last executing test programs: 15.650957649s ago: executing program 1 (id=1864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x3, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 12.897500771s ago: executing program 1 (id=1874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 11.21475674s ago: executing program 0 (id=1879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 9.767088552s ago: executing program 1 (id=1885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9.147322257s ago: executing program 2 (id=1886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 9.143146428s ago: executing program 3 (id=1887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f8", 0x59}, {0x0}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.579145907s ago: executing program 0 (id=1889): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f"], 0xdc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 7.150719278s ago: executing program 0 (id=1890): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, 0x0, 0x4008094) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, 0x0, 0xc8011) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x44) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x40000c1) sendmsg$IEEE802154_ADD_IFACE(r0, 0x0, 0x24000000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a40), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 4.666673654s ago: executing program 3 (id=1892): socket(0x10, 0x803, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.345492539s ago: executing program 0 (id=1893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x2a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000000002400240000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.344529493s ago: executing program 4 (id=1894): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) 4.109117986s ago: executing program 4 (id=1895): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="95cb57f7f9f5e9b19422fdbba16052a29a2d3be6e213bd75a97b56c7dc217216090e7c97", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)="05ba8c1cfb03f631fd2d06121541e78e6718599f7482f9b4b4464ff2d795", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0, 0xfffffe94}}], 0x3, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000001040)="1c", 0x1}], 0x1}}], 0x1, 0x4040005) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "0000000000b58200"}, 0x28) writev(r1, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r1, &(0x7f0000000440)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) 3.928979836s ago: executing program 4 (id=1896): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.634882998s ago: executing program 4 (id=1897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001100)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0xae8, 0x3, 0x6, 0x100}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 3.531093017s ago: executing program 3 (id=1898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x6, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.381086026s ago: executing program 3 (id=1899): socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) 3.055763656s ago: executing program 1 (id=1900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4894) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) accept$packet(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.113079195s ago: executing program 1 (id=1901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x6, 0x4, 0xffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) 1.496473676s ago: executing program 0 (id=1902): socket(0x10, 0x80002, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.481585615s ago: executing program 4 (id=1903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028050380180000800c00018006000100d10300000800034000000001"], 0x57c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 1.430781111s ago: executing program 2 (id=1904): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 1.24483066s ago: executing program 0 (id=1905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x88, 0xfffffffd, 0xffffffffdffffffa, 0x40, 0x75}, 0x6b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1.164692704s ago: executing program 2 (id=1906): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x47, 0x0, 0x0) close(0x3) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none, 0x701, 0x1}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) 1.061540736s ago: executing program 4 (id=1907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r6, 0x34}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="f698", 0x2}], 0x1}, 0x4) 882.460046ms ago: executing program 3 (id=1908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r4, 0x1, 0xd8}, 0x14) 775.807099ms ago: executing program 1 (id=1909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x129000, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xc}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0x6, 0x0, 0xfffd, 0x14, 0x9, 0x4, 0x6}}, @TCA_U32_INDEV={0x14, 0x8, 'hsr0\x00'}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000) 679.340138ms ago: executing program 2 (id=1910): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb0, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x57}}}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xa}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xff}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x51) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000001c0)={0x84, @multicast1, 0x4e23, 0x3, 'sh\x00', 0x5, 0x80005, 0x66}, 0x2c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000200)=@hopopts={0x3a, 0xe, '\x00', [@ra, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x24}, @calipso={0x7, 0x20, {0x0, 0x6, 0xc, 0x7fff, [0x4, 0x8000000000000001, 0x2]}}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x28, {0x2, 0x8, 0x6, 0x7, [0x7, 0x5, 0xdbf2, 0xfffffffffffffffa]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf8}]}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 486.812776ms ago: executing program 2 (id=1911): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 204.09649ms ago: executing program 2 (id=1912): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80) listen(0xffffffffffffffff, 0x3) sendfile(r0, r3, 0x0, 0x20000000002) socket$inet6(0xa, 0x80002, 0x0) 0s ago: executing program 3 (id=1913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x2a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1021200ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 78.581977][ T5613] cgroup: Unknown subsys name 'net' [ 78.696168][ T5613] cgroup: Unknown subsys name 'cpuset' [ 78.707035][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.342873][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.561138][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.579365][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.589822][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.599034][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.608062][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.609908][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.615985][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.634234][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.634371][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.643063][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.649694][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.657297][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.664823][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.671003][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.678654][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.695300][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.702858][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.713141][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.722625][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.725257][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.740287][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.740653][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.748217][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.764401][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.772827][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.763275][ T5642] Bluetooth: hci3: command tx timeout [ 84.792720][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.800591][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.808137][ T5628] bridge_slave_0: entered allmulticast mode [ 84.815468][ T5628] bridge_slave_0: entered promiscuous mode [ 84.842620][ T5642] Bluetooth: hci1: command tx timeout [ 84.842636][ T5632] Bluetooth: hci2: command tx timeout [ 84.849064][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.855175][ T5642] Bluetooth: hci4: command tx timeout [ 84.862814][ T5632] Bluetooth: hci0: command tx timeout [ 84.868282][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.881144][ T5639] bridge_slave_0: entered allmulticast mode [ 84.888679][ T5639] bridge_slave_0: entered promiscuous mode [ 84.915247][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.922680][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.930028][ T5628] bridge_slave_1: entered allmulticast mode [ 84.937311][ T5628] bridge_slave_1: entered promiscuous mode [ 84.954386][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.961568][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.968854][ T5625] bridge_slave_0: entered allmulticast mode [ 84.976341][ T5625] bridge_slave_0: entered promiscuous mode [ 84.983810][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.990954][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.998359][ T5639] bridge_slave_1: entered allmulticast mode [ 85.005684][ T5639] bridge_slave_1: entered promiscuous mode [ 85.014409][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.021680][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.029056][ T5626] bridge_slave_0: entered allmulticast mode [ 85.036496][ T5626] bridge_slave_0: entered promiscuous mode [ 85.060848][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.068211][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.075681][ T5625] bridge_slave_1: entered allmulticast mode [ 85.083253][ T5625] bridge_slave_1: entered promiscuous mode [ 85.111406][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.118807][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.126885][ T5626] bridge_slave_1: entered allmulticast mode [ 85.134077][ T5626] bridge_slave_1: entered promiscuous mode [ 85.172454][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.194885][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.223142][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.245405][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.267687][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.291503][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.323643][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.346137][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.366356][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.373647][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.381199][ T5627] bridge_slave_0: entered allmulticast mode [ 85.388553][ T5627] bridge_slave_0: entered promiscuous mode [ 85.409530][ T5639] team0: Port device team_slave_0 added [ 85.427219][ T5628] team0: Port device team_slave_0 added [ 85.433268][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.440530][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.448605][ T5627] bridge_slave_1: entered allmulticast mode [ 85.455837][ T5627] bridge_slave_1: entered promiscuous mode [ 85.474304][ T5639] team0: Port device team_slave_1 added [ 85.493060][ T5628] team0: Port device team_slave_1 added [ 85.511298][ T5625] team0: Port device team_slave_0 added [ 85.530754][ T5626] team0: Port device team_slave_0 added [ 85.561671][ T5625] team0: Port device team_slave_1 added [ 85.579598][ T5626] team0: Port device team_slave_1 added [ 