlimit: size too large, truncated to 1048576 [ 347.200920][T14496] netlink: 'syz.2.2544': attribute type 39 has an invalid length. [ 347.296360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.312042][T14503] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20001 [ 347.556942][T14511] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 347.866933][ T6234] wlan1: Trigger new scan to find an IBSS to join [ 347.867927][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.881545][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.890227][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.899234][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.214427][T14535] netlink: 'syz.4.2558': attribute type 4 has an invalid length. [ 348.303444][T14539] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 348.345565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.897013][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.929736][T14580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.952388][T14580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.180484][T14603] netlink: 'syz.0.2582': attribute type 1 has an invalid length. [ 349.218818][T14603] 8021q: adding VLAN 0 to HW filter on device bond9 [ 349.277393][T14603] veth7: entered promiscuous mode [ 349.295375][T14603] bond9: (slave veth7): Enslaving as an active interface with an up link [ 349.305301][T14595] __nla_validate_parse: 12 callbacks suppressed [ 349.305324][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'. [ 349.326635][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 349.351334][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'. [ 349.366377][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'. [ 349.380046][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 349.397850][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'. [ 349.454325][T14618] netlink: 'syz.4.2587': attribute type 25 has an invalid length. [ 349.553904][T14622] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 349.610198][T14626] IPVS: length: 239 != 24 [ 349.625939][T14626] netlink: 'syz.4.2591': attribute type 5 has an invalid length. [ 349.693676][T14632] netlink: 'syz.0.2593': attribute type 1 has an invalid length. [ 349.703480][T14632] netlink: 'syz.0.2593': attribute type 3 has an invalid length. [ 349.712053][T14632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2593'. [ 349.827292][T14643] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2597'. [ 349.918845][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2598'. [ 350.022869][T14658] pim6reg1: entered promiscuous mode [ 350.028982][T14658] pim6reg1: entered allmulticast mode [ 350.068205][T14660] tipc: Enabled bearer , priority 0 [ 350.077124][T14660] syzkaller0: entered promiscuous mode [ 350.082620][T14660] syzkaller0: entered allmulticast mode [ 350.143510][T14660] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 350.224118][T14660] tipc: Resetting bearer [ 350.235127][T14659] tipc: Resetting bearer [ 350.279169][T14659] tipc: Disabling bearer [ 350.296914][T14672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2606'. [ 350.871698][T14721] netlink: 'syz.1.2622': attribute type 3 has an invalid length. [ 350.899387][ T13] wlan1: Trigger new scan to find an IBSS to join [ 351.031851][T14724] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.231111][T14739] netlink: 'syz.1.2629': attribute type 1 has an invalid length. [ 351.485074][T14762] xt_l2tp: v2 sid > 0xffff: 1114112 [ 351.650592][T14772] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 351.662349][T14772] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 351.671956][T14772] team0: Failed to send options change via netlink (err -105) [ 351.679896][T14772] team0: Port device batadv1 added [ 351.772929][T14776] geneve1: Caught tx_queue_len zero misconfig [ 351.817086][ T13] wlan1: Creating new IBSS network, BSSID 6e:0f:66:1a:8f:9f [ 351.923992][T14788] xt_ecn: cannot match TCP bits for non-tcp packets [ 351.948685][T14790] netlink: 'syz.1.2643': attribute type 12 has an invalid length. [ 352.016266][ T5900] net_ratelimit: 11 callbacks suppressed [ 352.016284][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.048808][T14795] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 352.081831][T14795] bond10: (slave vcan0): Error -95 calling set_mac_address [ 352.305904][T14816] netlink: 'syz.1.2650': attribute type 1 has an invalid length. [ 352.399339][T14824] netlink: 'syz.4.2653': attribute type 1 has an invalid length. [ 352.463527][T14824] bond13: entered promiscuous mode [ 352.469422][T14824] 8021q: adding VLAN 0 to HW filter on device bond13 [ 352.495889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.576092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.584865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.593262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.601604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.821209][T14857] netlink: 'syz.3.2665': attribute type 2 has an invalid length. [ 352.902107][T14862] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.914413][T14862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.025214][T14870] netlink: 'syz.3.2670': attribute type 8 has an invalid length. [ 353.069936][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.105283][T14873] macvlan0: entered promiscuous mode [ 353.159092][T14875] netlink: 'syz.1.2672': attribute type 19 has an invalid length. [ 353.177021][T14875] netlink: 'syz.1.2672': attribute type 19 has an invalid length. [ 353.237313][T14882] veth0: entered promiscuous mode [ 353.317227][T14882] veth0: left promiscuous mode [ 353.535820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.587739][T14905] netlink: 'syz.1.2681': attribute type 1 has an invalid length. [ 353.601807][T14905] nbd: error processing sock list [ 353.617239][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.627041][T14905] block nbd4: shutting down sockets [ 353.995711][T14936] lo: entered promiscuous mode [ 354.371584][ T6207] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 354.522692][T14971] __nla_validate_parse: 17 callbacks suppressed [ 354.522710][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2696'. [ 354.576683][T14968] bridge0: port 1(macsec0) entered blocking state [ 354.593099][T14968] bridge0: port 1(macsec0) entered disabled state [ 354.619112][T14968] macsec0: entered allmulticast mode [ 354.624449][T14968] veth1_macvtap: entered allmulticast mode [ 354.640331][T14968] macsec0: entered promiscuous mode [ 354.649153][T14968] bridge0: port 1(macsec0) entered blocking state [ 354.655940][T14968] bridge0: port 1(macsec0) entered forwarding state [ 354.728013][T14982] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2699'. [ 354.768906][T14982] syzkaller1: entered promiscuous mode [ 354.774386][T14982] syzkaller1: entered allmulticast mode [ 354.794706][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'. [ 354.916599][T14990] bond11: Unable to set up delay as MII monitoring is disabled [ 354.942150][T14990] bond11 (unregistering): Released all slaves [ 355.297053][T15015] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001 [ 355.330905][T15015] IPVS: set_ctl: invalid protocol: 103 172.30.1.1:20000 [ 355.408508][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2709'. [ 355.438758][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'. [ 355.480181][T15026] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2709'. [ 355.499379][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2710'. [ 355.830540][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 355.853253][T15050] xt_hashlimit: size too large, truncated to 1048576 [ 355.903743][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 355.912955][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2715'. [ 356.153080][T15061] validate_nla: 2 callbacks suppressed [ 356.153100][T15061] netlink: 'syz.0.2719': attribute type 1 has an invalid length. [ 356.214790][T15061] 8021q: adding VLAN 0 to HW filter on device bond11 [ 356.246270][T15063] bond11: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 356.350938][T15063] bond11: entered allmulticast mode [ 356.471045][T15068] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 