last executing test programs: 11.002639385s ago: executing program 0 (id=12052): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) (async) syz_emit_ethernet(0x18c, &(0x7f00000000c0)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @generic={{0x35, 0x4, 0x1, 0x31, 0x17e, 0x64, 0x0, 0x9, 0x5e, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, {[@generic={0x82, 0x3, "a8"}, @timestamp_prespec={0x44, 0x24, 0xe0, 0x3, 0x4, [{@multicast1, 0x9}, {@empty, 0x4}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x7f}]}, @cipso={0x86, 0x23, 0x3, [{0x7, 0xa, "0d34f90e6fce2cfd"}, {0x2, 0x3, "e1"}, {0x2, 0x10, "83facf2c3468a7ab251d926da345"}]}, @timestamp_prespec={0x44, 0x34, 0x26, 0x3, 0xc, [{@remote, 0x8}, {@broadcast, 0x10000}, {@remote, 0x4}, {@empty, 0x3bf}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x1}]}, @lsrr={0x83, 0x3, 0x32}, @lsrr={0x83, 0x7, 0x39, [@broadcast]}, @ssrr={0x89, 0xf, 0x75, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}]}, @generic={0x86, 0x12, "734324871afbac0d0e0e537689f59079"}, @rr={0x7, 0x17, 0xc4, [@multicast2, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @private=0xa010101]}]}}, "a7cae85b50c2d94eaf5370e19d7dce72ef48398c0c4bf04fa2e1eecc646ae45510f993fd140d8c09a2194357e872132d4da700a7c551d63839bf23be4fe149a92c671dd4b355abb33e9aba9b630ccad9064bb8b3ba708e9765ffa8f92039a2d1f4dc7ee9b170d03ebd9a00eba1402418058f93c537347bcca80c2541c324fa7fb6296b61bca356f6c278c8b7e1ca4bd08eaba1058017358bbc23f4edeb86acb310f781f107886ef8be78"}}}}, 0x0) (async) r0 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xe, 0xfa, 0x1}]}) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 10.296879539s ago: executing program 2 (id=12059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @mcast2, 0x3}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 9.792067014s ago: executing program 2 (id=12065): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x101380, &(0x7f00000000c0)={@align=0x6, {0xfff, 0xfff, 0x4ba, 0x7a9442c2}}, 0x80000003, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde0"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 9.506484565s ago: executing program 0 (id=12067): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) accept4(r1, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000380)=0x80, 0x800) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/197, 0xbf}, {&(0x7f0000000000)=""/91, 0x5b}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x4000000000001ec, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x880) 9.505794951s ago: executing program 4 (id=12068): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf251a000000060021006200000008002280"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x20) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="04", 0x1}], 0x1}}], 0x1, 0x4000040) 8.502485403s ago: executing program 0 (id=12072): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1d, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) 3.496467237s ago: executing program 2 (id=12073): r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (async) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r11) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}, 0x1, 0x0, 0x0, 0x883}, 0x4008054) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r16, @ANYBLOB="40002f800c0002"], 0x5c}}, 0x0) (async) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1bc, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x100}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x401}, @NFC_ATTR_VENDOR_DATA={0xc9, 0x1f, "659e274d485008dba0008af952fd01ae7e003c542031e00c662856b646c737d9bcea3e8dea4cbca8c3d03dd8e2b1232b2c2a93ac6ba36a15431fe700317d83d22e171f94e9c405ec59ed7f3e2d7afd3aaba86a6409acc62632174c1dcfc42767b6b2dfcdf3249b00c8e1e36bdcf2b267c5ad3ecffb80dbba703f1ba0e8f1b4f93937c76a5014dececcf20f7840cd281ac6fa0e442942b85e719b849b64363264775c09ea006ef4eaa601db6e77411f6ef5b6da88e973385885effc5e99fc30190d5acd6197"}, @NFC_ATTR_VENDOR_DATA={0xac, 0x1f, "1e82b1b502c2dcb3407e24347ed41b2cbbd2c6b219a76756cd51770036c7e53a48c9a7bc649ac9318dca5b9b3e2c6df43fb18488a5f84e1f87bf98d4b9cc222ba11c85532031a714023beb3d6024bf8216813b46700dd3e76e1ca5c0add009cb8de528f91e131903058dace1b375f7b94b84f46388a1ce948fa0f974bf401248737d95ecab70a60075b28c5920fc659e521c8886b062c6007b56bd51545356e9f3c428574343bb10"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x24004880}, 0x44000) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb7f2965593497c186a80e0000000001e16c0ff6dab11dd800000700", "c3003d2a", "1202000000040030"}, 0x38) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) 3.462917916s ago: executing program 4 (id=12074): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x49b7b}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xeb04}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_VF_PORTS={0x4}]}, 0x34}}, 0x0) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'geneve0\x00', {0x2}, 0x2}) (async) r5 = epoll_create1(0x0) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async) listen(r6, 0x8) r8 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async) sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2004}) (async) epoll_pwait(r5, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'caif0\x00', {}, 0xf147}) 3.344811945s ago: executing program 0 (id=12076): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x24, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x1, 0x0) 3.299590177s ago: executing program 3 (id=12077): r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000"], 0x48) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x100, 0x100004, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x30097, 0x51c84}}, 0x20}, 0x1, 0x0, 0x0, 0x9045}, 0xc084) pselect6(0x40, &(0x7f0000000100)={0xf, 0x10001, 0x4, 0x7, 0x80, 0x1, 0xeaf4, 0x9}, &(0x7f0000000140)={0xac, 0xe6f, 0x6, 0x6, 0x7fff, 0xcd, 0x0, 0x10d8}, &(0x7f0000000180)={0x6, 0x1, 0x8000000000000000, 0xe, 0x3, 0x4, 0x4, 0x10}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) 3.170876011s ago: executing program 4 (id=12078): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x4, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000400)=""/4083, 0xff3}], 0x2}, 0x8}], 0x4, 0x180, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="a42cde9ee32bf2039326d6a08e06d1a2454b63edd1a935d899edcccc0064d2439d64d79125b2adf396498be9e1e16bf48d05", @ANYRES64=r3, @ANYRES16, @ANYRESHEX=r6], 0x16c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000020000000000071122a004000000000000000007e17b71c7e1aba520ab9fddbee58277d262a96cca9d53183c83ee03d6966a33512a26b453cd7be206806bafaa33383937abae226ecd00982627566f91a7c153e37a53eedc64f2b0d6fbe76ebde5beb434dbc07e7ac8045b53b5ee4ba9ea9838d3aea0a5cbe30acd895a23f3f7dabb14fbf37ce1605318cbc43b999cfb6e008d04ce163da4fc8106d93d3ec3aed20e32ab6a09925dea93382066691d0f9e09c52830e99dccbd0ca91e5a6b0b736572c2440abbf5ac79e4cc966e813560c2c62583a72640bc63c0adde27907ca40a39a82f9896c0def9033256accc36601de"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 3.030028924s ago: executing program 0 (id=12079): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) (rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}, 0x40) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) (async) r6 = socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) (async) bind$bt_hci(r4, &(0x7f0000000040), 0x6) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x81, 0x7f7, 0x30, @empty, @loopback, 0x10, 0x7, 0x1000200, 0x9}}) (async) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x18}, 0x0) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001780)) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) 2.971662978s ago: executing program 3 (id=12080): r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x8, 0x9, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}]}}}]}, 0x40}}, 0x0) 2.966381862s ago: executing program 2 (id=12081): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001d40)={'bridge0\x00', &(0x7f0000000d00)=@ethtool_dump={0x40, 0x1, 0x9}}) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.344476514s ago: executing program 3 (id=12083): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000720108000000000095000000000000006f5daaefdf0b693b9454e845deec011b331ff5327740de67663ee84c944544a5a0ae8d1ff1364bcbef2d9b50dbc00c12d32ee4ff72b351af4ea7acb1000037fb568c5acff1ede612b875296b9a49060ff2fad274f203b9a82ad6dea1adde5f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x30}, 0x400000}], 0x1, 0x20010060, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000300), &(0x7f00000003c0)=""/174}, 0x20) (async) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203fe020d00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009007fffffff030005000000000002000000ac1414aa00000000000000000200080008000000340000000000000001001480"], 0x68}, 0x1, 0x7}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x4c000}, 0x2050) (async) r3 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r7 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x6a, 0x1, 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000980), &(0x7f0000000a00)=0x68) (async, rerun: 64) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) connect$unix(r5, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.344031974s ago: executing program 3 (id=12084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1ff, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2040094) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1ff, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2040094) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) 2.342286128s ago: executing program 2 (id=12086): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@null, @remote, @netrom, @default, @rose, @default]}, &(0x7f0000000100)=0x48) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x10, r3, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbb2b7388"], 0x0) 2.340474654s ago: executing program 0 (id=12087): socket$netlink(0x10, 0x3, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240080, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="010001000208010500df00"/22], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) socket(0x1d, 0x2, 0x6) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="17b352a666c9f2985a8b", 0xa}, {&(0x7f0000000100)="301ed9f9a338ef93c403155b88695211f0", 0x11}], 0x3) 2.303609647s ago: executing program 1 (id=12088): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x200, 0x98, 0x98, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4, 0xc]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r0 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r0, 0x29, 0x24, 0x0, 0x2000005d) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x358}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c0000000b0a010400000000000000000500000608000340000000830900020073797a3200000000080007400000001f08000340000000000900020073797a3100000000080007400000000cf0000000120a0101000000000000000001000003dc0004802b00010073797374656d5f753a6f626a6563745f723a7472616365726f7574655f657865635f743a733000002b00010073797374656d5f753a6f626a6563745f723a7472616365726f7574655f657865635f743a733000002500010073797374656d5f753a6f626a6563745f723a6368666e5f657865635f743a7330000000002f00010073797374656d5f753a6f626a6563745f723a73656d616e6167655f7472616e735f6c6f636b5f743a733000002800010073797374656d5f753a6f626a6563745f723a706f7765725f6465766963655f743a73300020000000120a05000000000000000000050000070c00064000000000000000026c010000140a0300000000000000000005000009080003400000000475000800a849e85dffd2215559e0c84f5c902abedfdcc9ac25f5e241ba7b75f1120acec0294773cf0e0233032c90e261a3ce5bbc19903b1a8dc25a89858be960d132a2eac2986ab2e5cb84198d6f4ebd09d0c65d1c35b26b9099f0726d37d14990a58d53885d8f37fa918e5c9734408b59cd034a73ef0000000900010073797a31000000000c00064000000000000000059a00080080644f66bf5eff69d571cb71e30de78c0e0268ac82a11dc56c2ed484359df584e209d876753fc79b3ed8fcfe807674bb19212b4d9ccc9809e368ac15377b33845fca8ef0caf944de710ad28fbbcd1f6376dec0f88ede993d4503267a622178abc16ba26c40399d62ccce473842b9b30d8636f480be5c877e9b36fcbb0c10bebb9f0abfee1f69a136898b50d022aee50db7f1b6db8dc800000900010073797a31000000000c00064000000000000000030c000640000000000000000220000000160a010300000000000000000700000a0900020073797a300000000048000000030a01020000000000000000050000070900010073797a310000000008000a40000000040900030073797a310000000011000c00a2c150bfcff7bfcf039a"], 0x358}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x9, 0xef6, 0x1, @remote, @private1, 0x0, 0x20, 0xc, 0x1}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d08003577642cd10a0d01d9cd1b4582f4fb018eb90e0373", 0x61}, {&(0x7f0000000980)="437ef70cd5d9cf21c0e515ab0c9a381b21f11c01", 0x14}], 0x2}}], 0x1, 0x20005040) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d08003577642cd10a0d01d9cd1b4582f4fb018eb90e0373", 0x61}, {&(0x7f0000000980)="437ef70cd5d9cf21c0e515ab0c9a381b21f11c01", 0x14}], 0x2}}], 0x1, 0x20005040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="55275006ed747229311198ab94c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992ecb170f216f71336253a3be1833a25eb1fb2ba3913dd437e30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x5d}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="55275006ed747229311198ab94c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992ecb170f216f71336253a3be1833a25eb1fb2ba3913dd437e30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x5d}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.30271652s ago: executing program 3 (id=12089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$SIOCRSSL2CALL(r1, 0x8918, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200820300002ca800fdffffff010067656e65766500081c000280050009000000000005000c000900630043f41bf9b6b7ca0000"], 0x4c}, 0x1, 0xba01}, 0x810) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) ioctl$SIOCRSSL2CALL(r1, 0x8918, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200820300002ca800fdffffff010067656e65766500081c000280050009000000000005000c000900630043f41bf9b6b7ca0000"], 0x4c}, 0x1, 0xba01}, 0x810) (async) 2.254050616s ago: executing program 2 (id=12090): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x8, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3b}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a00000000000000fe8000000000000000000000000000aabf090000200002004a00000000000005fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) close(r7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYBLOB, @ANYBLOB="080003"], 0x78}}, 0x0) 2.041657052s ago: executing program 4 (id=12091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x438, 0x0, "45ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db39"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) (async) r5 = socket$rds(0x15, 0x5, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000400)={{0x84, @dev={0xac, 0x14, 0x14, 0x37}, 0x4e21, 0x2, 'dh\x00', 0x0, 0x6, 0x56}, {@loopback, 0x4e21, 0x3, 0xbd, 0xce7e, 0x7}}, 0x44) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f00000001c0)={@l2tp6={0xa, 0x0, 0x7, @private0, 0xa539, 0x2}, {&(0x7f0000000080)=""/129, 0x81}, &(0x7f0000000180), 0x11}, 0xa0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r7, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.92585405s ago: executing program 3 (id=12092): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r4 = syz_open_procfs$namespace(r1, &(0x7f0000001780)='ns/ipc\x00') r5 = getpid() sendmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r3}}}, @cred={{0xfffffffffffffd33, 0x1, 0x2, {r5, r2}}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0xe}, 0x1, 0x0, 0x0, 0x4040800}, 0x20) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000001780)={0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES8=r9], 0xf0}, 0x1, 0x0, 0x0, 0x48050}, 0x20040084) r10 = socket$netlink(0x10, 0x3, 0x12) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc, &(0x7f00000004c0)=[{&(0x7f00000002c0)={0x14, 0x18, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x4, 0xe1}]}, 0x14}, {&(0x7f0000000380)=ANY=[@ANYBLOB="040100001f00000125bd7000fcdbdf254596ca1b1d1f5e8fdf7c1530495b195f682be935555f9de70da0a8507079997cfd2c140abec208a7413f11a310eb2deb3ce137d64e4ec7a5842c1a171a00b0b0d3da0ff48a5ef7f554daadef17f71cb8abe3abdd746d67b903778b51e7a569801ac411c12e071eee3f46a43b4f39748721e83d9bb2e58b1b38328f3207ef84a131ff35245a62d246e286cebef1d030328133f189b252f73183e63640d846edc40c68238c1b761cb5969788c78273bb19d5198cba44f729a544288e26942e37cbed47b8d2d9a4e448b297e0b38514005a000000000000000000000000000000000100"/255], 0x104}], 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000003000000000000000010000000100000061a0d0e542649cb8741edbbcd0bcb3a152f678dee5acc6ef0e72f9bbb4e98ea99ef4a2a0c1b098deeb962387281ba629e8566af7f9bcc55d23c3f7c298e1964011d99086535724708965be94bbfaf359812bab2cd8a7fb427f7ea31d1f945cdaee32c1b41e836480535168cb96525fcbef03879264903aaf85d44e2d97d69da518aa8803ce3aebe3bbe53646f552e7c8ad962f657fd8931bf50f33bd1f01ba577af0e89961244f6328e8e172be2f80eda2cbdc36c1e4855c1c68b4e76dd892a9e5a12874", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10], 0xb8}, 0x8081) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r11) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000001700)=ANY=[@ANYBLOB="0000060000000000", @ANYRES16=r13, @ANYBLOB="040040000000ffdbdf2503000000050003000f0000000500020005000000"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40801) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x482, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r12, 0xfd0d6000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r14 = socket(0x40000000015, 0x5, 0x0) connect$inet(r14, &(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r14, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[], 0x180}}, 0x0) 1.89362627s ago: executing program 1 (id=12093): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1}, 0xc) bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0x1, 0x4001}, 0xc) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x0, 0x2, '\b\x00', 0xff, 0x7b}) 1.719426028s ago: executing program 4 (id=12094): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f07ebbeef, 0x8031, r0, 0x215e7000) pipe(0x0) r1 = socket(0x14, 0x2, 0x4) accept$nfc_llcp(r1, 0x0, 0x0) 1.550266636s ago: executing program 1 (id=12095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r5, 