last executing test programs: 15.216701612s ago: executing program 4 (id=146): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) unshare(0x8000000) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000f40)="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", 0x94a}, {&(0x7f0000000080)}], 0x2, 0xe) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, 0x0, 0x24001850) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0) 11.346703094s ago: executing program 4 (id=165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffd, 0x2, 0xfff, 0x2, 0x8, 0x3, 0x1, 0x3, 0x7ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x41}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x8005) 10.837377294s ago: executing program 4 (id=169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x800000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0xb, 0xf, 0x0, 0xd6f, 0x9}, [@TCA_NETEM_RATE={0x14, 0x6, {0x800, 0x80000001, 0x9, 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x200}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_generic(0x10, 0x3, 0x10) 10.609334639s ago: executing program 2 (id=172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 8.531931359s ago: executing program 4 (id=177): r0 = socket$inet_sctp(0x2, 0xf, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x1}, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000220000000000000080000006b1189000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x6a040000) write$tun(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockname$packet(r2, &(0x7f0000000440), &(0x7f0000000480)=0x14) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblc\x00', 0x35, 0xffffffff, 0x78}, {@remote, 0x4e25, 0x2, 0xcd, 0x40}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.854902173s ago: executing program 2 (id=180): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 5.409365098s ago: executing program 2 (id=187): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x810) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 4.360277347s ago: executing program 3 (id=189): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x4) pipe(&(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.145427237s ago: executing program 3 (id=190): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000810) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r1, 0x100000000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20001) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 4.129283622s ago: executing program 1 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0xda74, 0x7, 0x6, {0x10, 0x2, 0x0, 0xfff9, 0x3}, {0x6, 0x0, 0x8, 0x0, 0x7, 0x8}, 0x3, 0x1, 0x101}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4012}], 0x2}, 0x5) 3.471712318s ago: executing program 1 (id=193): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r5, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r5, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000001380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001400)=""/170}, {&(0x7f00000014c0)=""/186}, {&(0x7f0000001580)=""/162}, {&(0x7f0000001640)=""/200}, {&(0x7f0000001740)=""/208}, {&(0x7f0000001840)=""/206}, {&(0x7f0000001940)=""/211}, {&(0x7f0000001a40)=""/170}]}, 0x7f}, {{&(0x7f0000001b80), 0x0, &(0x7f0000004300)=[{&(0x7f0000001c00)=""/2}, {&(0x7f0000001c40)=""/195}, {&(0x7f0000001d40)=""/208}, {&(0x7f0000001e40)=""/100}, {&(0x7f0000001ec0)=""/4096}, {&(0x7f0000002ec0)=""/201}, {&(0x7f0000002fc0)=""/164}, {&(0x7f0000003080)=""/252}, {&(0x7f0000003180)=""/32}, {&(0x7f0000003300)=""/4096}], 0x0, &(0x7f00000043c0)=""/69}, 0x2}], 0x400000000000262, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x64, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0xfff3, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={0x0, r0, 0x4000, r0}, 0x18) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080)=0x14080, 0x4) 3.284943788s ago: executing program 0 (id=194): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x9, 0xf, 0x5b}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000940)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x0, 0x0, 0x268, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x1, 0x3, 0x7}, {0x0, 0x2, 0xd731213761a618e8}, 0x1000, 0x1}}}, {{@ipv6={@empty, @remote, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xff000000, 0xffff00], 'ip6gretap0\x00', 'nr0\x00', {}, {}, 0xc, 0x4, 0x6, 0x42}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x9, 0x5, 'bm\x00', "76a01a72e2613d0ee7ad7787fbb26e355194a7c263855d04659da0c71ffbf48415323371efbbe1a65823dca1915d6bc74879df977f0e6c9a0283533253ed194ef4d374f877fc5cf3d4854a1c47c1f6062635188ac84a374ba0bf4bc3a883228e6ecec1abb50879d13791571ddaef2c29d5cb5db45b69a551b210b57f1d445976", 0xf, 0x1, {0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xfc}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x620}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x1, 0x2f}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xd2, 0xf8}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0xfc}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x3}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x4}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x4}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x41005}, 0x1) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000080)="bddbceb17fc3303211", 0x9}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmmsg$inet6(r3, &(0x7f00000034c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x4d7, @dev={0xfe, 0x80, '\x00', 0x47}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000000c0)="7f", 0x1}], 0x1}}], 0x1, 0x4c040) 3.225474607s ago: executing program 4 (id=195): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0xc}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 3.157186048s ago: executing program 3 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.874476399s ago: executing program 0 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x92, 0xd, 0x11f4, 0xf, 0x101, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0x3597, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x1, 0x4050732b, 0x8, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0x4, 0xbf2, 0x10001, 0xfffffffd, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0x80, 0x7a, 0x20000001, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x2, 0x4, 0xc31, 0x80000008, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x6, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x8, 0x6, 0x4, 0x1, 0x3, 0xb9, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0xc, 0x5, 0x89, 0x8, 0x100e, 0x528, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x9, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0x11, 0x1, 0x6, 0xe, 0x2, 0x4, 0x3, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x400006, 0x6, 0x0, 0x6b7, 0x2, 0xedd9, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x200034, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0xffff, 0x5ca0, 0x3, 0x1000, 0x4, 0x7, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0xfe800000, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x4, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x1, 0xffffffff, 0x8001, 0x0, 0x9, 