85.598433][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.619021][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.626134][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.652635][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.678245][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.685444][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.711560][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.725536][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.756352][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.763727][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.790269][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.812034][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.819141][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.845390][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.868184][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.875329][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.901675][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.922643][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.929636][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.955867][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.979037][ T5627] team0: Port device team_slave_0 added [ 85.985975][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.993417][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.019503][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.039405][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.046487][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.072849][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.092980][ T5627] team0: Port device team_slave_1 added [ 86.121541][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.128783][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.155212][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.209550][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.216866][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.243843][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.263156][ T5628] hsr_slave_0: entered promiscuous mode [ 86.270284][ T5628] hsr_slave_1: entered promiscuous mode [ 86.343005][ T5625] hsr_slave_0: entered promiscuous mode [ 86.349364][ T5625] hsr_slave_1: entered promiscuous mode [ 86.355684][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 86.361510][ T5625] Cannot create hsr debugfs directory [ 86.372388][ T5639] hsr_slave_0: entered promiscuous mode [ 86.380047][ T5639] hsr_slave_1: entered promiscuous mode [ 86.387168][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 86.393202][ T5639] Cannot create hsr debugfs directory [ 86.417385][ T5626] hsr_slave_0: entered promiscuous mode [ 86.425010][ T5626] hsr_slave_1: entered promiscuous mode [ 86.431137][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 86.437052][ T5626] Cannot create hsr debugfs directory [ 86.549921][ T5627] hsr_slave_0: entered promiscuous mode [ 86.557238][ T5627] hsr_slave_1: entered promiscuous mode [ 86.564054][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 86.570034][ T5627] Cannot create hsr debugfs directory [ 86.842925][ T5632] Bluetooth: hci3: command tx timeout [ 86.922616][ T5632] Bluetooth: hci4: command tx timeout [ 86.923038][ T5629] Bluetooth: hci1: command tx timeout [ 86.928081][ T5632] Bluetooth: hci2: command tx timeout [ 86.939778][ T5642] Bluetooth: hci0: command tx timeout [ 87.202971][ T5639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.228257][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.238031][ T5639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.256721][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.267420][ T5639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.281685][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.305385][ T5639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.320622][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.444155][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.457796][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.466676][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.476645][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.486102][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.496435][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.509717][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.520427][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.614272][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.630178][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.639339][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.650766][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.674274][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.684904][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.693605][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.704856][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.827516][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.839602][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.849141][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.860586][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.878151][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.888202][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.906598][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.916826][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.002880][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.086521][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.098093][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.108157][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.118383][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.128357][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.144069][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.155558][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.163744][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.175357][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.191212][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.217737][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.225698][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.240937][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.248118][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.310321][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.335314][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.342668][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.394884][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.402060][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.481622][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.491914][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.576056][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.598675][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.631144][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.638388][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.678416][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.685947][ T3281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.719715][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.726965][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.786155][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.793401][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.896132][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.924550][ T5629] Bluetooth: hci3: command tx timeout [ 88.966943][ T5625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.003052][ T5636] Bluetooth: hci2: command tx timeout [ 89.003212][ T5632] Bluetooth: hci4: command tx timeout [ 89.010059][ T5642] Bluetooth: hci0: command tx timeout [ 89.014921][ T5629] Bluetooth: hci1: command tx timeout [ 89.053419][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.128583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.135937][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.215300][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.222557][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.710259][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.811835][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.891482][ T5639] veth0_vlan: entered promiscuous mode [ 89.965960][ T5639] veth1_vlan: entered promiscuous mode [ 90.100918][ T5628] veth0_vlan: entered promiscuous mode [ 90.161875][ T5628] veth1_vlan: entered promiscuous mode [ 90.185832][ T5639] veth0_macvtap: entered promiscuous mode [ 90.216434][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.236566][ T5639] veth1_macvtap: entered promiscuous mode [ 90.343653][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.391882][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.434564][ T5628] veth0_macvtap: entered promiscuous mode [ 90.460661][ T3281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.504184][ T3281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.514567][ T3281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.526764][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.540499][ T5628] veth1_macvtap: entered promiscuous mode [ 90.571197][ T3281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.678061][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.708910][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.748681][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.819907][ T3281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.828842][ T3281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.851930][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.869970][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.871352][ T3281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.888150][ T3281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.963744][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.964346][ T5625] veth0_vlan: entered promiscuous mode [ 90.976241][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.004293][ T5642] Bluetooth: hci3: command tx timeout [ 91.046074][ T5626] veth0_vlan: entered promiscuous mode [ 91.082597][ T5629] Bluetooth: hci4: command tx timeout [ 91.088675][ T5632] Bluetooth: hci0: command tx timeout [ 91.088687][ T5636] Bluetooth: hci2: command tx timeout [ 91.094737][ T5625] veth1_vlan: entered promiscuous mode [ 91.100358][ T5642] Bluetooth: hci1: command tx timeout [ 91.128393][ T5626] veth1_vlan: entered promiscuous mode [ 91.145217][ T5639] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.193956][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.209066][ T5627] veth0_vlan: entered promiscuous mode [ 91.227735][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.317070][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.319767][ T5627] veth1_vlan: entered promiscuous mode [ 91.346926][ T5824] gtp0: entered promiscuous mode [ 91.352085][ T5824] gtp0: entered allmulticast mode [ 91.372640][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.382144][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.394578][ T5626] veth0_macvtap: entered promiscuous mode [ 91.418389][ T5626] veth1_macvtap: entered promiscuous mode [ 91.435031][ T5625] veth0_macvtap: entered promiscuous mode [ 91.471271][ T5625] veth1_macvtap: entered promiscuous mode [ 91.537149][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.567053][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.636518][ T1180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.664897][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.688865][ T5627] veth0_macvtap: entered promiscuous mode [ 91.696354][ T1180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.715989][ T5829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.743950][ T5832] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 91.764060][ T1180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.775343][ T1180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.803641][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.829747][ T5627] veth1_macvtap: entered promiscuous mode [ 91.896555][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.906873][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.982165][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.995836][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.081096][ T5840] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.095194][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.129711][ T5839] netlink: 83 bytes leftover after parsing attributes in process `syz.1.10'. [ 92.164669][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.173446][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.190959][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.219795][ T9] cfg80211: failed to load regulatory.db [ 92.309931][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.329718][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.358862][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.379860][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.401430][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.412079][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.747000][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.771187][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.911014][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.964622][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.979790][ T5857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.990234][ T5857] netlink: 'syz.2.3': attribute type 7 has an invalid length. [ 93.010572][ T5857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.039245][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.056770][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.151549][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.173134][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.681167][ T5871] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 93.740429][ T5871] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 93.770965][ T5871] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 93.807207][ T5871] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 94.057390][ T5881] syzkaller1: entered promiscuous mode [ 94.094203][ T5881] syzkaller1: entered allmulticast mode [ 94.333761][ T5891] Zero length message leads to an empty skb [ 94.459367][ T5895] xt_hashlimit: size too large, truncated to 1048576 [ 94.563313][ T5897] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.29'. [ 94.667889][ T5897] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 94.716486][ T5897] 0ªX¹¦Dö»: entered allmulticast mode [ 95.113997][ T1120] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.156273][ T1120] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.191252][ T1120] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.247422][ T1120] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.808364][ T5920] macvtap1: entered promiscuous mode [ 95.827337][ T5920] macvtap1: entered allmulticast mode [ 95.846726][ T5920] veth1_vlan: entered allmulticast mode [ 95.988367][ T5921] macvtap2: entered promiscuous mode [ 96.015799][ T5921] macvtap2: entered allmulticast mode [ 97.041532][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 98.161238][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a3eb800: rx timeout, send abort [ 98.171546][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a3eb800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.533089][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 99.596233][ T6002] block nbd0: Unsupported socket: should be TCP or UNIX. [ 99.620299][ T6008] netlink: 'syz.1.81': attribute type 63 has an invalid length. [ 99.664341][ T6008] netlink: 'syz.1.81': attribute type 63 has an invalid length. [ 102.405155][ T6097] sock: sock_set_timeout: `syz.1.104' (pid 6097) tries to set negative timeout [ 104.016536][ T6129] syzkaller1: entered promiscuous mode [ 104.029004][ T6129] syzkaller1: entered allmulticast mode [ 104.269135][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 104.290720][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.344301][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.354048][ T6168] Illegal XDP return value 2194656232 on prog (id 7) dev syz_tun, expect packet loss! [ 106.158479][ T6190] sctp: [Deprecated]: syz.2.147 (pid 6190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.158479][ T6190] Use struct sctp_sack_info instead [ 106.231519][ T6196] xt_hashlimit: size too large, truncated to 1048576 [ 107.070877][ T6217] netlink: 56 bytes leftover after parsing attributes in process `syz.0.159'. [ 107.113187][ T6217] netlink: 56 bytes leftover after parsing attributes in process `syz.0.159'. [ 107.633801][ T6229] block nbd0: server does not support multiple connections per device. [ 107.663111][ T6229] block nbd0: shutting down sockets [ 108.384112][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 108.801280][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.179'. [ 108.813805][ T6264] netlink: 'syz.4.179': attribute type 7 has an invalid length. [ 108.834687][ T6264] netlink: 'syz.4.179': attribute type 8 has an invalid length. [ 108.853146][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 108.948930][ T6264] erspan0: entered promiscuous mode [ 109.005117][ T6264] gretap0: entered promiscuous mode [ 109.038455][ T6264] erspan0: left promiscuous mode [ 109.074902][ T6264] gretap0: left promiscuous mode [ 109.365689][ T5758] IPVS: starting estimator thread 0... [ 109.487971][ T6280] IPVS: using max 25 ests per chain, 60000 per kthread [ 110.254405][ T6304] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 110.269491][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 110.875604][ T6312] syzkaller1: entered promiscuous mode [ 110.895310][ T6312] syzkaller1: entered allmulticast mode [ 111.756388][ T6332] syzkaller1: entered promiscuous mode [ 111.785257][ T6332] syzkaller1: entered allmulticast mode [ 111.789502][ T6342] netlink: 104 bytes leftover after parsing attributes in process `syz.4.210'. [ 111.901568][ T6345] netlink: 11 bytes leftover after parsing attributes in process `syz.3.211'. [ 112.237630][ T6349] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 112.301569][ T6349] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 112.352765][ T6349] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 112.493970][ T6349] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.624388][ T6349] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.677694][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 112.809205][ T6367] sctp: [Deprecated]: syz.4.221 (pid 6367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.809205][ T6367] Use struct sctp_sack_info instead [ 113.388010][ T76] smbdirect: ib_dev[syz2] removed [ 113.470908][ T6380] syzkaller1: entered promiscuous mode [ 113.505712][ T6380] syzkaller1: entered allmulticast mode [ 114.931109][ T6416] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 117.031132][ T6478] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.272'. [ 118.759270][ T6527] xt_hashlimit: size too large, truncated to 1048576 [ 120.361477][ T6575] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.039888][ T6593] netlink: 27 bytes leftover after parsing attributes in process `syz.0.317'. [ 122.308556][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 122.361015][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 122.989847][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 123.320930][ T6657] netlink: 'syz.4.338': attribute type 4 has an invalid length. [ 123.894231][ T6676] netlink: 84 bytes leftover after parsing attributes in process `syz.4.343'. [ 123.956596][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 124.002043][ T6680] netlink: 65011 bytes leftover after parsing attributes in process `syz.1.346'. [ 124.315976][ T11] IPVS: starting estimator thread 0... [ 124.463040][ T6690] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.945033][ T6709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.356'. [ 125.042690][ T6712] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 125.065372][ T6712] netlink: 756 bytes leftover after parsing attributes in process `syz.2.358'. [ 125.523374][ T5289] veth1_macvtap: left promiscuous mode [ 126.513540][ T6755] Bluetooth: MGMT ver 1.23 [ 126.524489][ T6756] xt_hashlimit: size too large, truncated to 1048576 [ 126.569521][ T6755] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 126.647780][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.791570][ T6760] bridge_slave_0 (unregistering): left allmulticast mode [ 126.876854][ T6760] bridge_slave_0 (unregistering): left promiscuous mode [ 126.928151][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.207373][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 128.259914][ T6797] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 129.092149][ T6823] netlink: 'syz.3.399': attribute type 11 has an invalid length. [ 129.136905][ T6823] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 129.172500][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.399'. [ 131.750933][ T5632] block nbd0: Receive control failed (result -107) [ 131.804689][ T6881] nbd0: detected capacity change from 0 to 63 [ 131.839213][ T5642] block nbd0: Receive control failed (result -32) [ 131.871057][ T25] block nbd0: Dead connection, failed to find a fallback [ 131.880035][ T25] block nbd0: shutting down sockets [ 131.889018][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.899535][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.905316][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.910021][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 131.931266][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.932266][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.951441][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 131.961110][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.975465][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 131.984928][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.995984][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 132.006889][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.022282][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.033373][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.044374][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 132.053613][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.069078][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 132.079598][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.090811][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 132.101567][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 132.112393][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 132.121342][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 132.130607][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 132.152580][ T5836] ldm_validate_partition_table(): Disk read failed. [ 132.180960][ T5836] Dev nbd0: unable to read RDB block 0 [ 132.209691][ T5836] nbd0: unable to read partition table [ 132.248197][ T5836] ldm_validate_partition_table(): Disk read failed. [ 132.267426][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 132.298995][ T5836] Dev nbd0: unable to read RDB block 0 [ 132.329824][ T5836] nbd0: unable to read partition table [ 132.365742][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.445851][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.468994][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.495042][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.730721][ T6918] netlink: 64 bytes leftover after parsing attributes in process `syz.0.433'. [ 133.168176][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.405533][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.419130][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.683297][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.079513][ T6956] netlink: 36 bytes leftover after parsing attributes in process `syz.3.448'. [ 137.564436][ T29] net_ratelimit: 9 callbacks suppressed [ 137.564475][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.575290][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.583908][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.650266][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.663376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.962910][ T7028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.998014][ T7028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.050866][ T7028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.166110][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.265051][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.283994][ T7029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.931568][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 139.407886][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 139.464472][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.496'. [ 139.509109][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 139.560061][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.496'. [ 