356.693495][T15092] bridge0: port 1(batadv_slave_1) entered blocking state [ 356.701499][T15092] bridge0: port 1(batadv_slave_1) entered disabled state [ 356.709578][T15092] batadv_slave_1: entered allmulticast mode [ 356.721741][T15095] netlink: 'syz.1.2731': attribute type 1 has an invalid length. [ 356.732674][T15092] batadv_slave_1: entered promiscuous mode [ 356.739743][T15092] bridge0: port 1(batadv_slave_1) entered blocking state [ 356.747188][T15092] bridge0: port 1(batadv_slave_1) entered forwarding state [ 356.826689][T15099] bridge3: entered promiscuous mode [ 356.834210][T15099] bridge3: entered allmulticast mode [ 357.191049][T15127] net_ratelimit: 11 callbacks suppressed [ 357.191067][T15127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.225888][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.695600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.255804][T15167] netlink: 'syz.0.2753': attribute type 10 has an invalid length. [ 358.267779][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.397275][T15164] bond4: option mode: unable to set because the bond device has slaves [ 358.548416][T15183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.609682][T15178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.746384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.754579][ T6207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.763785][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.774350][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.270546][T15228] netlink: 'syz.0.2769': attribute type 64 has an invalid length. [ 359.306377][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.407163][T15238] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 359.498993][T15238] bond12: (slave bridge4): making interface the new active one [ 359.520979][T15238] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 359.647132][T15256] sctp: [Deprecated]: syz.2.2778 (pid 15256) Use of int in max_burst socket option deprecated. [ 359.647132][T15256] Use struct sctp_assoc_value instead [ 360.011759][T15271] syzkaller1: entered promiscuous mode [ 360.021400][T15271] syzkaller1: entered allmulticast mode [ 360.068279][T15284] xt_HMARK: spi-set and port-set can't be combined [ 360.216859][T15298] __nla_validate_parse: 11 callbacks suppressed [ 360.216879][T15298] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2789'. [ 360.254137][T15295] netlink: 'syz.0.2788': attribute type 6 has an invalid length. [ 360.264871][T15295] netlink: 'syz.0.2788': attribute type 6 has an invalid length. [ 360.460438][T15318] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 360.489571][T15318] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2796'. [ 360.521912][T15321] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2795'. [ 360.558757][T15321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2795'. [ 360.736055][T15337] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2803'. [ 360.846770][T15342] netlink: 536 bytes leftover after parsing attributes in process `syz.2.2806'. [ 360.858224][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2806'. [ 360.911006][T15347] ipt_ECN: cannot use operation on non-tcp rule [ 361.001024][T15353] netlink: 'syz.4.2808': attribute type 1 has an invalid length. [ 361.088812][T15359] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2811'. [ 361.323889][T15377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2816'. [ 361.333198][T15377] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2816'. [ 361.363519][T15377] lo speed is unknown, defaulting to 1000 [ 361.814729][T15389] netlink: 'syz.4.2818': attribute type 12 has an invalid length. [ 361.981042][T15391] netlink: 'syz.4.2818': attribute type 21 has an invalid length. [ 362.371999][T15406] gtp0: entered promiscuous mode [ 362.404511][T15406] gtp0: entered allmulticast mode [ 362.418490][ T5900] net_ratelimit: 7 callbacks suppressed [ 362.418508][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.896005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.174183][T15444] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 363.288071][T15449] sch_fq: defrate 0 ignored. [ 363.412492][T15456] syzkaller0: entered promiscuous mode [ 363.431472][T15456] syzkaller0: entered allmulticast mode [ 363.456722][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.945567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.497096][ T6227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.506116][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.986548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.130296][T15493] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.138450][T15493] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 365.177032][T15493] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.184126][T15493] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 365.211361][T15493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.229171][T15493] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 365.300174][T15493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.320448][T15493] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 365.360673][T15493] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 365.378448][T15493] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 365.459966][T15506] geneve3: entered promiscuous mode [ 365.465401][T15506] geneve3: entered allmulticast mode [ 365.498124][T10904] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 365.548940][T10904] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 365.556788][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.576939][T10904] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 365.605574][T10904] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 365.719418][T15515] __nla_validate_parse: 9 callbacks suppressed [ 365.719431][T15515] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2852'. [ 366.015680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.575739][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.546685][ T5996] net_ratelimit: 1 callbacks suppressed [ 367.546700][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.625719][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.095758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.655741][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.135634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.546008][ T6224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.626265][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.695820][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.185623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.736784][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.585928][ T5892] net_ratelimit: 3 callbacks suppressed [ 372.585947][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.816903][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.295812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.857679][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.335954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.585836][ T6229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.896740][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.376125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.936833][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.016000][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.617427][ T5996] net_ratelimit: 4 callbacks suppressed [ 377.617447][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.015908][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.495792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.055982][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.535784][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.096387][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.496351][ T6227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.575733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.136023][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.615852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.655835][ C1] net_ratelimit: 1 callbacks suppressed [ 