0x80) accept$netrom(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x80000001}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.266454962s ago: executing program 4 (id=12096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000009c0)={0x1, 0x0, @status={[0x1e06, 0x1, 0x2, 0x200, 0x7, 0x3]}, [0x80, 0x2, 0x4, 0x9, 0x59, 0xffffffffffffffd6, 0xfffffffffffffff9, 0x7fff, 0x2, 0x8000, 0x5, 0x1, 0x9, 0x9, 0x2, 0x5ac4, 0x8001, 0x2, 0x33bf, 0x0, 0x0, 0x31, 0xa, 0x45, 0x6, 0x0, 0x7, 0x100000001, 0x28, 0x0, 0x1, 0x2, 0x80000001, 0x3, 0x81, 0x0, 0x5, 0xff, 0x7fffffff, 0x81, 0x1, 0x0, 0x80, 0x5, 0xa, 0x1, 0x40, 0x6, 0x7, 0x9, 0x0, 0x2, 0x146, 0x1, 0x1, 0x8, 0x4, 0x4, 0x3, 0x2, 0x2, 0x0, 0x6, 0x5]}) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000020000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'vcan0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 544.81084ms ago: executing program 1 (id=12097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000009000000000a20000000000a010300000000000000000100000009d4de0073797a300000000040000000030a010800000000c20c0000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000014000000060a0104000000000000000001000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) 221.431796ms ago: executing program 1 (id=12098): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x10, 0x40000) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000340)={0xd3b, 0x6}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f0000000000)='#%^-)\x00', 0x4000, &(0x7f0000000080)={@align=0xb, {0xd86f, 0x1ca8, 0xa, 0x7fffffff}}, 0x1, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x81}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'erspan0\x00', 0x4000}) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 0s ago: executing program 1 (id=12099): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) socketpair(0x28, 0x6, 0xdc3, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000440)) (async) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f00000007c0)) (async) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000480)=@caif=@rfm, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/216, 0xd8}, {&(0x7f0000000680)=""/181, 0xb5}], 0x3}, 0x7ff}], 0x1, 0x40, &(0x7f0000000800)={r3, r4+60000000}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000880)={0x0, @dev, @local}, &(0x7f00000008c0)=0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x5c}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2051) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000a80)={0x0, 0xc8}, &(0x7f0000000ac0)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000a80)={0x0, 0xc8}, &(0x7f0000000ac0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000b00)={r9, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x9b1, 0x4, 0x0, 0x1, 0x0, 0x6, 0x73}, 0x9c) preadv(r5, &(0x7f0000001d80)=[{&(0x7f0000000bc0)=""/73, 0x49}, {&(0x7f0000000c40)=""/39, 0x27}, {&(0x7f0000000c80)=""/206, 0xce}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x4, 0x2, 0x40) recvmmsg(r2, &(0x7f0000002840)=[{{&(0x7f0000001dc0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/134, 0x86}, {&(0x7f0000001f00)=""/145, 0x91}, {&(0x7f0000001fc0)=""/206, 0xce}, {&(0x7f00000020c0)=""/28, 0x1c}, {&(0x7f0000002100)=""/245, 0xf5}], 0x5, &(0x7f0000002280)=""/253, 0xfd}, 0xfff}, {{&(0x7f0000002380)=@x25={0x9, @remote}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002400)=""/141, 0x8d}, {&(0x7f00000024c0)=""/62, 0x3e}, {&(0x7f0000002500)=""/170, 0xaa}, {&(0x7f00000025c0)=""/1, 0x1}, {&(0x7f0000002600)=""/13, 0xd}, {&(0x7f0000002640)=""/143, 0x8f}], 0x6, &(0x7f0000002780)=""/182, 0xb6}, 0x86b6}], 0x2, 0x10003, &(0x7f00000028c0)) (async) recvmmsg(r2, &(0x7f0000002840)=[{{&(0x7f0000001dc0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/134, 0x86}, {&(0x7f0000001f00)=""/145, 0x91}, {&(0x7f0000001fc0)=""/206, 0xce}, {&(0x7f00000020c0)=""/28, 0x1c}, {&(0x7f0000002100)=""/245, 0xf5}], 0x5, &(0x7f0000002280)=""/253, 0xfd}, 0xfff}, {{&(0x7f0000002380)=@x25={0x9, @remote}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002400)=""/141, 0x8d}, {&(0x7f00000024c0)=""/62, 0x3e}, {&(0x7f0000002500)=""/170, 0xaa}, {&(0x7f00000025c0)=""/1, 0x1}, {&(0x7f0000002600)=""/13, 0xd}, {&(0x7f0000002640)=""/143, 0x8f}], 0x6, &(0x7f0000002780)=""/182, 0xb6}, 0x86b6}], 0x2, 0x10003, &(0x7f00000028c0)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000002900)={r9, 0xffff}, &(0x7f0000002940)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002980)={r10, @in6={{0xa, 0x4e23, 0x1, @empty, 0x4}}, 0x80000001, 0xa264, 0xfffffffe, 0x8, 0x20, 0x8}, 0x9c) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002a80), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x34, r11, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000002b80), &(0x7f0000002bc0)=0x4) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000002c00)={0xffffffffffffffff}) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000002c40)={@broadcast, @rand_addr=0x64010101, 0x1, "39b1437fa688a886e34cf7b6c28124546eee661c8b0a1f635a86987e39f0ff38", 0x0, 0x8, 0xe, 0x401}, 0x3c) (async) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000002c40)={@broadcast, @rand_addr=0x64010101, 0x1, "39b1437fa688a886e34cf7b6c28124546eee661c8b0a1f635a86987e39f0ff38", 0x0, 0x8, 0xe, 0x401}, 0x3c) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000002c80)=@gcm_128={{0x304}, "af2f994bb2282b30", "cbd89abcf67c633532b7efc22ef80ea4", "154b55dc", "fc25b74e10d9dc41"}, 0x28) syz_genetlink_get_family_id$SEG6(&(0x7f0000002d00), r0) (async) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002d00), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x64, r12, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) (async) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x64, r12, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) r13 = gettid() ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000002e40)=r13) (async) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000002e40)=r13) syz_genetlink_get_family_id$tipc(&(0x7f0000002ec0), r0) (async) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000002ec0), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x1c, r14, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}}, 0x840) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x800) kernel console output (not intermixed with test programs): multicast mode [ 1258.429611][T11332] bridge_slave_1: entered allmulticast mode [ 1258.455559][T11335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10118'. [ 1258.540638][T11344] veth5: entered allmulticast mode [ 1258.598552][T11356] Cannot find add_set index 2 as target [ 1258.847945][T11367] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1258.918408][T11367] netlink: 'syz.3.10127': attribute type 1 has an invalid length. [ 1259.024069][T11381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10129'. [ 1259.046366][T11381] netlink: 'syz.0.10129': attribute type 7 has an invalid length. [ 1259.067970][T11381] netlink: 'syz.0.10129': attribute type 8 has an invalid length. [ 1259.078618][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10129'. [ 1259.198605][T11387] netem: unknown loss type 0 [ 1259.209074][T11387] netem: change failed [ 1259.229192][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10132'. [ 1259.240083][T11387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10131'. [ 1259.266669][T11388] Unsupported ieee802154 address type: 0 [ 1259.309743][T11389] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1259.353745][T11389] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10132'. [ 1259.365010][T11388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1259.381237][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10132'. [ 1259.418991][T11392] macvlan2: entered allmulticast mode [ 1259.425553][T11392] hsr0: entered allmulticast mode [ 1259.431112][T11392] hsr_slave_0: entered allmulticast mode [ 1259.441627][T11392] hsr_slave_1: entered allmulticast mode [ 1259.452447][T11392] hsr0: entered promiscuous mode [ 1259.931750][T11417] bond4: invalid ARP target 0.0.0.0 specified for addition [ 1259.957685][T11417] bond4: option arp_ip_target: invalid value (0) [ 1259.988466][T11417] bond4 (unregistering): Released all slaves [ 1260.937039][T11481] netlink: 'syz.1.10160': attribute type 1 has an invalid length. [ 1261.146560][T11494] x_tables: unsorted underflow at hook 4 [ 1261.239693][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1261.368115][T11507] netlink: 'syz.3.10167': attribute type 3 has an invalid length. [ 1261.480365][T11516] netlink: 'syz.0.10170': attribute type 11 has an invalid length. [ 1261.959422][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 1261.967552][ C1] lec:lec_tx_timeout: lec0 [ 1262.254173][T11561] __nla_validate_parse: 133 callbacks suppressed [ 1262.254192][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10183'. [ 1262.387051][T11566] erspan0: entered promiscuous mode [ 1262.443380][T17606] net_ratelimit: 47 callbacks suppressed [ 1262.443404][T17606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.664597][T11578] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10190'. [ 1262.722302][T11578] netlink: 'syz.3.10190': attribute type 10 has an invalid length. [ 1262.804870][T11578] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1262.839673][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.197005][T11599] netlink: 'syz.0.10197': attribute type 25 has an invalid length. [ 1263.291379][T11601] ipvlan4: entered allmulticast mode [ 1263.309964][T11601] batadv_slave_1: entered allmulticast mode [ 1263.353856][T11601] batman_adv: batadv0: Adding interface: ipvlan4 [ 1263.376801][T11601] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.430490][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.459355][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.474270][T11601] batman_adv: batadv0: Interface activated: ipvlan4 [ 1263.482559][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.494109][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10200'. [ 1263.675485][T11614] netlink: 'syz.3.10203': attribute type 11 has an invalid length. [ 1263.676872][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10202'. [ 1263.701440][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10203'. [ 1264.146981][T11635] netlink: 'syz.1.10210': attribute type 1 has an invalid length. [ 1264.255355][T11640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10214'. [ 1264.310072][T11638] bond7: (slave geneve4): making interface the new active one [ 1264.321806][T11638] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 1264.335445][T23828] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1264.363561][T11635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10210'. [ 1264.383260][T23828] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1264.457445][ T25] block nbd4: Possible stuck request ffff88803e5e7000: control (read@0,1024B). Runtime 210 seconds [ 1264.470468][ T25] block nbd4: Possible stuck request ffff88803e5e71c0: control (read@1024,1024B). Runtime 210 seconds [ 1264.482873][ T25] block nbd4: Possible stuck request ffff88803e5e7380: control (read@2048,1024B). Runtime 210 seconds [ 1264.494999][ T25] block nbd4: Possible stuck request ffff88803e5e7540: control (read@3072,1024B). Runtime 210 seconds [ 1264.508298][T11635] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1264.525940][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.564699][T23828] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1264.620697][T23828] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1264.807561][T11659] netlink: set zone limit has 4 unknown bytes [ 1264.902279][T11666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10218'. [ 1265.060402][T11672] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10218'. [ 1265.071447][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10220'. [ 1265.082114][T23828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.559757][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.720961][T23828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.737573][T11706] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1265.764322][T11710] netlink: 'syz.4.10226': attribute type 1 has an invalid length. [ 1265.879857][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.020340][T11721] netlink: 'syz.2.10230': attribute type 1 has an invalid length. [ 1266.043706][T11721] netlink: 'syz.2.10230': attribute type 7 has an invalid length. [ 1266.061828][T11721] netlink: 'syz.2.10230': attribute type 8 has an invalid length. [ 1266.221709][T11729] team0 (unregistering): Port device team_slave_0 removed [ 1266.249179][T11729] team0 (unregistering): Port device team_slave_1 removed [ 1266.294613][T11731] netlink: 'syz.1.10235': attribute type 5 has an invalid length. [ 1266.330535][T11726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1266.403941][T11745] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20003 [ 1266.442162][T11748] 8021q: VLANs not supported on ip_vti0 [ 1266.527795][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 1266.567697][T11752] lo speed is unknown, defaulting to 1000 [ 1266.580693][T11752] lo speed is unknown, defaulting to 1000 [ 1266.606154][T11752] lo speed is unknown, defaulting to 1000 [ 1266.632279][T11757] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1266.663161][T11752] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1266.757222][T11752] lo speed is unknown, defaulting to 1000 [ 1266.884987][T11752] lo speed is unknown, defaulting to 1000 [ 1266.905499][T11752] lo speed is unknown, defaulting to 1000 [ 1266.939029][T11752] lo speed is unknown, defaulting to 1000 [ 1266.965839][T11752] lo speed is unknown, defaulting to 1000 [ 1266.985170][T11752] lo speed is unknown, defaulting to 1000 [ 1266.993061][T11752] lo speed is unknown, defaulting to 1000 [ 1267.000904][T11752] lo speed is unknown, defaulting to 1000 [ 1267.008846][T11752] lo speed is unknown, defaulting to 1000 [ 1267.033047][T11752] lo speed is unknown, defaulting to 1000 [ 1267.457212][T11794] __nla_validate_parse: 9 callbacks suppressed [ 1267.457235][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10253'. [ 1267.639961][T17606] net_ratelimit: 6 callbacks suppressed [ 1267.639982][T17606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.081101][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10257'. [ 1268.155208][T11810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10258'. [ 1268.302922][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.420896][T11817] netlink: 'syz.1.10261': attribute type 23 has an invalid length. [ 1268.519521][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10263'. [ 1268.569086][T11816] netlink: 'syz.3.10260': attribute type 10 has an invalid length. [ 1268.582012][T11824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10263'. [ 1268.601100][T11816] team0: Device ipvlan1 failed to register rx_handler [ 1268.666009][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10264'. [ 1268.679663][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.782625][T11832] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1268.803127][T11833] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1269.721160][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.948989][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10278'. [ 1270.040271][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.065757][T11893] netlink: 6 bytes leftover after parsing attributes in process `syz.0.10279'. [ 1270.077638][T11890] macvlan2: entered allmulticast mode [ 1270.092923][T11890] hsr0: entered allmulticast mode [ 1270.108285][T11890] hsr_slave_0: entered allmulticast mode [ 1270.124939][T11890] hsr0: entered promiscuous mode [ 1270.152837][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10279'. [ 1270.199822][T11900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.355454][T11900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.416950][T11901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1270.524612][T11909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1270.562531][T11896] syzkaller0: entered promiscuous mode [ 1270.568325][T11896] syzkaller0: entered allmulticast mode [ 1270.761525][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.799042][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10287'. [ 1270.895237][T11925] Cannot find del_set index 1 as target [ 1270.903629][T11921] geneve5: entered promiscuous mode [ 1270.924631][T11921] geneve5: entered allmulticast mode [ 1270.937047][T11926] netlink: 'syz.1.10287': attribute type 8 has an invalid length. [ 1270.961614][T11921] atomic_op ffff888049c64198 conn xmit_atomic 0000000000000000 [ 1272.333456][T11984] netlink: 'syz.0.10304': attribute type 18 has an invalid length. [ 1272.435056][T11984] netlink: 'syz.0.10304': attribute type 18 has an invalid length. [ 1272.478838][T23842] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.512224][T23842] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.564033][T11979] tap0: tun_chr_ioctl cmd 2148553947 [ 1272.591273][T23842] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.630463][ T9174] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.849886][ T5925] net_ratelimit: 57 callbacks suppressed [ 1272.849909][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.090108][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.193169][T12016] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1273.211141][T12013] Cannot find set identified by id 65534 to match [ 1273.256740][T12012] Cannot find set identified by id 65534 to match [ 1273.275754][T12016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.416774][T12022] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1273.474295][T12022] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1273.578913][T12029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.879613][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.094293][T12052] __nla_validate_parse: 71 callbacks suppressed [ 1274.094315][T12052] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10319'. [ 1274.333851][T12062] netlink: 'syz.0.10322': attribute type 1 has an invalid length. [ 1274.612256][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10325'. [ 