140.921564][ T7122] netlink: 68 bytes leftover after parsing attributes in process `syz.1.515'. [ 140.989208][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 141.310000][ T7133] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 141.857105][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 142.328802][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 142.503189][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.528'. [ 142.552767][ T7167] netlink: 'syz.1.528': attribute type 7 has an invalid length. [ 142.575894][ T7167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.528'. [ 142.770854][ T29] net_ratelimit: 18 callbacks suppressed [ 142.770903][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.408441][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.416968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.805486][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.901769][ T7207] netlink: 'syz.0.547': attribute type 13 has an invalid length. [ 144.189233][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88806a60c800: rx timeout, send abort [ 144.199623][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806a60c800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.847320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.861632][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.229936][ T7238] syzkaller1: entered promiscuous mode [ 145.249619][ T7238] syzkaller1: entered allmulticast mode [ 145.338486][ T7249] trusted_key: syz.4.560 sent an empty control message without MSG_MORE. [ 145.392545][ T7251] lo: entered allmulticast mode [ 145.750823][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.565'. [ 145.883072][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.195077][ T7276] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 146.225929][ T11] IPVS: starting estimator thread 0... [ 146.242113][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 146.352286][ T7279] IPVS: using max 28 ests per chain, 67200 per kthread [ 146.443356][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.573842][ T7285] netlink: 'syz.0.575': attribute type 12 has an invalid length. [ 146.636708][ T7285] netlink: 'syz.0.575': attribute type 29 has an invalid length. [ 146.646530][ T7285] netlink: 148 bytes leftover after parsing attributes in process `syz.0.575'. [ 146.659499][ T7285] netlink: 'syz.0.575': attribute type 3 has an invalid length. [ 146.668617][ T7285] netlink: 'syz.0.575': attribute type 2 has an invalid length. [ 146.688935][ T7285] netlink: 35 bytes leftover after parsing attributes in process `syz.0.575'. [ 147.628648][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 147.722615][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 147.751500][ T7317] netlink: 'syz.1.590': attribute type 15 has an invalid length. [ 147.843396][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 147.856103][ T1158] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 147.894467][ T1158] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 147.904303][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 147.949586][ T7317] netlink: 'syz.1.590': attribute type 15 has an invalid length. [ 147.964727][ T5773] net_ratelimit: 2 callbacks suppressed [ 147.964764][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.020564][ T1158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 148.031684][ T7323] netlink: 64 bytes leftover after parsing attributes in process `syz.2.592'. [ 148.052036][ T1158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 148.474358][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.599'. [ 149.020481][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.171180][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.182098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.812702][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.018685][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 150.074752][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.448186][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.459191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.085905][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.103437][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.895492][ T7431] netlink: 'syz.3.640': attribute type 21 has an invalid length. [ 151.928272][ T7431] __nla_validate_parse: 3 callbacks suppressed [ 151.928289][ T7431] netlink: 128 bytes leftover after parsing attributes in process `syz.3.640'. [ 151.969999][ T7431] netlink: 'syz.3.640': attribute type 5 has an invalid length. [ 152.000625][ T7431] netlink: 'syz.3.640': attribute type 6 has an invalid length. [ 152.017729][ T7431] netlink: 3 bytes leftover after parsing attributes in process `syz.3.640'. [ 152.182847][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.642'. [ 152.390390][ T7442] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 152.408113][ T7442] netlink: 224 bytes leftover after parsing attributes in process `syz.3.643'. [ 152.487987][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 152.509574][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 152.567888][ T7450] syzkaller1: entered promiscuous mode [ 152.583133][ T7450] syzkaller1: entered allmulticast mode [ 152.643462][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 152.673045][ T7453] netlink: 'syz.1.646': attribute type 10 has an invalid length. [ 152.684646][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 153.162950][ T5727] net_ratelimit: 4 callbacks suppressed [ 153.162999][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.115699][ T7496] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 154.205717][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.517673][ T7505] sctp: [Deprecated]: syz.1.668 (pid 7505) Use of int in max_burst socket option. [ 154.517673][ T7505] Use struct sctp_assoc_value instead [ 154.927684][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.936262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.944950][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.953635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.976785][ T7520] veth1_to_bond: entered allmulticast mode [ 154.988395][ T7520] veth1_to_bond: entered promiscuous mode [ 155.007067][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 155.038604][ T7520] veth1_to_bond (unregistering): left allmulticast mode [ 155.058588][ T7520] veth1_to_bond (unregistering): left promiscuous mode [ 155.101099][ T7520] bond0: (slave bond_slave_1): Releasing backup interface [ 155.253236][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.496744][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.566484][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.580142][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.189053][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 156.205640][ T7553] netlink: 'syz.2.689': attribute type 10 has an invalid length. [ 156.823974][ T7572] xt_hashlimit: size too large, truncated to 1048576 [ 157.785283][ T7599] syzkaller1: entered promiscuous mode [ 157.818072][ T7599] syzkaller1: entered allmulticast mode [ 158.039750][ T7609] __nla_validate_parse: 3 callbacks suppressed [ 158.039773][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 158.365106][ T29] net_ratelimit: 11 callbacks suppressed [ 158.365145][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.491670][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.720'. [ 158.603499][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.960298][ T7636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.970523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.103887][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.118965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.148848][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.160248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.178858][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.233784][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.809901][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 159.977924][ T7658] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 160.260019][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 160.316412][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'. [ 160.385320][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 160.584523][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 160.595655][ T6053] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.632314][ T6053] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.642820][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'. [ 160.660823][ T6053] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.672535][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 160.766299][ T6053] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.070255][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 162.752509][ T7708] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 162.816601][ T7708] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.852099][ T7708] bond0: (slave team0): Enslaving as an active interface with an up link [ 163.144461][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 163.180104][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 163.573230][ T5773] net_ratelimit: 19 callbacks suppressed [ 163.573277][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.698291][ T7722] xt_hashlimit: size too large, truncated to 1048576 [ 163.734580][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.743041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.805643][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.532329][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.540753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.603179][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.773049][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.791852][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 164.843078][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.873239][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 165.654839][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.189006][ T7751] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 167.828104][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 168.086122][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 168.420441][ T7812] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 168.438036][ T7812] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.796'. [ 168.763770][ T5727] net_ratelimit: 14 callbacks suppressed [ 168.763819][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.780069][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.790216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.004650][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.482536][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.490966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.809650][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.043349][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.127104][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.225197][ T7863] netlink: 'syz.2.819': attribute type 5 has an invalid length. [ 170.283812][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.747738][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.325361][ T7891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 171.424238][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 171.505235][ T7902] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 171.844665][ T7902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.919849][ T7905] bond1: (slave geneve2): making interface the new active one [ 171.960686][ T7905] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 172.162052][ T7926] netlink: 'syz.1.840': attribute type 10 has an invalid length. [ 172.275767][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.321269][ T7926] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 172.399997][ T7928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.451096][ T7928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.491115][ T7928] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 172.518859][ T7928] bond0 (unregistering): Released all slaves [ 173.380185][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.440750][ T7950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.848'. [ 