382.655854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.216313][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.535720][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.696485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.710965][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.265807][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.735603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.296165][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.616181][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.775647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.855802][ C1] net_ratelimit: 3 callbacks suppressed [ 387.855833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.415801][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.656027][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.895631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.460073][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.936027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.097589][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.495777][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.739105][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.975647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.055898][ C1] net_ratelimit: 4 callbacks suppressed [ 393.055912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.615752][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.105755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.425754][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.665775][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.135658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.695743][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.175798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.736511][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.146073][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.265819][ C1] net_ratelimit: 3 callbacks suppressed [ 398.265850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.815853][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.296035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.856409][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.175915][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.335915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.896131][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.375638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.935749][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.415952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.455679][ C1] net_ratelimit: 2 callbacks suppressed [ 403.455699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.016188][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.175811][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.495733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.829518][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.055736][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.535820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.945820][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.105867][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.585603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.655866][ C1] net_ratelimit: 3 callbacks suppressed [ 408.655885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.669585][ T6224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.216454][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.695821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.265955][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.735632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.296123][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.696466][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.785968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.855961][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.856017][ C1] net_ratelimit: 3 callbacks suppressed [ 413.856037][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.416672][ T6230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.426536][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.895808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.456134][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.935673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.495800][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.985842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.455938][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.535947][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.895978][ T6085] net_ratelimit: 3 callbacks suppressed [ 418.895992][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.055778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.615756][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.095609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.176529][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.655793][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.135873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.696680][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.175820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.745819][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.265990][ C1] net_ratelimit: 3 callbacks suppressed [ 424.266009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.825979][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.295777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.856259][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.936117][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.944306][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.335662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.895891][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.375839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.937495][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.455828][ C1] net_ratelimit: 3 callbacks suppressed [ 429.455847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.015963][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.495861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.056062][ T6232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.066020][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.535681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.095856][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.336656][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.575744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.976174][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.655725][ C1] net_ratelimit: 4 callbacks suppressed [ 434.655745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.216224][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.695654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.255761][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.735861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.816064][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.297426][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.775660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.336096][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.815745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.855915][ C1] net_ratelimit: 1 callbacks suppressed [ 439.855934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.870671][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.019181][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.416209][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.895663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.456723][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.935955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.505806][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.576256][T10905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.975933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.065654][ C1] net_ratelimit: 3 callbacks suppressed [ 