1274.662783][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10326'. [ 1274.842519][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10328'. [ 1274.874051][T12093] netlink: 'syz.3.10328': attribute type 2 has an invalid length. [ 1274.943056][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.070471][T12102] x_tables: duplicate underflow at hook 4 [ 1275.091358][T12102] xt_hl: Unknown TTL match mode: 255 [ 1275.256745][T12112] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1275.319983][T23828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.390168][T12116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10335'. [ 1275.431403][T12116] netlink: 'syz.0.10335': attribute type 2 has an invalid length. [ 1275.482983][T12125] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 1275.504629][T12125] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1275.574885][T12133] netlink: 'syz.0.10340': attribute type 8 has an invalid length. [ 1275.956411][T12152] syzkaller0: entered promiscuous mode [ 1275.963150][T12152] syzkaller0: entered allmulticast mode [ 1276.046934][T12154] IPv6: NLM_F_CREATE should be specified when creating new route [ 1276.063567][T12154] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1276.227904][T12163] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1276.304318][T12163] netlink: 'syz.0.10350': attribute type 10 has an invalid length. [ 1276.320667][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10350'. [ 1276.417622][T12171] x_tables: duplicate underflow at hook 1 [ 1276.486751][T12173] netlink: 'syz.0.10355': attribute type 1 has an invalid length. [ 1276.651814][T12181] xt_ipcomp: unknown flags 1D [ 1276.779464][T12188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1276.897878][T12199] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1276.915628][T12199] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10362'. [ 1276.944690][T12201] netlink: 'syz.1.10363': attribute type 1 has an invalid length. [ 1276.959362][T12201] netlink: 'syz.1.10363': attribute type 2 has an invalid length. [ 1276.978458][T12201] netlink: 'syz.1.10363': attribute type 1 has an invalid length. [ 1277.014438][T12201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10363'. [ 1277.547961][T12216] syzkaller1: entered promiscuous mode [ 1277.560023][T12216] syzkaller1: entered allmulticast mode [ 1277.754990][T12237] : entered promiscuous mode [ 1277.880618][ T8766] net_ratelimit: 11 callbacks suppressed [ 1277.880641][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.040611][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.408790][T12275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10383'. [ 1278.422025][T12278] netlink: 'syz.4.10384': attribute type 1 has an invalid length. [ 1278.474962][T12275] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1278.513430][T12275] gretap1: entered promiscuous mode [ 1278.557922][T12275] gretap1: entered allmulticast mode [ 1278.663532][T12282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.672588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.081945][T17606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.177655][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.365081][T12319] sctp: [Deprecated]: syz.1.10397 (pid 12319) Use of int in max_burst socket option. [ 1279.365081][T12319] Use struct sctp_assoc_value instead [ 1279.417033][T12318] netlink: 'syz.0.10398': attribute type 1 has an invalid length. [ 1279.440254][T12323] bridge0: port 3(syz_tun) entered disabled state [ 1279.492233][T12323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.503021][T12323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.673343][T12318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1279.723590][T12329] bond2: (slave geneve2): making interface the new active one [ 1279.733532][T12329] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1280.027593][T12349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.036689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.073313][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10406'. [ 1280.120277][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.327654][T12368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10409'. [ 1280.381753][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10409'. [ 1280.443475][T23842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.769762][T12389] siw: device registration error -23 [ 1281.283346][T12425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1281.290793][T12425] IPv6: NLM_F_CREATE should be set when creating new route [ 1281.298287][T12425] IPv6: NLM_F_CREATE should be set when creating new route [ 1281.839909][T12451] netlink: 'syz.1.10426': attribute type 1 has an invalid length. [ 1281.917726][T12451] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1281.990469][T12451] netlink: 212 bytes leftover after parsing attributes in process `syz.1.10426'. [ 1282.232481][T12468] netlink: 'syz.2.10429': attribute type 2 has an invalid length. [ 1283.240067][ T5834] net_ratelimit: 5 callbacks suppressed [ 1283.240090][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.837781][T12396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1284.203823][T12484] netlink: 'syz.1.10434': attribute type 1 has an invalid length. [ 1284.229498][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10434'. [ 1284.243774][T12484] netlink: 658 bytes leftover after parsing attributes in process `syz.1.10434'. [ 1284.273446][T12484] netlink: 'syz.1.10434': attribute type 1 has an invalid length. [ 1284.283870][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.938639][T12510] syzkaller0: entered promiscuous mode [ 1284.951971][T12510] syzkaller0: entered allmulticast mode [ 1285.193459][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10448'. [ 1285.241269][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.349774][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.407225][T12543] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1285.480160][ T9174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.214912][T23828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.224400][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.368573][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.858498][T23842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.040001][T26984] Bluetooth: hci2: command 0x0406 tx timeout [ 1288.308121][ T8196] net_ratelimit: 2 callbacks suppressed [ 1288.308139][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.439819][T17606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.484948][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.320852][T12564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10456'. [ 1290.331018][T12567] netlink: 240 bytes leftover after parsing attributes in process `syz.2.10454'. [ 1290.509016][T12575] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10459'. [ 1290.519884][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.689707][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.762082][T12589] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10463'. [ 1290.900724][T12598] netlink: 'syz.3.10467': attribute type 2 has an invalid length. [ 1290.977722][T12599] netlink: 'syz.3.10467': attribute type 2 has an invalid length. [ 1291.037713][T12609] tipc: Enabled bearer , priority 0 [ 1291.063499][T12609] syzkaller0: entered promiscuous mode [ 1291.089463][T12609] syzkaller0: entered allmulticast mode [ 1291.189867][T12617] 8021q: VLANs not supported on wg2 [ 1291.241990][T23842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.282690][T12614] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1291.335410][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.447803][T12617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.476499][T12617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.494389][T12617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.513754][T12636] netlink: 'syz.3.10472': attribute type 15 has an invalid length. [ 1291.531634][T12617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.559841][T17606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.577439][T12617] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 1291.588517][T12617] batman_adv: batadv0: Removing interface: ipvlan4 [ 1291.669429][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10472'. [ 1291.697823][T12614] tipc: Resetting bearer [ 1291.713955][T12631] syzkaller1: entered promiscuous mode [ 1291.725629][T12631] syzkaller1: entered allmulticast mode [ 1291.755296][T12607] tipc: Resetting bearer [ 1291.883426][T12607] tipc: Disabling bearer [ 1291.953894][T12648] netlink: 'syz.4.10476': attribute type 1 has an invalid length. [ 1291.962411][T23828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.387596][T12676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10482'. [ 1292.603177][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.680343][T12690] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1292.737957][T12693] tipc: Started in network mode [ 1292.777247][T12693] tipc: Node identity ead6d00626c5, cluster identity 4711 [ 1292.812485][T12693] tipc: Enabled bearer , priority 0 [ 1292.841035][T12690] syzkaller0: entered promiscuous mode [ 1292.859646][T12690] syzkaller0: entered allmulticast mode [ 1292.909829][T12690] tipc: Resetting bearer [ 1292.984031][T12687] tipc: Resetting bearer [ 1293.090439][T12715] netlink: 'syz.4.10493': attribute type 39 has an invalid length. [ 1293.103772][T12687] tipc: Disabling bearer [ 1293.163422][T12715] bridge0: port 3(syz_tun) entered disabled state [ 1293.302876][T12715] syz_tun (unregistering): left allmulticast mode [ 1293.332337][T12715] syz_tun (unregistering): left promiscuous mode [ 1293.355952][T12715] bridge0: port 3(syz_tun) entered disabled state [ 1293.456932][T12737] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 1293.535927][T12737] x_tables: duplicate underflow at hook 3 [ 1293.638416][T12741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10497'. [ 1293.649983][T17606] net_ratelimit: 2 callbacks suppressed [ 1293.650003][T17606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.703779][T12745] netlink: 'syz.2.10498': attribute type 1 has an invalid length. [ 1293.756242][T12745] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1293.785647][T12745] bond9: (slave gretap4): making interface the new active one [ 1293.796115][T12745] bond9: (slave gretap4): Enslaving as an active interface with an up link [ 1294.168012][T12758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10504'. [ 1294.408972][T12770] block nbd4: Unsupported socket: should be TCP or UNIX. [ 1294.434094][T12770] ±ÿ: renamed from team_slave_1 (while UP) [ 1294.451840][T12773] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10509'. [ 1294.521504][ T25] block nbd4: Connection timed out, retrying (0/1 alive) [ 1294.528752][ T25] block nbd4: Connection timed out, retrying (0/1 alive) [ 1294.537086][ T25] block nbd4: Connection timed out, retrying (0/1 alive) [ 1294.545042][T17643] block nbd4: Dead connection, failed to find a fallback [ 1294.554171][ T25] block nbd4: Connection timed out, retrying (0/1 alive) [ 1294.933965][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10517'. [ 1295.039501][T12806] bond10: option resend_igmp: invalid value (32767) [ 1295.072774][T12806] bond10: option resend_igmp: allowed values 0 - 255 [ 1295.112513][T12806] bond10 (unregistering): Released all slaves [ 1295.661836][T12846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1295.795684][T12856] veth1_to_bond: entered allmulticast mode [ 1295.844510][T12858] IPv6: sit1: Disabled Multicast RS [ 1295.852018][T12858] sit1: entered allmulticast mode [ 1295.898970][T12856] veth1_to_bond: left allmulticast mode [ 1296.001739][T12871] __nla_validate_parse: 1 callbacks suppressed [ 1296.001765][T12871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10534'. [ 1296.021621][T12871] tipc: Invalid UDP bearer configuration [ 1296.021682][T12871] tipc: Enabling of bearer rejected, failed to enable media [ 1296.097949][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10533'. [ 1296.226286][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10533'. [ 1296.345973][T12888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.395633][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10537'. [ 1296.441304][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.492439][T12893] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1296.705741][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10541'. [ 1296.725258][T12899] openvswitch: netlink: Flow actions attr not present in new flow. [ 1296.735495][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10541'. [ 1296.899680][T12899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10541'. [ 1296.953620][T12907] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1297.033664][T12907] syzkaller0: entered promiscuous mode [ 1297.068341][T12907] syzkaller0: entered allmulticast mode [ 1297.081214][T23842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.719884][T23808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.015196][T12936] netlink: 'syz.1.10552': attribute type 30 has an invalid length. [ 1298.075388][T12943] netlink: 'syz.4.10553': attribute type 1 has an invalid length. [ 1298.104184][T12943] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10553'. [ 1298.312807][T12944] bond9: entered promiscuous mode [ 1298.318143][T12944] bond9: entered allmulticast mode [ 1298.324992][T12944] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1298.370849][T12955] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10557'. [ 1298.374342][T23828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.404140][T12955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10557'. [ 1298.436451][T12959] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1298.466566][T12960] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1298.515959][T12962] sock: sock_set_timeout: `syz.0.10560' (pid 12962) tries to set negative timeout [ 1298.627626][T12969] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1299.281488][T13002] netlink: 'syz.0.10570': attribute type 10 has an invalid length. [ 1299.356722][T13008] team0: Cannot enslave team device to itself [ 1299.426283][T13014] xt_hashlimit: size too large, truncated to 1048576 [ 1299.779751][T13029] netlink: 'syz.0.10578': attribute type 9 has an invalid length. [ 1299.809422][T13029] netlink: 'syz.0.10578': attribute type 6 has an invalid length. [ 1300.223871][T13060] openvswitch: netlink: IP tunnel dst address not specified [ 1300.291207][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1300.297545][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1300.304828][T13062] netlink: 'syz.3.10588': attribute type 7 has an invalid length. [ 1300.305956][ T1300] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1300.482948][T13070] openvswitch: netlink: Message has 1 unknown bytes. [ 1300.505837][T13070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1300.526363][T13073] netlink: 'syz.2.10592': attribute type 1 has an invalid length. [ 1300.670376][T13073] bond10: entered promiscuous mode [ 1300.671405][T13084] netlink: 'syz.2.10592': attribute type 21 has an invalid length. [ 1300.677717][T13073] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1300.733245][T13084] IPv6: NLM_F_CREATE should be specified when creating new route [ 1300.743873][T13088] netlink: 'syz.4.10595': attribute type 21 has an invalid length. [ 1300.752355][T13088] IPv6: NLM_F_CREATE should be specified when creating new route [ 1300.760511][T13088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1300.767924][T13088] IPv6: NLM_F_CREATE should be set when creating new route [ 1300.775285][T13088] IPv6: NLM_F_CREATE should be set when creating new route [ 1300.782601][T13088] IPv6: NLM_F_CREATE should be set when creating new route [ 1300.835699][T13073] bond10: (slave bridge3): making interface the new active one [ 1300.847186][T13073] bridge3: entered promiscuous mode [ 1300.860320][T13073] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 1301.078135][T13093] bond4 (unregistering): Released all slaves [ 1301.262456][T13105] __nla_validate_parse: 15 callbacks suppressed [ 1301.262479][T13105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10600'. [ 1301.346058][T13114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10604'. [ 1301.462591][T13120] netlink: 'syz.2.10606': attribute type 1 has an invalid length. [ 1301.541514][T13120] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1301.598443][T13122] bond11: (slave bridge4): making interface the new active one [ 1301.610769][T13122] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 1302.172878][T13151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10612'. [ 1302.204105][ T9174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.502830][T13160] tipc: Started in network mode [ 1302.557323][T13160] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1302.584855][T13160] tipc: Enabling of bearer rejected, failed to enable media [ 1302.610648][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10617'. [ 1302.646470][T13166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10617'. [ 1302.708582][T13166] erspan0: entered promiscuous mode [ 1302.757845][T13166] erspan0: left promiscuous mode [ 1302.840862][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.475333][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10633'. [ 1303.485589][ T9174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.527879][T13211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10633'. [ 1303.580348][T13211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10633'. [ 1303.788601][T13224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1304.036706][T13228] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.10638'. [ 1304.123207][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.558069][T13265] validate_nla: 2 callbacks suppressed [ 1304.558096][T13265] netlink: 'syz.0.10651': attribute type 24 has an invalid length. [ 1304.803634][T13272] netlink: 'syz.3.10655': attribute type 1 has an invalid length. [ 1304.930826][T13275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1304.960931][T13275] bridge0: port 