last executing test programs: 5m7.399170508s ago: executing program 3 (id=101): r0 = socket(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x4000, 0x4, 0x200, 0x3, 0x8, 0x0, 0x10000000, 0x4, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe8800051a0000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf, 0xc}, {}, {0x1c, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xf7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x41bd31d4576420eb}, 0x8851) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x0, 0x3, 0x80, 0xf}, {0x5, 0xb0, 0x4, 0x1}, {0x3, 0x2, 0x3, 0x8000}, {0x7, 0xf, 0x8, 0x723dde45}, {0x400, 0xfa, 0x3, 0x1}, {0x3, 0xe5, 0x4, 0x7fff}, {0x2, 0x2, 0x1, 0x527bc1ad}]}, 0x10) 5m6.47271302s ago: executing program 3 (id=102): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0, @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44844) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$XFS_IOC_GOINGDOWN(r6, 0x8004587d, &(0x7f0000000440)=0xa) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="040025bd7000fe00"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x41) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 5m5.590855829s ago: executing program 3 (id=104): r0 = socket(0x11, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0x2}, {0x4, 0xd}, {0x4, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000890000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r5 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xe, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x40000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r7, &(0x7f00000003c0)={0xa, 0x0, 0x380080, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x48c0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000007800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4004000) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f8e8ffff0000000000000000850000001100000085000000050000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f00000000c0)="22dc609821cb89a549f3404d5473b4e05331f31a76ba7bf0d36c8b97f65e74b078b585d283a49fd597ef79f3550ce825050e883f73463bb6573ba5f50e8e1a6d7e72db6fab7335724993a1828f1cb34ceecd9723dbeed5c770b3e04f726925b5d50c19ca1150a3c17d57e7d302fca11e030b7a04415be257df0338cf9e4c7f80430811960d763a663501804778f987f5bfcc4051503221ae798b69ff4a32d86c9b6a66f49003fe26e77999cb9c58b0fefe45f6dbcad681e63bf11c41a45aed7ee8537d44918be61362e2b9c9261b87b9b37f9aac0c41ef0a1d74f285960009ad592757a8a3d06dfd1d30fc88221d26f340ddcecc7185cf3c8fa63f7371bb5e") sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 5m4.420808505s ago: executing program 3 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa963bffff5, 0x13012, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d5c00128038000180090001006c61737400000000280002800c000240fffffffffffffffe0800014000800000080001400000000d0800014000010102200001800a00010071756f746100000055fe02800c000140000000000000000408000340000001"], 0xe8}}, 0x20050800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001c"], 0x2c}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) recvmsg(r8, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001b40)=""/4100, 0x1000}, {&(0x7f0000000200)=""/59}, {&(0x7f00000003c0)=""/152}, {&(0x7f00000004c0)=""/45}, {&(0x7f0000000500)=""/100}, {&(0x7f00000005c0)=""/120}, {&(0x7f0000000080)=""/20}], 0xfffffffffffffd8c}, 0x40012101) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a00003401"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5m2.791252394s ago: executing program 3 (id=113): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r8, &(0x7f0000000340)={0x6, 0x7, 0x13, 0x0, 0x1}, 0x8) ppoll(&(0x7f00000000c0)=[{r1, 0x1000}], 0x1, &(0x7f0000000180), 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x2f, @private=0x101, 0x4e20, 0x3, 'none\x00', 0x2, 0x5, 0x66}, 0x2c) 4m59.695447851s ago: executing program 3 (id=120): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0xb, 0x2, 0x5) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a71232b51316ae4b9c97f78b0e244d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) 4m44.580935785s ago: executing program 32 (id=120): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0xb, 0x2, 0x5) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) 4.808624053s ago: executing program 4 (id=1741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) 4.547562182s ago: executing program 4 (id=1745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x80000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x180, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x4, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f", 0x7}], 0x2}, 0x5) 4.070852802s ago: executing program 4 (id=1752): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4.005340335s ago: executing program 1 (id=1754): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)='`', 0x1}], 0x1}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000801000000000000000000000902"], 0x0, 0x44}, 0x28) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r3) sendmsg$nl_xfrm(r3, 0x0, 0x4) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r4}, 0x38) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x7f}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000380)={r5, 0x9}, 0x8) r6 = socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000ac0)={@random="e7c86361b5c8", @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "bf", "fe976c", 0x1}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000020008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3.845147712s ago: executing program 4 (id=1756): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="09000000e7001400000000803500008100000088a8000000000081e400000000", 0x20, 0x4044800, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xc}, 0x14) 3.763840806s ago: executing program 5 (id=1757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4000800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x68}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000140)={0xd1}, 0x1) r6 = socket$kcm(0x2, 0x3, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000000)=0x401, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7d}}}}}}}}, 0x0) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001c40)="5346f7f875528ef24043c68e", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, r9, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x44000}, 0x48040) 3.67345308s ago: executing program 5 (id=1759): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff00006"], 0x6c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.563819414s ago: executing program 4 (id=1762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x80000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x180, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x4, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x1}, 0x5) 3.403904008s ago: executing program 5 (id=1763): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.225189917s ago: executing program 5 (id=1765): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000005200)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000000)={0x1c, r2, 0xcf9c267acb614d7b, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x64000001}, 0x40004) 3.130498449s ago: executing program 0 (id=1766): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3.061726353s ago: executing program 1 (id=1767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b9646", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0) 3.053709598s ago: executing program 2 (id=1768): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008401, &(0x7f0000000300)={0xa, 0x4e20, 0x100000c, @empty, 0x9}, 0x1c) syz_emit_ethernet(0x27, &(0x7f0000000140)=ANY=[], 0x0) close(0x4) 2.970434749s ago: executing program 0 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x68}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000140)={0xd1}, 0x1) r6 = socket$kcm(0x2, 0x3, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000000)=0x401, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7d}}}}}}}}, 0x0) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001c40)="5346f7f875528ef24043c68e", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, r9, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x44000}, 0x48040) 2.884653599s ago: executing program 2 (id=1770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) 2.884232096s ago: executing program 1 (id=1771): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00', 0x2, 0x6, 0x1, 0x0, 0x3, 0x2000000, r2}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000540)={0x0, 0x1, 0x6, @broadcast}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x18, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a, r2}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f00000000c0)={r11, r11, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r12, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x26c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xfff3, 0xc}, {0x10, 0x2}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x23c, 0x2, [@TCA_CGROUP_ACT={0x238, 0x1, [@m_ct={0x12c, 0x1a, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "95b974893d351fb1292ac9f37c904aa5"}, @TCA_CT_ACTION={0x6, 0x3, 0x15}]}, {0xe8, 0x6, "86bb5fddc1f77a1a621901ae6214e83e4335466b61fab879d44a508a9131fbf7cddec67dbb4cf946dcb9f15a7e302314a1e4dcfd3ed5a38d96e0f9ff30c0c2978ca76a0f1317daeee026b0a71fe4b9a2c2632cd7a1fa95c3f9a8b0c2f3ccbe14a0147b0663e655dfb7bbcbb1d043fd8316c082191c87afa4b7bdd686fd0c3f3cd7f5cf7896c6b17527915e248378960d7982ee16d73ea4a384565f98371a04e176284dd92b29e74d072be279a5e8ef70bafd1355c36be5583a045feebb3f224eabae7e69a0b2fcc9344ff32875721ffb152bc690297d8bfb737b30a28a13d88f398b5244"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x108, 0x2, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff8, 0x4, 0x0, 0xffff0001, 0xc}, 0x5, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x1, 0xd34}, 0x4}}]}, {0x9a, 0x6, "f1546f274559c54c8b304d68701d4736395397fb405272a9b3f2b45bbc7279a47568068f074e763e9740834a7b74e995e62c42354f64698b47d963ffd1767245167ad7561d898995bbebc485898b3383f4ec94bb2c707f61ab5ad327b9854f129acde4d17abfd74e7ae2c774f345f5f9b0b72eabd9bee4cfb3d6901a236f4b4f259d77863f94cc577f38d945cc9750f5f798053f1884"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 2.809795354s ago: executing program 2 (id=1772): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x41aa, 0x6, 0x0, 0x8, 0x80, 0x8}, 0xc) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x40090) 2.71568925s ago: executing program 2 (id=1773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "0200be", 0x4c, 0x2f, 0xff, @local, @mcast2, {[@routing={0x1d, 0x0, 0x1, 0x7}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x82) 635.185366ms ago: executing program 0 (id=1774): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) syz_genetlink_get_family_id$devlink(0x0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000009500"/30], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000200)={0x3, 'wlan0\x00', {0x1000}, 0x1}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @val=@netfilter={0x5, 0x1, 0xff}}, 0x20) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r7, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) setsockopt$sock_void(r7, 0x1, 0x24, 0x0, 0x0) 634.962109ms ago: executing program 5 (id=1775): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 589.06139ms ago: executing program 2 (id=1776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0x94, 0x2}]}}}}, 0x26) 579.608647ms ago: executing program 4 (id=1777): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)='`', 0x1}], 0x1}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000801000000000000000000000902"], 0x0, 0x44}, 0x28) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r3) sendmsg$nl_xfrm(r3, 0x0, 0x4) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x490, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r4}, 0x38) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x7f}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000380)={r5, 0x9}, 0x8) r6 = socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000ac0)={@random="e7c86361b5c8", @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "bf", "fe976c", 0x1}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000020008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 461.866544ms ago: executing program 5 (id=1778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00', 0x2, 0x6, 0x1, 0x0, 0x3, 0x2000000, r2}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000540)={0x0, 0x1, 0x6, @broadcast}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r6, 0x0, 0x18, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a, r2}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f00000000c0)={r10, r10, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r11, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x26c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff3, 0xc}, {0x10, 0x2}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x23c, 0x2, [@TCA_CGROUP_ACT={0x238, 0x1, [@m_ct={0x12c, 0x1a, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "95b974893d351fb1292ac9f37c904aa5"}, @TCA_CT_ACTION={0x6, 0x3, 0x15}]}, {0xe8, 0x6, "86bb5fddc1f77a1a621901ae6214e83e4335466b61fab879d44a508a9131fbf7cddec67dbb4cf946dcb9f15a7e302314a1e4dcfd3ed5a38d96e0f9ff30c0c2978ca76a0f1317daeee026b0a71fe4b9a2c2632cd7a1fa95c3f9a8b0c2f3ccbe14a0147b0663e655dfb7bbcbb1d043fd8316c082191c87afa4b7bdd686fd0c3f3cd7f5cf7896c6b17527915e248378960d7982ee16d73ea4a384565f98371a04e176284dd92b29e74d072be279a5e8ef70bafd1355c36be5583a045feebb3f224eabae7e69a0b2fcc9344ff32875721ffb152bc690297d8bfb737b30a28a13d88f398b5244"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x108, 0x2, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff8, 0x4, 0x0, 0xffff0001, 0xc}, 0x5, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x1, 0xd34}, 0x4}}]}, {0x9a, 0x6, "f1546f274559c54c8b304d68701d4736395397fb405272a9b3f2b45bbc7279a47568068f074e763e9740834a7b74e995e62c42354f64698b47d963ffd1767245167ad7561d898995bbebc485898b3383f4ec94bb2c707f61ab5ad327b9854f129acde4d17abfd74e7ae2c774f345f5f9b0b72eabd9bee4cfb3d6901a236f4b4f259d77863f94cc577f38d945cc9750f5f798053f1884"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 460.334684ms ago: executing program 1 (id=1779): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 379.694291ms ago: executing program 0 (id=1780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 199.284459ms ago: executing program 1 (id=1781): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) writev(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)="02", 0x1}], 0x1) 198.991239ms ago: executing program 2 (id=1782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd96, &(0x7f0000004000)={@random="ea577c93883d", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x1, 0xd88, 0x66, 0x0, 0x2, 0x11, 0x0, @broadcast, @multicast2}, {0x4e23, 0x4e24, 0xd74, 0x0, @opaque="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"}}}}}, 0x0) 152.020191ms ago: executing program 0 (id=1783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 44.568018ms ago: executing program 0 (id=1784): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)='o', 0x1}], 0x1, &(0x7f0000000400)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4000081) recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/46, 0x2e}, {0x0, 0x13}], 0x2}, 0x40002001) 0s ago: executing program 1 (id=1785): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x4c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): zone id is out of range [ 179.532777][ T7242] netlink: zone id is out of range [ 179.543457][ T7242] netlink: zone id is out of range [ 179.550059][ T7242] netlink: zone id is out of range [ 179.556724][ T7242] netlink: zone id is out of range [ 179.579776][ T7242] netlink: zone id is out of range [ 179.655305][ T7242] netlink: zone id is out of range [ 179.717899][ T7242] netlink: zone id is out of range [ 179.742052][ T7242] netlink: zone id is out of range [ 179.766536][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.189995][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.671345][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 180.796139][ T30] audit: type=1804 audit(1778891190.291:5): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.218" name="/newroot/48/cgroup.controllers" dev="tmpfs" ino=266 res=1 errno=0 [ 180.882902][ T30] audit: type=1800 audit(1778891190.321:6): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="cgroup.controllers" dev="tmpfs" ino=266 res=0 errno=0 [ 180.940893][ T7257] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.949147][ T30] audit: type=1804 