445.065675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.615804][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.625807][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.095904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.417601][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.655853][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.057375][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.145688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.696690][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.175636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.266182][ C1] net_ratelimit: 4 callbacks suppressed [ 450.266202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.826306][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.295830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.376945][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.865943][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.335979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.896962][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.375730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.945775][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.096737][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.456129][ C1] net_ratelimit: 3 callbacks suppressed [ 455.456148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.016096][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.495826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.055904][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.136317][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.535712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.095968][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.575880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.136264][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.625699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.506582][ T5900] net_ratelimit: 2 callbacks suppressed [ 460.506604][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.655707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.136797][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.146154][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.216169][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.696043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.265859][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.735852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.897917][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.295802][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.616435][T10905] net_ratelimit: 4 callbacks suppressed [ 465.616455][T10905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.855712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.415957][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.895769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.904401][ T6232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.456348][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.936020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.506312][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.656291][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.975895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.056045][ C1] net_ratelimit: 3 callbacks suppressed [ 471.056059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.618491][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.696140][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.095842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.656285][ T3510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.664612][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.135734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.695889][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.176020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.575913][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.255729][ C1] net_ratelimit: 4 callbacks suppressed [ 476.255751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.816166][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.296038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.776137][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.855799][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.335699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.417301][ T3510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.895935][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.375679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.936230][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.455641][ C1] net_ratelimit: 4 callbacks suppressed [ 481.455674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.017022][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.495785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.055851][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.536041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.855837][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.095856][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.176256][ T6232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.575723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.136814][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.656035][ C1] net_ratelimit: 2 callbacks suppressed [ 486.656055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.736544][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.216672][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.695795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.266000][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.656150][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.745675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.296907][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.309289][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.785790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.855676][ C1] net_ratelimit: 4 callbacks suppressed [ 491.855696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.416620][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.496676][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.896154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.456716][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.935632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.416406][ T3510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.495823][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.975717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.536396][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.055636][ C1] net_ratelimit: 3 callbacks suppressed [ 497.055657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.536596][ T6232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.616486][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.105646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.656524][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.135856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.695815][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.175905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.184085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.576071][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.256008][ C1] net_ratelimit: 3 callbacks suppressed [ 502.256031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.746250][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.817140][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.295667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.386718][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.855846][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.336008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.906181][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.375850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.936156][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.455739][ C1] net_ratelimit: 4 callbacks suppressed [ 507.455758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.015850][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.496058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.055815][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.136875][ T6224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.545661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.105771][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.575668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.145884][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.615911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.665654][ C1] net_ratelimit: 3 callbacks suppressed [ 512.665672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.216681][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.695804][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.255902][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.264100][T10904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.735885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.296504][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.775660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.335932][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.825776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.855901][ C0] net_ratelimit: 4 callbacks suppressed [ 517.855915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.095839][ T31] INFO: task kworker/1:7:5951 blocked for more than 143 seconds. [ 518.103689][ T31] Not tainted syzkaller #0 [ 518.108800][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.117611][ T31] task:kworker/1:7 state:D stack:21344 pid:5951 tgid:5951 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 518.130005][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 518.137458][ T31] Call Trace: [ 518.140868][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 518.144055][ T31] __schedule+0x14bc/0x5000 [ 518.149147][ T31] ? __pfx___schedule+0x10/0x10 [ 518.154067][ T31] ? schedule+0x91/0x360 [ 518.158713][ T31] schedule+0x165/0x360 [ 518.162941][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.168815][ T31] __mutex_lock+0x7e6/0x1350 [ 518.173910][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.179113][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 518.185402][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.190949][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 518.215658][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 518.221449][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 518.260050][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 518.267872][ T31] process_scheduled_works+0xad1/0x1770 [ 518.273706][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 518.280702][ T31] worker_thread+0x8a0/0xda0 [ 518.285363][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 518.292006][ T31] ? __kthread_parkme+0x7b/0x200 [ 518.297216][ T31] kthread+0x711/0x8a0 [ 518.301301][ T31] ? __pfx_worker_thread+0x10/0x10 [ 518.306636][ T31] ? __pfx_kthread+0x10/0x10 [ 518.311281][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 518.316586][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 518.321815][ T31] ? __pfx_kthread+0x10/0x10 [ 518.326978][ T31] ret_from_fork+0x599/0xb30 [ 518.331583][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 518.336967][ T31] ? __switch_to_asm+0x39/0x70 [ 518.341853][ T31] ? __switch_to_asm+0x33/0x70 [ 518.346878][ T31] ? __pfx_kthread+0x10/0x10 [ 518.351615][ T31] ret_from_fork_asm+0x1a/0x30 [ 518.356733][ T31] [ 518.359925][ T31] INFO: task syz.1.2845:15477 blocked for more than 143 seconds. [ 518.367861][ T31] Not tainted syzkaller #0 [ 518.372985][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.381762][ T31] task:syz.1.2845 state:D stack:25752 pid:15477 tgid:15477 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 518.394385][ T31] Call Trace: [ 518.397752][ T31] [ 518.400692][ T31] __schedule+0x14bc/0x5000 [ 518.405207][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 518.411455][ T31] ? irqentry_exit+0x5dd/0x660 [ 518.416817][ T31] ? trace_irq_disable+0x37/0x100 [ 518.422323][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 518.428981][ T31] ? __pfx___schedule+0x10/0x10 [ 518.429027][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.433860][ T31] ? schedule+0x91/0x360 [ 518.446439][ T31] schedule+0x165/0x360 [ 518.450622][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.456215][ T31] __mutex_lock+0x7e6/0x1350 [ 518.460869][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.466006][ T31] ? rfkill_unregister+0xc8/0x220 [ 518.471150][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.476495][ T31] ? __pfx_device_del+0x10/0x10 [ 518.481364][ T31] ? __cancel_work_sync+0x5c/0x110 [ 518.486614][ T31] rfkill_unregister+0xc8/0x220 [ 518.491485][ T31] nfc_unregister_device+0x96/0x300 [ 518.496964][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 518.502832][ T31] virtual_ncidev_close+0x56/0x90 [ 518.508267][ T31] __fput+0x44c/0xa70 [ 518.512473][ T31] task_work_run+0x1d4/0x260 [ 518.517189][ T31] ? __pfx_task_work_run+0x10/0x10 [ 518.522317][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 518.528172][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 518.533649][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 518.539225][ T31] ? rcu_is_watching+0x15/0xb0 [ 518.544301][ T31] do_syscall_64+0x2d0/0xf80 [ 518.549069][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.555732][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.560436][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.566817][ T31] RIP: 0033:0x7fd7eb58f749 [ 518.571248][ T31] RSP: 002b:00007ffe1dad9888 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 518.580417][ T31] RAX: 0000000000000000 RBX: 00007fd7eb7e7da0 RCX: 00007fd7eb58f749 [ 518.588669][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 518.596857][ T31] RBP: 00007fd7eb7e7da0 R08: 00000000000001ac R09: 000000171dad9b7f [ 518.605141][ T31] R10: 00007fd7eb7e7cb0 R11: 0000000000000246 R12: 0000000000058fd2 [ 518.614102][ T31] R13: 00007fd7eb7e6180 R14: ffffffffffffffff R15: 00007ffe1dad99a0 [ 518.622215][ T31] [ 518.625259][ T31] INFO: task syz.4.2846:15493 blocked for more than 143 seconds. [ 518.633548][ T31] Not tainted syzkaller #0 [ 518.638664][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.647578][ T31] task:syz.4.2846 state:D stack:24920 pid:15493 tgid:15481 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 518.660411][ T31] Call Trace: [ 518.663789][ T31] [ 518.666870][ T31] __schedule+0x14bc/0x5000 [ 518.671611][ T31] ? __pfx___schedule+0x10/0x10 [ 518.676594][ T31] ? schedule+0x91/0x360 [ 518.680890][ T31] schedule+0x165/0x360 [ 518.685074][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.691037][ T31] __mutex_lock+0x7e6/0x1350 [ 518.695737][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.700550][ T31] ? nfc_dev_down+0x3b/0x290 [ 518.705226][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.710634][ T31] ? do_raw_spin_lock+0x121/0x290 [ 518.715891][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 518.722052][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 518.727457][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 518.733301][ T31] nfc_dev_down+0x3b/0x290 [ 518.738001][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 518.743785][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 518.749427][ T31] rfkill_set_block+0x1d2/0x440 [ 518.754341][ T31] rfkill_fop_write+0x44b/0x570 [ 518.759330][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 518.764735][ T31] ? security_kernfs_init_security+0x220/0x290 [ 518.771187][ T31] ? rw_verify_area+0x255/0x4d0 [ 518.776423][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 518.781830][ T31] vfs_write+0x27e/0xb30 [ 518.786269][ T31] ? __pfx_vfs_write+0x10/0x10 [ 518.791056][ T31] ? __fget_files+0x2a/0x420 [ 518.795741][ T31] ? __fget_files+0x2a/0x420 [ 518.800454][ T31] ? __fget_files+0x3a0/0x420 [ 518.805165][ T31] ? __fget_files+0x2a/0x420 [ 518.810218][ T31] ksys_write+0x145/0x250 [ 518.814593][ T31] ? __pfx_ksys_write+0x10/0x10 [ 518.819601][ T31] ? do_syscall_64+0xbe/0xf80 [ 518.824302][ T31] do_syscall_64+0xfa/0xf80 [ 518.828928][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.835044][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.840248][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.846272][ T31] RIP: 0033:0x7f4ac758f749 [ 518.850712][ T31] RSP: 002b:00007f4ac8499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 518.859266][ T31] RAX: ffffffffffffffda RBX: 00007f4ac77e6270 RCX: 00007f4ac758f749 [ 518.867497][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 518.875587][ T31] RBP: 00007f4ac7613f91 R08: 