3(bond4) entered blocking state [ 1304.991917][T13275] bridge0: port 3(bond4) entered disabled state [ 1305.039734][T13275] bond4: entered allmulticast mode [ 1305.054282][T13275] bond4: entered promiscuous mode [ 1305.061534][T13275] bridge0: port 3(bond4) entered blocking state [ 1305.067999][T13275] bridge0: port 3(bond4) entered forwarding state [ 1305.254264][T13272] bond4: entered promiscuous mode [ 1305.288099][T13272] bond4: entered allmulticast mode [ 1305.318739][T13272] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1305.384542][T13279] macvlan2: entered promiscuous mode [ 1305.390377][T13279] macvlan2: entered allmulticast mode [ 1305.398064][T13279] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1305.412449][ C1] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1305.464935][T23842] bridge0: port 3(bond4) entered disabled state [ 1305.928871][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10668'. [ 1305.959306][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 1305.967399][ C1] lec:lec_tx_timeout: lec0 [ 1305.986700][T13333] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1306.206809][T13346] pimreg: entered allmulticast mode [ 1306.587965][T13365] __nla_validate_parse: 1 callbacks suppressed [ 1306.587989][T13365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10678'. [ 1306.764578][T13366] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1306.994031][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10681'. [ 1307.029667][T13394] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1307.285273][T13410] netlink: zone id is out of range [ 1307.306875][T13410] netlink: zone id is out of range [ 1307.319870][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.347736][T13410] netlink: zone id is out of range [ 1307.370090][T13410] netlink: zone id is out of range [ 1307.402041][T13410] netlink: zone id is out of range [ 1307.408994][T13415] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10690'. [ 1307.426224][T13410] netlink: zone id is out of range [ 1307.431919][T13417] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10690'. [ 1307.464158][T13410] netlink: zone id is out of range [ 1307.502473][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10691'. [ 1307.566401][T13421] bond5: option xmit_hash_policy: invalid value (64) [ 1307.583382][T13421] bond5 (unregistering): Released all slaves [ 1307.974457][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10698'. [ 1308.293371][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10701'. [ 1308.415242][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10701'. [ 1308.567086][T13469] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10705'. [ 1308.676308][T13477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10707'. [ 1308.811679][T13483] syzkaller0: entered promiscuous mode [ 1308.828111][T13483] syzkaller0: entered allmulticast mode [ 1308.943497][T13489] netlink: 'syz.0.10711': attribute type 1 has an invalid length. [ 1308.968815][T13487] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1309.161012][T13494] veth5: entered promiscuous mode [ 1309.166416][T13494] veth5: entered allmulticast mode [ 1309.275280][T13502] netlink: 'syz.4.10716': attribute type 1 has an invalid length. [ 1309.486555][T13502] bond5: entered promiscuous mode [ 1309.492885][T13502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1309.981798][T13525] bridge0: port 1(ipvlan2) entered blocking state [ 1309.996135][T13525] bridge0: port 1(ipvlan2) entered disabled state [ 1310.005284][T13525] ipvlan2: entered allmulticast mode [ 1310.011280][T13525] bridge0: entered allmulticast mode [ 1310.022948][T13525] ipvlan2: left allmulticast mode [ 1310.028426][T13525] bridge0: left allmulticast mode [ 1310.254484][T13540] netlink: 'syz.3.10728': attribute type 1 has an invalid length. [ 1310.398327][T13540] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1310.474801][T13542] bond5: (slave ip6erspan0): making interface the new active one [ 1310.497476][T13542] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1310.818404][T13570] syzkaller1: entered promiscuous mode [ 1310.824672][T13570] syzkaller1: entered allmulticast mode [ 1310.946299][T13578] net_ratelimit: 10 callbacks suppressed [ 1310.946321][T13578] openvswitch: netlink: Flow key attr not present in new flow. [ 1311.196174][T13578] mac80211_hwsim hwsim103 wlan0: entered promiscuous mode [ 1311.610738][T13604] __nla_validate_parse: 6 callbacks suppressed [ 1311.610786][T13604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10747'. [ 1311.658723][T13604] netlink: 13 bytes leftover after parsing attributes in process `syz.4.10747'. [ 1311.795293][T13604] veth5: entered promiscuous mode [ 1312.166437][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10756'. [ 1312.654835][T13671] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10765'. [ 1313.001798][T13681] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10768'. [ 1313.080237][T23826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.359966][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.002171][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.004699][T13644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1315.285223][T13717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10778'. [ 1315.840900][T13745] netlink: 'syz.1.10785': attribute type 1 has an invalid length. [ 1315.941053][T13745] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1316.035191][T13748] vlan2: entered allmulticast mode [ 1316.071908][T13748] veth0_to_bond: entered allmulticast mode [ 1316.125089][T13748] bond11: (slave vlan2): making interface the new active one [ 1316.149899][T13748] bond11: (slave vlan2): Enslaving as an active interface with an up link [ 1317.034269][T13793] IPVS: Error connecting to the multicast addr [ 1317.260893][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10805'. [ 1317.316617][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10805'. [ 1317.382395][T13809] netlink: 'syz.1.10805': attribute type 4 has an invalid length. [ 1317.408954][T13810] gretap0: entered promiscuous mode [ 1317.428107][T13810] vlan3: entered promiscuous mode [ 1317.734333][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10811'. [ 1317.854542][T13832] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1317.856555][T13831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1317.928250][T13826] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1317.937940][T13831] netlink: 'syz.3.10812': attribute type 29 has an invalid length. [ 1317.956914][T13834] netlink: 'syz.0.10813': attribute type 2 has an invalid length. [ 1317.968455][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10812'. [ 1317.988364][T13834] netlink: 15 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1318.257930][T13845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10816'. [ 1318.335747][T13845] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1318.458283][T13847] netlink: 'syz.1.10817': attribute type 2 has an invalid length. [ 1318.792666][T13868] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1318.844454][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.910594][T13878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1319.153497][T13893] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10830'. [ 1319.484531][T23824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.497784][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.967440][T13941] netlink: 'syz.3.10844': attribute type 21 has an invalid length. [ 1319.972838][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10845'. [ 1319.987311][T13938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10845'. [ 1320.043024][T13935] bond0: entered promiscuous mode [ 1320.048322][T13935] bond_slave_0: entered promiscuous mode [ 1320.095826][T13935] bond_slave_1: entered promiscuous mode [ 1320.119790][T13935] bridge_slave_1: entered promiscuous mode [ 1320.151851][T13935] hsr2: entered promiscuous mode [ 1320.173610][T10750] lec:lec_start_xmit: lec0:No lecd attached [ 1320.392314][T13958] netlink: 'syz.0.10849': attribute type 1 has an invalid length. [ 1320.417991][T13958] netlink: 'syz.0.10849': attribute type 3 has an invalid length. [ 1320.426668][T13958] NCSI netlink: No device for ifindex 813332851 [ 1320.682139][T13373] nci: nci_rx_work: unknown MT 0x7 [ 1320.767760][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.863800][T13978] syzkaller0: entered promiscuous mode [ 1320.870084][T13978] syzkaller0: entered allmulticast mode [ 1320.883209][T13978] 8021q: VLANs not supported on ip6gre0 [ 1320.986168][T13989] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1321.204004][T13995] bond6 (unregistering): Released all slaves [ 1323.570824][T13968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1323.921205][T14023] netlink: 'syz.3.10867': attribute type 1 has an invalid length. [ 1324.103951][T14023] bond6: entered promiscuous mode [ 1324.109862][T14023] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1324.155924][T14025] bond12 (unregistering): Released all slaves [ 1324.237193][T14040] bond6: (slave bridge5): making interface the new active one [ 1324.245639][T14040] bridge5: entered promiscuous mode [ 1324.252711][T14040] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1324.269717][T14043] netlink: 'syz.0.10870': attribute type 1 has an invalid length. [ 1324.305213][T14043] __nla_validate_parse: 5 callbacks suppressed [ 1324.305236][T14043] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10870'. [ 1324.329685][T14043] netlink: 658 bytes leftover after parsing attributes in process `syz.0.10870'. [ 1324.355091][T14043] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10870'. [ 1324.482661][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10873'. [ 1324.547121][T14053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10871'. [ 1324.593803][T14058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10875'. [ 1324.610392][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.622809][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.802214][T14067] netlink: 284 bytes leftover after parsing attributes in process `syz.1.10875'. [ 1324.820094][T14058] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10875'. [ 1325.054806][T14087] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1325.242708][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.371389][T14099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10885'. [ 1325.403152][T14106] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10887'. [ 1325.456264][T14106] bond7: entered promiscuous mode [ 1325.461682][T14106] bond7: entered allmulticast mode [ 1325.467546][T14106] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1325.885123][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.969338][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 1325.977461][ C1] lec:lec_tx_timeout: lec0 [ 1326.897905][T14186] SET target dimension over the limit! [ 1326.942178][T14180] bridge6: port 1(bond8) entered blocking state [ 1326.960842][T14180] bridge6: port 1(bond8) entered disabled state [ 1326.977013][T14192] netlink: 'syz.2.10915': attribute type 5 has an invalid length. [ 1326.987160][T14180] bond8: entered allmulticast mode [ 1327.011993][T14180] bond8: entered promiscuous mode [ 1327.274718][T14206] 8021q: VLANs not supported on ip6_vti0 [ 1327.299672][T14208] vlan2: entered allmulticast mode [ 1327.316073][T14208] mac80211_hwsim hwsim105 wlan0: entered allmulticast mode [ 1327.796983][T14238] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1327.815846][T14238] bond0: (slave lo): Error: Device can not be enslaved while up [ 1327.877512][T14242] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003 [ 1327.886611][T14243] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003 [ 1328.274630][T14254] netlink: 'syz.1.10935': attribute type 2 has an invalid length. [ 1328.391218][T14254] delete_channel: no stack [ 1328.955631][T14290] netlink: 'syz.1.10945': attribute type 4 has an invalid length. [ 1329.001620][T14292] netlink: 'syz.0.10943': attribute type 39 has an invalid length. [ 1329.168360][T14292] syz_tun (unregistering): left promiscuous mode [ 1329.207710][T14300] netlink: 'syz.3.10947': attribute type 3 has an invalid length. [ 1329.762894][T14331] __nla_validate_parse: 25 callbacks suppressed [ 1329.762924][T14331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10955'. [ 1329.972718][T14347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1330.271105][T14360] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 1330.360346][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.368765][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.379725][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10966'. [ 1330.409934][T14363] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10966'. [ 1330.439499][T14363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10966'. [ 1330.687722][T14369] netlink: 209204 bytes leftover after parsing attributes in process `syz.2.10968'. [ 1330.739730][T14340] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1330.748811][T14340] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1330.896454][T14377] IPv6: NLM_F_CREATE should be specified when creating new route [ 1330.999429][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1331.010948][T23826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.019868][T23826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.274116][T14393] netlink: 'syz.3.10976': attribute type 32 has an invalid length. [ 1331.289563][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10976'. [ 1331.393535][T14393] bond9: option coupled_control: invalid value (192) [ 1331.425830][T14393] bond9 (unregistering): Released all slaves [ 1331.567278][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10979'. [ 1332.455926][T14458] tc_dump_action: action bad kind [ 1332.782007][T14476] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11001'. [ 1332.805226][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11002'. [ 1332.941340][T14484] netlink: 'syz.2.11003': attribute type 3 has an invalid length. [ 1332.974887][T14486] xt_CONNSECMARK: invalid mode: 0 [ 1332.976911][T14484] netlink: 'syz.2.11003': attribute type 3 has an invalid length. [ 1333.078177][T14484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11003'. [ 1333.292323][T14500] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002 [ 1333.378782][T14506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1334.401835][T14567] netlink: 'syz.1.11027': attribute type 1 has an invalid length. [ 1334.575071][T14579] tipc: Enabling of bearer rejected, failed to enable media [ 1334.926494][T14593] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20003 [ 1334.953063][T14599] netlink: 'syz.3.11037': attribute type 4 has an invalid length. [ 1334.974328][T14591] syzkaller0: entered allmulticast mode [ 1335.072914][T14602] syzkaller0: entered promiscuous mode [ 1335.078589][T14602] syzkaller0: entered allmulticast mode [ 1335.494019][T14626] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 1335.732130][T14634] __nla_validate_parse: 4 callbacks suppressed [ 1335.732155][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11048'. [ 1335.748989][T14634] netlink: 'syz.2.11048': attribute type 58 has an invalid length. [ 1335.758806][T14634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11048'. [ 1336.122647][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.131888][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.199139][T14647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11053'. [ 1336.293500][T14660] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11058'. [ 1336.319336][T14661] netlink: 'syz.0.11057': attribute type 3 has an invalid length. [ 1336.393188][T14660] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1336.419096][T14660] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1336.525014][T14666] netlink: 'syz.2.11060': attribute type 2 has an invalid length. [ 1336.649062][T14678] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11064'. [ 1336.763280][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.775548][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.849010][T14688] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11068'. [ 1336.902093][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11068'. [ 1336.975677][T14697] netlink: 'syz.0.11070': attribute type 15 has an invalid length. [ 1337.004314][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11070'. [ 1337.034375][T14703] netlink: 'syz.2.11071': attribute type 1 has an invalid length. [ 1337.070100][T14697] netlink: 'syz.0.11070': attribute type 15 has an invalid length. [ 1337.110976][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11070'. [ 1337.194499][T14703] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1337.305575][T14715] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1337.413737][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11073'. [ 1337.465058][T14726] sctp: [Deprecated]: syz.2.11076 (pid 14726) Use of int in max_burst socket option. [ 1337.465058][T14726] Use struct sctp_assoc_value instead [ 1337.531872][T14726] sctp: [Deprecated]: syz.2.11076 (pid 14726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1337.531872][T14726] Use struct sctp_sack_info instead [ 1337.562180][T14731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1338.148040][T14746] netlink: 'syz.2.11085': attribute type 2 has an invalid length. [ 1338.337389][T14760] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 1339.973122][T14847] tipc: Bearer : already 2 bearers with priority 10 [ 1340.008879][T14847] tipc: Bearer : trying with adjusted priority [ 1340.039939][T14847] tipc: Enabling of bearer rejected, failed to enable media [ 1340.130762][T14850] sctp: [Deprecated]: syz.2.11115 (pid 14850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1340.130762][T14850] Use struct sctp_sack_info instead [ 1340.351648][T14864] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1340.380775][T14864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1340.403018][T14870] netlink: 'syz.0.11123': attribute type 22 has an invalid length. [ 1340.416580][T14870] netlink: 'syz.0.11123': attribute