audit(1778891190.341:7): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.218" name="/newroot/48/cgroup.controllers" dev="tmpfs" ino=266 res=1 errno=0 [ 180.998937][ T7257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.312692][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.375571][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.466417][ T7257] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 181.580935][ T6799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.878193][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 182.261196][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.271495][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.323221][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 182.384255][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 182.515292][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.603722][ T7284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.862707][ T57] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.376947][ T57] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.438234][ T57] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.503910][ T57] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.819790][ T6799] veth0_vlan: entered promiscuous mode [ 184.179463][ T6799] veth1_vlan: entered promiscuous mode [ 185.563846][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 185.840679][ T6799] veth0_macvtap: entered promiscuous mode [ 185.916076][ T6799] veth1_macvtap: entered promiscuous mode [ 186.096343][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.288077][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.354739][ T1028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.387304][ T1028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.452909][ T1028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.549434][ T1028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.317223][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.351724][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.530835][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.560296][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.995929][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 188.044988][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 188.394694][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.153'. [ 188.553400][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.153'. [ 188.623789][ T7379] veth3: entered allmulticast mode [ 188.672380][ T7379] bond0: (slave veth3): Enslaving as an active interface with an up link [ 188.757487][ T7370] bond0 (unregistering): (slave veth3): Releasing backup interface [ 188.909799][ T7370] bond0 (unregistering): Released all slaves [ 189.343689][ T7385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.356004][ T7385] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.388180][ T7385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.676095][ T7385] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 189.746779][ T7373] : entered promiscuous mode [ 190.241454][ T7404] xt_limit: Overflow, try lower: 324382443/0 [ 190.365646][ T7408] xt_limit: Overflow, try lower: 324382443/0 [ 190.854303][ T7414] batman_adv: batadv0: Adding interface: ipvlan2 [ 190.921906][ T7414] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.987543][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.054096][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.112923][ T7414] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 191.246877][ T7416] netlink: 'syz.0.249': attribute type 10 has an invalid length. [ 191.291899][ T7416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.249'. [ 193.368670][ T7453] syzkaller0: entered promiscuous mode [ 193.408521][ T7453] syzkaller0: entered allmulticast mode [ 193.472966][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.255'. [ 193.687764][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 193.807537][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 194.178053][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.185506][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.432411][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'. [ 194.489923][ T7472] gretap0: entered promiscuous mode [ 194.500242][ T7472] vlan2: entered promiscuous mode [ 194.802486][ T7479] net_ratelimit: 51 callbacks suppressed [ 194.802565][ T7479] openvswitch: netlink: Flow actions attr not present in new flow. [ 194.874233][ T7485] xt_limit: Overflow, try lower: 324382443/0 [ 195.473676][ T7489] xt_limit: Overflow, try lower: 324382443/0 [ 195.493734][ T7491] xt_limit: Overflow, try lower: 324382443/0 [ 195.572418][ T7493] xt_limit: Overflow, try lower: 324382443/0 [ 196.516002][ T7511] netlink: 'syz.4.258': attribute type 32 has an invalid length. [ 196.629902][ T7510] batman_adv: 60ªX¹¦À: Interface deactivated: dummy0 [ 196.692955][ T7510] batman_adv: 60ªX¹¦À: Removing interface: dummy0 [ 196.777526][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.259'. [ 196.792305][ T7510] bridge_slave_0: left allmulticast mode [ 196.801317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.847986][ T7510] bridge_slave_0: left promiscuous mode [ 196.872203][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.000974][ T7510] bridge_slave_1: left allmulticast mode [ 197.039977][ T7520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.259'. [ 197.091944][ T7510] bridge_slave_1: left promiscuous mode [ 197.120054][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.156268][ T7520] nbd: device at index 64 is going down [ 197.395151][ T7510] team0: Port device team_slave_0 removed [ 197.564146][ T7510] team0: Port device team_slave_1 removed [ 197.587931][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 197.611107][ T7510] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 197.655507][ T7510] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 197.710596][ T7510] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 197.817330][ T7510] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 197.996661][ T7510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.378460][ T7532] netlink: 76 bytes leftover after parsing attributes in process `syz.4.258'. [ 199.403077][ T7551] xt_limit: Overflow, try lower: 324382443/0 [ 200.741135][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 202.464908][ T7594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.269'. [ 203.058584][ T7593] veth1_vlan: left promiscuous mode [ 203.109347][ T7593] veth0_vlan: left promiscuous mode [ 203.126485][ T7593] veth0_vlan: entered promiscuous mode [ 203.188157][ T7593] veth1_vlan: entered promiscuous mode [ 203.238658][ T7593] veth1_macvtap: left promiscuous mode [ 203.264381][ T7593] veth0_macvtap: left promiscuous mode [ 203.285322][ T7593] veth0_macvtap: entered promiscuous mode [ 203.314636][ T7593] veth1_macvtap: entered promiscuous mode [ 203.953477][ T7593] 8021q: adding VLAN 0 to HW filter on device eth0 [ 203.972379][ T7593] 8021q: adding VLAN 0 to HW filter on device eth1 [ 203.989590][ T7593] 8021q: adding VLAN 0 to HW filter on device eth2 [ 204.010263][ T7593] 8021q: adding VLAN 0 to HW filter on device eth3 [ 204.061552][ T7587] gretap0: entered promiscuous mode [ 204.069283][ T7587] vlan2: entered promiscuous mode [ 204.273669][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.285599][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.481388][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.513109][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 204.536442][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.154423][ T30] audit: type=1804 audit(1778891214.651:8): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.271" name="/newroot/63/cgroup.controllers" dev="tmpfs" ino=348 res=1 errno=0 [ 205.262864][ T30] audit: type=1800 audit(1778891214.651:9): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.271" name="cgroup.controllers" dev="tmpfs" ino=348 res=0 errno=0 [ 205.364537][ T30] audit: type=1804 audit(1778891214.821:10): pid=7616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.271" name="/newroot/63/cgroup.controllers" dev="tmpfs" ino=348 res=1 errno=0 [ 205.648646][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.5.272'. [ 206.279610][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.272'. [ 206.437755][ T7623] nbd: device at index 64 is going down [ 206.503033][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 206.505115][ T5641] Bluetooth: hci2: command 0x0401 tx timeout [ 206.515939][ T4945] Bluetooth: hci3: command 0x0406 tx timeout [ 206.554219][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 206.951671][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 207.585004][ T7649] xt_limit: Overflow, try lower: 324382443/0 [ 207.637468][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 208.266269][ T7660] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 208.348612][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'. [ 208.418869][ T7660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.725650][ T7662] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 208.871575][ T7662] bond1: (slave batadv1): Opening slave failed [ 210.761825][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 210.975683][ T5640] Bluetooth: hci5: command 0x0405 tx timeout [ 211.305093][ T7713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 211.486610][ T7692] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.694290][ T7716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 211.743238][ T7716] nbd: nbd64 already in use [ 211.923633][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 212.042412][ T7692] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.234384][ T7692] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.778821][ T7692] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.913334][ T7758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.294'. [ 213.161084][ T152] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.268573][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.366770][ T152] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.402006][ T7775] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 213.427462][ T7776] sctp: [Deprecated]: syz.4.297 (pid 7776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.427462][ T7776] Use struct sctp_sack_info instead [ 213.534614][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.877773][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.299'. [ 213.927607][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.936382][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.019211][ T7791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.301'. [ 214.157317][ T7797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.301'. [ 214.248894][ T7797] nbd: device at index 64 is going down [ 214.511326][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 215.041856][ T7829] netlink: 364 bytes leftover after parsing attributes in process `syz.1.306'. [ 215.263035][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.307'. [ 215.335101][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.5.307'. [ 215.470635][ T7843] netlink: 'syz.0.308': attribute type 12 has an invalid length. [ 215.828045][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 216.235067][ T7866] netlink: 'syz.4.310': attribute type 3 has an invalid length. [ 216.374083][ T7875] __nla_validate_parse: 1 callbacks suppressed [ 216.374103][ T7875] netlink: 20 bytes leftover after parsing attributes in process `syz.5.313'. [ 216.397307][ T7875] nbd: nbd64 already in use [ 216.441460][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'. [ 216.552396][ T5640] block nbd0: Receive control failed (result -1) [ 216.933022][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 217.077671][ T152] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 217.198703][ T7906] netlink: 16 bytes leftover after parsing attributes in process `syz.5.317'. [ 217.702116][ T7892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.936391][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 217.970155][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 218.115418][ T7932] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 218.203243][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.221197][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.351087][ T5834] IPVS: starting estimator thread 0... [ 218.361402][ T7936] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 218.443733][ T1028] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.457626][ T7942] IPVS: using max 35 ests per chain, 84000 per kthread [ 218.468419][ T7939] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 218.477617][ T1028] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.477658][ T1028] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.477690][ T1028] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.548917][ T7939] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 218.577309][ T7939] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 218.873679][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.326'. [ 218.934935][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.327'. [ 219.000880][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.327'. [ 219.017988][ T7955] nbd: nbd64 already in use [ 221.359903][ T7972] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 221.422965][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 221.453125][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.328'. [ 221.518604][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.332'. [ 221.671923][ T7972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.734617][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.332'. [ 221.791532][ T7987] nbd: device at index 64 is going down [ 221.825501][ T7972] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 221.868927][ T7978] bond2: (slave batadv1): Opening slave failed [ 221.958748][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 222.408789][ T8009] sctp: [Deprecated]: syz.1.335 (pid 8009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.408789][ T8009] Use struct sctp_sack_info instead [ 222.429627][ T8009] sctp: [Deprecated]: syz.1.335 (pid 8009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.429627][ T8009] Use struct sctp_sack_info instead [ 222.453248][ T8009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.472765][ T8009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.669233][ T8015] xt_limit: Overflow, try lower: 324382443/0 [ 222.697334][ T8017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.338'. [ 222.760604][ T8019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.338'. [ 222.770699][ T8019] nbd: nbd64 already in use [ 223.038059][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 223.174396][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 223.790719][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.829942][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.857013][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.902523][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.191125][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'. [ 224.451010][ T8065] netlink: 'syz.2.347': attribute type 1 has an invalid length. [ 224.508786][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 224.518104][ T8063] vlan2: entered promiscuous mode [ 224.746349][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.860968][ T8065] netlink: 'syz.2.347': attribute type 1 has an invalid length. [ 224.883360][ T8066] bond0: (slave batadv0): Opening slave failed [ 225.040353][ T8090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.351'. [ 225.101470][ T8081] syzkaller1: entered promiscuous mode [ 225.114721][ T8081] syzkaller1: entered allmulticast mode [ 225.143476][ T8094] nbd: nbd64 already in use [ 225.287976][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 226.239288][ T8106] netlink: 'syz.0.354': attribute type 29 has an invalid length. [ 226.329533][ T8110] hsr0: entered promiscuous mode [ 226.610267][ T8119] team0 (unregistering): Port device team_slave_0 removed [ 226.654317][ T8119] team0 (unregistering): Port device team_slave_1 removed [ 227.055460][ T8156] IPVS: sh: FWM 3 0x00000003 - no destination available [ 228.812944][ T8172] xt_limit: Overflow, try lower: 324382443/0 [ 229.123017][ T8185] __nla_validate_parse: 7 callbacks suppressed [ 229.123036][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.368'. [ 229.487928][ T8196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'. [ 230.079396][ T8227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.375'. [ 230.106779][ T8227] netlink: 260 bytes leftover after parsing