0xd, 0x1, 0x9, 0x5, 0xc, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x17, 0x2, 0xcb, 0x1, 0x800, 0x8002}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x40000000, 0x6, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x802, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x4, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0xb, 0xce3a, 0x21f1, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xffff0fc4, 0xc, 0x6, 0x2, 0x0, 0x6, 0x1, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0xc24, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x1, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0x1bbf, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7ba, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x8, 0x3, 0x7, 0x9, 0x0, 0xfffffff7, 0x0, 0x6, 0x80000000, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdff, 0x7, 0x9, 0x223ec3e9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0xffff, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x81, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0xffffffff, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd7a, 0xfb, 0x8, 0x5, 0x0, 0x0, 0x12, 0x4e, 0xf, 0xbb4f, 0x7, 0xe4, 0xbcbd, 0x80, 0x8, 0xc6, 0x0, 0x81, 0x10000, 0x70, 0xffffffff, 0x4, 0x80, 0x8, 0xe2, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x6ab0, 0x401, 0x40000007, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x4000003e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="19", 0x1}], 0x1}, 0x4) 2.588477077s ago: executing program 1 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 2.530170066s ago: executing program 3 (id=199): accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xfffffffe, @hyper}, 0x10, 0x80000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0x140}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43", 0xc}], 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000b, 0x0, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) 2.416216578s ago: executing program 0 (id=200): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x8c, 0x39, 0x1, 0x7fffa, 0x25dfdbff, {0xa}, [@generic="ed7aca3d0faabe8cefe0f34866f1138a0386bb3e2c11b375f64de5c7040f8df771f8069621883b7820ac2556d7169dab9df0a457bf45d75a95106a40693f97f06b3eea2c0695e947bee07e11950fc693f0489f67ae650868594e43337c0eeae73f23679da51afa27a8435ece3168eaf5506c748659915097"]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007808000640"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x14}, @in=@rand_addr=0x64010100, 0x4e20, 0x8000, 0x4e21, 0x7, 0xa, 0x80, 0x20, 0x33}, {0x4, 0x6, 0xfffffffffffffba5, 0x9, 0x8d, 0x1, 0x8001, 0x6}, {0x5, 0x9, 0x5, 0x10001}, 0x9, 0x6e6bb8, 0x0, 0x1, 0x1, 0x2}, {{@in6=@loopback, 0x4d6, 0x2b}, 0xa, @in=@private=0xa010102, 0x3500, 0x3, 0x0, 0x6, 0x7, 0x7, 0xb}}, 0xe8) r6 = socket(0x10, 0x803, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}}, 0x4008040) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) close(0x4) 2.324420929s ago: executing program 2 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) socket$kcm(0x11, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.198608106s ago: executing program 1 (id=202): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe62077891e54f027}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x4, 0x6b08, 0x7}}]}]}}}]}, 0x88}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.453959826s ago: executing program 0 (id=203): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.36744077s ago: executing program 0 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x2d, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, 0x0, 0x8000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xffff, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 571.589753ms ago: executing program 1 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000300)=""/44, 0x0, 0x2c, 0x1, 0x1000}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040041}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20040084) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 502.774322ms ago: executing program 3 (id=206): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, 0x0, 0xc040041) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000004c0)={r1, &(0x7f0000000340)='bridge0\x00', 0x402, &(0x7f0000000380)={@align=0x8, {0x99d0, 0x1, 0x9, 0x3cb}}, 0xfff, &(0x7f0000000440), &(0x7f0000000480)=0x6f12}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x7, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x68}}, 0x0) epoll_create1(0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close(0x3) write(r0, &(0x7f0000000140)="2e000312ab2ac6cc38f5f11407ee7e84f3b0c8dbeb07d6e20d10ebccb13e2d21a96c22da87d4a3ffdb6ec3f815630c27a9a2b80e9331233f20266642a2cda273b4fcd301c46c222674bea3fb7d1c15e65bfff67ebe2db13af05c283a66885ed7d08c7515b7e4b82df8d20f9e039e52c61d6edd2d626aec7d1934b4c90b92b250dd908fc2f30eae0e4082c056", 0x8c) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0xed}}) 429.649614ms ago: executing program 2 (id=207): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca", 0x24}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) 276.440986ms ago: executing program 2 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x31, @local, 0x7}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000000)=0x13, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x268, r7, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fff, 0x7a}}}}, [@NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "b15eaa15f2a9e13cc325a2b3ad5b578bead6aa798ba4373485b5bb8f5bf8c5c08c777ab3ed9c7a7c5643e1f339287408cfb0b0ca1b89e6e7c8038a014bf3c31608266c6fd2261491abe38237c266994729dc63634ad68289b4eb6d79239948af83c999955f1b31eb5240fc41a491f149b0925a7806fedfd4ec6fa27507418037e9973481a4fe675bac3d"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xbb, 0x5b, "ad7caf83df44e367311e19b028d9bd102f8fb4eb0585eecbc8eda4fec7dc7de83dfeb55441d04e4fb17db1881038b7cb41559bd1dd4e652fe8892689a29bce1a64f760cd736815a631280d516b9b253e7a53b673e2cb0e5e671bb10f2ce2298ebff83b9a9b601ce44f41c0a6c76ed7255377b49b1351f220a60c8d5bdf4174cfa9a5e92157d21248fad0d7b8d3ecea9d9b908b5e7bb02c49ccd5aa8c9b57935eddf4089a92a36d205438adbe9fe9b3560af5a3ea58f043"}, @NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "cc3f39e32ad12beaabb3b4962a3349104ffefe5ba07f555d7caaa906ab39d4bee4"}, @NL80211_ATTR_FRAME_MATCH={0x65, 0x5b, "fc72f09e543786b8f9395320fd02f363184bde19f0d4f301cc019254aef41fe416960af58763bfb0e4f8e354e0102bde62da5c37c5d88e8ff85508c173c2ccf7ac22c3ad133287e14c218d6dd95daf5073d2b74aac88043333a1476620db5fa339"}, @NL80211_ATTR_FRAME_MATCH={0x4b, 0x5b, "5d6cfd9e84261b16e69424c06f190ba3e9b36ecf095f70616e43f222f90a9cc779b2493cf9d1b3c08c9c3fd4aedd8e9495acad82b249c5767b9fa02a4ace025fc08fd02908f4c3"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x268}, 0x1, 0x0, 0x0, 0x44081}, 0x10040000) select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 269.107683ms ago: executing program 0 (id=209): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010001", 0x7) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getpeername$tipc(r2, &(0x7f0000000280)=@id, &(0x7f0000000300)=0x10) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32, @ANYBLOB="c300050000000000300012800b000100697036746e6c0000200002800500090004000000140003000000000000000000000000ff"], 