0000000000000000 R09: 0000000000000000 [ 518.883676][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.891940][ T31] R13: 00007f4ac77e6308 R14: 00007f4ac77e6270 R15: 00007ffe568d9b98 [ 518.900365][ T31] [ 518.903422][ T31] INFO: task syz.2.2848:15500 blocked for more than 144 seconds. [ 518.905787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.915117][ T31] Not tainted syzkaller #0 [ 518.924348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.933503][ T31] task:syz.2.2848 state:D stack:23608 pid:15500 tgid:15499 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 518.945612][ T31] Call Trace: [ 518.948898][ T31] [ 518.951823][ T31] __schedule+0x14bc/0x5000 [ 518.956956][ T31] ? __pfx___schedule+0x10/0x10 [ 518.961930][ T31] ? schedule+0x91/0x360 [ 518.966387][ T31] schedule+0x165/0x360 [ 518.970586][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.976576][ T31] __mutex_lock+0x7e6/0x1350 [ 518.981207][ T31] ? rcu_is_watching+0x15/0xb0 [ 518.986393][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.991209][ T31] ? rfkill_register+0x37/0x8e0 [ 518.996306][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.001737][ T31] ? netdev_run_todo+0xe1b/0xea0 [ 519.006903][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 519.012144][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 519.017819][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 519.023478][ T31] rfkill_register+0x37/0x8e0 [ 519.028380][ T31] wiphy_register+0x246a/0x2d20 [ 519.033292][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 519.038637][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 519.044243][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 519.049844][ T31] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 519.056428][ T31] ieee80211_register_hw+0x34a7/0x4110 [ 519.062885][ T31] ? ieee80211_register_hw+0x1421/0x4110 [ 519.068733][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 519.074597][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 519.080900][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 519.087012][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 519.093393][ T31] ? __hrtimer_setup+0x181/0x200 [ 519.098540][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 519.104455][ T31] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 519.110625][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 519.116824][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 519.122423][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 519.127793][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 519.132968][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 519.139165][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 519.144811][ T31] ? rcu_is_watching+0x15/0xb0 [ 519.150047][ T31] ? __nla_parse+0x40/0x60 [ 519.154510][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 519.161031][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 519.166870][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 519.172940][ T31] ? bpf_lsm_capable+0x9/0x20 [ 519.177700][ T31] ? security_capable+0x7e/0x2e0 [ 519.183091][ T31] genl_rcv_msg+0x60e/0x790 [ 519.187783][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.192846][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 519.198763][ T31] netlink_rcv_skb+0x208/0x470 [ 519.203564][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.208747][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.214086][ T31] ? down_read+0x274/0x2e0 [ 519.218584][ T31] ? genl_rcv+0xd/0x40 [ 519.222672][ T31] genl_rcv+0x28/0x40 [ 519.227041][ T31] netlink_unicast+0x82f/0x9e0 [ 519.231820][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 519.237228][ T31] ? netlink_sendmsg+0x642/0xb30 [ 519.242180][ T31] ? skb_put+0x11b/0x210 [ 519.246711][ T31] netlink_sendmsg+0x805/0xb30 [ 519.251515][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.257147][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 519.262111][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.267545][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.272941][ T31] __sock_sendmsg+0x21c/0x270 [ 519.277822][ T31] ____sys_sendmsg+0x505/0x820 [ 519.282642][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.288435][ T31] ? import_iovec+0x74/0xa0 [ 519.293139][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 519.298170][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.303424][ T31] ? futex_wake+0x4b2/0x560 [ 519.308143][ T31] ? __fget_files+0x2a/0x420 [ 519.312756][ T31] ? __fget_files+0x3a0/0x420 [ 519.317777][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 519.322968][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.328763][ T31] ? do_syscall_64+0xbe/0xf80 [ 519.333465][ T31] do_syscall_64+0xfa/0xf80 [ 519.338052][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.344165][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.349501][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.355579][ T31] RIP: 0033:0x7f90c598f749 [ 519.360209][ T31] RSP: 002b:00007f90c67c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.368869][ T31] RAX: ffffffffffffffda RBX: 00007f90c5be5fa0 RCX: 00007f90c598f749 [ 519.377406][ T31] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 519.385761][ T31] RBP: 00007f90c5a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 519.393843][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.402043][ T31] R13: 00007f90c5be6038 R14: 00007f90c5be5fa0 R15: 00007ffe9afa4b78 [ 519.410389][ T31] [ 519.413423][ T31] INFO: task syz.3.2851:15509 blocked for more than 144 seconds. [ 519.421412][ T31] Not tainted syzkaller #0 [ 519.426577][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.435320][ T31] task:syz.3.2851 state:D stack:28280 pid:15509 tgid:15507 ppid:5842 task_flags:0x400040 flags:0x00080002 [ 519.447851][ T31] Call Trace: [ 519.451254][ T31] [ 519.454183][ T31] __schedule+0x14bc/0x5000 [ 519.459007][ T31] ? __pfx___schedule+0x10/0x10 [ 519.463880][ T31] ? schedule+0x91/0x360 [ 519.465832][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.468323][ T31] schedule+0x165/0x360 [ 519.480751][ T31] schedule_preempt_disabled+0x13/0x30 [ 519.486406][ T31] __mutex_lock+0x7e6/0x1350 [ 519.491034][ T31] ? __mutex_lock+0x5bb/0x1350 [ 519.495895][ T31] ? genl_rcv_msg+0x10d/0x790 [ 519.500581][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.505990][ T31] ? radix_tree_lookup+0x240/0x290 [ 519.511134][ T31] genl_rcv_msg+0x10d/0x790 [ 519.515831][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.520865][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 519.526373][ T31] netlink_rcv_skb+0x208/0x470 [ 519.531166][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.536715][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.542065][ T31] ? down_read+0x274/0x2e0 [ 519.546664][ T31] ? genl_rcv+0xd/0x40 [ 519.550756][ T31] genl_rcv+0x28/0x40 [ 519.554749][ T31] netlink_unicast+0x82f/0x9e0 [ 519.560311][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 519.566463][ T31] ? netlink_sendmsg+0x642/0xb30 [ 519.571604][ T31] ? skb_put+0x11b/0x210 [ 519.575932][ T31] netlink_sendmsg+0x805/0xb30 [ 519.580790][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.586354][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 519.591328][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.596947][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.602262][ T31] __sock_sendmsg+0x21c/0x270 [ 519.607231][ T31] __sys_sendto+0x3bd/0x520 [ 519.611821][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 519.617596][ T31] ? exc_page_fault+0x82/0x100 [ 519.622392][ T31] __x64_sys_sendto+0xde/0x100 [ 519.627549][ T31] do_syscall_64+0xfa/0xf80 [ 519.632098][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.638228][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.642930][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.649340][ T31] RIP: 0033:0x7f36ca1915dc [ 519.653848][ T31] RSP: 002b:00007f36cb069ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 519.662701][ T31] RAX: ffffffffffffffda RBX: 00007f36cb069fc0 RCX: 00007f36ca1915dc [ 519.670929][ T31] RDX: 0000000000000020 RSI: 00007f36cb06a010 RDI: 0000000000000009 [ 519.679031][ T31] RBP: 0000000000000000 R08: 00007f36cb069f14 R09: 000000000000000c [ 