173.918486][ T7947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.967280][ T5773] net_ratelimit: 14 callbacks suppressed [ 173.967334][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.996866][ T7947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.215766][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.306161][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.347524][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.393168][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.440845][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.467334][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.476154][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.488398][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.499415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.755888][ T7947] veth1_vlan: left allmulticast mode [ 174.827784][ T7948] geneve2: entered promiscuous mode [ 174.852313][ T7948] geneve2: entered allmulticast mode [ 174.886597][ T6053] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.908268][ T6053] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.939002][ T6053] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 174.981526][ T6053] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.024711][ T6053] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.064452][ T6053] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.115661][ T6053] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.164970][ T6053] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.207267][ T6053] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.246667][ T6053] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.295716][ T6053] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.336686][ T6053] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.670836][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 175.766248][ T7995] ip6erspan0: entered promiscuous mode [ 178.114001][ T8063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.158673][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 178.343744][ T8074] batadv_slave_1: entered promiscuous mode [ 178.392866][ T8072] batadv_slave_1: left promiscuous mode [ 179.247164][ T9] net_ratelimit: 19 callbacks suppressed [ 179.247184][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.264636][ T8079] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 179.278274][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 179.306756][ T8079] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 179.316259][ T8104] netlink: 'syz.2.909': attribute type 6 has an invalid length. [ 179.324446][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 179.402552][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.429091][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 179.445634][ T8104] netlink: 'syz.2.909': attribute type 6 has an invalid length. [ 179.481097][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 179.506353][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.524974][ T8112] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.913'. [ 179.723681][ T8115] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 179.807484][ T8115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.838608][ T8119] bond2: (slave gretap1): making interface the new active one [ 179.850422][ T8119] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 179.867536][ T8121] veth0: entered promiscuous mode [ 179.884124][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.897907][ T8120] veth0: left promiscuous mode [ 180.140492][ T8128] bridge1: entered promiscuous mode [ 180.147127][ T8128] bridge1: entered allmulticast mode [ 180.156141][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.166414][ T8131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.203614][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.224612][ T8131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.282784][ T1233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.291214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.331213][ T8137] netlink: 'syz.4.921': attribute type 15 has an invalid length. [ 180.443048][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.512947][ T8145] netlink: 'syz.4.926': attribute type 21 has an invalid length. [ 180.529603][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.539268][ T8145] netlink: 'syz.4.926': attribute type 22 has an invalid length. [ 180.547816][ T8145] netlink: 'syz.4.926': attribute type 23 has an invalid length. [ 180.556209][ T8145] netlink: 'syz.4.926': attribute type 25 has an invalid length. [ 180.566180][ T8145] netlink: 'syz.4.926': attribute type 26 has an invalid length. [ 180.575189][ T8145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.926'. [ 180.791234][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 180.807602][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 180.818743][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 180.825718][ T30] audit: type=1800 audit(1782972147.445:2): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.928" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1032 res=0 errno=0 [ 181.494952][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.539080][ T8178] syzkaller1: entered promiscuous mode [ 181.549354][ T8178] syzkaller1: entered allmulticast mode [ 181.571035][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.653422][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'. [ 181.710239][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'. [ 181.720212][ T8192] netlink: 'syz.2.946': attribute type 20 has an invalid length. [ 181.740605][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 181.883845][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 182.295862][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 182.510103][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 182.542350][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 182.646217][ T6053] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.678470][ T6053] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.698018][ T6053] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.716664][ T6053] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.830198][ T8231] vxcan1 speed is unknown, defaulting to 1000 [ 182.929110][ T8231] vxcan1 speed is unknown, defaulting to 1000 [ 183.080546][ T8231] vxcan1 speed is unknown, defaulting to 1000 [ 183.625525][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.633491][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.949441][ T8259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.978039][ T8259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.057320][ T8231] infiniband syz2: set active [ 184.062908][ T8231] infiniband syz2: added vxcan1 [ 184.076890][ T8231] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 184.081268][ T8231] infiniband syz2: Couldn't open port 1 [ 184.101806][ T8231] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 184.118963][ T8231] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 184.137698][ T8231] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 184.208977][ T8231] RDS/IB: syz2: added [ 184.243557][ T8231] smc: adding ib device syz2 with port count 1 [ 184.265605][ T8231] smc: ib device syz2 port 1 has no pnetid [ 184.358851][ T135] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.381812][ T8276] vxcan1 speed is unknown, defaulting to 1000 [ 184.402711][ T135] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.434214][ T6053] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.450785][ T6053] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.485495][ T1233] vxcan1 speed is unknown, defaulting to 1000 [ 184.493933][ T6053] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.540285][ T6053] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.576969][ T6053] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.601774][ T6053] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.643647][ T8231] vxcan1 speed is unknown, defaulting to 1000 [ 184.683915][ T8281] net_ratelimit: 12 callbacks suppressed [ 184.683936][ T8281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.005048][ T8286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.322827][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.485029][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.493471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.666788][ T8231] vxcan1 speed is unknown, defaulting to 1000 [ 185.667040][ T8329] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 185.725152][ T8286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.754734][ T8331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.913541][ T8333] __nla_validate_parse: 8 callbacks suppressed [ 185.913563][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 186.042655][ T8286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.317880][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 186.364050][ T8353] validate_nla: 2 callbacks suppressed [ 186.364070][ T8353] netlink: 'syz.0.1003': attribute type 10 has an invalid length. [ 186.380986][ T8353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1003'. [ 186.411011][ T8353] team0: Port device geneve1 added [ 186.417233][ T135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.432740][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.450578][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.478512][ T135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.587014][ T8231] vxcan1 speed is unknown, defaulting to 1000 [ 186.773213][ T8286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.923714][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.963660][ T8367] lo: left allmulticast mode [ 187.131137][ T8372] netlink: 'syz.4.1014': attribute type 2 has an invalid length. [ 187.144452][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 187.238228][ T8231] vxcan1 speed is unknown, defaulting to 1000 [ 187.720555][ T8231] vxcan1 speed is unknown, defaulting to 1000 [ 188.399856][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'. [ 188.483406][ T8409] block nbd2: not configured, cannot reconfigure [ 188.770247][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 188.997475][ T8430] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 189.029531][ T8430] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 189.417870][ T8452] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 189.584267][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 189.597474][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 189.698770][ T8455] bond3: (slave gretap2): making interface the new active one [ 189.748384][ T8455] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 190.203208][ T8282] net_ratelimit: 12 callbacks suppressed [ 190.203229][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.343202][ T8491] lo: Caught tx_queue_len zero misconfig [ 190.637042][ T8499] netlink: 'syz.4.1066': attribute type 11 has an invalid length. [ 193.022769][ T8579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1090'. [ 193.051023][ T8579] netlink: 'syz.2.1090': attribute type 7 has an invalid length. [ 193.078199][ T8579] netlink: 'syz.2.1090': attribute type 8 has an invalid length. [ 193.099407][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 194.184403][ T8617] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 194.204117][ T8617] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 194.604302][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.370877][ T8653] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1120'. [ 195.418537][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1121'. [ 195.448919][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1121'. [ 195.649500][ T8657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1122'. [ 196.382726][ T8678] syzkaller1: entered promiscuous mode [ 196.404645][ T8678] syzkaller1: entered allmulticast mode [ 196.611800][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 196.779062][ T8689] hsr_slave_1 (unregistering): left promiscuous mode [ 197.049997][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 197.350886][ T8714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1141'. [ 197.647792][ C0] Unknown status report in ack skb [ 197.779466][ T8730] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 