type 22 has an invalid length. [ 1340.761513][T14892] __nla_validate_parse: 12 callbacks suppressed [ 1340.761536][T14892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11129'. [ 1340.904893][T14901] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11133'. [ 1341.049981][T14904] netlink: 512 bytes leftover after parsing attributes in process `syz.4.11134'. [ 1341.084655][T14908] tipc: Failed to obtain node identity [ 1341.091081][T14908] tipc: Enabling of bearer rejected, failed to enable media [ 1341.242183][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.444750][T14930] netlink: 'syz.3.11143': attribute type 1 has an invalid length. [ 1341.499711][T14934] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11143'. [ 1341.554623][T14930] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1341.680854][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11145'. [ 1341.690968][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11146'. [ 1341.747680][T14944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11145'. [ 1341.888184][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.940651][T14950] lo speed is unknown, defaulting to 1000 [ 1342.205938][T23856] nci: nci_ntf_packet: unknown ntf opcode 0x107 [ 1342.206101][T14964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1342.531524][T11287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.540475][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.569761][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11159'. [ 1342.773609][T15002] netlink: 'syz.0.11160': attribute type 4 has an invalid length. [ 1342.782615][T15004] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11161'. [ 1342.912906][T15007] netlink: 'syz.1.11161': attribute type 15 has an invalid length. [ 1343.168055][T14950] lo speed is unknown, defaulting to 1000 [ 1343.290506][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11166'. [ 1343.369501][T15033] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1343.823415][T15045] netlink: 'syz.2.11172': attribute type 29 has an invalid length. [ 1344.126156][T15065] netlink: 'syz.4.11176': attribute type 29 has an invalid length. [ 1344.221914][T15073] netlink: 'syz.4.11176': attribute type 29 has an invalid length. [ 1344.256185][T15065] unsupported nla_type 58 [ 1344.605477][ T8196] IPVS: starting estimator thread 0... [ 1344.713238][T15091] IPVS: using max 25 ests per chain, 60000 per kthread [ 1344.819149][T15099] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1344.873600][T15099] bond8 (unregistering): Released all slaves [ 1344.984293][T15098] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1345.035531][T15098] bond3 (unregistering): Released all slaves [ 1345.346000][T15119] syzkaller0: entered allmulticast mode [ 1345.410752][T15119] syzkaller0 (unregistering): left allmulticast mode [ 1345.548919][T15131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.589693][T15131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.874489][T15147] __nla_validate_parse: 12 callbacks suppressed [ 1345.874512][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11200'. [ 1346.041495][T15155] netlink: 'syz.1.11201': attribute type 9 has an invalid length. [ 1346.258721][T15164] xt_hashlimit: size too large, truncated to 1048576 [ 1346.266433][T15165] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1346.283951][T15162] syzkaller0: entered promiscuous mode [ 1346.296524][T15162] syzkaller0: entered allmulticast mode [ 1346.325804][T15162] simple: basic_1 [ 1346.351070][T15162] netlink: 'syz.1.11204': attribute type 1 has an invalid length. [ 1346.457419][T15171] netlink: 'syz.3.11206': attribute type 1 has an invalid length. [ 1346.820551][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11207'. [ 1346.990628][T15171] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1347.012336][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.102370][T15185] syzkaller0: entered promiscuous mode [ 1347.130024][T15185] syzkaller0: entered allmulticast mode [ 1347.207883][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11210'. [ 1347.467880][T15206] lo speed is unknown, defaulting to 1000 [ 1347.640956][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.754076][T15228] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11220'. [ 1347.793878][T15228] syzkaller0: entered promiscuous mode [ 1347.963221][T15234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11223'. [ 1348.008433][T15235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11222'. [ 1348.202231][T15245] xt_hashlimit: size too large, truncated to 1048576 [ 1348.236307][T15206] lo speed is unknown, defaulting to 1000 [ 1348.267356][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11227'. [ 1348.281669][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.397283][T15253] bridge_slave_0: left allmulticast mode [ 1348.406202][T15253] bridge_slave_0: left promiscuous mode [ 1348.413681][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.426712][T15253] bridge_slave_1: left allmulticast mode [ 1348.433148][T15253] bridge_slave_1: left promiscuous mode [ 1348.439100][T15253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.474839][T15253] bond4: left promiscuous mode [ 1348.501458][T15253] bond0: (slave bond_slave_0): Releasing backup interface [ 1348.577789][T15253] bond0: (slave bond_slave_1): Releasing backup interface [ 1348.646563][T15253] team0: Port device team_slave_0 removed [ 1348.730762][T15253] team0: Port device 26±ÿ removed [ 1348.771001][T15264] netlink: 'syz.2.11231': attribute type 10 has an invalid length. [ 1348.783426][T15253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1348.831538][T15265] netlink: 'syz.2.11231': attribute type 10 has an invalid length. [ 1348.841690][T15259] xt_CT: No such helper "snmp_trap" [ 1349.000087][T15264] team0: Port device dummy0 added [ 1349.042772][T15265] team0: Port device dummy0 removed [ 1349.054328][T15271] netlink: 211612 bytes leftover after parsing attributes in process `syz.0.11233'. [ 1349.079646][T15265] .`¹: (slave dummy0): Enslaving as an active interface with an up link [ 1349.228503][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11234'. [ 1349.308634][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11234'. [ 1349.343887][T15274] xfrm1: entered promiscuous mode [ 1349.349609][T15274] xfrm1: entered allmulticast mode [ 1349.452398][T15287] ipt_ECN: cannot use operation on non-tcp rule [ 1349.536167][T15291] netlink: 'syz.4.11238': attribute type 1 has an invalid length. [ 1349.555740][T15278] syzkaller1: entered promiscuous mode [ 1349.568690][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.582360][T15278] syzkaller1: entered allmulticast mode [ 1349.874901][T15303] macvtap1: entered promiscuous mode [ 1349.881927][T15303] macvtap1: entered allmulticast mode [ 1349.887624][T15303] veth1_vlan: entered allmulticast mode [ 1349.895988][T15306] openvswitch: netlink: IP tunnel TTL not specified. [ 1349.917576][T15305] macvtap2: entered promiscuous mode [ 1349.925528][T15305] macvtap2: entered allmulticast mode [ 1350.019676][T15303] macvtap2: entered promiscuous mode [ 1350.029385][T15303] macvtap2: entered allmulticast mode [ 1350.119112][T15314] pim6reg: entered allmulticast mode [ 1350.145329][T15315] pim6reg: left allmulticast mode [ 1350.285070][T15326] netlink: 'syz.1.11248': attribute type 21 has an invalid length. [ 1350.310627][T15326] IPv6: NLM_F_CREATE should be specified when creating new route [ 1350.433159][T15330] netlink: 'syz.0.11250': attribute type 5 has an invalid length. [ 1350.445494][T15329] IPv6: sit1: Disabled Multicast RS [ 1350.694099][T15353] netlink: 'syz.3.11257': attribute type 1 has an invalid length. [ 1350.732198][T15353] bond11: entered promiscuous mode [ 1350.738186][T15353] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1350.797673][T15353] ipvlan4: entered allmulticast mode [ 1350.817834][T15353] bond11: entered allmulticast mode [ 1350.858083][T15356] ipvlan5: entered allmulticast mode [ 1350.946144][T15359] __nla_validate_parse: 72 callbacks suppressed [ 1350.946164][T15359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11259'. [ 1351.069991][T15367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11261'. [ 1351.102868][T15365] wireguard: wg0: Could not create IPv4 socket [ 1351.115656][T15367] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11261'. [ 1351.277943][T15381] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11266'. [ 1351.301401][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11266'. [ 1351.471525][T15387] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11268'. [ 1351.482209][T15383] vlan3: entered allmulticast mode [ 1351.498191][T15383] bond0: entered allmulticast mode [ 1351.666275][T15387] bond0 (unregistering): Released all slaves [ 1351.952961][T15414] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11277'. [ 1351.972914][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11277'. [ 1352.005919][T15414] netlink: 31 bytes leftover after parsing attributes in process `syz.2.11277'. [ 1352.038137][T15414] netlink: 'syz.2.11277': attribute type 2 has an invalid length. [ 1352.067993][T15414] netlink: 31 bytes leftover after parsing attributes in process `syz.2.11277'. [ 1352.180978][T15426] netlink: zone id is out of range [ 1352.186630][T15426] netlink: zone id is out of range [ 1352.193052][T15426] netlink: zone id is out of range [ 1352.198308][T15426] netlink: zone id is out of range [ 1352.208621][T15426] netlink: zone id is out of range [ 1352.217097][T15426] netlink: zone id is out of range [ 1352.224145][T15426] netlink: zone id is out of range [ 1352.233343][T15426] netlink: zone id is out of range [ 1352.247745][T15426] netlink: zone id is out of range [ 1352.260727][T15426] netlink: zone id is out of range [ 1352.326737][ T29] audit: type=1107 audit(1776961280.370:13): pid=15427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 1352.399122][T15434] netlink: 'syz.1.11282': attribute type 7 has an invalid length. [ 1352.412592][T15434] netlink: 'syz.1.11282': attribute type 8 has an invalid length. [ 1352.934543][T15455] 8021q: VLANs not supported on gre0 [ 1352.940803][T15453] netlink: 'syz.1.11288': attribute type 4 has an invalid length. [ 1353.690494][T15505] xt_hashlimit: size too large, truncated to 1048576 [ 1353.728538][T15506] netlink: 'syz.0.11304': attribute type 22 has an invalid length. [ 1353.777500][T15506] netlink: 'syz.0.11304': attribute type 22 has an invalid length. [ 1354.333848][T15536] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 1354.650453][T15557] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1354.712723][T15557] bond0: (slave lo): Error: Device can not be enslaved while up [ 1354.717742][T15561] netlink: 'syz.3.11318': attribute type 3 has an invalid length. [ 1354.769821][T15560] macsec2: entered promiscuous mode [ 1354.804467][T15554] xt_CT: No such helper "pptp" [ 1355.397794][T15600] netlink: 'syz.3.11329': attribute type 1 has an invalid length. [ 1355.734151][T15618] netlink: 'syz.4.11335': attribute type 26 has an invalid length. [ 1355.746012][T15618] netlink: 'syz.4.11335': attribute type 21 has an invalid length. [ 1355.886537][T15624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.941835][T15624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.993187][T15622] bond3: entered promiscuous mode [ 1355.999373][T15622] bond3: entered allmulticast mode [ 1356.036393][T15632] syzkaller0: entered promiscuous mode [ 1356.052887][T15632] syzkaller0: entered allmulticast mode [ 1356.470339][T15658] __nla_validate_parse: 34 callbacks suppressed [ 1356.470364][T15658] netlink: 680 bytes leftover after parsing attributes in process `syz.2.11347'. [ 1356.578503][T15662] bond0: Error: Cannot enslave bond to itself. [ 1356.943210][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11354'. [ 1357.037219][T15688] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 2, id = 0 [ 1357.049590][T15683] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20004 [ 1357.111084][T15690] validate_nla: 6 callbacks suppressed [ 1357.111107][T15690] netlink: 'syz.2.11356': attribute type 8 has an invalid length. [ 1357.150832][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11356'. [ 1357.166375][T15676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.248764][T15697] netlink: 'syz.0.11357': attribute type 1 has an invalid length. [ 1357.293971][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11358'. [ 1357.407509][T15706] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11357'. [ 1357.426795][T15708] netlink: 'syz.3.11359': attribute type 8 has an invalid length. [ 1357.435700][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11359'. [ 1357.460312][T15697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1357.590121][T15699] bond4: (slave dummy0): making interface the new active one [ 1357.629711][T15699] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1357.668723][T15713] net_ratelimit: 9 callbacks suppressed [ 1357.668754][T15713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1357.703664][T15706] bond4: (slave dummy0): Releasing active interface [ 1357.751841][T15708] bond0: entered promiscuous mode [ 1357.757258][T15708] bond_slave_0: entered promiscuous mode [ 1357.764062][T15708] bond_slave_1: entered promiscuous mode [ 1357.780095][T15708] gretap0: entered promiscuous mode [ 1357.795856][T15708] ip6gretap0: entered promiscuous mode [ 1357.816773][T15708] debugfs: 'hsr1' already exists in 'hsr' [ 1357.830318][T15708] Cannot create hsr debugfs directory [ 1357.843073][T15708] hsr1: entered promiscuous mode [ 1357.881949][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.206992][T15731] netlink: 'syz.4.11367': attribute type 1 has an invalid length. [ 1358.362331][T15742] syzkaller0: entered promiscuous mode [ 1358.369978][T15742] syzkaller0: entered allmulticast mode [ 1358.522191][T23842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.912289][T15761] openvswitch: netlink: Flow key attr not present in new flow. [ 1359.132793][T15767] x_tables: unsorted underflow at hook 2 [ 1359.180046][T15767] syzkaller0: entered promiscuous mode [ 1359.245803][T15767] syzkaller0: entered allmulticast mode [ 1359.323139][T15782] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1359.336547][T15781] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1359.576029][T15796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1359.722301][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.757227][T15808] x_tables: unsorted underflow at hook 1 [ 1359.774905][T15810] netlink: 'syz.2.11391': attribute type 1 has an invalid length. [ 1359.807027][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.822173][T15808] netlink: 596 bytes leftover after parsing attributes in process `syz.3.11390'. [ 1359.994915][T15817] bond13: (slave gretap5): making interface the new active one [ 1360.020446][T15817] bond13: (slave gretap5): Enslaving as an active interface with an up link [ 1360.184058][T15832] netlink: 830 bytes leftover after parsing attributes in process `syz.4.11397'. [ 1360.324019][T15836] netlink: zone id is out of range [ 1360.370557][T15840] ip6tnl1: entered promiscuous mode [ 1360.627942][T15849] bond14: entered allmulticast mode [ 1360.643214][T15854] veth6: entered allmulticast mode [ 1360.746919][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11408'. [ 1360.774009][T15865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1360.781369][T15865] IPv6: NLM_F_CREATE should be set when creating new route [ 1360.788672][T15865] IPv6: NLM_F_CREATE should be set when creating new route [ 1360.815602][T15865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1360.988227][T15876] netlink: 'syz.4.11411': attribute type 1 has an invalid length. [ 1361.036162][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11412'. [ 1361.060266][T15878] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1361.548194][T15895] syzkaller0: entered promiscuous mode [ 1361.565409][T15895] syzkaller0: entered allmulticast mode [ 1361.573524][T15901] netlink: 1076 bytes leftover after parsing attributes in process `syz.4.11419'. [ 1361.713920][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11421'. [ 1361.734671][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1361.741166][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1361.779980][T15908] netlink: 'syz.2.11421': attribute type 3 has an invalid length. [ 1361.884633][T15911] lo speed is unknown, defaulting to 1000 [ 1362.062301][T15919] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1362.085182][T15919] netlink: 'syz.2.11426': attribute type 8 has an invalid length. [ 1362.145978][T15920] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1362.512503][T15911] lo speed is unknown, defaulting to 1000 [ 1362.605802][T15942] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1362.870792][T15949] nbd: illegal input index 2958377 [ 1363.493441][T15956] bond5: (slave bond_slave_1): Device is not our slave [ 1363.512714][T15956] bond5: option active_slave: invalid value (bond_slave_1) [ 1363.521798][T15967] netlink: 80 bytes leftover after parsing attributes in process `syz.3.11439'. [ 1363.553135][T15956] bond5 (unregistering): Released all slaves [ 1363.611286][T15959] netem: change failed [ 1363.641719][ T145] net_ratelimit: 3 callbacks suppressed [ 1363.641742][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.810188][T15970] tipc: Started in network mode [ 1363.828607][T15970] tipc: Node identity 5a8e5785fb94, cluster identity 4711 [ 1363.851354][T15970] tipc: Enabled bearer , priority 0 [ 1364.028275][T15975] syzkaller0: entered promiscuous mode [ 1364.038704][T15975] syzkaller0: entered allmulticast mode [ 1364.046439][T15975] tipc: Resetting bearer [ 1364.146109][T15969] tipc: Resetting bearer [ 1364.299788][T23824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.943823][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.594884][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.929309][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 1366.937506][ C1] lec:lec_tx_timeout: lec0 [ 1367.285638][ T5193] udevd[5193]: worker [3876] /devices/virtual/block/nbd4 timeout; kill it [ 1367.294796][ T5193] udevd[5193]: seq 44372 '/devices/virtual/block/nbd4' killed [ 1368.460022][T15969] tipc: Disabling bearer [ 1368.484737][T17606] tipc: Node number set to 2702858117 [ 1368.692892][T16006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1368.895852][T16019] xt_policy: output policy not valid in PREROUTING and INPUT [ 1368.916399][T16022] netlink: 'syz.4.11456': attribute type 1 has an invalid length. [ 1369.172721][T16024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1369.198568][T16032] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11458'. [ 1369.208803][T16034] veth7: entered promiscuous mode [ 1369.222269][T16034] veth7: entered allmulticast mode [ 1369.413506][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.593939][T16054] netlink: 'syz.0.11462': attribute type 1 has an invalid length. [ 1369.628896][T16061] netlink: 'syz.0.11462': attribute type 1 has an invalid length. [ 1369.649488][T16054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1369.668795][T16061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1369.716480][T16062] vlan3: entered promiscuous mode [ 1369.733186][T16062] vlan3: entered allmulticast mode [ 1369.741267][T16062] hsr_slave_1: entered allmulticast mode [ 1369.955082][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11467'. [ 1369.987808][T16072] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11467'. [ 1370.073139][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.371810][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11473'. [ 1370.523429][T16095] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11474'. [ 1370.551973][T16095] team0: Port device dummy0 removed [ 1370.670883][T16106] veth0: entered promiscuous mode [ 1370.683042][T23842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.776401][T16105] veth0: left promiscuous mode [ 1371.146095][T16136] IPv6: sit1: Disabled Multicast RS [ 1371.153851][T16136] sit1: entered allmulticast mode [ 1371.178153][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11486'. [ 1371.327043][T23826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.890884][T16129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1372.141966][T16157] syz.4.11490 uses old SIOCAX25GETINFO [ 1372.165140][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11490'. [ 1372.417491][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11495'. [ 1372.440497][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11495'. [ 1372.468321][T16170] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11496'. [ 1373.188190][T16214] netlink: 'syz.1.11510': attribute type 15 has an invalid length. [ 1373.681804][T16230] syzkaller1: entered promiscuous mode [ 1373.689475][T16230] syzkaller1: entered allmulticast mode [ 1373.792053][T16243] x_tables: unsorted underflow at hook 3 [ 1374.127381][T16263] netlink: 'syz.1.11529': attribute type 25 has an invalid length. [ 1374.172232][T16263] netlink: 'syz.1.11529': attribute type 25 has an invalid length. [ 1374.206394][T16264] batadv1: entered allmulticast mode [ 1374.222087][T16267] __nla_validate_parse: 9 callbacks suppressed [ 1374.222200][T16267] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11530'. [ 1374.337397][T16271] xt_TCPMSS: Only works on TCP SYN packets [ 1374.523001][T23826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.535318][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11535'. [ 1374.594965][T16284] syzkaller0: entered promiscuous mode [ 1374.615905][T16284] syzkaller0: entered allmulticast mode [ 1374.638449][T16284] tipc: Started in network mode [ 1374.669687][T16284] tipc: Node identity 4233ed53e6e6, cluster identity 4711 [ 1374.706913][T16284] tipc: Enabled bearer , priority 0 [ 1374.789446][T16284] tipc: Resetting bearer [ 1374.857809][T16284] tipc: Disabling bearer [ 1375.092913][T16311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11545'. [ 1375.242279][T16323] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1375.358762][T16331] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1375.471210][T16343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11553'. [ 1375.800444][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.844178][T16358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11558'. [ 1376.444800][T16397] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1376.446732][T23826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.498144][T16397] bond0: (slave lo): Error: Device can not be enslaved while up [ 1376.540701][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11569'. [ 1376.564550][T16394] lo speed is unknown, defaulting to 1000 [ 1376.661489][T16402] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1376.884657][T16411] xt_hashlimit: size too large, truncated to 1048576 [ 1377.066344][T16412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.081126][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.147630][T16412] bridge_slave_0 (unregistering): left allmulticast mode [ 1377.190922][T16412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.347117][T16394] lo speed is unknown, defaulting to 1000 [ 1377.375550][T16427] set match dimension is over the limit! [ 1377.421725][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11576'. [ 1377.505642][T16429] 8021q: VLANs not supported on ip6tnl0 [ 1377.558656][T16438] netlink: 'syz.0.11579': attribute type 1 has an invalid length. [ 1377.867043][T16453] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1377.870453][T16451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11582'. [ 1378.008850][T16452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11580'. [ 1378.216242][T16473] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1378.668779][T16486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11590'. [ 1380.280202][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.650106][T16446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1380.821734][T16494] __nla_validate_parse: 2 callbacks suppressed [ 1380.821755][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11591'. [ 1380.899058][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11592'. [ 1380.921900][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.953725][ T5834] IPVS: starting estimator thread 0... [ 1380.977930][T16501] tipc: New replicast peer: 255.255.255.255 [ 1381.010670][T16501] tipc: Enabled bearer , priority 10 [ 1381.016142][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11594'. [ 1381.043406][T16500] netlink: 'syz.2.11594': attribute type 12 has an invalid length. [ 1381.059445][T16506] IPVS: using max 27 ests per chain, 64800 per kthread [ 1381.077892][T16500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11594'. [ 1381.161166][T16510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11596'. [ 1381.478066][T16519] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.11599'. [ 1381.488717][T16519] netlink: Unknown conntrack attr (0) [ 1381.783491][T16546] netlink: 512 bytes leftover after parsing attributes in process `syz.2.11603'. [ 1382.109387][ T5834] tipc: Node number set to 4069231411 [ 1382.177285][T16565] bridge0: port 1(syz_tun) entered blocking state [ 1382.186357][T16565] bridge0: port 1(syz_tun) entered disabled state [ 1382.194108][T16565] syz_tun: entered allmulticast mode [ 1382.205759][T16565] syz_tun: entered promiscuous mode [ 1382.217649][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.230048][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.362573][T16572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11613'. [ 1382.861213][T16595] tipc: Enabled bearer , priority 0 [ 1382.932980][T26984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1382.953963][T16594] tipc: Disabling bearer [ 1382.961809][T26984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1382.972347][T26984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1382.992039][T26984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1383.013277][T26984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1383.103168][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11625'. [ 1383.130672][T16601] lo speed is unknown, defaulting to 1000 [ 1383.157897][T16611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11625'. [ 1383.471904][T16619] openvswitch: netlink: Message has 592 unknown bytes. [ 1383.508275][T16619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1383.556420][T16627] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1383.667841][ T6069] syz_tun (unregistering): left allmulticast mode [ 1383.705457][ T6069] syz_tun (unregistering): left promiscuous mode [ 1383.724682][T10750] lec:lec_start_xmit: lec0:No lecd attached [ 1383.726875][ T6069] bridge0: port 1(syz_tun) entered disabled state [ 1383.777761][T16619] veth0_to_bridge: entered promiscuous mode [ 1383.794834][T16617] veth0_to_bridge: left promiscuous mode [ 1383.852184][T16601] lo speed is unknown, defaulting to 1000 [ 1384.486510][T16601] chnl_net:caif_netlink_parms(): no params data found [ 1384.622021][T16677] netlink: 'syz.4.11646': attribute type 58 has an invalid length. [ 1384.811383][T16601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.829102][T16601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.849647][T16601] bridge_slave_0: entered allmulticast mode [ 1384.857818][T16601] bridge_slave_0: entered promiscuous mode [ 1384.875656][T16601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.883102][T16601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.890624][T16601] bridge_slave_1: entered allmulticast mode [ 1384.898637][T16601] bridge_slave_1: entered promiscuous mode [ 1385.007362][T16697] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1385.027939][T16601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.047593][T16601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.061507][T16693] tap0: tun_chr_ioctl cmd 1074025676 [ 1385.067149][T16693] tap0: owner set to 0 [ 1385.079964][ T5835] Bluetooth: hci3: command tx timeout [ 1385.161239][T16601] team0: Port device team_slave_0 added [ 1385.170704][T16601] team0: Port device team_slave_1 added [ 1385.252845][T16601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.270920][T16601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.349871][T16601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1385.403810][T16601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1385.428298][T16601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.458436][T16601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1385.632270][T16729] netlink: 'syz.4.11661': attribute type 8 has an invalid length. [ 1385.672535][T16601] hsr_slave_0: entered promiscuous mode [ 1385.687323][T16601] hsr_slave_1: entered promiscuous mode [ 1385.714704][T16601] debugfs: 'hsr0' already exists in 'hsr' [ 1385.731595][T16601] Cannot create hsr debugfs directory [ 1386.233952][T16601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1386.253826][T16601] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.317026][T16748] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1386.661094][T16601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1386.681414][T16601] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.919368][T16774] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1386.968956][T16774] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1386.991384][T16601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1387.003083][T16601] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.038775][T16777] __nla_validate_parse: 11 callbacks suppressed [ 1387.038798][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11678'. [ 1387.096856][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11678'. [ 1387.164070][T26984] Bluetooth: hci3: command tx timeout [ 1387.183086][T16601] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1387.204129][T16601] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.448483][T16789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11679'. [ 1387.806136][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11684'. [ 1387.827507][T16799] openvswitch: netlink: Flow actions attr not present in new flow. [ 1387.957636][T16601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1387.965455][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.973251][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.028012][T16601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1388.047298][T16601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1388.087031][T16601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1388.105961][T16601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1388.180870][T16601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1388.234248][T16601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1388.327114][T16601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1388.357787][T16821] netlink: 'syz.4.11689': attribute type 10 has an invalid length. [ 1388.381327][T16829] xt_nat: multiple ranges no longer supported [ 1388.407492][T16821] team0: Device ipvlan1 failed to register rx_handler [ 1388.632630][T16601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.731526][T16601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.768984][T23856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.776339][T23856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.842880][T13374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.842994][T16851] netlink: 'syz.1.11695': attribute type 4 has an invalid length. [ 1388.850180][T13374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1388.906298][T16852] netlink: 'syz.1.11695': attribute type 4 has an invalid length. [ 1388.919858][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 1388.928045][ C1] lec:lec_tx_timeout: lec0 [ 1388.930326][T16852] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11695'. [ 1388.980472][T16851] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11695'. [ 1389.091249][T16862] netlink: 'syz.3.11697': attribute type 3 has an invalid length. [ 1389.244593][ T8190] Bluetooth: hci3: command 0x040f tx timeout [ 1389.400089][ T8190] Bluetooth: hci4: command 0x0405 tx timeout [ 1389.452016][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11702'. [ 1389.592303][T16876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11702'. [ 1389.642681][T16601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.835240][T16601] veth0_vlan: entered promiscuous mode [ 1389.878766][T16896] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11707'. [ 1389.933374][T16896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11707'. [ 1389.947212][T16601] veth1_vlan: entered promiscuous mode [ 1390.169146][T16601] veth0_macvtap: entered promiscuous mode [ 1390.210784][T16909] netlink: 'syz.4.11712': attribute type 5 has an invalid length. [ 1390.222727][T16601] veth1_macvtap: entered promiscuous mode [ 1390.301176][T16601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.350109][T16601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1390.402597][T23824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.422061][T23824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.452905][T23824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.461973][T23824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.703228][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.726950][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.817503][T13373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.840896][T13373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.280714][T16960] pimreg3: entered allmulticast mode [ 1391.323061][T26984] Bluetooth: hci3: command 0x040f tx timeout [ 1393.399483][T26984] Bluetooth: hci3: command 0x040f tx timeout [ 1393.721456][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.732160][T23824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.047070][T16949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1394.536968][T17012] tipc: Started in network mode [ 1394.579051][T17012] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1394.625930][T17012] tipc: Enabled bearer , priority 24 [ 1394.957946][T17024] netlink: 'syz.1.11740': attribute type 11 has an invalid length. [ 1395.007410][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.692489][T17053] __nla_validate_parse: 52 callbacks suppressed [ 1395.692510][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11746'. [ 1395.855197][T17064] netlink: 33 bytes leftover after parsing attributes in process `syz.0.11748'. [ 1395.903957][T17064] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11748'. [ 1395.995224][ T6331] tipc: Node number set to 10005162 [ 1396.055320][T17066] netlink: 'syz.1.11749': attribute type 1 has an invalid length. [ 1396.082967][T17066] netlink: 236 bytes leftover after parsing attributes in process `syz.1.11749'. [ 1396.448723][T17073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11750'. [ 1396.632400][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11753'. [ 1396.781306][T17089] syzkaller1: entered promiscuous mode [ 1396.787828][T17089] syzkaller1: entered allmulticast mode [ 1397.412549][T17111] veth0: entered promiscuous mode [ 1397.537220][T17117] sctp: [Deprecated]: syz.1.11765 (pid 17117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1397.537220][T17117] Use struct sctp_sack_info instead [ 1397.557438][T17111] veth0: left promiscuous mode [ 1397.647830][T17123] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11766'. [ 1397.683945][T17123] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11766'. [ 1398.065308][T17136] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.11770'. [ 1398.110490][T17136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1398.353957][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11774'. [ 1398.764985][T17166] netlink: 'syz.3.11780': attribute type 1 has an invalid length. [ 1398.966398][T17166] bond13: entered promiscuous mode [ 1399.003371][T17166] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1399.482086][T23824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.498362][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.684602][T17197] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1399.710335][T17214] openvswitch: netlink: Flow key attr not present in new flow. [ 1399.745273][T17197] bond6 (unregistering): Released all slaves [ 