519.687302][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 519.695368][ T31] R13: 00007f36cb069f68 R14: 00007f36cb06a010 R15: 0000000000000000 [ 519.703496][ T31] [ 519.706658][ T31] INFO: task syz.3.2851:15510 blocked for more than 144 seconds. [ 519.714426][ T31] Not tainted syzkaller #0 [ 519.719670][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.728730][ T31] task:syz.3.2851 state:D stack:28280 pid:15510 tgid:15507 ppid:5842 task_flags:0x400040 flags:0x00080002 [ 519.740748][ T31] Call Trace: [ 519.744043][ T31] [ 519.747415][ T31] __schedule+0x14bc/0x5000 [ 519.752014][ T31] ? __pfx___schedule+0x10/0x10 [ 519.757039][ T31] ? schedule+0x91/0x360 [ 519.761307][ T31] schedule+0x165/0x360 [ 519.765722][ T31] schedule_preempt_disabled+0x13/0x30 [ 519.771294][ T31] __mutex_lock+0x7e6/0x1350 [ 519.776174][ T31] ? __mutex_lock+0x5bb/0x1350 [ 519.780983][ T31] ? genl_rcv_msg+0x10d/0x790 [ 519.785952][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.791010][ T31] ? radix_tree_lookup+0x240/0x290 [ 519.796318][ T31] genl_rcv_msg+0x10d/0x790 [ 519.800851][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.806359][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 519.811324][ T31] netlink_rcv_skb+0x208/0x470 [ 519.816165][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.821216][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.826734][ T31] ? down_read+0x274/0x2e0 [ 519.831174][ T31] ? genl_rcv+0xd/0x40 [ 519.835252][ T31] genl_rcv+0x28/0x40 [ 519.839631][ T31] netlink_unicast+0x82f/0x9e0 [ 519.844510][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 519.849951][ T31] ? netlink_sendmsg+0x642/0xb30 [ 519.854907][ T31] ? skb_put+0x11b/0x210 [ 519.859430][ T31] netlink_sendmsg+0x805/0xb30 [ 519.864229][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.870040][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 519.875042][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.880581][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.886114][ T31] __sock_sendmsg+0x21c/0x270 [ 519.890817][ T31] __sys_sendto+0x3bd/0x520 [ 519.895351][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 519.900815][ T31] ? fd_install+0x95/0x3d0 [ 519.905296][ T31] ? fd_install+0x307/0x3d0 [ 519.909999][ T31] __x64_sys_sendto+0xde/0x100 [ 519.914808][ T31] do_syscall_64+0xfa/0xf80 [ 519.919447][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.925883][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.930572][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.936610][ T31] RIP: 0033:0x7f36ca1915dc [ 519.941033][ T31] RSP: 002b:00007f36cb048ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 519.945770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.949633][ T31] RAX: ffffffffffffffda RBX: 00007f36cb048fc0 RCX: 00007f36ca1915dc [ 519.965995][ T31] RDX: 000000000000001c RSI: 00007f36cb049010 RDI: 000000000000002a [ 519.973965][ T31] RBP: 0000000000000000 R08: 00007f36cb048f14 R09: 000000000000000c [ 519.982127][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000002a [ 519.990364][ T31] R13: 00007f36cb048f68 R14: 00007f36cb049010 R15: 0000000000000000 [ 519.998436][ T31] [ 520.001487][ T31] INFO: task syz.0.2854:15519 blocked for more than 145 seconds. [ 520.009474][ T31] Not tainted syzkaller #0 [ 520.014504][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.023652][ T3510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.032218][ T31] task:syz.0.2854 state:D stack:27064 pid:15519 tgid:15518 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 520.044241][ T31] Call Trace: [ 520.047784][ T31] [ 520.050719][ T31] __schedule+0x14bc/0x5000 [ 520.055251][ T31] ? __pfx___schedule+0x10/0x10 [ 520.060174][ T31] ? schedule+0x91/0x360 [ 520.064659][ T31] schedule+0x165/0x360 [ 520.069070][ T31] schedule_preempt_disabled+0x13/0x30 [ 520.074720][ T31] __mutex_lock+0x7e6/0x1350 [ 520.079735][ T31] ? __mutex_lock+0x5bb/0x1350 [ 520.084553][ T31] ? genl_rcv_msg+0x10d/0x790 [ 520.089402][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 520.094620][ T31] ? stack_trace_save+0x9c/0xe0 [ 520.099661][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 520.104745][ T31] ? radix_tree_lookup+0x240/0x290 [ 520.110345][ T31] genl_rcv_msg+0x10d/0x790 [ 520.114857][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.119948][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 520.124927][ T31] netlink_rcv_skb+0x208/0x470 [ 520.129881][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.134921][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.140561][ T31] ? down_read+0x274/0x2e0 [ 520.145018][ T31] ? genl_rcv+0xd/0x40 [ 520.149360][ T31] genl_rcv+0x28/0x40 [ 520.153364][ T31] netlink_unicast+0x82f/0x9e0 [ 520.158330][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 520.163853][ T31] ? netlink_sendmsg+0x642/0xb30 [ 520.169502][ T31] ? skb_put+0x11b/0x210 [ 520.173848][ T31] netlink_sendmsg+0x805/0xb30 [ 520.178971][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.184645][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 520.189797][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.195105][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.200709][ T31] __sock_sendmsg+0x21c/0x270 [ 520.205791][ T31] __sys_sendto+0x3bd/0x520 [ 520.210336][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 520.215591][ T31] ? exc_page_fault+0x82/0x100 [ 520.220481][ T31] __x64_sys_sendto+0xde/0x100 [ 520.225336][ T31] do_syscall_64+0xfa/0xf80 [ 520.230232][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.236388][ T31] ? clear_bhb_loop+0x60/0xb0 [ 520.241077][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.247132][ T31] RIP: 0033:0x7fbbf7b915dc [ 520.251559][ T31] RSP: 002b:00007fbbf8976e90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 520.260289][ T31] RAX: ffffffffffffffda RBX: 00007fbbf8976fa0 RCX: 00007fbbf7b915dc [ 520.268506][ T31] RDX: 0000000000000028 RSI: 00007fbbf8976ff0 RDI: 0000000000000005 [ 520.276547][ T31] RBP: 0000000000000000 R08: 00007fbbf8976ee4 R09: 000000000000000c [ 520.284543][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 520.292989][ T31] R13: 00007fbbf8976f38 R14: 00007fbbf8976ff0 R15: 0000000000000000 [ 520.301292][ T31] [ 520.304421][ T31] [ 520.304421][ T31] Showing all locks held in the system: [ 520.312414][ T31] 1 lock held by khungtaskd/31: [ 520.317491][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 520.327612][ T31] 1 lock held by klogd/5188: [ 520.332285][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 520.342327][ T31] 2 locks held by getty/5594: [ 520.347309][ T31] #0: ffff8880303920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 520.357236][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 520.367554][ T31] 3 locks held by kworker/1:7/5951: [ 520.372755][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 520.384268][ T31] #1: ffffc900044ffb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 520.398063][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 520.409707][ T31] 5 locks held by kworker/u8:24/6223: [ 520.415218][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 520.425642][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 520.434617][ T31] #2: ffff8880b87260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 520.443963][ T31] #3: ffffffff99b58180 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540 [ 520.454701][ T31] #4: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23d0 [ 520.464653][ T31] 2 locks held by syz.1.2845/15477: [ 520.470436][ T31] #0: ffff88801d7f5100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 520.480424][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 520.490874][ T31] 2 locks held by syz.4.2846/15493: [ 520.496392][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 520.506653][T10905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.514890][ T31] #1: ffff88801d7f5100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 520.523989][ T31] 3 locks held by syz.2.2848/15500: [ 520.530186][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.538907][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 520.548060][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.558797][ T31] 2 locks held by syz.3.2851/15509: [ 