197.951901][ T1233] IPVS: starting estimator thread 0... [ 198.017016][ T8730] bond0: entered promiscuous mode [ 198.024957][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.052270][ T8743] IPVS: using max 23 ests per chain, 55200 per kthread [ 198.139180][ T8737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.166517][ T8737] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 198.195250][ T8737] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 198.256716][ T8737] bond0: (slave ip6gre2): making interface the new active one [ 198.275648][ T8737] ip6gre2: entered promiscuous mode [ 198.290732][ T8737] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 199.304166][ T8800] Bluetooth: MGMT ver 1.23 [ 199.541118][ T8808] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 199.559619][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1170'. [ 199.591570][ T8811] netlink: 'syz.0.1171': attribute type 12 has an invalid length. [ 199.995068][ T8795] bridge2: entered promiscuous mode [ 200.017265][ T8795] bridge2: entered allmulticast mode [ 200.150583][ T1158] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3 [ 200.403111][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 200.424152][ T8839] netlink: 'syz.1.1181': attribute type 29 has an invalid length. [ 200.441536][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 200.468348][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 200.498167][ T8840] netlink: 'syz.1.1181': attribute type 29 has an invalid length. [ 200.509536][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 201.509320][ T8876] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 201.645721][ T8876] bond4: entered promiscuous mode [ 201.680179][ T8876] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.737575][ T8881] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.746437][ T8881] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 201.757118][ T8881] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 201.774539][ T8881] bond4: (slave vti0): making interface the new active one [ 201.793359][ T8881] vti0: entered promiscuous mode [ 201.811532][ T8881] bond4: (slave vti0): Enslaving as an active interface with an up link [ 201.990798][ T8284] IPVS: starting estimator thread 0... [ 202.093265][ T8895] IPVS: using max 25 ests per chain, 60000 per kthread [ 202.421186][ T8913] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1210'. [ 203.042593][ T8825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.288215][ T8931] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 203.398886][ T8934] team_slave_1: Caught tx_queue_len zero misconfig [ 203.476371][ T8937] bond1: (slave geneve3): making interface the new active one [ 203.486245][ T8937] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 203.524901][ T80] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 203.544734][ T80] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 203.611157][ T8941] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 203.633432][ T8941] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 203.667633][ T80] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 203.694045][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 203.720094][ T80] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 203.729258][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1223'. [ 203.774643][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 205.088672][ T9002] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 205.211439][ T9006] syzkaller1: entered promiscuous mode [ 205.217811][ T9006] syzkaller1: entered allmulticast mode [ 206.889839][ T8958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.928104][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 206.934600][ T4944] Bluetooth: hci3: command 0x0406 tx timeout [ 206.934623][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 206.944358][ T4944] Bluetooth: hci1: command 0x0406 tx timeout [ 207.613936][ T9042] netlink: 'syz.3.1261': attribute type 26 has an invalid length. [ 207.639335][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 207.688021][ T9042] netlink: 'syz.3.1261': attribute type 26 has an invalid length. [ 207.723944][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 207.774514][ T9047] macvlan2: entered promiscuous mode [ 207.809069][ T9047] macvlan2: entered allmulticast mode [ 207.826236][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 207.994476][ T9049] team1: entered promiscuous mode [ 208.021308][ T9049] team1: entered allmulticast mode [ 208.575107][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 208.623526][ T9082] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 208.650375][ T9082] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 208.665924][ T9082] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1278'. [ 209.366979][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 209.969345][ T9135] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1301'. [ 210.026349][ T9137] veth0: entered promiscuous mode [ 210.081540][ T9137] veth0: left promiscuous mode [ 211.608434][ T9194] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 211.633996][ T9194] netlink: 'syz.1.1327': attribute type 4 has an invalid length. [ 211.650164][ T9194] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.1327'. [ 212.293620][ T9220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1338'. [ 212.320045][ T9224] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 213.912540][ T9275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'. [ 214.265832][ T9289] gretap0: entered promiscuous mode [ 214.553147][ T9299] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1370'. [ 214.815058][ T9311] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 215.162676][ T9320] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 215.245006][ T9326] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1381'. [ 215.422987][ T9333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1382'. [ 215.633861][ T9324] vxcan1 speed is unknown, defaulting to 1000 [ 215.681197][ T9314] syz.2.1377 (9314) used greatest stack depth: 19208 bytes left [ 216.188942][ T9363] netlink: 'syz.4.1387': attribute type 1 has an invalid length. [ 216.354867][ T9363] bond1: entered promiscuous mode [ 216.364252][ T9363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.445777][ T9370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.465970][ T9370] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 216.491152][ T9370] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 216.526573][ T9370] bond1: (slave ip6gre1): making interface the new active one [ 216.562961][ T9370] ip6gre1: entered promiscuous mode [ 216.583909][ T9370] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 216.816676][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 217.154332][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1399'. [ 217.694668][ T9415] vxcan1 speed is unknown, defaulting to 1000 [ 217.766279][ T9418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.929236][ T9420] netlink: 'syz.2.1405': attribute type 21 has an invalid length. [ 217.953726][ T9420] netlink: 'syz.2.1405': attribute type 22 has an invalid length. [ 217.982234][ T9420] netlink: 'syz.2.1405': attribute type 23 has an invalid length. [ 218.000323][ T9420] netlink: 'syz.2.1405': attribute type 25 has an invalid length. [ 218.017131][ T9420] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1405'. [ 222.059039][ T9481] syzkaller0: entered promiscuous mode [ 222.072641][ T9481] syzkaller0: entered allmulticast mode [ 222.494597][ T9501] netlink: 'syz.4.1432': attribute type 19 has an invalid length. [ 224.160089][ T9501] netlink: 'syz.4.1432': attribute type 19 has an invalid length. [ 224.182576][ T6059] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.214697][ T6059] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.246743][ T6059] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.281265][ T6059] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.438633][ T9519] GUP no longer grows the stack in syz.4.1437 (9519): 200000003000-20000000a000 (200000001000) [ 224.475882][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.4.1437 Not tainted syzkaller #0 PREEMPT(full) [ 224.475913][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.475925][ T9519] Call Trace: [ 224.475934][ T9519] [ 224.475943][ T9519] dump_stack_lvl+0xe8/0x150 [ 224.475996][ T9519] __get_user_pages+0x238c/0x2720 [ 224.476029][ T9519] ? __gup_longterm_locked+0xc3b/0x15c0 [ 224.476088][ T9519] __gup_longterm_locked+0xd52/0x15c0 [ 224.476119][ T9519] ? lock_acquire+0x106/0x350 [ 224.476159][ T9519] gup_fast_fallback+0x1d8c/0x20e0 [ 224.476226][ T9519] ? __pfx_gup_fast_fallback+0x10/0x10 [ 224.476258][ T9519] ? is_valid_gup_args+0x11f/0x200 [ 224.476287][ T9519] ? get_user_pages_fast+0x4d/0xb0 [ 224.476317][ T9519] __iov_iter_get_pages_alloc+0x378/0xa40 [ 224.476348][ T9519] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 224.476389][ T9519] iov_iter_get_pages2+0x5e/0xa0 [ 224.476414][ T9519] __se_sys_vmsplice+0x7b5/0x1660 [ 224.476458][ T9519] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 224.476484][ T9519] ? __pfx_futex_wait+0x10/0x10 [ 224.476586][ T9519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.476610][ T9519] do_syscall_64+0x174/0x580 [ 224.476630][ T9519] ? trace_irq_disable+0x3b/0x140 [ 224.476650][ T9519] ? clear_bhb_loop+0x40/0x90 [ 224.476676][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.476697][ T9519] RIP: 0033:0x7f60aed9de59 [ 224.476718][ T9519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.476734][ T9519] RSP: 002b:00007f60afc9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 224.476759][ T9519] RAX: ffffffffffffffda RBX: 00007f60af025fa0 RCX: 00007f60aed9de59 [ 224.476774][ T9519] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 224.476787][ T9519] RBP: 00007f60aee33e6f R08: 0000000000000000 R09: 0000000000000000 [ 224.476800][ T9519] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 224.476810][ T9519] R13: 00007f60af026038 R14: 00007f60af025fa0 R15: 00007ffcfb2d7948 [ 224.476846][ T9519] [ 225.289110][ T9547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1446'. [ 225.810920][ T9561] netlink: 'syz.2.1449': attribute type 1 has an invalid length. [ 225.848822][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1448'. [ 226.151905][ T9561] bond2: entered promiscuous mode [ 226.174286][ T9561] bond2: entered allmulticast mode [ 226.199755][ T9561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.290177][ T9562] erspan1: entered allmulticast mode [ 226.305957][ T9562] bond2: (slave erspan1): making interface the new active one [ 226.313869][ T9562] erspan1: entered promiscuous mode [ 226.325295][ T9562] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 226.442102][ T9574] syzkaller0: entered promiscuous mode [ 226.458735][ T9574] syzkaller0: entered allmulticast mode [ 226.480188][ T9580] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 226.481360][ T9572] syzkaller1: entered promiscuous mode [ 226.509517][ T9572] syzkaller1: entered allmulticast mode [ 227.705636][ T9633] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 227.771455][ T9633] bond2: (slave bridge1): making interface the new active one [ 227.780408][ T9633] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 228.524973][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 228.554105][ T9666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.579354][ T9666] bond3: (slave macvlan2): Opening slave failed [ 229.246898][ T9679] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1487'. [ 229.257882][ T9679] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1487'. [ 229.267512][ T9679] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 229.270034][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'. [ 229.668429][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'. [ 229.824098][ T9599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.598371][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 230.989583][ T9743] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.1515'. [ 232.337085][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 232.890944][ T9785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.124246][ T9788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 236.705611][ T9859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.314082][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1555'. [ 237.811473][ T9881] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1557'. [ 238.668577][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1564'. [ 239.039684][ T9906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 240.059461][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'. [ 240.649042][ T9947] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 240.968269][ T9947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.089188][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1580'. [ 241.127163][ T9953] bond2: (slave batadv1): Opening slave failed [ 241.608917][ T9952] bond2: (slave veth5): Enslaving as an active interface with a down link [ 241.938945][ T9970] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 242.416997][ T9970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.681477][ T9971] bond3: (slave veth7): Enslaving as an active interface with a down link [ 242.818698][ T9972] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 244.126486][T10003] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 244.212961][T10003] batman_adv: batadv0: Adding interface: gretap1 [ 244.239906][T10003] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.377838][T10003] batman_adv: batadv0: Interface activated: gretap1 [ 245.297324][T10018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1598'. [ 245.757349][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 245.782424][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1600'. [ 245.811159][T10000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1592'. [ 246.381403][T10039] netlink: 'syz.0.1604': attribute type 4 has an invalid length. [ 246.469883][T10043] netlink: 'syz.0.1604': attribute type 4 has an invalid length. [ 248.725750][T10074] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1615'. [ 249.560353][T10088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1619'. [ 252.493961][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1625'. [ 256.045039][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.048748][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.133172][T10112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.169119][T10115] erspan0: entered promiscuous mode [ 257.190231][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 259.137512][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1630'. [ 260.371662][T10171] netlink: 'syz.4.1635': attribute type 1 has an invalid length. [ 260.413225][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 260.557882][T10171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.628583][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1633'. [ 260.638420][T10183] xt_hashlimit: size too large, truncated to 1048576 [ 261.291147][T10195] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 261.385692][T10195] xt_hashlimit: size too large, truncated to 1048576 [ 267.161451][T10236] syzkaller1: entered promiscuous mode [ 267.177162][T10236] syzkaller1: entered allmulticast mode [ 267.868556][T10254] syzkaller1: entered promiscuous mode [ 267.887142][T10254] syzkaller1: entered allmulticast mode [ 268.684123][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1657'. [ 270.351506][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1661'. [ 270.718748][T10271] bond5: entered promiscuous mode [ 270.758843][T10271] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.028064][T10280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.071355][T10280] bond5: (slave sit3): The slave device specified does not support setting the MAC address [ 271.154868][T10280] bond5: (slave sit3): Error -95 calling set_mac_address [ 273.506037][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 273.569713][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 273.638427][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 274.180632][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 274.337524][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 275.975150][T10353] netlink: 'syz.0.1682': attribute type 13 has an invalid length. [ 276.400430][T10335] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1677'. [ 276.546286][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1683'. [ 276.908832][T10367] netlink: 'syz.4.1686': attribute type 1 has an invalid length. [ 277.092551][T10371] macvlan2: entered promiscuous mode [ 277.108259][T10371] macvlan2: entered allmulticast mode [ 277.129973][T10371] bond3: entered promiscuous mode [ 277.152995][T10371] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 277.209558][T10371] bond3: left promiscuous mode [ 277.311158][T10374] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 277.702076][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1688'. [ 278.798619][T10400] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1693'. [ 278.835682][T10400] openvswitch: netlink: Message has 512 unknown bytes. [ 280.704585][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'. [ 280.877660][T10436] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1707'. [ 280.898895][T10436] syzkaller1: entered promiscuous mode [ 280.904604][T10436] syzkaller1: entered allmulticast mode [ 281.974437][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 282.000807][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 283.033904][T10448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 283.611115][T10461] bond1: entered allmulticast mode [ 283.635298][T10461] ip6gre1: entered allmulticast mode [ 283.660518][T10464] netlink: 'syz.0.1716': attribute type 1 has an invalid length. [ 283.680614][T10459] bond1: left allmulticast mode [ 283.700670][T10459] ip6gre1: left allmulticast mode [ 283.866062][T10464] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.095918][T10469] bond4: (slave geneve2): making interface the new active one [ 284.111264][T10469] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 284.808157][T10490] tipc: Failed to remove unknown binding: 66,0,0/0:3670269868/3670269869 [ 284.819426][T10490] tipc: Failed to remove unknown binding: 66,0,0/0:3670269868/3670269869 [ 285.241386][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 295.911119][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 295.921476][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 296.924015][T10523] tipc: Failed to remove unknown binding: 66,0,0/0:24781950/24781951 [ 296.952616][T10523] tipc: Failed to remove unknown binding: 66,0,0/0:24781950/24781951 [ 298.267726][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1743'. [ 298.634732][T10544] bond5: (slave ip6gretap1): making interface the new active one [ 298.643952][T10544] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 299.049000][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1747'. [ 300.197338][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 300.914962][T10580] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1756'. [ 301.222571][T10589] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 301.367681][T10589] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.506451][T10591] bond6: (slave veth0_to_bond): making interface the new active one [ 301.547962][T10591] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 301.599621][T10589] macvlan4: entered promiscuous mode [ 301.605772][T10589] macvlan4: entered allmulticast mode [ 301.616360][T10589] bond6: entered promiscuous mode [ 301.621618][T10589] veth0_to_bond: entered promiscuous mode [ 301.634726][T10589] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 301.648003][T10589] bond6: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 301.666655][T10589] bond6: left promiscuous mode [ 301.671665][T10589] veth0_to_bond: left promiscuous mode [ 301.971198][T10604] tipc: Started in network mode [ 301.980596][T10604] tipc: Node identity da25222994e1, cluster identity 4711 [ 301.991842][T10604] tipc: Enabled bearer , priority 0 [ 302.102601][T10604] syzkaller0: entered promiscuous mode [ 302.108548][T10604] syzkaller0: entered allmulticast mode [ 302.118877][T10604] tipc: Resetting bearer [ 302.391155][ T6053] tipc: Resetting bearer [ 302.409740][T10603] tipc: Resetting bearer [ 303.451030][T10615] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 307.988762][T10603] tipc: Disabling bearer [ 308.125995][ T8275] tipc: Node number set to 1321476649 [ 308.138902][T10615] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 308.361653][T10649] syzkaller0: entered promiscuous mode [ 308.399785][T10649] syzkaller0: entered allmulticast mode [ 308.601392][T10654] syzkaller1: entered promiscuous mode [ 308.610314][T10654] syzkaller1: entered allmulticast mode [ 311.731901][T10672] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1781'. [ 311.755239][T10673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.858527][T10673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.898222][T10674] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 311.921809][T10674] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 312.111469][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.118810][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.310217][ T6053] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 312.342791][ T6053] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 312.377248][ T6053] bond3: (slave veth7): making interface the new active one [ 312.420387][ T6053] bond3: active interface up! [ 312.456579][ T135] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 312.470541][ T135] bond2: (slave veth5): making interface the new active one [ 312.490047][ T135] bond2: active interface up! [ 312.615852][T10691] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 313.614427][T10698] syzkaller0: entered promiscuous mode [ 313.620290][T10698] syzkaller0: entered allmulticast mode [ 317.275840][T10724] tipc: Started in network mode [ 317.300604][T10724] tipc: Node identity 42225d3f4a9f, cluster identity 4711 [ 317.324185][T10724] tipc: Enabled bearer , priority 0 [ 317.491070][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.567815][T10724] syzkaller0: entered promiscuous mode [ 317.573979][T10724] syzkaller0: entered allmulticast mode [ 317.580451][T10724] tipc: Resetting bearer [ 317.603237][T10725] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 317.621798][T10725] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 317.648884][T10722] tipc: Resetting bearer [ 324.091058][T10722] tipc: Disabling bearer [ 324.117898][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.154829][T10736] batadv_slave_1: entered promiscuous mode [ 324.229892][ T8276] tipc: Node number set to 146627903 [ 324.521317][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 324.720657][T10789] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 326.451930][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 327.853947][T10823] tipc: Started in network mode [ 327.879199][T10823] tipc: Node identity 080211000001, cluster identity 4711 [ 327.906189][T10823] tipc: Enabled bearer , priority 0 [ 328.378872][T10827] tipc: Enabling of bearer rejected, already enabled [ 328.388919][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1826'. [ 329.519316][T10836] syzkaller0: entered promiscuous mode [ 329.528936][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1830'. [ 329.560565][T10836] syzkaller0: entered allmulticast mode [ 329.639487][ T8276] tipc: Node number set to 134418688 [ 329.927400][T10845] bond3: (slave veth0_to_bond): Releasing active interface [ 329.952313][T10845] veth7: entered promiscuous mode [ 330.393091][T10843] bridge2: port 1(veth9) entered blocking state [ 330.425813][T10843] bridge2: port 1(veth9) entered disabled state [ 330.473140][T10843] veth9: entered allmulticast mode [ 330.526716][T10843] veth9: entered promiscuous mode [ 336.586079][T10865] syzkaller0: entered promiscuous mode [ 336.626990][T10865] syzkaller0: entered allmulticast mode [ 336.643930][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 336.695369][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 337.219882][T10874] syzkaller0: entered promiscuous mode [ 337.253970][T10874] syzkaller0: entered allmulticast mode [ 337.454652][T10872] syzkaller0: entered promiscuous mode [ 337.460569][T10872] syzkaller0: entered allmulticast mode [ 338.889653][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1843'. [ 