attributes in process `syz.0.375'. [ 230.429174][ T8231] xt_limit: Overflow, try lower: 324382443/0 [ 230.623329][ T8211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.823799][ T8266] xt_limit: Overflow, try lower: 324382443/0 [ 233.153336][ T8294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.394'. [ 233.345517][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 233.452164][ T8302] netlink: 'syz.5.396': attribute type 1 has an invalid length. [ 233.475979][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.396'. [ 233.978073][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 234.485076][ T8318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.251176][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 236.251896][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 237.033882][ T8375] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 237.145748][ T8379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 237.161779][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 237.385931][ T8392] netlink: 40 bytes leftover after parsing attributes in process `syz.5.412'. [ 237.533142][ T8375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.543375][ T8388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.678695][ T8371] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 237.755150][ T8368] syzkaller0: entered promiscuous mode [ 237.770467][ T8368] syzkaller0: entered allmulticast mode [ 238.502527][ T8418] nbd: must specify a size in bytes for the device [ 238.710262][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 240.018913][ T8371] bond0: (slave batadv1): Opening slave failed [ 240.031841][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 240.199076][ T8430] netlink: 'syz.1.418': attribute type 12 has an invalid length. [ 240.315266][ T8434] syzkaller0: entered promiscuous mode [ 240.335060][ T8434] syzkaller0: entered allmulticast mode [ 240.739428][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.426'. [ 240.798385][ T30] audit: type=1804 audit(1778891250.301:11): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.426" name="/newroot/34/cgroup.controllers" dev="tmpfs" ino=195 res=1 errno=0 [ 240.880724][ T30] audit: type=1800 audit(1778891250.301:12): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.426" name="cgroup.controllers" dev="tmpfs" ino=195 res=0 errno=0 [ 240.950474][ T8466] netlink: 'syz.4.425': attribute type 10 has an invalid length. [ 240.963364][ T30] audit: type=1804 audit(1778891250.331:13): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.426" name="/newroot/34/cgroup.controllers" dev="tmpfs" ino=195 res=1 errno=0 [ 241.019887][ T8467] netlink: 41 bytes leftover after parsing attributes in process `syz.4.425'. [ 241.051725][ T8466] syz_tun: entered promiscuous mode [ 241.073843][ T8467] netlink: 140 bytes leftover after parsing attributes in process `syz.4.425'. [ 241.231354][ T8469] syzkaller1: entered promiscuous mode [ 241.257807][ T8469] syzkaller1: entered allmulticast mode [ 241.343460][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 241.454083][ T8480] syzkaller0: entered promiscuous mode [ 241.474811][ T8480] syzkaller0: entered allmulticast mode [ 241.734337][ T8489] Bluetooth: MGMT ver 1.23 [ 242.007392][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 242.007999][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 242.390431][ T8511] syzkaller0: entered promiscuous mode [ 242.417463][ T8511] syzkaller0: entered allmulticast mode [ 242.480610][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.435'. [ 242.716315][ T30] audit: type=1800 audit(1778891252.211:14): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.431" name="memory.events" dev="tmpfs" ino=454 res=0 errno=0 [ 243.042970][ T8529] IPVS: sh: FWM 3 0x00000003 - no destination available [ 244.407980][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 244.493523][ T8572] xt_limit: Overflow, try lower: 324382443/0 [ 244.752089][ T8574] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 244.797255][ T8574] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 244.821123][ T8578] netlink: 'syz.5.448': attribute type 49 has an invalid length. [ 244.837423][ T8574] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 244.897533][ T8574] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 244.928215][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.448'. [ 245.015384][ T8574] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 245.103336][ T8578] ip6gretap0: entered promiscuous mode [ 245.113226][ T8578] ip6gretap0: entered allmulticast mode [ 245.402704][ T8585] netlink: 'syz.5.451': attribute type 1 has an invalid length. [ 245.449683][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 245.454969][ T8577] smbdirect: ib_dev[syz1] removed [ 245.492820][ T8590] netlink: 28 bytes leftover after parsing attributes in process `syz.5.451'. [ 245.671730][ T8585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.847212][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 245.849697][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 246.029619][ T8598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'. [ 246.090557][ T8599] bond1: (slave batadv1): Opening slave failed [ 246.194995][ T8585] netlink: 'syz.5.451': attribute type 1 has an invalid length. [ 246.562765][ T8624] netlink: 332 bytes leftover after parsing attributes in process `syz.4.454'. [ 247.246409][ T8642] xt_limit: Overflow, try lower: 324382443/0 [ 247.904152][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 248.414207][ T8672] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 248.433047][ T8672] netlink: 224 bytes leftover after parsing attributes in process `syz.4.463'. [ 248.487404][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 248.490058][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 249.153508][ T8681] netlink: 'syz.5.465': attribute type 10 has an invalid length. [ 249.161457][ T8681] syz_tun: entered promiscuous mode [ 249.173869][ T8681] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 249.234957][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 249.282519][ T8692] hsr_slave_0: left promiscuous mode [ 249.341809][ T8692] hsr_slave_1: left promiscuous mode [ 249.589793][ T8701] xt_limit: Overflow, try lower: 324382443/0 [ 249.749053][ T8705] xt_limit: Overflow, try lower: 324382443/0 [ 250.022441][ T30] audit: type=1804 audit(1778891259.521:15): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.473" name="/newroot/48/memory.events" dev="tmpfs" ino=270 res=1 errno=0 [ 250.071541][ T8715] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 250.082809][ T30] audit: type=1800 audit(1778891259.521:16): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.473" name="memory.events" dev="tmpfs" ino=270 res=0 errno=0 [ 250.118183][ T8715] bond2 (unregistering): Released all slaves [ 250.215798][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 250.802536][ T8729] netlink: 'syz.4.478': attribute type 1 has an invalid length. [ 250.847529][ T8729] bond1: entered promiscuous mode [ 250.853896][ T8729] bond1: entered allmulticast mode [ 250.864439][ T8729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.886710][ T8733] erspan1: entered allmulticast mode [ 250.899167][ T8733] bond1: (slave erspan1): making interface the new active one [ 250.912359][ T8733] erspan1: entered promiscuous mode [ 250.981867][ T8733] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 251.046281][ T8733] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.088291][ T8736] syz.4.478 (8736) used obsolete PPPIOCDETACH ioctl [ 251.351060][ T8728] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.447343][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 251.447439][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 251.626014][ T8728] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.883924][ T8747] xt_limit: Overflow, try lower: 324382443/0 [ 251.894772][ T8728] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.142179][ T8728] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.355789][ T152] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.425856][ T152] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.493363][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.512196][ T8760] tipc: Failed to remove unknown binding: 66,0,0/0:550271050/550271052 [ 252.550593][ T8760] tipc: Failed to remove unknown binding: 66,0,0/0:550271050/550271051 [ 252.566359][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.592798][ T8760] tipc: Failed to remove unknown binding: 66,0,0/0:550271050/550271052 [ 252.632770][ T8760] tipc: Failed to remove unknown binding: 66,0,0/0:550271050/550271051 [ 253.742219][ T8788] syzkaller1: entered promiscuous mode [ 253.758884][ T8788] syzkaller1: entered allmulticast mode [ 254.007615][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 254.008625][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 254.254684][ T30] audit: type=1800 audit(1778891263.751:17): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.489" name="memory.events" dev="tmpfs" ino=585 res=0 errno=0 [ 254.290088][ T8797] xt_limit: Overflow, try lower: 324382443/0 [ 254.438490][ T8801] netlink: 'syz.0.495': attribute type 3 has an invalid length. [ 254.559263][ T8808] netlink: 'syz.2.496': attribute type 21 has an invalid length. [ 254.599888][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 254.628987][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 254.651408][ T8804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.801140][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 254.857975][ T8804] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 255.243682][ T8820] netlink: 'syz.1.499': attribute type 3 has an invalid length. [ 255.708060][ T8824] syzkaller0: create flow: hash 2294342243 index 1 [ 255.867310][ T5736] syzkaller0: tun_net_xmit 76 [ 256.297940][ T8827] syzkaller0: delete flow: hash 2294342243 index 1 [ 256.308653][ T8840] netlink: 210640 bytes leftover after parsing attributes in process `syz.4.502'. [ 259.098031][ T8836] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 259.228769][ T8860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.512988][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 259.551231][ T8875] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.946026][ T8901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 260.433395][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 260.476656][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 260.617868][ T8922] trusted_key: syz.4.518 sent an empty control message without MSG_MORE. [ 260.672379][ T30] audit: type=1804 audit(1778891270.171:18): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.517" name="/newroot/60/memory.events" dev="tmpfs" ino=331 res=1 errno=0 [ 260.719005][ T8922] syzkaller1: entered promiscuous mode [ 260.724438][ T30] audit: type=1800 audit(1778891270.201:19): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.517" name="memory.events" dev="tmpfs" ino=331 res=0 errno=0 [ 260.742177][ T8922] syzkaller1: entered allmulticast mode [ 260.791212][ T8925] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 260.805113][ T8925] bond2 (unregistering): Released all slaves [ 262.233444][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 262.282498][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 262.390932][ T8994] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 262.429113][ T8994] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 262.458934][ T8994] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 262.532949][ T8994] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 262.669384][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 263.336412][ T9008] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 263.349381][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 263.362295][ T9008] bond3 (unregistering): Released all slaves [ 263.395987][ T9006] syzkaller1: entered promiscuous mode [ 263.404863][ T9006] syzkaller1: entered allmulticast mode [ 263.687196][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 263.693514][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 264.151614][ T9046] syzkaller0: entered promiscuous mode [ 264.157776][ T9046] syzkaller0: entered allmulticast mode [ 264.595548][ T9058] veth1_vlan: left promiscuous mode [ 264.604880][ T9058] veth0_vlan: left promiscuous mode [ 264.613224][ T9058] veth0_vlan: entered promiscuous mode [ 264.624495][ T9058] veth1_vlan: entered promiscuous mode [ 264.696107][ T9058] veth1_macvtap: left promiscuous mode [ 264.722976][ T9058] veth0_macvtap: left promiscuous mode [ 264.730417][ T9058] veth0_macvtap: entered promiscuous mode [ 264.737779][ T9058] veth1_macvtap: entered promiscuous mode [ 264.758975][ T9058] 8021q: adding VLAN 0 to HW filter on device eth0 [ 264.769463][ T9058] 8021q: adding VLAN 0 to HW filter on device eth1 [ 264.781446][ T9058] 8021q: adding VLAN 0 to HW filter on device eth2 [ 264.791779][ T9058] 8021q: adding VLAN 0 to HW filter on device eth3 [ 264.868822][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.892818][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.966893][ T9078] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 265.052030][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.068022][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.144969][ T9078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.167866][ T9079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.203031][ T9079] bond3: (slave bond0): Enslaving as a backup interface with an up link [ 265.224622][ T9080] netlink: 'syz.1.544': attribute type 10 has an invalid length. [ 265.258331][ T1028] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 265.270223][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.544'. [ 265.408403][ T113] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 265.585098][ T9100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.547'. [ 266.097915][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 266.104566][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 266.291515][ T9118] bond0: entered allmulticast mode [ 266.376199][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.551'. [ 266.408595][ T9132] netlink: 'syz.5.551': attribute type 13 has an invalid length. [ 266.432086][ T9132] netlink: 'syz.5.551': attribute type 17 has an invalid length. [ 266.493039][ T9135] xt_limit: Overflow, try lower: 324382443/0 [ 266.620157][ T9132] syz_tun: left promiscuous mode [ 266.637726][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.646726][ T9132] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.659750][ T9132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.678484][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.688704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.701058][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.709486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.722849][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.732234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.742969][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.752590][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.820786][ T9132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.833098][ T9132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.855140][ T9132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.866353][ T9132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.893722][ T9132] veth1_vlan: left promiscuous mode [ 266.901306][ T9132] veth0_vlan: left promiscuous mode [ 266.907816][ T9132] veth0_vlan: entered promiscuous mode [ 266.918732][ T9132] veth1_vlan: entered promiscuous mode [ 266.930329][ T9132] veth1_macvtap: left promiscuous mode [ 266.937508][ T9132] veth0_macvtap: left promiscuous mode [ 266.944713][ T9132] veth0_macvtap: entered promiscuous mode [ 266.960974][ T9132] veth1_macvtap: entered promiscuous mode [ 266.978038][ T9132] 8021q: adding VLAN 0 to HW filter on device eth0 [ 266.994051][ T9132] 8021q: adding VLAN 0 to HW filter on device eth1 [ 267.008469][ T9132] 8021q: adding VLAN 0 to HW filter on device eth2 [ 267.023090][ T9132] 8021q: adding VLAN 0 to HW filter on device eth3 [ 267.038094][ T9132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.289659][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.296874][ T152] bridge0: port 1(bridge_slave_0) entered listening state [ 268.306882][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.314103][ T152] bridge0: port 2(bridge_slave_1) entered listening state [ 268.390197][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.556'. [ 268.425721][ T9151] netlink: 