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 171.53838ms ago: executing program 4 (id=210): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000480)={0x0, 0x0, 0x7, 0x2b, @vifc_lcl_addr=@local, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000008c0), 0x0) sendfile(r0, r3, 0x0, 0x20000000002) 136.230471ms ago: executing program 3 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000003c0)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 0s ago: executing program 1 (id=212): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x26020480) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0004060900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061786c6f6164000c00028008000240000000010800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070003000000000000000000080009000d000000", 0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b0f, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x81133573713dfe30}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) sendmsg$nl_route(r3, 0x0, 0x24004080) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001200576d10000000a1ffffff070009"], 0x20}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 62.407298][ T5613] cgroup: Unknown subsys name 'net' [ 62.516257][ T5613] cgroup: Unknown subsys name 'cpuset' [ 62.525566][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.890390][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.517490][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.527949][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.541386][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.546588][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.549415][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.556289][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.566245][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.578687][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.579857][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.589664][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.596555][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.602395][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.615162][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.615451][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.629918][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.630511][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.640206][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.646062][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.653760][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.667645][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.669275][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.684720][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.691103][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.720656][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.729209][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.284960][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.292523][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.299686][ T5626] bridge_slave_0: entered allmulticast mode [ 69.307281][ T5626] bridge_slave_0: entered promiscuous mode [ 69.335712][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.342915][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.350713][ T5626] bridge_slave_1: entered allmulticast mode [ 69.358074][ T5626] bridge_slave_1: entered promiscuous mode [ 69.458567][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.465888][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.473172][ T5637] bridge_slave_0: entered allmulticast mode [ 69.480240][ T5637] bridge_slave_0: entered promiscuous mode [ 69.498705][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.518474][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.525747][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.533901][ T5637] bridge_slave_1: entered allmulticast mode [ 69.540792][ T5637] bridge_slave_1: entered promiscuous mode [ 69.547889][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.555595][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.562805][ T5625] bridge_slave_0: entered allmulticast mode [ 69.569667][ T5625] bridge_slave_0: entered promiscuous mode [ 69.579428][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.612102][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.619205][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.626482][ T5625] bridge_slave_1: entered allmulticast mode [ 69.633625][ T5625] bridge_slave_1: entered promiscuous mode [ 69.712979][ T5635] Bluetooth: hci1: command tx timeout [ 69.719115][ T5643] Bluetooth: hci0: command tx timeout [ 69.721780][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.725456][ T5638] Bluetooth: hci4: command tx timeout [ 69.732526][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.745017][ T5636] bridge_slave_0: entered allmulticast mode [ 69.752523][ T5636] bridge_slave_0: entered promiscuous mode [ 69.762744][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.774311][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.784150][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.792021][ T5643] Bluetooth: hci3: command tx timeout [ 69.792928][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.798033][ T5638] Bluetooth: hci2: command tx timeout [ 69.805097][ T5634] bridge_slave_0: entered allmulticast mode [ 69.817092][ T5634] bridge_slave_0: entered promiscuous mode [ 69.826546][ T5626] team0: Port device team_slave_0 added [ 69.832574][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.839671][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.846977][ T5636] bridge_slave_1: entered allmulticast mode [ 69.854005][ T5636] bridge_slave_1: entered promiscuous mode [ 69.863252][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.874930][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.895217][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.902499][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.909753][ T5634] bridge_slave_1: entered allmulticast mode [ 69.916947][ T5634] bridge_slave_1: entered promiscuous mode [ 69.925372][ T5626] team0: Port device team_slave_1 added [ 69.995354][ T5625] team0: Port device team_slave_0 added [ 70.021265][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.032517][ T5637] team0: Port device team_slave_0 added [ 70.039736][ T5625] team0: Port device team_slave_1 added [ 70.059224][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.069223][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.076268][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.102353][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.116163][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.136782][ T5637] team0: Port device team_slave_1 added [ 70.154466][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.164158][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.171113][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.199392][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.235239][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.242309][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.268685][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.303874][ T5634] team0: Port device team_slave_0 added [ 70.311071][ T5636] team0: Port device team_slave_0 added [ 70.326219][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.333315][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.359351][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.379847][ T5634] team0: Port device team_slave_1 added [ 70.387326][ T5636] team0: Port device team_slave_1 added [ 70.393551][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.400478][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.426479][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.466210][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.473435][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.499467][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.558307][ T5626] hsr_slave_0: entered promiscuous mode [ 70.564725][ T5626] hsr_slave_1: entered promiscuous mode [ 70.571570][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.578745][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.604810][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.616666][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.623817][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.649820][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.676373][ T5625] hsr_slave_0: entered promiscuous mode [ 70.682986][ T5625] hsr_slave_1: entered promiscuous mode [ 70.689646][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 70.695714][ T5625] Cannot create hsr debugfs directory [ 70.702723][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.709685][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.735697][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.747394][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.754553][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.780952][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.841125][ T5637] hsr_slave_0: entered promiscuous mode [ 70.847411][ T5637] hsr_slave_1: entered promiscuous mode [ 70.853972][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 70.859715][ T5637] Cannot create hsr debugfs directory [ 70.967188][ T5634] hsr_slave_0: entered promiscuous mode [ 70.974084][ T5634] hsr_slave_1: entered promiscuous mode [ 70.980071][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 70.985859][ T5634] Cannot create hsr debugfs directory [ 71.035393][ T5636] hsr_slave_0: entered promiscuous mode [ 71.042505][ T5636] hsr_slave_1: entered promiscuous mode [ 71.048539][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 71.054379][ T5636] Cannot create hsr debugfs directory [ 71.235567][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.242381][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.467479][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.479938][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.488178][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.497968][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.507114][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.516317][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.532586][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.542494][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.606706][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.616463][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.624408][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.634972][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.651428][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.661461][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.678761][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.688880][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.756880][ T5637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.766273][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.781401][ T5637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.793488][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.802764][ T5637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.809497][ T5638] Bluetooth: hci4: command tx timeout [ 71.809562][ T5635] Bluetooth: hci1: command tx timeout [ 71.815823][ T5643] Bluetooth: hci0: command tx timeout [ 71.828818][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.837393][ T5637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.846799][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.872287][ T5635] Bluetooth: hci3: command tx timeout [ 71.878000][ T5643] Bluetooth: hci2: command tx timeout [ 71.946801][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.956475][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.964624][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.974720][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.983950][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.994280][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.002071][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.012565][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.099239][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.130733][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.140457][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.149296][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.158151][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.167685][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.176953][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.185522][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.195770][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.243819][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.287359][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.294826][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.324206][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.343101][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.353746][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.360926][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.415720][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.434838][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.445342][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.475094][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.482248][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.495617][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.502727][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.523853][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.532291][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.539413][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.560154][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.567259][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.603726][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.610829][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.637948][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.645080][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.709765][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.814967][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.845179][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.852379][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.931519][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.938714][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.659053][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.853677][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.873138][ T5643] Bluetooth: hci4: command tx timeout [ 73.878928][ T5635] Bluetooth: hci0: command tx timeout [ 73.878951][ T5638] Bluetooth: hci1: command tx timeout [ 73.923838][ T5626] veth0_vlan: entered promiscuous mode [ 73.953649][ T5638] Bluetooth: hci2: command tx timeout [ 73.955349][ T5635] Bluetooth: hci3: command tx timeout [ 73.975023][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.989469][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.998455][ T5626] veth1_vlan: entered promiscuous mode [ 74.158101][ T5626] veth0_macvtap: entered promiscuous mode [ 74.170711][ T5625] veth0_vlan: entered promiscuous mode [ 74.186500][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.197861][ T5636] veth0_vlan: entered promiscuous mode [ 74.209768][ T5626] veth1_macvtap: entered promiscuous mode [ 74.251444][ T5625] veth1_vlan: entered promiscuous mode [ 74.269849][ T5636] veth1_vlan: entered promiscuous mode [ 74.320884][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.358521][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.394654][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.404557][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.416310][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.429126][ T5634] veth0_vlan: entered promiscuous mode [ 74.444139][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.489386][ T5634] veth1_vlan: entered promiscuous mode [ 74.502428][ T5625] veth0_macvtap: entered promiscuous mode [ 74.529126][ T5636] veth0_macvtap: entered promiscuous mode [ 74.544789][ T5625] veth1_macvtap: entered promiscuous mode [ 74.557179][ T5637] veth0_vlan: entered promiscuous mode [ 74.572442][ T5636] veth1_macvtap: entered promiscuous mode [ 74.625741][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.637493][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.660254][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.669494][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.679352][ T5637] veth1_vlan: entered promiscuous mode [ 74.707328][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716445][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.735329][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.737992][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.744449][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.756593][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.785262][ T5634] veth0_macvtap: entered promiscuous mode [ 74.799637][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.809209][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.824756][ T5634] veth1_macvtap: entered promiscuous mode [ 74.835019][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.850797][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.900088][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.908451][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.009587][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.025718][ T5626] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.028685][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.064033][ T5637] veth0_macvtap: entered promiscuous mode [ 75.075880][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.077641][ T5637] veth1_macvtap: entered promiscuous mode [ 75.089832][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.131025][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.141044][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.154943][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.162638][ T1012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.193969][ T1029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.238556][ T1029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.285469][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.295510][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.304516][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.343596][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.410776][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.425287][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.436791][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.459620][ T5826] netlink: 'syz.0.6': attribute type 7 has an invalid length. [ 75.476176][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.600150][ T1029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.661711][ T1029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.708574][ T1029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.734313][ T1029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.787221][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.808473][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.894998][ T5831] syzkaller0: entered promiscuous mode [ 75.905824][ T5831] syzkaller0: entered allmulticast mode [ 75.912771][ T5839] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 75.926961][ T5837] veth1_macvtap: left promiscuous mode [ 75.933121][ T5837] macsec0: entered promiscuous mode [ 75.952676][ T5635] Bluetooth: hci0: command tx timeout [ 75.953463][ T5638] Bluetooth: hci4: command tx timeout [ 75.958136][ T5643] Bluetooth: hci1: command tx timeout [ 76.031813][ T5643] Bluetooth: hci3: command tx timeout [ 76.037273][ T5635] Bluetooth: hci2: command tx timeout [ 76.857891][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.893142][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.006390][ T3306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.066395][ T3306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.230687][ T5850] syzkaller0: entered promiscuous mode [ 77.254114][ T5850] syzkaller0: entered allmulticast mode [ 77.859086][ T5875] Zero length message leads to an empty skb [ 78.387752][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 79.013516][ T5905] syzkaller0: entered promiscuous mode [ 79.018999][ T5905] syzkaller0: entered allmulticast mode [ 79.498934][ T5929] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 80.615619][ T5944] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 80.661962][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 80.739573][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 80.958240][ T5950] syzkaller0: entered promiscuous mode [ 80.964944][ T5950] syzkaller0: entered allmulticast mode [ 81.495808][ T24] cfg80211: failed to load regulatory.db [ 81.912633][ T5914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.189545][ T5758] IPVS: starting estimator thread 0... [ 82.282875][ T5987] IPVS: using max 55 ests per chain, 132000 per kthread [ 82.404790][ T5981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34'. [ 