1400.761531][T13378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.640876][T17161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1402.234904][T17248] syzkaller0: entered promiscuous mode [ 1402.265919][T17248] syzkaller0: entered allmulticast mode [ 1402.356891][T17254] __nla_validate_parse: 3 callbacks suppressed [ 1402.356947][T17254] netlink: 232 bytes leftover after parsing attributes in process `syz.3.11801'. [ 1402.437802][T17259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11801'. [ 1402.665830][T17252] syzkaller0: entered promiscuous mode [ 1402.697424][T17252] syzkaller0: entered allmulticast mode [ 1402.765748][T17270] netlink: 'syz.3.11804': attribute type 10 has an invalid length. [ 1402.776042][T17271] netlink: 'syz.3.11804': attribute type 10 has an invalid length. [ 1402.795138][T17271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11804'. [ 1403.003352][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.022603][T17275] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1403.323542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.342676][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1403.352108][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.077511][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.632037][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.088219][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.253436][T23824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.262943][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.138095][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.521975][T13378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.184833][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.657722][ T6331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.228796][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.091594][T23824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.188860][T17270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.200693][T17270] batadv0: entered promiscuous mode [ 1409.215107][T17270] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1409.226970][T17271] batadv0: entered allmulticast mode [ 1409.245454][T17271] bond0: (slave batadv0): Releasing backup interface [ 1409.266881][T17271] bridge0: port 3(batadv0) entered blocking state [ 1409.275666][T17271] bridge0: port 3(batadv0) entered disabled state [ 1409.286981][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11804'. [ 1409.689512][T13373] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1409.699301][T13373] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1409.810394][T17262] bond0: left allmulticast mode [ 1409.820973][T17262] bond_slave_0: left allmulticast mode [ 1409.839452][T17262] bond_slave_1: left allmulticast mode [ 1410.094464][T17262] bridge_slave_1: left allmulticast mode [ 1410.104002][T17262] net_ratelimit: 1 callbacks suppressed [ 1410.104024][T17262] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1410.287086][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.361966][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.471445][T17307] netlink: 'syz.4.11812': attribute type 1 has an invalid length. [ 1410.636466][T17309] bond8 (unregistering): Released all slaves [ 1410.682763][ T5559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.710319][T17330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11818'. [ 1410.722809][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11818'. [ 1410.756198][T17307] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1411.001259][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.186273][T17347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11822'. [ 1411.320454][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.108938][T17378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11827'. [ 1412.244343][T17378] syzkaller0: entered promiscuous mode [ 1412.258650][T17378] syzkaller0: entered allmulticast mode [ 1412.289037][T23824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.380553][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.697532][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11833'. [ 1412.855960][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11834'. [ 1412.930904][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.997148][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11835'. [ 1413.201582][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11837'. [ 1413.399739][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.447411][T17423] IPVS: set_ctl: invalid protocol: 0 172.20.20.39:20004 [ 1413.685093][T17422] bond8: Removing last arp target with arp_interval on [ 1414.016030][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11847'. [ 1414.053248][T17448] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1414.223844][T17457] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1414.265403][T17459] netlink: 'syz.4.11851': attribute type 10 has an invalid length. [ 1414.616344][T17469] lo: entered promiscuous mode [ 1414.635230][T17469] tunl0: entered promiscuous mode [ 1414.654310][T17469] gre0: entered promiscuous mode [ 1414.765860][T17469] gretap0: entered promiscuous mode [ 1415.019033][T17469] ip_vti0: entered promiscuous mode [ 1415.311386][T17488] Bluetooth: MGMT ver 1.23 [ 1415.386299][T17495] __nla_validate_parse: 2 callbacks suppressed [ 1415.386323][T17495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1415.482223][ T8198] net_ratelimit: 4 callbacks suppressed [ 1415.482265][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.693793][T17507] netlink: 'syz.2.11862': attribute type 10 has an invalid length. [ 1415.826581][T17507] batman_adv: batadv0: Adding interface: netdevsim0 [ 1415.834778][T17507] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.871225][T17507] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1416.084265][T17525] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1416.151164][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.520304][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.761673][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.779579][T17304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.261530][ T8190] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1417.277276][ T8190] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1417.299779][ T8190] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1417.312864][ T8190] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1417.327382][ T8190] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1417.403443][T13378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.525521][T17566] lo speed is unknown, defaulting to 1000 [ 1417.561042][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.923955][T17566] lo speed is unknown, defaulting to 1000 [ 1418.045745][T17304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.144577][T17566] chnl_net:caif_netlink_parms(): no params data found [ 1418.273235][T17566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.280838][T17566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.288255][T17566] bridge_slave_0: entered allmulticast mode [ 1418.297858][T17566] bridge_slave_0: entered promiscuous mode [ 1418.307286][T17566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.314713][T17566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.322452][T17566] bridge_slave_1: entered allmulticast mode [ 1418.330705][T17566] bridge_slave_1: entered promiscuous mode [ 1418.379468][T17566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.395053][T17566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.500969][T17566] team0: Port device team_slave_0 added [ 1418.511139][T17566] team0: Port device team_slave_1 added [ 1418.547316][T17566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.554698][T17566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.584833][T17566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.599750][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.608593][T17566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.608616][T17566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.608647][T17566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.711737][T17566] hsr_slave_0: entered promiscuous mode [ 1418.718968][T17566] hsr_slave_1: entered promiscuous mode [ 1418.726151][T17566] debugfs: 'hsr0' already exists in 'hsr' [ 1418.732284][T17566] Cannot create hsr debugfs directory [ 1419.008278][T17566] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.022543][T17566] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.033682][T17566] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1419.208300][T17566] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.220087][T17566] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.231750][T17566] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1419.335101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.382298][T17566] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.393038][T17566] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.403497][T17566] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1419.404568][ T8190] Bluetooth: hci0: command tx timeout [ 1419.541113][T17566] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.551972][T17566] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.562667][T17566] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1419.615227][T17543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1420.002553][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11881'. [ 1420.374211][T17602] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11883'. [ 1420.404212][T17604] netlink: 260 bytes leftover after parsing attributes in process `syz.2.11882'. [ 1420.438059][T17608] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11884'. [ 1420.473165][T17566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1420.509141][T17566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1420.528961][T17566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1420.570557][T17566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1420.601527][T13378] net_ratelimit: 2 callbacks suppressed [ 1420.601550][T13378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.628164][T17566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1420.664420][T17566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1420.674204][T17614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11888'. [ 1420.684108][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.694474][T17566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1420.707449][T17566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1420.894821][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11889'. [ 1421.079748][T17304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.397974][T17566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.480407][ T8190] Bluetooth: hci0: command tx timeout [ 1421.495110][T17642] netlink: 'syz.2.11895': attribute type 1 has an invalid length. [ 1421.558490][T17566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.584724][T17648] netlink: 'syz.3.11897': attribute type 32 has an invalid length. [ 1421.654471][T17652] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11898'. [ 1421.678261][T17654] Cannot find add_set index 46338 as target [ 1421.710248][T17658] Cannot find add_set index 46338 as target [ 1421.724174][T17649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.740635][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.790434][T17649] batadv_slave_0: entered promiscuous mode [ 1421.865852][T13378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.873152][T13378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.892914][T11288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.933320][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.940604][T13378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.446836][T17680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1422.520585][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.737642][T17689] pimreg: left allmulticast mode [ 1422.763314][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.885967][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11906'. [ 1423.168937][T23824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.179435][T17304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.189142][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1423.195594][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1423.204490][ T1300] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1423.272410][T17566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.281513][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11907'. [ 1423.561639][ T8190] Bluetooth: hci0: command tx timeout [ 1423.736925][T17566] veth0_vlan: entered promiscuous mode [ 1423.768076][T17566] veth1_vlan: entered promiscuous mode [ 1423.890925][T17566] veth0_macvtap: entered promiscuous mode [ 1423.935655][T17566] veth1_macvtap: entered promiscuous mode [ 1423.974874][T17566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.008808][T17566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.061533][T23828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.133650][T23828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.157591][T23828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.167043][T23828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.577947][T11288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.623239][T11288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.728177][T17749] netlink: 'syz.0.11918': attribute type 11 has an invalid length. [ 1424.756878][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.774216][T17749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11918'. [ 1424.787288][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.150304][T17760] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11921'. [ 1425.285546][T17768] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1425.299988][T17767] netlink: 'syz.1.11922': attribute type 39 has an invalid length. [ 1425.347281][T17764] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1425.370700][T17762] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1425.382821][T17767] hsr_slave_1 (unregistering): left promiscuous mode [ 1425.652465][ T8190] Bluetooth: hci0: command tx timeout [ 1425.815976][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11930'. [ 1425.887812][ T24] net_ratelimit: 3 callbacks suppressed [ 1425.887866][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.926532][T17789] netlink: 'syz.2.11927': attribute type 1 has an invalid length. [ 1425.992831][T17789] netlink: 228 bytes leftover after parsing attributes in process `syz.2.11927'. [ 1426.133419][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11927'. [ 1426.165076][T17800] xt_TCPMSS: Only works on TCP SYN packets [ 1426.202770][ T5559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.360525][T23824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.371068][T17807] x_tables: duplicate underflow at hook 3 [ 1426.574420][T17820] netlink: zone id is out of range [ 1426.574557][T17821] sctp: [Deprecated]: syz.3.11935 (pid 17821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1426.574557][T17821] Use struct sctp_sack_info instead [ 1426.594027][T17820] netlink: zone id is out of range [ 1426.633696][T17820] netlink: zone id is out of range [ 1426.684577][T17820] netlink: zone id is out of range [ 1426.701462][T17825] IPVS: set_ctl: invalid protocol: 98 100.1.1.2:20003 [ 1426.717589][T17820] netlink: zone id is out of range [ 1426.744688][T17820] netlink: zone id is out of range [ 1426.763223][T17820] netlink: zone id is out of range [ 1426.775478][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11936'. [ 1426.822628][T17832] sctp: [Deprecated]: syz.1.11938 (pid 17832) Use of int in max_burst socket option. [ 1426.822628][T17832] Use struct sctp_assoc_value instead [ 1428.754102][T17786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1428.919423][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 1428.928933][ C1] lec:lec_tx_timeout: lec0 [ 1429.034824][T17835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11939'. [ 1429.088139][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11939'. [ 1429.116923][T17835] netlink: 'syz.3.11939': attribute type 9 has an invalid length. [ 1429.224215][T17842] netem: change failed [ 1429.335137][T17847] netlink: 'syz.0.11943': attribute type 3 has an invalid length. [ 1429.838526][T17871] IPv6: NLM_F_CREATE should be specified when creating new route [ 1430.174702][T17882] syzkaller0: entered promiscuous mode [ 1430.198369][T17882] syzkaller0: entered allmulticast mode [ 1430.253902][T17882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11951'. [ 1430.371204][T17889] nbd: must specify a device to reconfigure [ 1430.486663][T17886] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 1430.635393][T17898] Bluetooth: MGMT ver 1.23 [ 1430.692401][T17898] bond0: (slave gre0): refused to change device type [ 1430.858902][T17901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11957'. [ 1431.024532][T17907] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11958'. [ 1431.090009][ T24] net_ratelimit: 12 callbacks suppressed [ 1431.090047][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.170491][T17910] netlink: 'syz.1.11960': attribute type 1 has an invalid length. [ 1431.420426][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11965'. [ 1431.453535][T17924] netlink: 176 bytes leftover after parsing attributes in process `syz.4.11965'. [ 1431.485508][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.499040][T17924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11965'. [ 1431.568935][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11965'. [ 1431.580444][T17933] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11966'. [ 1431.624451][T17923] netlink: 176 bytes leftover after parsing attributes in process `syz.4.11965'. [ 1431.668137][T17923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11965'. [ 1431.704068][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11966'. [ 1431.729042][T17934] netlink: 'syz.1.11966': attribute type 1 has an invalid length. [ 