292 bytes leftover after parsing attributes in process `syz.1.554'. [ 268.436602][ T3333] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.463770][ T3333] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.492991][ T3333] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.507026][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.557'. [ 268.519007][ T3333] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.538380][ T9155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.556'. [ 268.573097][ T3333] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.589468][ T3333] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.632547][ T3333] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.652536][ T3333] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.795956][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 268.983375][ T9174] xt_limit: Overflow, try lower: 324382443/0 [ 269.280648][ T9186] syzkaller0: entered promiscuous mode [ 269.318640][ T9186] syzkaller0: entered allmulticast mode [ 269.808173][ T9204] xt_limit: Overflow, try lower: 324382443/0 [ 269.823081][ T9197] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.836172][ T9197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.906246][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.571'. [ 269.942336][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.992846][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.030139][ T9197] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 270.081263][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.088543][ T3333] bridge0: port 1(bridge_slave_0) entered listening state [ 270.154334][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.161603][ T3333] bridge0: port 2(bridge_slave_1) entered listening state [ 270.219492][ T9219] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.572'. [ 270.255481][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 270.267670][ T3333] net_ratelimit: 42 callbacks suppressed [ 270.267688][ T3333] bond3: (slave bond0): link status up again after 0 ms [ 270.281489][ T9223] xt_limit: Overflow, try lower: 324382443/0 [ 270.287554][ T5760] syz1: Port: 1 Link ACTIVE [ 270.329164][ T3333] bond3: (slave bond0): link status up again after 0 ms [ 270.357513][ T3333] bond3: (slave bond0): link status up again after 0 ms [ 270.377239][ T3333] bond3: (slave bond0): link status up again after 0 ms [ 270.392085][ T9225] xt_hashlimit: size too large, truncated to 1048576 [ 270.399555][ T3333] bond3: (slave bond0): link status up again after 0 ms [ 270.428054][ T3333] bond3: (slave bond0): link status up again after 0 ms [ 270.477986][ T57] bond3: (slave bond0): link status up again after 0 ms [ 270.551995][ T57] bond3: (slave bond0): link status definitely up, 20000 Mbps full duplex [ 270.601352][ T57] bond3: active interface up! [ 270.801390][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 270.812557][ T9241] macsec0: entered promiscuous mode [ 270.819808][ T9241] macsec0: entered allmulticast mode [ 270.872202][ T9241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 270.881937][ T9241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 270.892283][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.926717][ T9232] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.576'. [ 270.940242][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.576'. [ 270.967451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.302732][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.339201][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.381675][ T9254] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.853290][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.228813][ T9263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.592'. [ 272.229578][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 272.296331][ T9263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'. [ 272.420900][ T9272] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.491893][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 272.605930][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 272.673430][ T9279] xt_limit: Overflow, try lower: 324382443/0 [ 272.687245][ T9278] xt_limit: Overflow, try lower: 324382443/0 [ 273.452605][ T9296] syzkaller0: entered promiscuous mode [ 273.467189][ T9296] syzkaller0: entered allmulticast mode [ 273.913150][ T9302] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.219802][ T9308] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 274.401161][ T9308] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.440084][ T9308] bond4: (slave bond5): making interface the new active one [ 274.462334][ T9320] xt_limit: Overflow, try lower: 324382443/0 [ 274.469443][ T9308] bond4: (slave bond5): Enslaving as an active interface with an up link [ 274.530992][ T9321] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 274.584542][ T9324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.702363][ T9321] team0: entered promiscuous mode [ 275.367549][ T5360] net_ratelimit: 158 callbacks suppressed [ 275.367569][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.392137][ T9340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.448194][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.456896][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.467456][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.494260][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.511958][ T9345] netlink: 'syz.2.603': attribute type 11 has an invalid length. [ 275.868284][ T9356] __nla_validate_parse: 7 callbacks suppressed [ 275.868304][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 276.007198][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 276.013482][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 276.167329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.416968][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.470159][ T9365] xt_limit: Overflow, try lower: 324382443/0 [ 276.521766][ T9366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.605'. [ 276.576786][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 276.728028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.738895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.826958][ T9377] block nbd0: NBD_DISCONNECT [ 276.859026][ T9377] block nbd0: Send disconnect failed -32 [ 276.867969][ T9377] block nbd0: shutting down sockets [ 277.093789][ T9369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.191809][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 277.313301][ T9387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.612'. [ 277.556058][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.613'. [ 277.733660][ T9398] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.786910][ T9394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.613'. [ 277.892800][ T9394] nbd: device at index 64 is going down [ 277.911164][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 278.074471][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.615'. [ 278.136494][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 278.172724][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 278.615985][ T9409] ip6erspan1: entered allmulticast mode [ 278.695816][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 278.720497][ T9424] xt_limit: Overflow, try lower: 324382443/0 [ 278.936345][ T9432] xt_limit: Overflow, try lower: 324382443/0 [ 279.094984][ T9433] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 279.831821][ T9465] nbd: device at index 64 is going down [ 280.111806][ T9474] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.150606][ T9479] xt_limit: Overflow, try lower: 324382443/0 [ 280.164226][ T7637] udevd[7637]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 280.203007][ T9474] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 280.221926][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 280.431044][ T9486] netlink: 'syz.2.630': attribute type 13 has an invalid length. [ 280.515847][ T9489] xt_limit: Overflow, try lower: 324382443/0 [ 280.568166][ C1] net_ratelimit: 53 callbacks suppressed [ 280.568184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.587230][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.606481][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.648411][ T9493] netlink: 'syz.0.633': attribute type 6 has an invalid length. [ 280.659821][ T9493] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.954089][ T9510] __nla_validate_parse: 5 callbacks suppressed [ 280.954108][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'. [ 281.073051][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 281.164345][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 281.208396][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.219411][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.228620][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.358469][ T9519] bond3: entered promiscuous mode [ 281.368916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.619656][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.674607][ T9533] IPVS: sh: FWM 3 0x00000003 - no destination available [ 281.756482][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.641'. [ 281.919746][ T9548] xt_limit: Overflow, try lower: 324382443/0 [ 282.043368][ T9542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.641'. [ 282.141724][ T9542] nbd: device at index 64 is going down [ 282.323691][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 282.407220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.474238][ T9567] xt_limit: Overflow, try lower: 324382443/0 [ 282.682076][ T9571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.723697][ T9574] xt_limit: Overflow, try lower: 324382443/0 [ 283.203122][ T9585] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 285.336979][ T9612] xt_limit: Overflow, try lower: 324382443/0 [ 285.447691][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 285.447697][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 285.525501][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.658'. [ 285.603084][ T9620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.658'. [ 285.614920][ T9620] nbd: device at index 64 is going down [ 285.624420][ T9624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.657'. [ 285.647139][ T9624] nbd: device at index 64 is going down [ 285.663368][ T9624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.657'. [ 285.678285][ T9624] nbd: device at index 64 is going down [ 285.768458][ T5631] net_ratelimit: 149 callbacks suppressed [ 285.768477][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.856892][ T9636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.659'. [ 286.035755][ T8378] udevd[8378]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 286.063752][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 286.080835][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 286.114426][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 286.289991][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 286.314018][ T9650] xt_limit: Overflow, try lower: 324382443/0 [ 286.328244][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.567220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.714615][ T9663] xt_limit: Overflow, try lower: 324382443/0 [ 286.807949][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.926386][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 286.968615][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.099787][ T9680] xt_limit: Overflow, try lower: 324382443/0 [ 287.373931][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.586062][ T9699] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.671'. [ 287.607438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.706607][ T9667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.848419][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.876140][ T9705] xt_limit: Overflow, try lower: 324382443/0 [ 288.260775][ T9721] xt_limit: Overflow, try lower: 324382443/0 [ 288.647253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.890163][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.967585][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 288.973753][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 289.123915][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 289.761453][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.682'. [ 289.871710][ T9775] xt_limit: Overflow, try lower: 324382443/0 [ 290.000640][ T9783] xt_limit: Overflow, try lower: 324382443/0 [ 290.039813][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 290.153681][ T9788] xt_limit: Overflow, try lower: 324382443/0 [ 290.171804][ T9790] netlink: 'syz.5.688': attribute type 3 has an invalid length. [ 290.313007][ T9794] syzkaller0: entered promiscuous mode [ 290.331504][ T9794] syzkaller0: entered allmulticast mode [ 290.553313][ T9803] Cannot find del_set index 0 as target [ 290.669946][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 290.807863][ C1] net_ratelimit: 277 callbacks suppressed [ 290.807881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.919797][ T30] audit: type=1800 audit(1778891300.421:20): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.689" name="memory.events" dev="tmpfs" ino=764 res=0 errno=0 [ 290.967612][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.247321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.256538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.267864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.276042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.284405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.292907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.297546][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 291.301254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.307306][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 291.315841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.451197][ T9822] netlink: 160 bytes leftover after parsing attributes in process `syz.4.695'. [ 291.456032][ T9828] xt_limit: Overflow, try lower: 324382443/0 [ 291.489405][ T9822] netlink: 'syz.4.695': attribute type 11 has an invalid length. [ 291.500391][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 291.771589][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 291.945717][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 292.378974][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 292.962371][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'. [ 293.072662][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.708'. [ 293.285521][ T9891] netlink: 64 bytes leftover after parsing attributes in process `syz.2.710'. [ 293.321423][ T9891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.710'. [ 293.496378][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 294.011725][ T9903] netlink: 'syz.5.714': attribute type 1 has an invalid length. [ 294.122494][ T9909] xt_limit: Overflow, try lower: 324382443/0 [ 294.257275][ T5630] Bluetooth: hci2: command 0x0401 tx timeout [ 294.258848][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 294.367840][ T9906] bond1: option miimon: invalid value (18446744073709551607) [ 294.410348][ T9906] bond1: option miimon: allowed values 0 - 2147483647 [ 294.449928][ T9906] bond1 (unregistering): Released all slaves [ 294.583610][ T5640] block nbd0: Receive control failed (result -32) [ 295.397945][ T9936] nbd: device at index 64 is going down [ 295.545850][ T8378] udevd[8378]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 295.608949][ T6941] udevd[6941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 295.773312][ T9948] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 295.923894][ T9948] bond5: (slave dummy0): making interface the new active one [ 295.932477][ C1] net_ratelimit: 1859 callbacks suppressed [ 295.932497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.932999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.965540][ T9948] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 295.975209][ T9952] bond5: entered promiscuous mode [ 295.991820][ T9952] dummy0: entered promiscuous mode [ 296.117745][ T9952] bond5: (slave dummy0): Releasing active interface [ 296.137794][ T9952] dummy0: left promiscuous mode [ 296.189448][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.203844][ T9965] xt_limit: Overflow, try lower: 324382443/0 [ 296.254822][ T9952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.268995][ T9952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.279310][ T9952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.290820][ T9952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.306547][ T9952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 296.407265][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 296.413425][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 296.430091][ T9946] bond5: left promiscuous mode [ 296.502984][ T9976] __nla_validate_parse: 5 callbacks suppressed [ 296.503005][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 296.538343][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.570030][ T3333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.665271][ T9954] netlink: 68 bytes leftover after parsing attributes in process `syz.1.726'. [ 296.890448][ T9990] netlink: 'syz.0.732': attribute type 13 has an invalid length. [ 296.898725][ T9990] netlink: 'syz.0.732': attribute type 17 has an invalid length. [ 297.210509][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.234162][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 297.805705][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 297.860331][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.969576][ T9984] macvtap0: entered promiscuous mode [ 298.158607][ T9990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.176417][ T9990] team0: left promiscuous mode [ 298.184727][ T9990] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.221774][ T9990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.277855][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.292594][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 298.487960][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 298.496761][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 298.525906][ T9990] hsr0: left promiscuous mode [ 298.549260][ T9990] veth1_vlan: left promiscuous mode [ 298.556659][ T9990] veth0_vlan: left promiscuous mode [ 298.566711][ T9990] veth0_vlan: entered promiscuous mode [ 298.583168][ T9990] veth1_vlan: entered promiscuous mode [ 298.594927][ T9990] veth1_macvtap: left promiscuous mode [ 298.602208][ T9990] veth0_macvtap: left promiscuous mode [ 298.624146][ T9990] veth0_macvtap: entered promiscuous mode [ 298.641372][ T9990] veth1_macvtap: entered promiscuous mode [ 298.668537][ T9990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.887267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.409044][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 300.416392][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 300.967488][ C1] net_ratelimit: 4 callbacks suppressed [ 300.967507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.049744][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.058250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.066892][ T9968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.368193][ T9968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.701927][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.007298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.064961][ T9990] rose0: refused to change device tx_queue_len [ 302.077812][ T9990] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 302.341177][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.405694][T10020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.736'. [ 302.417153][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.541552][T10024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.736'. [ 302.581067][T10024] nbd: device at index 64 is going down [ 302.734186][T10036] netlink: 100 bytes leftover after parsing attributes in process `syz.4.738'. [ 302.759152][T10036] netlink: 100 bytes leftover after parsing attributes in process `syz.4.738'. [ 302.909823][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 303.024716][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 303.193989][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 303.463109][T10038] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 303.502305][T10038] ipvlan0: entered allmulticast mode [ 303.530685][T10038] veth0_vlan: entered allmulticast mode [ 303.598719][T10038] team0: Device ipvlan0 failed to register rx_handler [ 304.138160][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.747'. [ 304.326467][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.748'. [ 304.506603][T10081] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 304.535987][T10084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 304.558972][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 304.734016][T10087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 304.791828][T10087] nbd: device at index 64 is going down [ 304.937855][T10081] bridge_slave_0: Caught tx_queue_len zero misconfig [ 304.992792][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 306.167229][ C1] net_ratelimit: 13 callbacks suppressed [ 306.167247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.229970][T10140] xt_l2tp: invalid flags combination: 8 [ 306.270954][T10140] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 306.323320][T10140] gre0: entered promiscuous mode [ 306.345035][T10140] gre0: entered allmulticast mode [ 306.422564][T10158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.448268][T10158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.491466][T10158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.502458][T10158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.515048][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.544918][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.569660][ T9970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.580514][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.595397][T10157] nbd: nbd64 already in use [ 306.606169][T10153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.620696][T10035] block nbd64: NBD_DISCONNECT [ 306.960928][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 307.064392][T10172] syzkaller1: entered promiscuous mode [ 307.094275][T10172] syzkaller1: entered allmulticast mode [ 307.131181][T10176] xt_hashlimit: invalid rate [ 307.362767][T10180] openvswitch: : Dropping previously announced user features [ 307.370822][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 307.376896][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 307.454709][T10187] openvswitch: : Dropping previously announced user features [ 307.882520][T10199] syz_tun: left promiscuous mode [ 308.043284][T10207] __nla_validate_parse: 9 callbacks suppressed [ 308.043304][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 308.183961][T10199] macvtap0: left promiscuous mode [ 308.595131][T10199] bond0: left allmulticast mode [ 308.773629][T10199] bond1: left promiscuous mode [ 308.798242][T10199] erspan1: left promiscuous mode [ 308.813633][T10199] bond1: left allmulticast mode [ 308.842351][T10199] erspan1: left allmulticast mode [ 308.862536][T10199] bond3: left promiscuous mode [ 308.882676][ T152] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.921054][ T152] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.023909][ T152] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.049336][ T152] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.408608][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 309.575205][T10241] vlan2: entered allmulticast mode [ 309.587366][T10241] macvtap0: entered allmulticast mode [ 309.984095][T10264] xt_limit: Overflow, try lower: 324382443/0 [ 309.996577][T10263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 310.791570][T10270] syzkaller0: entered promiscuous mode [ 310.838674][T10270] syzkaller0: entered allmulticast mode [ 311.158325][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.788'. [ 311.301276][ T9959] net_ratelimit: 278 callbacks suppressed [ 311.301296][ T9959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.360610][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 311.555218][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 311.614919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.871435][ T9959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.933594][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.097266][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 312.578487][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.586921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.657210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.973540][T10216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.133115][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.370675][ T5640] Bluetooth: hci5: command 0x0405 tx timeout [ 313.598924][T10303] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.606264][T10303] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.695305][T10303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.706146][T10303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.857678][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.931572][ T113] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.965450][ T113] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.995568][ T113] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.030057][ T113] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.067553][ T113] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.110465][ T113] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.156919][ T113] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.204425][ T113] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.239661][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'. [ 314.309878][T10344] block nbd2: NBD_DISCONNECT [ 314.392187][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.5.796'. [ 314.525485][T10344] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 314.573133][T10344] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 314.621719][T10344] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 314.743745][T10344] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 316.127493][T10371] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 316.576833][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 316.703233][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'. [ 316.840900][T10394] netlink: 28 bytes leftover after parsing attributes in process `syz.5.804'. [ 316.946675][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 316.967461][ C1] net_ratelimit: 5 callbacks suppressed [ 316.967481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.227897][T10402] smbdirect: ib_dev[syz1] removed [ 317.798415][T10409] netlink: 120 bytes leftover after parsing attributes in process `syz.2.809'. [ 317.818126][T10409] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 317.830247][T10409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.809'. [ 317.927596][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.962299][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 318.007214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.255170][T10433] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 318.286498][T10417] IPVS: sh: FWM 3 0x00000003 - no destination available [ 318.345417][T10433] bond1: (slave dummy0): making interface the new active one [ 318.360146][T10433] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 318.374898][T10435] bond1: entered promiscuous mode [ 318.397368][T10435] dummy0: entered promiscuous mode [ 318.452988][T10433] bond1: (slave dummy0): Releasing active interface [ 318.461254][T10433] dummy0: left promiscuous mode [ 318.538054][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.814'. [ 318.566259][T10437] netlink: 'syz.1.814': attribute type 3 has an invalid length. [ 318.583465][T10433] tunl0: Caught tx_queue_len zero misconfig [ 318.727272][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 318.729336][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 318.822853][T10448] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 318.912159][T10432] bond1: left promiscuous mode [ 318.986656][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.047263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.017572][T10484] IPVS: set_ctl: invalid protocol: 136 172.30.0.6:20005 [ 320.088132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.112911][T10485] __nla_validate_parse: 5 callbacks suppressed [ 320.112931][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 320.841062][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 320.967720][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.014162][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 321.046784][T10520] tipc: Started in network mode [ 321.052094][T10520] tipc: Node identity 4239407e6faf, cluster identity 4711 [ 321.061084][T10520] tipc: Enabled bearer , priority 0 [ 321.069808][T10520] syzkaller0: entered promiscuous mode [ 321.075455][T10520] syzkaller0: entered allmulticast mode [ 321.127248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.149421][T10520] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 321.166976][T10520] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 321.188709][T10520] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 321.202586][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 321.213485][T10520] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 321.232036][T10520] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 321.249280][T10520] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 321.425952][T10518] tipc: Resetting bearer [ 321.466721][T10518] tipc: Disabling bearer [ 321.919651][T10547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.836'. [ 321.929004][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 321.929150][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 322.167578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.176752][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.400777][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 323.092022][ T5634] block nbd1: Receive control failed (result -32) [ 323.099550][ T5640] block nbd1: Receive control failed (result -32) [ 323.128754][T10564] openvswitch: netlink: Message has 151 unknown bytes. [ 323.207511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.333127][T10578] hsr0: entered promiscuous mode [ 323.352369][T10578] netlink: 44 bytes leftover after parsing attributes in process `syz.4.843'. [ 323.374926][T10578] hsr_slave_0: left promiscuous mode [ 323.397931][T10578] hsr_slave_1: left promiscuous mode [ 323.420798][T10578] hsr0 (unregistering): left promiscuous mode [ 323.472821][T10580] xt_limit: Overflow, try lower: 324382443/0 [ 323.578133][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 323.860562][T10571] netlink: 80 bytes leftover after parsing attributes in process `syz.5.841'. [ 323.868140][T10594] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 323.970991][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 324.007730][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.087708][T10231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.247482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.530499][T10603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.541215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.552484][T10603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.827884][T10614] netlink: 'syz.5.854': attribute type 1 has an invalid length. [ 324.892354][T10618] xt_limit: Overflow, try lower: 324382443/0 [ 324.939318][T10614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.011450][T10620] macvlan0: entered promiscuous mode [ 325.024771][T10620] macvlan0: entered allmulticast mode [ 325.036945][T10620] bond2: entered allmulticast mode [ 325.060283][T10620] bond2: entered promiscuous mode [ 325.066246][T10620] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 325.075794][T10620] team0: Port device macvlan0 added [ 325.100436][T10614] bond2: (slave ip6gretap0): making interface the new active one [ 325.117256][T10614] ip6gretap0: entered promiscuous mode [ 325.123085][T10614] ip6gretap0: entered allmulticast mode [ 325.132226][T10614] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 325.142695][T10603] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 325.202589][T10614] sctp: [Deprecated]: syz.5.854 (pid 10614) Use of int in maxseg socket option. [ 325.202589][T10614] Use struct sctp_assoc_value instead [ 325.607478][T10642] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 325.638748][T10644] netlink: 188 bytes leftover after parsing attributes in process `syz.5.858'. [ 325.688254][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 325.688587][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 325.814010][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 326.274654][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 326.525601][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 