341.645415][T10891] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 341.650248][T10895] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 341.812694][ T12] veth7: left promiscuous mode [ 343.137749][T10930] syzkaller0: entered promiscuous mode [ 343.145995][T10930] syzkaller0: entered allmulticast mode [ 344.545189][T10939] syzkaller0: entered promiscuous mode [ 344.561616][T10939] syzkaller0: entered allmulticast mode [ 344.580090][T10939] 0: reclassify loop, rule prio 0, protocol 800 [ 344.859109][T10912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.321884][T10950] syzkaller0: entered promiscuous mode [ 345.328165][T10950] syzkaller0: entered allmulticast mode [ 345.769809][T10953] syz_tun: entered allmulticast mode [ 345.803882][T10952] syz_tun: left allmulticast mode [ 346.918079][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 346.969069][T10981] vlan3: entered allmulticast mode [ 346.981733][T10981] bridge4: entered allmulticast mode [ 346.994317][T10981] bridge4: port 1(erspan0) entered blocking state [ 347.001118][T10981] bridge4: port 1(erspan0) entered disabled state [ 347.011656][T10981] erspan0: entered allmulticast mode [ 347.019976][T10981] erspan0: entered promiscuous mode [ 347.027981][T10981] bridge4: port 1(erspan0) entered blocking state [ 347.034797][T10981] bridge4: port 1(erspan0) entered forwarding state [ 347.141194][T10983] netlink: 550 bytes leftover after parsing attributes in process `syz.3.1869'. [ 347.500578][T10991] syzkaller0: entered promiscuous mode [ 347.506495][T10991] syzkaller0: entered allmulticast mode [ 348.825138][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 350.204580][T11010] netlink: 'syz.4.1878': attribute type 1 has an invalid length. [ 350.213827][T10985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.422414][T11010] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.744035][T11013] bond4: (slave ip6gretap1): making interface the new active one [ 350.936270][T11013] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 352.376283][T11042] syzkaller0: entered promiscuous mode [ 352.406951][T11042] syzkaller0: entered allmulticast mode [ 357.499273][T11083] syzkaller0: entered promiscuous mode [ 357.518429][T11083] syzkaller0: entered allmulticast mode [ 357.770637][T11088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.229911][T11094] netlink: 'syz.3.1899': attribute type 1 has an invalid length. [ 358.339369][T11095] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 358.374116][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 358.416403][T11094] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 358.448320][T11094] bond7 (unregistering): Released all slaves [ 359.546097][T11101] syzkaller0: entered promiscuous mode [ 359.551684][T11101] syzkaller0: entered allmulticast mode [ 359.569867][T11101] TC_ACT_REPEAT abuse ? [ 360.550545][T11109] syzkaller0: entered promiscuous mode [ 360.589554][T11109] syzkaller0: entered allmulticast mode [ 361.657256][T11142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'. [ 361.800778][T11147] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 361.876604][ T5642] block nbd1: Receive control failed (result -1) [ 361.888692][ T5642] [ 361.891079][ T5642] ====================================================== [ 361.898123][ T5642] WARNING: possible circular locking dependency detected [ 361.905171][ T5642] syzkaller #0 Not tainted [ 361.909608][ T5642] ------------------------------------------------------ [ 361.916648][ T5642] kworker/u9:7/5642 is trying to acquire lock: [ 361.922820][ T5642] ffff888032c760e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 361.932464][ T5642] [ 361.932464][ T5642] but task is already holding lock: [ 361.939853][ T5642] ffff88807e6f8e68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 361.948916][ T5642] [ 361.948916][ T5642] which lock already depends on the new lock. [ 361.948916][ T5642] [ 361.959350][ T5642] [ 361.959350][ T5642] the existing dependency chain (in reverse order) is: [ 361.968411][ T5642] [ 361.968411][ T5642] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 361.976213][ T5642] __mutex_lock+0x19d/0x1550 [ 361.981477][ T5642] nbd_queue_rq+0x373/0x1150 [ 361.986633][ T5642] blk_mq_dispatch_rq_list+0x499/0x1990 [ 361.992859][ T5642] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 361.999785][ T5642] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 362.006317][ T5642] blk_mq_run_work_fn+0x16c/0x300 [ 362.011899][ T5642] process_scheduled_works+0xa8e/0x14e0 [ 362.018057][ T5642] worker_thread+0xa47/0xfb0 [ 362.023200][ T5642] kthread+0x388/0x470 [ 362.027815][ T5642] ret_from_fork+0x514/0xb70 [ 362.032988][ T5642] ret_from_fork_asm+0x1a/0x30 [ 362.038322][ T5642] [ 362.038322][ T5642] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 362.045566][ T5642] __mutex_lock+0x19d/0x1550 [ 362.050701][ T5642] nbd_queue_rq+0xc1/0x1150 [ 362.055752][ T5642] blk_mq_dispatch_rq_list+0x499/0x1990 [ 362.061938][ T5642] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 362.068813][ T5642] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 362.075337][ T5642] blk_mq_run_work_fn+0x16c/0x300 [ 362.080918][ T5642] process_scheduled_works+0xa8e/0x14e0 [ 362.087016][ T5642] worker_thread+0xa47/0xfb0 [ 362.092166][ T5642] kthread+0x388/0x470 [ 362.096785][ T5642] ret_from_fork+0x514/0xb70 [ 362.101921][ T5642] ret_from_fork_asm+0x1a/0x30 [ 362.107233][ T5642] [ 362.107233][ T5642] -> #4 (set->srcu){.+.+}-{0:0}: [ 362.114410][ T5642] __synchronize_srcu+0xc9/0x2f0 [ 362.119940][ T5642] elevator_switch+0x1e8/0x7b0 [ 362.125332][ T5642] elevator_change+0x2fa/0x480 [ 362.130649][ T5642] elevator_set_default+0x375/0x440 [ 362.136402][ T5642] blk_register_queue+0x3f3/0x4e0 [ 362.142050][ T5642] __add_disk+0x6cb/0xe30 [ 362.146966][ T5642] add_disk_fwnode+0xfb/0x4b0 [ 362.152191][ T5642] nbd_dev_add+0x733/0xb60 [ 362.157164][ T5642] nbd_init+0x15f/0x1e0 [ 362.161998][ T5642] do_one_initcall+0x250/0x870 [ 362.167307][ T5642] do_initcall_level+0x10a/0x1a0 [ 362.172879][ T5642] do_initcalls+0x59/0xa0 [ 362.177760][ T5642] kernel_init_freeable+0x29d/0x3e0 [ 362.183518][ T5642] kernel_init+0x1d/0x1d0 [ 362.188461][ T5642] ret_from_fork+0x514/0xb70 [ 362.193601][ T5642] ret_from_fork_asm+0x1a/0x30 [ 362.198919][ T5642] [ 362.198919][ T5642] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 362.206770][ T5642] __mutex_lock+0x19d/0x1550 [ 362.211908][ T5642] elevator_change+0x1af/0x480 [ 362.217225][ T5642] elevator_set_none+0xb5/0x140 [ 362.222628][ T5642] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 362.228985][ T5642] nbd_start_device+0x189/0xb30 [ 362.234381][ T5642] nbd_genl_connect+0x1597/0x1c10 [ 362.239948][ T5642] genl_family_rcv_msg_doit+0x233/0x340 [ 362.246149][ T5642] genl_rcv_msg+0x614/0x7a0 [ 362.251205][ T5642] netlink_rcv_skb+0x226/0x4a0 [ 362.256519][ T5642] genl_rcv+0x28/0x40 [ 362.261048][ T5642] netlink_unicast+0x7bb/0x940 [ 362.266359][ T5642] netlink_sendmsg+0x813/0xb40 [ 362.271686][ T5642] sock_sendmsg_nosec+0x13a/0x180 [ 362.277409][ T5642] ____sys_sendmsg+0x54e/0x850 [ 362.282740][ T5642] ___sys_sendmsg+0x2a5/0x360 [ 362.287970][ T5642] __x64_sys_sendmsg+0x1b1/0x290 [ 362.293456][ T5642] do_syscall_64+0x174/0x580 [ 362.298656][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.305136][ T5642] [ 362.305136][ T5642] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 362.313786][ T5642] blk_alloc_queue+0x544/0x690 [ 362.319103][ T5642] __blk_mq_alloc_disk+0x194/0x390 [ 362.324763][ T5642] nbd_dev_add+0x494/0xb60 [ 362.329726][ T5642] nbd_init+0x15f/0x1e0 [ 362.334435][ T5642] do_one_initcall+0x250/0x870 [ 362.339766][ T5642] do_initcall_level+0x10a/0x1a0 [ 362.345267][ T5642] do_initcalls+0x59/0xa0 [ 362.350154][ T5642] kernel_init_freeable+0x29d/0x3e0 [ 362.355912][ T5642] kernel_init+0x1d/0x1d0 [ 362.360791][ T5642] ret_from_fork+0x514/0xb70 [ 362.365926][ T5642] ret_from_fork_asm+0x1a/0x30 [ 362.371237][ T5642] [ 362.371237][ T5642] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 362.378489][ T5642] fs_reclaim_acquire+0x71/0x100 [ 362.384038][ T5642] __kmalloc_noprof+0xbc/0x720 [ 362.389363][ T5642] tls_sw_sendmsg+0x599/0x2860 [ 362.394778][ T5642] sock_sendmsg_nosec+0x90/0x180 [ 362.400265][ T5642] sock_sendmsg+0x1ca/0x2d0 [ 362.405318][ T5642] splice_to_socket+0xb5e/0x12a0 [ 362.410831][ T5642] direct_splice_actor+0x101/0x160 [ 362.416491][ T5642] splice_direct_to_actor+0x57b/0xcb0 [ 362.422411][ T5642] do_splice_direct+0x195/0x290 [ 362.427807][ T5642] do_sendfile+0x52e/0x7c0 [ 362.432803][ T5642] __se_sys_sendfile64+0x144/0x1a0 [ 362.438468][ T5642] do_syscall_64+0x174/0x580 [ 362.443602][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.450035][ T5642] [ 362.450035][ T5642] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 362.458151][ T5642] __lock_acquire+0x1520/0x2cf0 [ 362.463620][ T5642] lock_acquire+0x106/0x350 [ 362.468667][ T5642] lock_sock_nested+0x41/0x100 [ 362.474041][ T5642] inet_shutdown+0x6a/0x390 [ 362.479103][ T5642] nbd_mark_nsock_dead+0x2cb/0x550 [ 362.484760][ T5642] recv_work+0x1cee/0x1e10 [ 362.489730][ T5642] process_scheduled_works+0xa8e/0x14e0 [ 362.495826][ T5642] worker_thread+0xa47/0xfb0 [ 362.500971][ T5642] kthread+0x388/0x470 [ 362.505583][ T5642] ret_from_fork+0x514/0xb70 [ 362.510752][ T5642] ret_from_fork_asm+0x1a/0x30 [ 362.516065][ T5642] [ 362.516065][ T5642] other info that might help us debug this: [ 362.516065][ T5642] [ 362.526307][ T5642] Chain exists of: [ 362.526307][ T5642] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 362.526307][ T5642] [ 362.539378][ T5642] Possible unsafe locking scenario: [ 362.539378][ T5642] [ 362.546844][ T5642] CPU0 CPU1 [ 362.552233][ T5642] ---- ---- [ 362.557612][ T5642] lock(&nsock->tx_lock); [ 362.562057][ T5642] lock(&cmd->lock); [ 362.568666][ T5642] lock(&nsock->tx_lock); [ 362.575626][ T5642] lock(sk_lock-AF_INET6-NBD); [ 362.580501][ T5642] [ 362.580501][ T5642] *** DEADLOCK *** [ 362.580501][ T5642] [ 362.588666][ T5642] 3 locks held by kworker/u9:7/5642: [ 362.593986][ T5642] #0: ffff8880275d5940 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 362.605266][ T5642] #1: ffffc900044afc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 362.617056][ T5642] #2: ffff88807e6f8e68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 362.626414][ T5642] [ 362.626414][ T5642] stack backtrace: [ 362.632324][ T5642] CPU: 0 UID: 0 PID: 5642 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 362.632349][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.632363][ T5642] Workqueue: nbd1-recv recv_work [ 362.632390][ T5642] Call Trace: [ 362.632397][ T5642] [ 362.632406][ T5642] dump_stack_lvl+0xe8/0x150 [ 362.632430][ T5642] print_circular_bug+0x2e1/0x300 [ 362.632457][ T5642] check_noncircular+0x12e/0x150 [ 362.632484][ T5642] __lock_acquire+0x1520/0x2cf0 [ 362.632511][ T5642] ? irqentry_exit+0x218/0x8f0 [ 362.632530][ T5642] ? lockdep_hardirqs_on+0x7a/0x110 [ 362.632560][ T5642] ? inet_shutdown+0x6a/0x390 [ 362.632587][ T5642] lock_acquire+0x106/0x350 [ 362.632605][ T5642] ? inet_shutdown+0x6a/0x390 [ 362.632638][ T5642] lock_sock_nested+0x41/0x100 [ 362.632665][ T5642] ? inet_shutdown+0x6a/0x390 [ 362.632693][ T5642] inet_shutdown+0x6a/0x390 [ 362.632722][ T5642] nbd_mark_nsock_dead+0x2cb/0x550 [ 362.632746][ T5642] recv_work+0x1cee/0x1e10 [ 362.632775][ T5642] ? lockdep_unlock+0x5d/0xd0 [ 362.632791][ T5642] ? __lock_acquire+0x13e8/0x2cf0 [ 362.632814][ T5642] ? __pfx_recv_work+0x10/0x10 [ 362.632839][ T5642] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 362.632866][ T5642] ? process_scheduled_works+0xa20/0x14e0 [ 362.632907][ T5642] ? rcu_is_watching+0x15/0xb0 [ 362.632930][ T5642] ? process_scheduled_works+0xa20/0x14e0 [ 362.632956][ T5642] process_scheduled_works+0xa8e/0x14e0 [ 362.632994][ T5642] ? __pfx_process_scheduled_works+0x10/0x10 [ 362.633023][ T5642] ? assign_work+0x3cf/0x5d0 [ 362.633050][ T5642] worker_thread+0xa47/0xfb0 [ 362.633088][ T5642] kthread+0x388/0x470 [ 362.633108][ T5642] ? __pfx_worker_thread+0x10/0x10 [ 362.633134][ T5642] ? __pfx_kthread+0x10/0x10 [ 362.633154][ T5642] ret_from_fork+0x514/0xb70 [ 362.633177][ T5642] ? __pfx_ret_from_fork+0x10/0x10 [ 362.633197][ T5642] ? __switch_to+0xc89/0x1420 [ 362.633226][ T5642] ? __pfx_kthread+0x10/0x10 [ 362.633246][ T5642] ret_from_fork_asm+0x1a/0x30 [ 362.633276][ T5642]