1431.834098][T17933] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1432.189405][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.281865][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.262492][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.405321][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.428109][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.695386][T18008] tipc: Enabled bearer , priority 11 [ 1434.040712][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.089952][T18027] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1434.116256][T18035] x_tables: duplicate underflow at hook 2 [ 1434.285875][T29712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.682583][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.718856][T18057] netlink: 'syz.2.12003': attribute type 4 has an invalid length. [ 1434.775004][T18057] gre1: entered promiscuous mode [ 1435.289689][T18080] tipc: Enabled bearer , priority 0 [ 1435.313118][T18080] syzkaller0: entered promiscuous mode [ 1435.348686][T18080] syzkaller0: entered allmulticast mode [ 1435.393236][T18074] tipc: Enabled bearer , priority 0 [ 1435.440456][T18085] syzkaller0: entered promiscuous mode [ 1435.448687][T18085] syzkaller0: entered allmulticast mode [ 1435.473415][T18080] tipc: Resetting bearer [ 1435.551072][T18073] syzkaller0: entered promiscuous mode [ 1435.560490][T18073] syzkaller0: entered allmulticast mode [ 1435.606129][T18074] tipc: Resetting bearer [ 1435.651046][T18090] bond7: invalid ARP target 0.0.0.0 specified for addition [ 1435.658558][T18090] bond7: option arp_ip_target: invalid value (0) [ 1435.672844][T18090] bond7 (unregistering): Released all slaves [ 1435.887253][T18101] __nla_validate_parse: 5 callbacks suppressed [ 1435.887287][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12015'. [ 1435.924722][T18070] tipc: Resetting bearer [ 1436.036705][T18070] tipc: Disabling bearer [ 1436.133915][T18076] tipc: Resetting bearer [ 1436.222351][T18076] tipc: Disabling bearer [ 1436.247489][T18114] x_tables: duplicate underflow at hook 1 [ 1436.360638][ T8198] net_ratelimit: 1 callbacks suppressed [ 1436.360676][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.456536][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12019'. [ 1436.520395][ T5559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.666380][T18119] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12021'. [ 1437.244170][T13378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.277583][T18142] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12025'. [ 1437.399976][T29712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.540362][T18149] netlink: 284 bytes leftover after parsing attributes in process `syz.4.12025'. [ 1438.348897][T18181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12037'. [ 1438.376992][T18181] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1438.442264][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.526772][ C1] bridge0: received packet on 1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1439.161654][T13378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.172963][T23824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.181828][T17606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.308866][T18209] netlink: 236 bytes leftover after parsing attributes in process `syz.2.12049'. [ 1439.368037][T18210] veth0: entered promiscuous mode [ 1439.376227][T18209] netlink: 236 bytes leftover after parsing attributes in process `syz.2.12049'. [ 1439.414314][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12047'. [ 1439.502442][T18209] syzkaller0: entered promiscuous mode [ 1439.527296][T18209] syzkaller0: entered allmulticast mode [ 1439.727076][T18216] veth0: left promiscuous mode [ 1440.099737][T18235] netlink: 'syz.4.12055': attribute type 21 has an invalid length. [ 1440.179065][T18237] netlink: 'syz.4.12055': attribute type 25 has an invalid length. [ 1440.292826][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12055'. [ 1440.725368][T18251] tipc: Enabled bearer , priority 0 [ 1440.917076][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12063'. [ 1440.946388][T18251] syzkaller0: entered promiscuous mode [ 1440.964263][T18251] syzkaller0: entered allmulticast mode [ 1440.985973][T18251] tipc: Resetting bearer [ 1441.089517][T18250] tipc: Resetting bearer [ 1441.411305][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12069'. [ 1441.578151][ T8198] net_ratelimit: 5 callbacks suppressed [ 1441.578210][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.307265][T18285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12072'. [ 1442.319355][T18285] netlink: 13 bytes leftover after parsing attributes in process `syz.0.12072'. [ 1442.367519][T23828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.611258][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.623885][T29712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.677696][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.717759][T29712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.929801][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.938031][T13373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.642605][ T5559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.756684][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.787180][ T8198] net_ratelimit: 1 callbacks suppressed [ 1446.787233][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.220024][T18250] tipc: Disabling bearer [ 1447.311240][T18285] veth7: entered promiscuous mode [ 1447.481193][ T5559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.492584][T13378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.554135][T18296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12073'. [ 1447.567918][T18297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12075'. [ 1447.602600][T18296] netlink: 'syz.2.12073': attribute type 7 has an invalid length. [ 1447.635924][T18296] netlink: 'syz.2.12073': attribute type 8 has an invalid length. [ 1447.661119][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12073'. [ 1447.682617][T18297] sit0: entered promiscuous mode [ 1447.698839][T18297] netlink: 'syz.1.12075': attribute type 1 has an invalid length. [ 1447.707822][T18297] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12075'. [ 1447.749661][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12078'. [ 1447.799962][T29712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.921243][T18309] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1448.096272][T10750] lec:lec_start_xmit: lec0:No lecd attached [ 1448.395201][T18334] tipc: Enabled bearer , priority 0 [ 1448.550442][T18342] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12089'. [ 1448.641950][T18334] syzkaller0: entered promiscuous mode [ 1448.655065][T18334] syzkaller0: entered allmulticast mode [ 1448.672296][T18334] tipc: Resetting bearer [ 1448.682428][ T5559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.731040][T18333] tipc: Resetting bearer [ 1448.803642][T18349] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12090'. [ 1448.852312][T29712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.892563][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.429542][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12097'. [ 1450.682987][T13374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.699533][T23856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.935751][ T8198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.324096][ T30] INFO: task kworker/1:3H:17643 blocked for more than 143 seconds. [ 1451.332573][ T30] Not tainted syzkaller #0 [ 1451.337645][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1451.347015][ T30] task:kworker/1:3H state:D stack:26504 pid:17643 tgid:17643 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1451.360860][ T30] Workqueue: kblockd blk_mq_requeue_work [ 1451.366702][ T30] Call Trace: [ 1451.371910][ T30] [ 1451.374972][ T30] __schedule+0x17b4/0x5680 [ 1451.382252][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1451.387380][ T30] ? __pfx___schedule+0x10/0x10 [ 1451.393776][ T30] ? schedule+0x90/0x360 [ 1451.398225][ T30] schedule+0x164/0x360 [ 1451.402846][ T30] schedule_timeout+0x158/0x2c0 [ 1451.407855][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1451.413466][ T30] ? __pfx_process_timeout+0x10/0x10 [ 1451.418907][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1451.425000][ T30] ? prepare_to_wait_event+0x436/0x480 [ 1451.430753][ T30] nbd_queue_rq+0x857/0x1100 [ 1451.435577][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1451.441661][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1451.447932][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 1451.453115][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 1451.458144][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1451.463896][ T30] ? sbitmap_get+0x229/0x390 [ 1451.468671][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1451.476994][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1451.484634][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1451.494722][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1451.501736][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 1451.507833][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1451.513568][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1451.519122][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1451.525373][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1451.531705][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 1451.536957][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 1451.542849][ T30] blk_mq_requeue_work+0x71c/0x780 [ 1451.548045][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 1451.557102][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1451.564896][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1451.571524][ T30] process_scheduled_works+0xb5d/0x1860 [ 1451.578666][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1451.584254][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1451.592226][ T30] ? assign_work+0x3d5/0x5e0 [ 1451.596909][ T30] worker_thread+0xa53/0xfc0 [ 1451.603163][ T30] kthread+0x388/0x470 [ 1451.608239][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1451.614534][ T30] ? __pfx_kthread+0x10/0x10 [ 1451.619619][ T30] ret_from_fork+0x514/0xb70 [ 1451.624988][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1451.631476][ T30] ? __switch_to+0xc79/0x1410 [ 1451.636729][ T30] ? __pfx_kthread+0x10/0x10 [ 1451.643579][ T30] ret_from_fork_asm+0x1a/0x30 [ 1451.649214][ T30] [ 1451.653234][ T30] [ 1451.653234][ T30] Showing all locks held in the system: [ 1451.662386][ T30] 1 lock held by khungtaskd/30: [ 1451.668014][ T30] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1451.680495][ T30] 2 locks held by getty/5580: [ 1451.685843][ T30] #0: ffff8880372300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1451.697055][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1451.712792][ T30] 4 locks held by kworker/1:3H/17643: [ 1451.723287][ T30] #0: ffff88801f6db540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1451.736193][ T30] #1: ffffc90004237c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1451.750170][ T30] #2: ffff888032aaac18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1451.760836][ T30] #3: ffff88803e5e7338 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1451.770674][ T30] 3 locks held by kworker/u8:36/23828: [ 1451.776504][ T30] #0: ffff888031b66940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1451.789640][ T30] #1: ffffc90005e8fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1451.804125][ T30] #2: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1451.814243][ T30] 1 lock held by udevd/3876: [ 1451.824807][ T30] #0: ffff888031e47350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1451.835633][ T30] 3 locks held by kworker/u8:14/13378: [ 1451.841485][ T30] #0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1451.853778][ T30] #1: ffffc900067efc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1451.865449][ T30] #2: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1451.875024][ T30] 2 locks held by syz.0.12087/18333: [ 1451.883455][ T30] #0: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1451.892769][ T30] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1451.903836][ T30] 3 locks held by syz.2.12090/18346: [ 1451.909391][ T30] #0: ffffffff8fe3e188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1451.917960][ T30] #1: ffffffff8fe3dfc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1451.928007][ T30] #2: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_bearer_enable+0x17/0x40 [ 1451.942249][ T30] 2 locks held by syz.2.12090/18349: [ 1451.947644][ T30] #0: ffffffff90326308 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1451.957813][ T30] #1: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1451.969748][T23842] net_ratelimit: 2 callbacks suppressed [ 1451.969766][T23842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.980041][ T5559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.995198][ T5559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.004496][ T30] 2 locks held by syz.3.12092/18356: [ 1452.010045][ T30] #0: ffffffff8fe3e188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1452.020831][ T30] #1: ffffffff8fe3dfc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1452.030517][ T30] 1 lock held by syz.4.12096/18373: [ 1452.036058][ T30] #0: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: fib_newrule+0x4b6/0x1030 [ 1452.045984][ T30] 2 locks held by syz.4.12096/18375: [ 1452.052986][ T30] #0: ffffffff9033f2b0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1452.066018][ T30] #1: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1452.077734][ T30] 2 locks held by syz.1.12099/18388: [ 1452.084367][ T30] #0: ffffffff8fe3e188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1452.093863][ T30] #1: ffffffff8fe3dfc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1452.103278][ T30] 2 locks held by syz.1.12099/18389: [ 1452.108688][ T30] #0: ffffffff8fe3e188 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1452.117181][ T30] #1: ffffffff8fe3dfc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1452.126622][ T30] [ 1452.129024][ T30] ============================================= [ 1452.129024][ T30] [ 1452.141288][ T30] NMI backtrace for cpu 1 [ 1452.141309][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1452.141331][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1452.141344][ T30] Call Trace: [ 1452.141351][ T30] [ 1452.141359][ T30] dump_stack_lvl+0xe8/0x150 [ 1452.141395][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1452.141483][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1452.141522][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1452.141545][ T30] sys_info+0x135/0x170 [ 1452.141596][ T30] watchdog+0xfaa/0x1000 [ 1452.141634][ T30] ? watchdog+0x209/0x1000 [ 1452.141664][ T30] kthread+0x388/0x470 [ 1452.141684][ T30] ? __pfx_watchdog+0x10/0x10 [ 1452.141702][ T30] ? __pfx_kthread+0x10/0x10 [ 1452.141722][ T30] ret_from_fork+0x514/0xb70 [ 1452.141753][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1452.141779][ T30] ? __switch_to+0xc79/0x1410 [ 1452.141804][ T30] ? __pfx_kthread+0x10/0x10 [ 1452.141825][ T30] ret_from_fork_asm+0x1a/0x30 [ 1452.141869][ T30] [ 1452.141877][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1452.273330][ C0] NMI backtrace for cpu 0 [ 1452.273354][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1452.273377][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1452.273390][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1452.273428][ C0] Code: 2b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 0d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1452.273449][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 1452.273467][ C0] RAX: 00000000003eb08b RBX: ffffffff819a67ea RCX: 0000000080000001 [ 1452.273483][ C0] RDX: 0000000000000001 RSI: ffffffff8dfb7147 RDI: ffffffff8c27f000 [ 1452.273496][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 1452.273513][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 1452.273526][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 1452.273541][ C0] FS: 0000000000000000(0000) GS:ffff888125243000(0000) knlGS:0000000000000000 [ 1452.273558][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1452.273571][ C0] CR2: 000055557e4694e8 CR3: 0000000075e34000 CR4: 00000000003526f0 [ 1452.273591][ C0] Call Trace: [ 1452.273601][ C0] [ 1452.273610][ C0] default_idle+0x9/0x20 [ 1452.273648][ C0] default_idle_call+0x72/0xb0 [ 1452.273679][ C0] do_idle+0x36a/0x5f0 [ 1452.273740][ C0] ? __pfx_do_idle+0x10/0x10 [ 1452.273776][ C0] cpu_startup_entry+0x43/0x60 [ 1452.273805][ C0] rest_init+0x2de/0x300 [ 1452.273824][ C0] start_kernel+0x38a/0x3e0 [ 1452.273948][ C0] x86_64_start_reservations+0x24/0x30 [ 1452.274010][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1452.274039][ C0] common_startup_64+0x13e/0x147 [ 1452.274078][ C0] [ 1452.478083][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1452.485031][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1452.494261][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1452.504376][ T30] Call Trace: [ 1452.507710][ T30] [ 1452.510693][ T30] vpanic+0x56c/0xa60 [ 1452.514768][ T30] ? __pfx___schedule+0x10/0x10 [ 1452.519696][ T30] ? __pfx_vpanic+0x10/0x10 [ 1452.524283][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1452.529645][ T30] panic+0xc5/0xd0 [ 1452.533532][ T30] ? __pfx_panic+0x10/0x10 [ 1452.538037][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1452.543926][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1452.550244][ T30] watchdog+0xff4/0x1000 [ 1452.554657][ T30] ? watchdog+0x209/0x1000 [ 1452.559140][ T30] kthread+0x388/0x470 [ 1452.563267][ T30] ? __pfx_watchdog+0x10/0x10 [ 1452.567995][ T30] ? __pfx_kthread+0x10/0x10 [ 1452.572641][ T30] ret_from_fork+0x514/0xb70 [ 1452.577291][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1452.582456][ T30] ? __switch_to+0xc79/0x1410 [ 1452.587173][ T30] ? __pfx_kthread+0x10/0x10 [ 1452.591794][ T30] ret_from_fork_asm+0x1a/0x30 [ 1452.596605][ T30] [ 1452.600297][ T30] Kernel Offset: disabled [ 1452.604702][ T30] Rebooting in 86400 seconds..