326.707827][T10674] gre0: left promiscuous mode [ 326.712766][T10674] gre0: left allmulticast mode [ 326.848761][T10674] veth1_vlan: left promiscuous mode [ 326.880150][T10674] veth0_vlan: left promiscuous mode [ 326.896601][T10674] veth0_vlan: entered promiscuous mode [ 326.915525][T10674] veth1_vlan: entered promiscuous mode [ 326.940846][T10674] veth1_macvtap: left promiscuous mode [ 326.958489][T10674] veth0_macvtap: left promiscuous mode [ 326.966955][T10674] veth0_macvtap: entered promiscuous mode [ 326.987889][T10674] veth1_macvtap: entered promiscuous mode [ 327.003027][T10674] veth1_macvtap: entered allmulticast mode [ 327.015382][T10674] macsec0: left promiscuous mode [ 327.026553][T10674] macsec0: left allmulticast mode [ 327.038642][T10674] veth1_macvtap: left allmulticast mode [ 327.082431][T10674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.110195][T10674] batman_adv: batadv0: Interface activated: ipvlan2 [ 327.249720][T10674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.263849][T10674] 8021q: adding VLAN 0 to HW filter on device eth0 [ 327.275474][T10674] 8021q: adding VLAN 0 to HW filter on device eth1 [ 327.313497][T10674] 8021q: adding VLAN 0 to HW filter on device eth2 [ 327.346259][T10674] 8021q: adding VLAN 0 to HW filter on device eth3 [ 327.367171][ C1] net_ratelimit: 7 callbacks suppressed [ 327.367187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.418456][T10674] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.433871][T10674] ip6erspan1: left allmulticast mode [ 327.442958][T10674] 8021q: adding VLAN 0 to HW filter on device bond6 [ 327.487867][T10699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 327.773009][T10709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.872'. [ 327.815346][T10709] nbd: must specify a device to reconfigure [ 328.167292][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 328.168465][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 328.411229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.211211][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.599417][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.608207][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.616459][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.655380][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.670898][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.723096][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.762862][T10328] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 329.850224][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.927364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.094945][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.185601][T10721] "syz.5.875" (10721) uses obsolete ecb(arc4) skcipher [ 330.418741][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.487451][T10328] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 330.492915][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.502526][ C1] bridge0: topology change detected, propagating [ 330.509287][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.516524][ C1] bridge0: topology change detected, propagating [ 330.533509][ T152] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 330.615026][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.783465][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.878'. [ 330.999582][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 332.727375][ T5630] Bluetooth: hci2: command 0x0401 tx timeout [ 332.733563][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 332.811045][ C0] net_ratelimit: 3 callbacks suppressed [ 332.811066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.072541][T10793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'. [ 333.143232][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.207304][T10795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'. [ 333.256473][T10795] nbd: nbd64 already in use [ 333.857223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.489080][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 334.897201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.933655][T10761] netlink: 'syz.1.886': attribute type 10 has an invalid length. [ 334.941868][T10761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.886'. [ 335.116205][T10231] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 335.147560][T10231] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 335.202222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.214537][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 335.270002][T10231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.288478][T10231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.399003][T10328] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 335.414819][T10814] IPVS: sh: FWM 3 0x00000003 - no destination available [ 335.526591][T10804] syzkaller0: entered promiscuous mode [ 335.533937][T10804] syzkaller0: entered allmulticast mode [ 335.610041][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.231330][T10831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.896'. [ 336.256634][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 336.361962][T10832] netlink: 72 bytes leftover after parsing attributes in process `syz.5.896'. [ 337.210802][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 337.217707][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 338.017211][ C0] net_ratelimit: 5 callbacks suppressed [ 338.017233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.588701][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'. [ 338.882688][T10853] hsr0: entered promiscuous mode [ 339.003812][T10850] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 339.047587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.077383][T10855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.129676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.208144][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.297643][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 340.097215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.429000][T10855] veth1_vlan: left promiscuous mode [ 340.437893][T10855] veth0_vlan: left promiscuous mode [ 340.458055][T10855] veth0_vlan: entered promiscuous mode [ 340.472313][T10855] veth1_vlan: entered promiscuous mode [ 340.499355][T10855] veth1_macvtap: left promiscuous mode [ 340.506087][T10855] veth0_macvtap: left promiscuous mode [ 340.515420][T10855] veth0_macvtap: entered promiscuous mode [ 340.522815][T10855] veth1_macvtap: entered promiscuous mode [ 340.537483][T10855] 8021q: adding VLAN 0 to HW filter on device eth0 [ 340.546977][T10855] 8021q: adding VLAN 0 to HW filter on device eth1 [ 340.555937][T10855] 8021q: adding VLAN 0 to HW filter on device eth2 [ 340.565767][T10855] 8021q: adding VLAN 0 to HW filter on device eth3 [ 340.574579][T10855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.587480][T10855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.597838][T10855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.607574][T10855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.616596][T10855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.627852][T10855] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.638964][T10855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.728504][T10231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.865232][ T152] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.877595][ T113] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.137217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.170608][T10895] netlink: 'syz.5.907': attribute type 9 has an invalid length. [ 341.298267][T10849] hsr0: left promiscuous mode [ 341.305763][ T113] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.338678][T10895] netlink: 'syz.5.907': attribute type 3 has an invalid length. [ 341.353768][T10895] netlink: 'syz.5.907': attribute type 3 has an invalid length. [ 341.375025][ T113] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.594836][T10902] syzkaller0: entered promiscuous mode [ 341.601055][T10898] sctp: [Deprecated]: syz.1.908 (pid 10898) Use of int in max_burst socket option. [ 341.601055][T10898] Use struct sctp_assoc_value instead [ 341.623648][T10902] syzkaller0: entered allmulticast mode [ 341.633110][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 341.694853][T10906] xt_limit: Overflow, try lower: 324382443/0 [ 341.881885][T10908] netlink: 'syz.1.912': attribute type 16 has an invalid length. [ 342.167542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.251299][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.407369][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 342.414341][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 342.439028][T10920] raw_sendmsg: syz.4.916 forgot to set AF_INET. Fix it! [ 342.450459][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 342.505726][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 342.545802][T10930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.919'. [ 342.604536][T10930] netlink: 24 bytes leftover after parsing attributes in process `syz.5.919'. [ 342.991305][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 343.207241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.287566][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.392178][T10956] netlink: zone id is out of range [ 343.410588][T10956] netlink: zone id is out of range [ 343.426262][T10956] netlink: zone id is out of range [ 343.446704][T10956] netlink: zone id is out of range [ 343.488546][T10956] netlink: zone id is out of range [ 343.525792][T10962] netlink: zone id is out of range [ 343.550838][T10956] netlink: zone id is out of range [ 343.558396][T10948] syzkaller0: entered promiscuous mode [ 343.567664][T10962] netlink: zone id is out of range [ 343.579689][T10948] syzkaller0: entered allmulticast mode [ 343.711205][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 344.809938][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 344.824305][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 345.156729][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 346.596110][T10991] netlink: 44 bytes leftover after parsing attributes in process `syz.5.935'. [ 346.689775][T10996] netlink: 24 bytes leftover after parsing attributes in process `syz.5.935'. [ 346.826690][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 346.974030][T11013] netlink: 'syz.4.940': attribute type 7 has an invalid length. [ 346.991292][T11013] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.940'. [ 347.116252][T11011] bond2: left allmulticast mode [ 347.132197][T11011] ip6gretap0: left allmulticast mode [ 347.139147][T11011] bond2: left promiscuous mode [ 347.144206][T11011] ip6gretap0: left promiscuous mode [ 347.266657][T11023] xt_limit: Overflow, try lower: 324382443/0 [ 347.535496][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.946'. [ 347.767917][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 347.938812][T11031] syzkaller0: entered promiscuous mode [ 347.954148][T11031] syzkaller0: entered allmulticast mode [ 348.429631][ C0] net_ratelimit: 108 callbacks suppressed [ 348.429647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.457964][T11067] xt_limit: Overflow, try lower: 324382443/0 [ 348.650222][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 348.656626][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 349.457223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.487184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.508720][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'. [ 350.607266][T11085] IPVS: sh: FWM 3 0x00000003 - no destination available [ 351.035241][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 351.447600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.456386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.527471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.902462][T11126] xt_limit: Overflow, try lower: 324382443/0 [ 352.158323][T11130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.172340][ T113] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.181729][ T113] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.343830][T11134] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 352.370457][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 352.567469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.617199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.298390][ T113] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.306980][ T113] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.562614][T11142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 354.594817][T11146] xt_limit: Overflow, try lower: 324382443/0 [ 354.648536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.688533][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 354.716295][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.976'. [ 354.727504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.737594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.746003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.018554][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 355.087697][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 355.179029][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 355.641594][T11185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input13 [ 355.687171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.759502][T11199] xt_limit: Overflow, try lower: 324382443/0 [ 355.951079][T11197] macvlan0: left promiscuous mode [ 355.970124][T11197] macvlan0: left allmulticast mode [ 356.284735][T11216] xt_limit: Overflow, try lower: 324382443/0 [ 356.734217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.493050][ T5634] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 358.493282][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 358.649138][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.685639][T11231] netlink: 34 bytes leftover after parsing attributes in process `syz.1.990'. [ 358.718058][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 359.006388][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 359.366153][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 359.384227][T11261] xt_limit: Overflow, try lower: 324382443/0 [ 359.467612][T11264] hsr0: entered promiscuous mode [ 359.511209][T11264] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14 [ 359.633285][T11268] netlink: 244 bytes leftover after parsing attributes in process `syz.1.999'. [ 359.687265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.689114][T11262] hsr0: left promiscuous mode [ 359.837326][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1001'. [ 359.902682][T11280] netlink: 'syz.2.1002': attribute type 58 has an invalid length. [ 359.912526][T11280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1002'. [ 359.933922][T11277] sit1: entered promiscuous mode [ 360.407385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.416058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.424552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.433044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.685340][T11300] xt_limit: Overflow, try lower: 324382443/0 [ 360.737218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.777713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.817187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.442672][T11287] veth0_macvtap: Caught tx_queue_len zero misconfig [ 363.719348][T11310] xt_limit: Overflow, try lower: 324382443/0 [ 363.767496][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 363.847379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.856083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.864592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.873030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.030169][T11325] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 364.161952][T11325] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.312959][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1014'. [ 364.603121][T11341] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1015'. [ 364.887396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.989112][T11351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1018'. [ 365.248146][T11362] xt_limit: Overflow, try lower: 324382443/0 [ 365.285422][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 365.335994][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 365.393621][T11357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.461610][T11354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1018'. [ 365.495621][T11368] hsr0: entered promiscuous