520.564497][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.573073][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 520.582332][ T31] 2 locks held by syz.3.2851/15510: [ 520.588200][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.597023][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 520.606149][ T31] 2 locks held by syz.0.2854/15519: [ 520.611549][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.620358][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 520.629541][ T31] 2 locks held by syz-executor/15522: [ 520.634927][ T31] #0: ffff8880693b7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.645235][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.656339][ T31] 2 locks held by syz-executor/15524: [ 520.661773][ T31] #0: ffff88804f2e8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.671915][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.682013][ T31] 2 locks held by syz-executor/15528: [ 520.687657][ T31] #0: ffff888032e3a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.697986][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.708120][ T31] 2 locks held by syz-executor/15529: [ 520.713509][ T31] #0: ffff8880783a5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.724021][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.734150][ T31] 2 locks held by syz-executor/15530: [ 520.739880][ T31] #0: ffff88807b17f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.750171][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.760268][ T31] 2 locks held by syz-executor/15533: [ 520.765857][ T31] #0: ffff88807b17d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.776462][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.786618][ T31] 2 locks held by syz-executor/15534: [ 520.791996][ T31] #0: ffff88801ef5f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.802373][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.812542][ T31] 2 locks held by syz-executor/15540: [ 520.818069][ T31] #0: ffff8880560ff118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.828323][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.838674][ T31] 2 locks held by syz-executor/15541: [ 520.844067][ T31] #0: ffff88804ee21118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.854211][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.864394][ T31] 2 locks held by syz-executor/15542: [ 520.870134][ T31] #0: ffff88807aae5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.880338][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.890363][ T31] 2 locks held by syz-executor/15545: [ 520.896195][ T31] #0: ffff88803456c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.906503][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.916560][ T31] 2 locks held by syz-executor/15547: [ 520.921965][ T31] #0: ffff88805697e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.932414][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.942626][ T31] 2 locks held by syz-executor/15551: [ 520.948179][ T31] #0: ffff88807d7e3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.958745][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.968765][ T31] 2 locks held by syz-executor/15552: [ 520.974465][ T31] #0: ffff888032c36918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 520.985091][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 520.985994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.995416][ T31] 2 locks held by syz-executor/15553: [ 521.009239][ T31] #0: ffff888032c33918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 521.019729][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 521.029900][ T31] [ 521.032231][ T31] ============================================= [ 521.032231][ T31] [ 521.041177][ T31] NMI backtrace for cpu 0 [ 521.041201][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 521.041216][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.041226][ T31] Call Trace: [ 521.041233][ T31] [ 521.041240][ T31] dump_stack_lvl+0x189/0x250 [ 521.041269][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.041289][ T31] ? __pfx__printk+0x10/0x10 [ 521.041326][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 521.041349][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 521.041373][ T31] ? __pfx__printk+0x10/0x10 [ 521.041399][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 521.041427][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 521.041452][ T31] sys_info+0x135/0x170 [ 521.041472][ T31] watchdog+0xf95/0xfe0 [ 521.041500][ T31] ? watchdog+0x20a/0xfe0 [ 521.041529][ T31] kthread+0x711/0x8a0 [ 521.041553][ T31] ? __pfx_watchdog+0x10/0x10 [ 521.041575][ T31] ? __pfx_kthread+0x10/0x10 [ 521.041596][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 521.041620][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 521.041637][ T31] ? __pfx_kthread+0x10/0x10 [ 521.041659][ T31] ret_from_fork+0x599/0xb30 [ 521.041679][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 521.041706][ T31] ? __switch_to_asm+0x39/0x70 [ 521.041722][ T31] ? __switch_to_asm+0x33/0x70 [ 521.041740][ T31] ? __pfx_kthread+0x10/0x10 [ 521.041761][ T31] ret_from_fork_asm+0x1a/0x30 [ 521.041797][ T31] [ 521.041804][ T31] Sending NMI from CPU 0 to CPUs 1: [ 521.195066][ C1] NMI backtrace for cpu 1 [ 521.195086][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 521.195103][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.195125][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 521.195149][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 521.195163][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 521.195177][ C1] RAX: dee6d21ebf08de00 RBX: ffffffff81978fda RCX: dee6d21ebf08de00 [ 521.195189][ C1] RDX: 0000000000000001 RSI: ffffffff8d7925ee RDI: ffffffff8bc08360 [ 521.195199][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 521.195211][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822070 [ 521.195222][ C1] R13: 1ffff110038d8b70 R14: 0000000000000001 R15: 0000000000000001 [ 521.195233][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 521.195245][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.195255][ C1] CR2: 000055d9e87a1000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 521.195270][ C1] Call Trace: [ 521.195278][ C1] [ 521.195284][ C1] default_idle+0x13/0x20 [ 521.195302][ C1] default_idle_call+0x73/0xb0 [ 521.195321][ C1] do_idle+0x1ea/0x520 [ 521.195337][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 521.195355][ C1] ? __pfx_do_idle+0x10/0x10 [ 521.195380][ C1] cpu_startup_entry+0x44/0x60 [ 521.195396][ C1] start_secondary+0x101/0x110 [ 521.195417][ C1] common_startup_64+0x13e/0x147 [ 521.195446][ C1] [ 521.196116][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 521.196131][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 521.196150][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.196162][ T31] Call Trace: [ 521.196170][ T31] [ 521.196178][ T31] dump_stack_lvl+0x99/0x250 [ 521.196210][ T31] ? __asan_memcpy+0x40/0x70 [ 521.196227][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.196248][ T31] ? __pfx__printk+0x10/0x10 [ 521.196284][ T31] vpanic+0x237/0x6d0 [ 521.196304][ T31] ? __pfx_vpanic+0x10/0x10 [ 521.196324][ T31] ? preempt_schedule_common+0x83/0xd0 [ 521.196349][ T31] panic+0xb9/0xc0 [ 521.196368][ T31] ? __pfx_panic+0x10/0x10 [ 521.196389][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 521.196412][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 521.196439][ T31] watchdog+0xfdf/0xfe0 [ 521.196466][ T31] ? watchdog+0x20a/0xfe0 [ 521.196495][ T31] kthread+0x711/0x8a0 [ 521.196520][ T31] ? __pfx_watchdog+0x10/0x10 [ 521.196541][ T31] ? __pfx_kthread+0x10/0x10 [ 521.196564][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 521.196588][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 521.196605][ T31] ? __pfx_kthread+0x10/0x10 [ 521.196627][ T31] ret_from_fork+0x599/0xb30 [ 521.196648][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 521.196674][ T31] ? __switch_to_asm+0x39/0x70 [ 521.196694][ T31] ? __switch_to_asm+0x33/0x70 [ 521.196714][ T31] ? __pfx_kthread+0x10/0x10 [ 521.196736][ T31] ret_from_fork_asm+0x1a/0x30 [ 521.196773][ T31] [ 521.521082][ T31] Kernel Offset: disabled [ 521.525406][ T31] Rebooting in 86400 seconds..