mode [ 365.560154][T11354] nbd: device at index 64 is going down [ 365.732666][T11374] xt_limit: Overflow, try lower: 324382443/0 [ 365.803922][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 365.910181][T11365] hsr0: left promiscuous mode [ 366.102722][T11392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1024'. [ 366.575604][T11404] xt_limit: Overflow, try lower: 324382443/0 [ 366.936027][T11412] syzkaller0: entered promiscuous mode [ 366.936284][T11414] xt_limit: Overflow, try lower: 324382443/0 [ 366.971736][T11412] syzkaller0: entered allmulticast mode [ 367.005121][T11416] hsr0: entered promiscuous mode [ 367.192070][T11429] xt_limit: Overflow, try lower: 324382443/0 [ 367.548789][T11415] hsr0: left promiscuous mode [ 367.954176][T11423] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1040'. [ 368.844165][T11492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'. [ 369.149257][T11502] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1067'. [ 369.247687][T11515] hsr0: entered promiscuous mode [ 369.400672][T11514] hsr0: left promiscuous mode [ 369.627613][T11504] __nla_validate_parse: 2 callbacks suppressed [ 369.627632][T11504] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1069'. [ 369.845922][T11535] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1078'. [ 370.009696][T11541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1078'. [ 370.028101][T11541] nbd: device at index 64 is going down [ 370.191697][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 370.509361][T11562] openvswitch: netlink: IP tunnel dst address not specified [ 370.608959][T11566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1089'. [ 370.618404][T11566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1089'. [ 370.749769][T11575] hsr0: entered promiscuous mode [ 370.880130][T11575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input15 [ 371.097306][T11570] hsr0: left promiscuous mode [ 371.333740][T11581] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1092'. [ 371.789871][T11623] netlink: 'syz.2.1105': attribute type 49 has an invalid length. [ 371.990531][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 372.009157][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 372.015629][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 372.076206][T11633] hsr0: entered promiscuous mode [ 372.232067][T11630] hsr0: left promiscuous mode [ 372.326079][T11642] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1113'. [ 373.009582][T11673] netlink: 'syz.4.1125': attribute type 1 has an invalid length. [ 373.018768][T11673] netlink: 'syz.4.1125': attribute type 2 has an invalid length. [ 373.037287][T11673] netlink: 'syz.4.1125': attribute type 3 has an invalid length. [ 373.495286][T11694] hsr0: entered promiscuous mode [ 373.669277][T11686] hsr0: left promiscuous mode [ 373.712167][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 374.032637][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 374.288240][T11726] team0: entered promiscuous mode [ 374.304339][T11726] team_slave_0: entered promiscuous mode [ 374.319729][T11726] team_slave_1: entered promiscuous mode [ 374.338008][T11726] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 374.486151][T11732] hsr0: entered promiscuous mode [ 374.588171][T11731] hsr0: left promiscuous mode [ 374.761696][T11742] __nla_validate_parse: 1 callbacks suppressed [ 374.761716][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1151'. [ 374.841998][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 375.086963][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 375.253487][T11766] xt_limit: Overflow, try lower: 324382443/0 [ 375.390093][T11771] x_tables: unsorted underflow at hook 3 [ 375.506741][T11778] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input16 [ 375.560125][T11780] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1168'. [ 376.103451][T11803] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1177'. [ 376.481469][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 376.517257][T11830] xt_limit: Overflow, try lower: 324382443/0 [ 376.759723][T11838] warning: `syz.1.1184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 376.895100][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 377.001975][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 378.176037][T11880] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1196'. [ 378.222658][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 379.774932][T11963] hsr0: entered promiscuous mode [ 379.899147][T11959] hsr0: left promiscuous mode [ 380.025915][ T5634] Bluetooth: hci5: link tx timeout [ 380.036976][ T5634] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 380.220550][T11979] syzkaller0: entered promiscuous mode [ 380.226177][T11979] syzkaller0: entered allmulticast mode [ 380.430917][T11993] hsr0: entered promiscuous mode [ 380.485654][T11995] macsec0: entered allmulticast mode [ 380.509555][T11995] veth1_macvtap: entered allmulticast mode [ 380.527008][T11995] macsec0: left allmulticast mode [ 380.533647][T11995] veth1_macvtap: left allmulticast mode [ 380.618130][T11992] hsr0: left promiscuous mode [ 380.704643][T12006] netlink: 'syz.5.1250': attribute type 12 has an invalid length. [ 380.716629][T12006] netlink: 'syz.5.1250': attribute type 29 has an invalid length. [ 380.740300][T12006] __nla_validate_parse: 2 callbacks suppressed [ 380.740315][T12006] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1250'. [ 380.810118][T12010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1252'. [ 380.888277][T12013] hsr0: entered promiscuous mode [ 380.902601][T12015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1252'. [ 380.938412][T12015] nbd: device at index 64 is going down [ 381.123149][T10035] udevd[10035]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 381.185465][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 382.089606][ T5634] Bluetooth: hci5: command 0x0405 tx timeout [ 382.131293][T12062] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input17 [ 383.599253][T12021] ip6erspan0: entered allmulticast mode [ 383.605797][T12052] hsr0: entered promiscuous mode [ 383.626394][T12056] hsr0: left promiscuous mode [ 383.675944][T12013] hsr0: left promiscuous mode [ 383.891197][T12073] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 383.917173][T12073] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 383.936006][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1268'. [ 384.054989][T12081] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1268'. [ 384.157438][T12081] nbd: device at index 64 is going down [ 384.285283][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 384.798439][T12111] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input18 [ 384.854313][T12114] hsr0: entered promiscuous mode [ 384.881116][T12117] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1279'. [ 384.891111][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 385.063022][T12113] hsr0: left promiscuous mode [ 385.383166][T12137] nbd: socks must be embedded in a SOCK_ITEM attr [ 385.811709][T12157] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input19 [ 386.036135][T12168] IPVS: sh: FWM 3 0x00000003 - no destination available [ 386.226214][T12175] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1299'. [ 386.487754][ T5640] Bluetooth: hci5: command 0x0405 tx timeout [ 386.883284][T12200] hsr0: entered promiscuous mode [ 386.955326][T12202] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1309'. [ 386.971050][T12200] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input20 [ 387.039163][T12208] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1309'. [ 387.063392][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 387.099704][T12208] nbd: device at index 64 is going down [ 387.345828][T10035] udevd[10035]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 387.414825][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 387.437930][T12199] hsr0: left promiscuous mode [ 387.486196][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 387.870636][T12240] hsr0: entered promiscuous mode [ 387.988589][T12239] hsr0: left promiscuous mode [ 388.115579][T12229] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1317'. [ 388.305268][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 388.465320][T12258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1327'. [ 388.531963][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1327'. [ 388.545158][T12264] nbd: nbd64 already in use [ 388.552353][T12263] block nbd5: not configured, cannot reconfigure [ 388.834449][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 388.913110][T12272] hsr0: entered promiscuous mode [ 388.966650][T12276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1332'. [ 388.981854][T12274] xt_hashlimit: size too large, truncated to 1048576 [ 389.041318][T12271] hsr0: left promiscuous mode [ 389.387497][T12297] ip6tnl0: Caught tx_queue_len zero misconfig [ 389.906579][T12325] tipc: Started in network mode [ 389.920357][T12325] tipc: Node identity , cluster identity 4711 [ 389.940588][T12325] tipc: Failed to set node id, please configure manually [ 389.950190][T12325] tipc: Enabling of bearer rejected, failed to enable media [ 390.218976][T12341] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 391.154409][T12377] nbd: device at index 64 is going down [ 391.295815][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 391.369074][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 391.669401][T12381] __nla_validate_parse: 5 callbacks suppressed [ 391.669420][T12381] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1377'. [ 391.837531][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 391.989399][T12416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1387'. [ 392.388314][T12440] hsr0: entered promiscuous mode [ 392.478398][T12439] hsr0: left promiscuous mode [ 392.591816][T12451] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1400'. [ 392.601156][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1400'. [ 393.744563][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1406'. [ 394.214189][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 394.332667][T12498] netlink: 'syz.4.1413': attribute type 12 has an invalid length. [ 394.567895][ T5634] Bluetooth: hci2: command 0x0401 tx timeout [ 394.568125][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 394.631626][T12510] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1416'. [ 394.683989][T12510] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1416'. [ 394.713067][T12510] nbd: device at index 64 is going down [ 394.835602][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 395.094824][T12522] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1420'. [ 395.152549][T12526] hsr0: entered promiscuous mode [ 395.237743][T12524] hsr0: left promiscuous mode [ 396.417289][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 397.639244][T12556] __nla_validate_parse: 3 callbacks suppressed [ 397.639265][T12556] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1434'. [ 398.157993][T12587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1445'. [ 398.194925][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 398.274726][T12593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1445'. [ 398.308512][T12593] nbd: device at index 64 is going down [ 398.450234][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 400.867222][T12605] netlink: 'syz.1.1449': attribute type 12 has an invalid length. [ 400.875260][T12605] netlink: 'syz.1.1449': attribute type 29 has an invalid length. [ 400.883454][T12605] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1449'. [ 400.920064][T12619] hsr0: entered promiscuous mode [ 400.949159][T12619] hsr0: left promiscuous mode [ 401.054604][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1457'. [ 401.248374][T12639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1457'. [ 401.260955][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 401.277494][T12639] nbd: device at index 64 is going down [ 401.553738][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 401.603776][T10017] udevd[10017]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 401.798625][ T9958] hid-generic 0005:4C4A:0A0E.0001: item fetching failed at offset 0/1 [ 401.810764][ T9958] hid-generic 0005:4C4A:0A0E.0001: probe with driver hid-generic failed with error -22 [ 401.918625][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 403.639414][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 404.129566][T12679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1471'. [ 404.139919][T12679] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 404.303674][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 404.385160][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 404.842065][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 404.901048][T12743] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 404.923437][T12745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1498'. [ 405.452142][T12767] vxlan0: entered promiscuous mode [ 405.457571][T12767] vxlan0: entered allmulticast mode [ 405.509859][ T145] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.530659][ T145] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.551790][ T145] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.570143][ T145] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.652664][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 405.840038][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 406.148122][T12803] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1522'. [ 406.980117][T12845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1542'. [ 407.196982][T12861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input21 [ 408.205667][T12900] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input22 [ 408.357016][T12909] lo: Caught tx_queue_len zero misconfig [ 409.227585][T12959] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input23 [ 409.744758][T12979] __nla_validate_parse: 10 callbacks suppressed [ 409.744778][T12979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1589'. [ 409.900724][T12985] hsr0: entered promiscuous mode [ 409.950677][T12987] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1593'. [ 409.972824][T12985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input24 [ 410.166649][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 410.208862][T12984] hsr0: left promiscuous mode [ 410.531334][T13018] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1604'. [ 410.784413][T13033] hsr0: entered promiscuous mode [ 410.815863][T13033] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input25 [ 411.208101][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 411.229550][T13032] hsr0: left promiscuous mode [ 411.916960][T13091] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 411.944461][T13091] netlink: 2704 bytes leftover after parsing attributes in process `syz.1.1634'. [ 411.998171][T13091] nbd0: detected capacity change from 0 to 339754496 [ 412.038764][T10017] block nbd0: Dead connection, failed to find a fallback [ 412.073270][T10017] block nbd0: shutting down sockets [ 412.099436][T10017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.123953][T10017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 412.143862][T10017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.172329][T10017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 412.193695][T10017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.222635][T10017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 412.249951][T10017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.284058][T10017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 412.314999][T10017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.345587][T10017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 412.384688][T10017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.430868][T10017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 412.455467][T10017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.482716][T10017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 412.508809][T10017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.541635][T10017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 412.566661][T10017] ldm_validate_partition_table(): Disk read failed. [ 412.591159][T10017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.622096][T10017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 412.643295][T10017] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.671357][T10017] Buffer I/O error on dev nbd0, logical block 0, async page read [ 412.691286][T10017] Dev nbd0: unable to read RDB block 0 [ 412.713022][T10017] nbd0: unable to read partition table [ 412.773463][T10017] ldm_validate_partition_table(): Disk read failed. [ 412.797844][T10017] Dev nbd0: unable to read RDB block 0 [ 412.818443][T10017] nbd0: unable to read partition table [ 413.318723][T13130] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1649'. [ 415.135274][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1654'. [ 415.333182][T13162] hsr0: entered promiscuous mode [ 415.395265][T13162] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input26 [ 415.629058][T13156] hsr0: left promiscuous mode [ 415.685928][T13175] syzkaller0: entered promiscuous mode [ 415.691776][T13175] syzkaller0: entered allmulticast mode [ 417.835159][T13189] hsr0: entered promiscuous mode [ 417.937920][T13193] hsr0: left promiscuous mode [ 417.950133][T13199] netlink: 'syz.5.1673': attribute type 1 has an invalid length. [ 417.977208][T13199] netlink: 'syz.5.1673': attribute type 2 has an invalid length. [ 418.175710][T13208] hsr0: entered promiscuous mode [ 418.182240][T13211] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1678'. [ 418.291583][T13216] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input27 [ 418.398419][T13218] syzkaller0: entered promiscuous mode [ 418.440472][T13218] syzkaller0: entered allmulticast mode [ 418.481278][T13224] netlink: 750 bytes leftover after parsing attributes in process `syz.0.1683'. [ 418.719829][T13206] hsr0: left promiscuous mode [ 418.959686][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1694'. [ 419.178279][T13257] syzkaller0: entered promiscuous mode [ 419.186149][T13257] syzkaller0: entered allmulticast mode [ 419.195548][T13262] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 419.251991][T13263] hsr0: entered promiscuous mode [ 419.303145][T13263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input28 [ 419.518387][T13258] hsr0: left promiscuous mode [ 419.889012][T13285] netlink: 'syz.5.1710': attribute type 4 has an invalid length. [ 419.948308][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'. [ 420.064141][T13294] syzkaller0: entered promiscuous mode [ 420.075553][T13294] syzkaller0: entered allmulticast mode [ 420.270729][T13303] hsr0: entered promiscuous mode [ 420.305207][T13304] hsr0: entered promiscuous mode [ 420.346813][T13303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input29 [ 420.455307][T13311] geneve2: entered promiscuous mode [ 420.469498][T13311] geneve2: entered allmulticast mode [ 420.659749][T13302] hsr0: left promiscuous mode [ 420.710586][T13295] hsr0: left promiscuous mode [ 421.072355][T13338] syzkaller0: entered promiscuous mode [ 421.088315][T13338] syzkaller0: entered allmulticast mode [ 421.109140][T13342] hsr0: entered promiscuous mode [ 421.185136][T13337] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input30 [ 421.393032][T13336] hsr0: left promiscuous mode [ 421.561837][T13361] hsr0: entered promiscuous mode [ 421.629170][T13361] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input31 [ 421.920213][T13372] syzkaller0: entered promiscuous mode [ 421.934535][T13372] syzkaller0: entered allmulticast mode [ 421.972058][T13379] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 421.985887][T13379] gretap1: entered allmulticast mode [ 422.008340][T13357] hsr0: left promiscuous mode [ 422.215319][T13386] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input32 [ 422.461686][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 422.753209][T13418] syzkaller1: entered promiscuous mode [ 422.770741][T13418] syzkaller1: entered allmulticast mode [ 422.894255][T13415] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input33 [ 423.035897][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1764'. [ 423.100155][T13435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1764'. [ 423.106128][T13424] syzkaller0: entered promiscuous mode [ 423.116108][T13424] syzkaller0: entered allmulticast mode [ 423.774399][T13459] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input34 [ 425.578974][T13449] hsr0: entered promiscuous mode [ 425.653725][T13451] hsr0: left promiscuous mode [ 425.878138][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'. [ 425.935801][T13480] hsr0: entered promiscuous mode [ 425.958186][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1777'. [ 426.003833][T13480] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input35 [ 426.248295][T13479] hsr0: left promiscuous mode [ 426.316979][ T113] [ 426.319375][ T113] ====================================================== [ 426.326412][ T113] WARNING: possible circular locking dependency detected [ 426.333463][ T113] syzkaller #0 Not tainted [ 426.337902][ T113] ------------------------------------------------------ [ 426.344937][ T113] kworker/u8:5/113 is trying to acquire lock: [ 426.351011][ T113] ffffffff8ea85560 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 426.360884][ T113] [ 426.360884][ T113] but task is already holding lock: [ 426.368257][ T113] ffff888055150fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 426.377160][ T113] [ 426.377160][ T113] which lock already depends on the new lock. [ 426.377160][ T113] [ 426.387572][ T113] [ 426.387572][ T113] the existing dependency chain (in reverse order) is: [ 426.396589][ T113] [ 426.396589][ T113] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 426.404512][ T113] lock_sock_nested+0x41/0x100 [ 426.409818][ T113] __inet6_bind+0x30c/0xf60 [ 426.414872][ T113] mptcp_bind+0x110/0x1d0 [ 426.419744][ T113] __sys_bind+0x2e3/0x410 [ 426.424609][ T113] __x64_sys_bind+0x7a/0x90 [ 426.429653][ T113] do_syscall_64+0x15f/0xf80 [ 426.434784][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.441219][ T113] [ 426.441219][ T113] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 426.448962][ T113] lock_sock_nested+0x41/0x100 [ 426.454298][ T113] inet_shutdown+0x6a/0x390 [ 426.459340][ T113] nbd_mark_nsock_dead+0x2e9/0x560 [ 426.464982][ T113] sock_shutdown+0x15e/0x260 [ 426.470101][ T113] nbd_clear_sock+0x24/0x170 [ 426.475219][ T113] nbd_config_put+0x2dd/0x580 [ 426.480439][ T113] nbd_genl_connect+0x19d5/0x1cf0 [ 426.485997][ T113] genl_family_rcv_msg_doit+0x22a/0x330 [ 426.492087][ T113] genl_rcv_msg+0x61c/0x7a0 [ 426.497131][ T113] netlink_rcv_skb+0x232/0x4b0 [ 426.502422][ T113] genl_rcv+0x28/0x40 [ 426.506939][ T113] netlink_unicast+0x75c/0x8e0 [ 426.512252][ T113] netlink_sendmsg+0x813/0xb40 [ 426.517551][ T113] ____sys_sendmsg+0x972/0x9f0 [ 426.522864][ T113] ___sys_sendmsg+0x2a5/0x360 [ 426.528075][ T113] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.533563][ T113] do_syscall_64+0x15f/0xf80 [ 426.538693][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.545208][ T113] [ 426.545208][ T113] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 426.552876][ T113] __mutex_lock+0x1a3/0x1550 [ 426.557998][ T113] nbd_queue_rq+0x37b/0x1100 [ 426.563125][ T113] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 426.569215][ T113] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 426.576088][ T113] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 426.582609][ T113] blk_mq_run_hw_queue+0x348/0x4f0 [ 426.588259][ T113] blk_mq_dispatch_list+0xd16/0xe10 [ 426.594002][ T113] blk_mq_flush_plug_list+0x48d/0x570 [ 426.599916][ T113] __blk_flush_plug+0x3ed/0x4d0 [ 426.605308][ T113] __submit_bio+0x28d/0x580 [ 426.610352][ T113] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 426.616552][ T113] block_read_full_folio+0x7b7/0x830 [ 426.622370][ T113] filemap_read_folio+0x137/0x3b0 [ 426.627937][ T113] do_read_cache_folio+0x358/0x590 [ 426.633592][ T113] read_part_sector+0xb6/0x2b0 [ 426.638896][ T113] adfspart_check_ICS+0xb1/0x960 [ 426.644368][ T113] bdev_disk_changed+0x817/0x1770 [ 426.649935][ T113] blkdev_get_whole+0x380/0x510 [ 426.655329][ T113] bdev_open+0x31e/0xd30 [ 426.660143][ T113] blkdev_open+0x470/0x610 [ 426.665094][ T113] do_dentry_open+0x785/0x14e0 [ 426.670397][ T113] vfs_open+0x3b/0x340 [ 426.674998][ T113] path_openat+0x2e08/0x3860 [ 426.680135][ T113] do_file_open+0x23e/0x4a0 [ 426.685200][ T113] do_sys_openat2+0x113/0x200 [ 426.690422][ T113] __x64_sys_openat+0x138/0x170 [ 426.695807][ T113] do_syscall_64+0x15f/0xf80 [ 426.700936][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.707361][ T113] [ 426.707361][ T113] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 426.714589][ T113] __mutex_lock+0x1a3/0x1550 [ 426.719714][ T113] nbd_queue_rq+0xc6/0x1100 [ 426.724763][ T113] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 426.730849][ T113] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 426.737718][ T113] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 426.744252][ T113] blk_mq_run_hw_queue+0x348/0x4f0 [ 426.749904][ T113] blk_mq_dispatch_list+0xd16/0xe10 [ 426.755642][ T113] blk_mq_flush_plug_list+0x48d/0x570 [ 426.761554][ T113] __blk_flush_plug+0x3ed/0x4d0 [ 426.766948][ T113] __submit_bio+0x28d/0x580 [ 426.771981][ T113] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 426.778166][ T113] block_read_full_folio+0x7b7/0x830 [ 426.783988][ T113] filemap_read_folio+0x137/0x3b0 [ 426.789555][ T113] do_read_cache_folio+0x358/0x590 [ 426.795205][ T113] read_part_sector+0xb6/0x2b0 [ 426.800526][ T113] adfspart_check_ICS+0xb1/0x960 [ 426.806009][ T113] bdev_disk_changed+0x817/0x1770 [ 426.811589][ T113] blkdev_get_whole+0x380/0x510 [ 426.816982][ T113] bdev_open+0x31e/0xd30 [ 426.821767][ T113] blkdev_open+0x470/0x610 [ 426.826716][ T113] do_dentry_open+0x785/0x14e0 [ 426.832017][ T113] vfs_open+0x3b/0x340 [ 426.836621][ T113] path_openat+0x2e08/0x3860 [ 426.841746][ T113] do_file_open+0x23e/0x4a0 [ 426.846788][ T113] do_sys_openat2+0x113/0x200 [ 426.851997][ T113] __x64_sys_openat+0x138/0x170 [ 426.857465][ T113] do_syscall_64+0x15f/0xf80 [ 426.862589][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.869009][ T113] [ 426.869009][ T113] -> #3 (set->srcu){.+.+}-{0:0}: [ 426.876146][ T113] __synchronize_srcu+0xca/0x300 [ 426.881619][ T113] elevator_switch+0x1e8/0x7a0 [ 426.886919][ T113] elevator_change+0x2cc/0x450 [ 426.892222][ T113] elevator_set_default+0x36c/0x430 [ 426.897967][ T113] blk_register_queue+0x3e9/0x4e0 [ 426.903529][ T113] __add_disk+0x677/0xd50 [ 426.908404][ T113] add_disk_fwnode+0xfb/0x480 [ 426.913622][ T113] nbd_dev_add+0x72c/0xb50 [ 426.918574][ T113] nbd_init+0x168/0x1f0 [ 426.923265][ T113] do_one_initcall+0x250/0x870 [ 426.928563][ T113] do_initcall_level+0x104/0x190 [ 426.934041][ T113] do_initcalls+0x59/0xa0 [ 426.938907][ T113] kernel_init_freeable+0x2a6/0x3e0 [ 426.944648][ T113] kernel_init+0x1d/0x1d0 [ 426.949511][ T113] ret_from_fork+0x514/0xb70 [ 426.954633][ T113] ret_from_fork_asm+0x1a/0x30 [ 426.959936][ T113] [ 426.959936][ T113] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 426.967769][ T113] __mutex_lock+0x1a3/0x1550 [ 426.972893][ T113] elevator_change+0x1b3/0x450 [ 426.978198][ T113] elevator_set_none+0xb5/0x140 [ 426.983594][ T113] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 426.989930][ T113] nbd_start_device+0x17f/0xb10 [ 426.995318][ T113] nbd_genl_connect+0x165b/0x1cf0 [ 427.000873][ T113] genl_family_rcv_msg_doit+0x22a/0x330 [ 427.006965][ T113] genl_rcv_msg+0x61c/0x7a0 [ 427.012003][ T113] netlink_rcv_skb+0x232/0x4b0 [ 427.017299][ T113] genl_rcv+0x28/0x40 [ 427.021814][ T113] netlink_unicast+0x75c/0x8e0 [ 427.027119][ T113] netlink_sendmsg+0x813/0xb40 [ 427.032418][ T113] ____sys_sendmsg+0x972/0x9f0 [ 427.037713][ T113] ___sys_sendmsg+0x2a5/0x360 [ 427.042926][ T113] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.048395][ T113] do_syscall_64+0x15f/0xf80 [ 427.053531][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.059956][ T113] [ 427.059956][ T113] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 427.068578][ T113] blk_alloc_queue+0x546/0x680 [ 427.073878][ T113] __blk_mq_alloc_disk+0x197/0x390 [ 427.079523][ T113] nbd_dev_add+0x499/0xb50 [ 427.084467][ T113] nbd_init+0x168/0x1f0 [ 427.089149][ T113] do_one_initcall+0x250/0x870 [ 427.094442][ T113] do_initcall_level+0x104/0x190 [ 427.099919][ T113] do_initcalls+0x59/0xa0 [ 427.104780][ T113] kernel_init_freeable+0x2a6/0x3e0 [ 427.110521][ T113] kernel_init+0x1d/0x1d0 [ 427.115407][ T113] ret_from_fork+0x514/0xb70 [ 427.120537][ T113] ret_from_fork_asm+0x1a/0x30 [ 427.125834][ T113] [ 427.125834][ T113] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 427.133065][ T113] __lock_acquire+0x15a5/0x2cf0 [ 427.138446][ T113] lock_acquire+0x106/0x350 [ 427.143484][ T113] fs_reclaim_acquire+0x71/0x100 [ 427.148979][ T113] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 427.155409][ T113] __alloc_skb+0x1d0/0x7d0 [ 427.160378][ T113] tcp_send_active_reset+0x8a/0x550 [ 427.166131][ T113] __tcp_close+0x4c5/0xfe0 [ 427.171082][ T113] tcp_close+0x28/0x110 [ 427.175763][ T113] inet_release+0x143/0x190 [ 427.180793][ T113] sock_release+0x85/0x150 [ 427.185748][ T113] rds_tcp_accept_one+0x641/0xd70 [ 427.191305][ T113] rds_tcp_accept_worker+0x1d/0x70 [ 427.196947][ T113] process_scheduled_works+0xb5d/0x1860 [ 427.203018][ T113] worker_thread+0xa53/0xfc0 [ 427.208141][ T113] kthread+0x389/0x470 [ 427.212765][ T113] ret_from_fork+0x514/0xb70 [ 427.217889][ T113] ret_from_fork_asm+0x1a/0x30 [ 427.223182][ T113] [ 427.223182][ T113] other info that might help us debug this: [ 427.223182][ T113] [ 427.233434][ T113] Chain exists of: [ 427.233434][ T113] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 427.233434][ T113] [ 427.246395][ T113] Possible unsafe locking scenario: [ 427.246395][ T113] [ 427.253856][ T113] CPU0 CPU1 [ 427.259238][ T113] ---- ---- [ 427.264609][ T113] lock(k-sk_lock-AF_INET6); [ 427.269302][ T113] lock(sk_lock-AF_INET6); [ 427.276335][ T113] lock(k-sk_lock-AF_INET6); [ 427.283540][ T113] lock(fs_reclaim); [ 427.287542][ T113] [ 427.287542][ T113] *** DEADLOCK *** [ 427.287542][ T113] [ 427.295709][ T113] 4 locks held by kworker/u8:5/113: [ 427.300907][ T113] #0: ffff88803205d140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 427.311801][ T113] #1: ffffc900026bfc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 427.324522][ T113] #2: ffff88802fe5e060 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xa9/0xd70 [ 427.335248][ T113] #3: ffff888055150fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 427.344576][ T113] [ 427.344576][ T113] stack backtrace: [ 427.350491][ T113] CPU: 0 UID: 0 PID: 113 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 427.350511][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.350523][ T113] Workqueue: krdsd rds_tcp_accept_worker [ 427.350551][ T113] Call Trace: [ 427.350563][ T113] [ 427.350570][ T113] dump_stack_lvl+0xe8/0x150 [ 427.350590][ T113] print_circular_bug+0x2e1/0x300 [ 427.350614][ T113] check_noncircular+0x12e/0x150 [ 427.350638][ T113] __lock_acquire+0x15a5/0x2cf0 [ 427.350657][ T113] ? __lock_acquire+0x6b5/0x2cf0 [ 427.350677][ T113] ? kasan_quarantine_put+0xbb/0x1f0 [ 427.350700][ T113] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 427.350721][ T113] lock_acquire+0x106/0x350 [ 427.350738][ T113] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 427.350761][ T113] ? lock_acquire+0x106/0x350 [ 427.350780][ T113] fs_reclaim_acquire+0x71/0x100 [ 427.350802][ T113] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 427.350823][ T113] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 427.350845][ T113] ? __alloc_skb+0x1d0/0x7d0 [ 427.350867][ T113] ? __local_bh_enable_ip+0xd0/0x130 [ 427.350886][ T113] __alloc_skb+0x1d0/0x7d0 [ 427.350910][ T113] tcp_send_active_reset+0x8a/0x550 [ 427.350934][ T113] __tcp_close+0x4c5/0xfe0 [ 427.350954][ T113] tcp_close+0x28/0x110 [ 427.350969][ T113] inet_release+0x143/0x190 [ 427.350992][ T113] sock_release+0x85/0x150 [ 427.351010][ T113] rds_tcp_accept_one+0x641/0xd70 [ 427.351030][ T113] ? process_scheduled_works+0xa70/0x1860 [ 427.351046][ T113] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 427.351069][ T113] rds_tcp_accept_worker+0x1d/0x70 [ 427.351086][ T113] ? process_scheduled_works+0xa70/0x1860 [ 427.351101][ T113] process_scheduled_works+0xb5d/0x1860 [ 427.351129][ T113] ? __pfx_process_scheduled_works+0x10/0x10 [ 427.351148][ T113] ? assign_work+0x3d5/0x5e0 [ 427.351165][ T113] worker_thread+0xa53/0xfc0 [ 427.351192][ T113] kthread+0x389/0x470 [ 427.351212][ T113] ? __pfx_worker_thread+0x10/0x10 [ 427.351233][ T113] ? __pfx_kthread+0x10/0x10 [ 427.351253][ T113] ret_from_fork+0x514/0xb70 [ 427.351271][ T113] ? __pfx_ret_from_fork+0x10/0x10 [ 427.351287][ T113] ? __switch_to+0xc79/0x1410 [ 427.351311][ T113] ? __pfx_kthread+0x10/0x10 [ 427.351331][ T113] ret_from_fork_asm+0x1a/0x30 [ 427.351356][ T113]