82.635425][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 82.748459][ T6003] Bluetooth: MGMT ver 1.23 [ 82.758022][ T5999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.40'. [ 82.834755][ T5996] bridge1: entered allmulticast mode [ 82.897305][ T5995] syzkaller0: entered promiscuous mode [ 82.903526][ T5995] syzkaller0: entered allmulticast mode [ 83.004873][ T6010] netlink: 44 bytes leftover after parsing attributes in process `syz.3.42'. [ 84.150686][ T6016] xt_hashlimit: size too large, truncated to 1048576 [ 84.220329][ T6019] bridge_slave_0: left allmulticast mode [ 84.261001][ T6024] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 84.264284][ T6019] bridge_slave_0: left promiscuous mode [ 84.307180][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.320743][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'. [ 84.348448][ T6019] bridge_slave_1: left allmulticast mode [ 84.366377][ T6019] bridge_slave_1: left promiscuous mode [ 84.379141][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.463164][ T6019] bond0: (slave bond_slave_0): Releasing backup interface [ 84.508753][ T6019] bond0: (slave bond_slave_1): Releasing backup interface [ 84.547264][ T6019] team0: Port device team_slave_0 removed [ 84.568264][ T6019] team0: Port device team_slave_1 removed [ 84.583429][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.598180][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.610951][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.620532][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.632788][ T6019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.666634][ T6025] ip6gre1: entered allmulticast mode [ 84.681081][ T6025] team0: Port device ip6gre1 added [ 84.790759][ T6036] macvlan2: entered promiscuous mode [ 84.796450][ T6036] macvlan2: entered allmulticast mode [ 84.815244][ T6042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.834347][ T5635] Bluetooth: hci2: command 0x0401 tx timeout [ 84.837071][ T6028] syzkaller1: entered promiscuous mode [ 84.841065][ T5643] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 84.852362][ T6028] syzkaller1: entered allmulticast mode [ 85.059592][ T6046] syz.1.51: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 85.091785][ T6046] CPU: 0 UID: 0 PID: 6046 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(full) [ 85.091813][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.091832][ T6046] Call Trace: [ 85.091843][ T6046] [ 85.091850][ T6046] dump_stack_lvl+0xe8/0x150 [ 85.091888][ T6046] warn_alloc+0x249/0x340 [ 85.091924][ T6046] ? __pfx_warn_alloc+0x10/0x10 [ 85.091958][ T6046] ? kasan_save_track+0x4f/0x80 [ 85.091980][ T6046] ? kasan_save_track+0x3e/0x80 [ 85.092002][ T6046] ? __kasan_kmalloc+0x93/0xb0 [ 85.092026][ T6046] ? __kmalloc_cache_noprof+0x31c/0x660 [ 85.092052][ T6046] ? xskq_create+0x56/0x170 [ 85.092078][ T6046] ? xsk_setsockopt+0x54c/0x990 [ 85.092102][ T6046] ? do_sock_setsockopt+0x17c/0x1b0 [ 85.092129][ T6046] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 85.092156][ T6046] ? do_syscall_64+0x15f/0xf80 [ 85.092178][ T6046] __vmalloc_node_range_noprof+0x132/0x1750 [ 85.092238][ T6046] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.092272][ T6046] ? __kasan_kmalloc+0x93/0xb0 [ 85.092306][ T6046] vmalloc_user_noprof+0xad/0xe0 [ 85.092332][ T6046] ? xskq_create+0xbf/0x170 [ 85.092360][ T6046] xskq_create+0xbf/0x170 [ 85.092390][ T6046] xsk_init_queue+0x8a/0xe0 [ 85.092419][ T6046] xsk_setsockopt+0x54c/0x990 [ 85.092447][ T6046] ? __pfx_xsk_setsockopt+0x10/0x10 [ 85.092472][ T6046] ? __pfx_aa_sk_perm+0x10/0x10 [ 85.092502][ T6046] ? aa_sock_opt_perm+0xff/0x1a0 [ 85.092531][ T6046] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 85.092557][ T6046] ? __pfx_xsk_setsockopt+0x10/0x10 [ 85.092591][ T6046] do_sock_setsockopt+0x17c/0x1b0 [ 85.092625][ T6046] __x64_sys_setsockopt+0x13d/0x1b0 [ 85.092656][ T6046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.092678][ T6046] do_syscall_64+0x15f/0xf80 [ 85.092696][ T6046] ? trace_irq_disable+0x3b/0x140 [ 85.092726][ T6046] ? clear_bhb_loop+0x40/0x90 [ 85.092751][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.092770][ T6046] RIP: 0033:0x7eff2019ce59 [ 85.092800][ T6046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.092820][ T6046] RSP: 002b:00007eff1e3ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 85.092841][ T6046] RAX: ffffffffffffffda RBX: 00007eff20415fa0 RCX: 00007eff2019ce59 [ 85.092856][ T6046] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 85.092869][ T6046] RBP: 00007eff20232d6f R08: 0000000000000004 R09: 0000000000000000 [ 85.092881][ T6046] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.092894][ T6046] R13: 00007eff20416038 R14: 00007eff20415fa0 R15: 00007fffee0580c8 [ 85.092927][ T6046] [ 85.092939][ T6046] Mem-Info: [ 85.317476][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.377239][ T6046] active_anon:5853 inactive_anon:0 isolated_anon:0 [ 85.377239][ T6046] active_file:2372 inactive_file:39947 isolated_file:0 [ 85.377239][ T6046] unevictable:1568 dirty:1686 writeback:0 [ 85.377239][ T6046] slab_reclaimable:9876 slab_unreclaimable:93062 [ 85.377239][ T6046] mapped:31158 shmem:2088 pagetables:1179 [ 85.377239][ T6046] sec_pagetables:0 bounce:0 [ 85.377239][ T6046] kernel_misc_reclaimable:0 [ 85.377239][ T6046] free:1333357 free_pcp:13541 free_cma:0 [ 85.423142][ T6046] Node 0 active_anon:23412kB inactive_anon:0kB active_file:9488kB inactive_file:159588kB unevictable:5136kB isolated(anon):0kB isolated(file):0kB mapped:125032kB dirty:6736kB writeback:0kB shmem:7316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12280kB pagetables:4616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 85.465662][ T6046] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 85.561719][ T6046] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.611629][ T6046] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 85.622860][ T6046] Node 0 DMA32 free:1369152kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29412kB inactive_anon:0kB active_file:9488kB inactive_file:159588kB unevictable:1836kB writepending:6736kB zspages:0kB present:3129332kB managed:2552532kB mlocked:300kB bounce:0kB free_pcp:51824kB local_pcp:25184kB free_cma:0kB [ 85.671100][ T6046] lowmem_reserve[]: 0 0 0 0 0 [ 85.676949][ T6046] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 85.724578][ T6046] lowmem_reserve[]: 0 0 0 0 0 [ 85.730092][ T6046] Node 1 Normal free:3947988kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.746565][ T6061] syzkaller0: entered promiscuous mode [ 85.763952][ T6046] lowmem_reserve[]: 0 0 0 0 0 [ 85.772586][ T6061] syzkaller0: entered allmulticast mode [ 85.803971][ T6046] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 85.828781][ T6046] Node 0 DMA32: 1668*4kB (UME) 716*8kB (UME) 121*16kB (UM) 25*32kB (UME) 12*64kB (UME) 6*128kB (UM) 6*256kB (UM) 5*512kB (UME) 4*1024kB (ME) 4*2048kB (ME) 326*4096kB (UM) = 1368352kB [ 85.965566][ T6046] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 85.977599][ T6046] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 11*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3947988kB [ 86.015280][ T6046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.037304][ T6046] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.059249][ T6046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.080043][ T6064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.56'. [ 86.118832][ T6046] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.130230][ T6064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.56'. [ 86.152490][ T6046] 43634 total pagecache pages [ 86.165951][ T6064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.56'. [ 86.180906][ T6046] 0 pages in swap cache [ 86.206987][ T6046] Free swap = 124996kB [ 86.223623][ T6046] Total swap = 124996kB [ 86.247406][ T6046] 2097051 pages RAM [ 86.261690][ T6046] 0 pages HighMem/MovableOnly [ 86.276498][ T6046] 427136 pages reserved [ 86.302017][ T6046] 0 pages cma reserved [ 86.398046][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.427829][ T6072] syzkaller0: entered promiscuous mode [ 86.484849][ T6072] syzkaller0: entered allmulticast mode [ 86.752291][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.59'. [ 86.887093][ T6092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.896469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.908493][ T6084] syzkaller0: entered promiscuous mode [ 86.948952][ T6084] syzkaller0: entered allmulticast mode [ 87.254010][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.262273][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.518148][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.056082][ T6108] netlink: 76 bytes leftover after parsing attributes in process `syz.1.68'. [ 88.128977][ T6108] syzkaller0: entered promiscuous mode [ 88.134715][ T6108] syzkaller0: entered allmulticast mode [ 88.225782][ T6109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.385121][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 88.483506][ T6117] netlink: 'syz.4.72': attribute type 7 has an invalid length. [ 88.593809][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.720229][ T6122] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 89.155741][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.202618][ T6127] macvlan2: entered promiscuous mode [ 89.208162][ T6127] macvlan2: entered allmulticast mode [ 89.313612][ T6118] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.521058][ T6118] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.734032][ T6118] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.802254][ T5758] net_ratelimit: 1 callbacks suppressed [ 89.802272][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.817059][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.840260][ T6056] Set syz1 is full, maxelem 65536 reached [ 89.859921][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 89.894106][ T6138] ipvlan0: entered promiscuous mode [ 89.916682][ T6138] ipvlan0: entered allmulticast mode [ 89.943507][ T6138] veth0_vlan: entered allmulticast mode [ 90.018292][ T6118] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.215895][ T1029] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.313735][ T97] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.370054][ T3314] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.417714][ T3314] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.476917][ T6136] infiniband syz0: set active [ 90.488651][ T6136] infiniband syz0: added bridge_slave_1 [ 90.512394][ T6136] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 90.516253][ T6136] infiniband syz0: Couldn't open port 1 [ 90.533892][ T6154] netlink: 76 bytes leftover after parsing attributes in process `syz.2.81'. [ 90.560066][ T6136] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 90.580975][ T6154] tc action pedit 'at' offset 6 out of bounds [ 90.589556][ T6136] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 90.608420][ T6136] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 90.612557][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 90.675189][ T6157] vlan0: entered promiscuous mode [ 90.680724][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.691397][ T6157] batadv0: entered promiscuous mode [ 90.739389][ T6136] RDS/IB: syz0: added [ 90.746310][ T6136] smc: adding ib device syz0 with port count 1 [ 90.757436][ T6136] smc: ib device syz0 port 1 has no pnetid [ 90.809903][ T6159] syzkaller0: entered promiscuous mode [ 90.819849][ T6159] syzkaller0: entered allmulticast mode [ 91.083683][ T6167] ip6t_srh: unknown srh match flags 4000 [ 91.107410][ T6168] syzkaller0: entered promiscuous mode [ 91.113493][ T6168] syzkaller0: entered allmulticast mode [ 91.340364][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 91.717961][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.730778][ T6191] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 92.675997][ T6217] tipc: Failed to remove unknown binding: 66,0,0/0:1148971579/1148971581 [ 92.689397][ T6217] tipc: Failed to remove unknown binding: 66,0,0/0:1148971579/1148971580 [ 92.711368][ T6217] tipc: Failed to remove unknown binding: 66,0,0/0:1148971579/1148971581 [ 92.733986][ T6217] tipc: Failed to remove unknown binding: 66,0,0/0:1148971579/1148971580 [ 92.756040][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.835443][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.895929][ T6224] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.969432][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.0.95'. [ 93.384109][ T6242] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 93.489899][ T6235] netlink: 'syz.2.96': attribute type 3 has an invalid length. [ 93.504485][ T6235] netlink: 224 bytes leftover after parsing attributes in process `syz.2.96'. [ 93.635307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.438125][ T6251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.97'. [ 94.583667][ T6253] batadv_slave_0: entered promiscuous mode [ 94.633020][ T6255] syzkaller0: entered promiscuous mode [ 94.638677][ T6255] syzkaller0: entered allmulticast mode [ 94.773239][ T6252] batadv_slave_0: left promiscuous mode [ 94.833918][ T24] net_ratelimit: 2 callbacks suppressed [ 94.833935][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.891088][ T6260] tipc: Enabling of bearer rejected, failed to enable media [ 94.930099][ T6262] syzkaller0: entered promiscuous mode [ 94.935952][ T6262] syzkaller0: entered allmulticast mode [ 95.277431][ T6272] syzkaller0: entered promiscuous mode [ 95.293056][ T6272] syzkaller0: entered allmulticast mode [ 95.321107][ T6272] TC_ACT_REPEAT abuse ? [ 95.330611][ T6275] tc action pedit 'at' offset 9 out of bounds [ 95.337606][ T6275] tc action pedit 'at' offset 9 out of bounds [ 95.343766][ T6275] tc action pedit 'at' offset 9 out of bounds [ 95.349853][ T6275] tc action pedit 'at' offset 9 out of bounds [ 95.356039][ T6275] tc action pedit 'at' offset 9 out of bounds [ 95.362155][ T6275] tc action pedit 'at' offset 9 out of bounds [ 95.368248][ T6275] tc action pedit 'at' offset 9 out of bounds [ 95.374397][ T6275] tc action pedit 'at' offset 9 out of bounds [ 95.380480][ T6275] tc action pedit 'at' offset 9 out of bounds [ 95.386638][ T6275] TC_ACT_REPEAT abuse ? [ 95.557912][ T6278] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 95.687999][ T6283] netlink: 76 bytes leftover after parsing attributes in process `syz.0.106'. [ 95.708151][ T6283] syzkaller0: entered promiscuous mode [ 95.721849][ T6283] syzkaller0: entered allmulticast mode [ 95.750044][ T6283] tcf_pedit_act: 23 callbacks suppressed [ 95.750065][ T6283] tc action pedit 'at' offset -2147483647 out of bounds [ 95.763746][ T6283] tc action pedit 'at' offset -2147483647 out of bounds [ 95.770726][ T6283] tc action pedit 'at' offset -2147483647 out of bounds [ 95.777744][ T6283] tc action pedit 'at' offset -2147483647 out of bounds [ 95.784760][ T6283] tc action pedit 'at' offset -2147483647 out of bounds [ 95.791785][ T6283] tc action pedit 'at' offset -2147483647 out of bounds [ 95.798787][ T6283] tc action pedit 'at' offset -2147483647 out of bounds [ 95.805853][ T6283] tc action pedit 'at' offset -2147483647 out of bounds [ 95.812860][ T6283] tc action pedit 'at' offset -2147483647 out of bounds [ 95.819824][ T6283] tc action pedit 'at' offset -2147483647 out of bounds [ 95.827167][ T6283] 0: reclassify loop, rule prio 0, protocol 800 [ 95.871933][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.880107][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.330296][ T6300] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 96.371846][ T6291] bond1 (unregistering): Released all slaves [ 96.391463][ T6301] netlink: 156 bytes leftover after parsing attributes in process `syz.1.110'. [ 96.649722][ T6309] netlink: 'syz.4.113': attribute type 10 has an invalid length. [ 96.664719][ T6305] macvlan0: entered promiscuous mode [ 96.670148][ T6305] macvlan0: entered allmulticast mode [ 96.711422][ T6309] team0: Device dummy0 is of different type [ 96.773048][ T6309] netlink: 'syz.4.113': attribute type 10 has an invalid length. [ 96.866195][ T6309] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.913728][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.958342][ T6314] syzkaller0: entered promiscuous mode [ 96.964169][ T6314] syzkaller0: entered allmulticast mode [ 96.982117][ T6311] nbd0: detected capacity change from 0 to 63 [ 97.037287][ T5643] block nbd0: Receive control failed (result -104) [ 97.047647][ T5635] block nbd0: Receive control failed (result -32) [ 97.139112][ T6301] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 97.162161][ T6318] syzkaller0: entered promiscuous mode [ 97.167771][ T6318] syzkaller0: entered allmulticast mode [ 97.819556][ T6337] syzkaller0: entered promiscuous mode [ 97.825194][ T6337] syzkaller0: entered allmulticast mode [ 97.956464][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.973039][ T6342] netlink: 56 bytes leftover after parsing attributes in process `syz.4.124'. [ 98.914302][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.621373][ T6347] warning: `syz.3.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.811426][ T6356] tipc: Started in network mode [ 99.817436][ T6356] tipc: Node identity 5644b297831d, cluster identity 4711 [ 99.833646][ T6356] tipc: Enabled bearer , priority 0 [ 99.853373][ T6357] syzkaller0: entered promiscuous mode [ 99.863824][ T6383] xt_bpf: check failed: parse error [ 99.870214][ T6357] syzkaller0: entered allmulticast mode [ 99.884945][ T6365] tipc: Resetting bearer [ 99.936018][ T6351] tipc: Resetting bearer [ 99.970123][ T6351] tipc: Disabling bearer [ 99.990914][ T6385] Bluetooth: MGMT ver 1.23 [ 100.039520][ T24] net_ratelimit: 2 callbacks suppressed [ 100.039536][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.055369][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.073420][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.175542][ T6418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.144'. [ 101.206778][ T6420] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 101.235621][ T6420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.258477][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.145'. [ 101.269731][ T6420] vcan0: tx drop: invalid sa for name 0xfffffffff7fffffe [ 101.619100][ T6433] syzkaller0: entered promiscuous mode [ 101.640336][ T6433] syzkaller0: entered allmulticast mode [ 101.687210][ T6435] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 101.827444][ T6437] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 101.931089][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.149'. [ 101.970890][ T6435] veth3: entered promiscuous mode [ 102.009846][ T6435] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 102.042322][ T3314] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 102.052833][ T6437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.117310][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.192919][ T3314] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 102.266269][ T6440] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.333454][ T6452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.343217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.535424][ T6441] syzkaller0: entered promiscuous mode [ 102.548208][ T6441] syzkaller0: entered allmulticast mode [ 103.076674][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.103673][ T5361] IPVS: starting estimator thread 0... [ 103.158548][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.192849][ T6464] IPVS: using max 32 ests per chain, 76800 per kthread [ 104.281247][ T6440] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.320925][ T6462] netlink: 'syz.0.155': attribute type 4 has an invalid length. [ 104.498953][ T6440] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.575007][ T6477] tipc: Started in network mode [ 104.580228][ T6477] tipc: Node identity 2e1a7711644a, cluster identity 4711 [ 104.588990][ T6477] tipc: Enabled bearer , priority 0 [ 104.643460][ T6440] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.682105][ T6477] syzkaller0: entered promiscuous mode [ 104.688886][ T6477] syzkaller0: entered allmulticast mode [ 104.706292][ T6481] syzkaller0: entered promiscuous mode [ 104.725971][ T6481] syzkaller0: entered allmulticast mode [ 104.836229][ T6480] tipc: Resetting bearer [ 104.856053][ T6483] tipc: Started in network mode [ 104.861167][ T6483] tipc: Node identity 725844a08491, cluster identity 4711 [ 104.876198][ T6483] tipc: Enabled bearer , priority 0 [ 104.886999][ T6476] tipc: Resetting bearer [ 104.919731][ T6476] tipc: Disabling bearer [ 104.940888][ T6483] syzkaller0: entered promiscuous mode [ 104.949270][ T6483] syzkaller0: entered allmulticast mode [ 105.021447][ T3314] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.044699][ T6483] tipc: Resetting bearer [ 105.081997][ T1029] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.095959][ T6482] tipc: Resetting bearer [ 105.113364][ T6482] tipc: Disabling bearer [ 105.157736][ T5730] net_ratelimit: 1 callbacks suppressed [ 105.157752][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.171816][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.199074][ T1029] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.208462][ T1029] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.240437][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.249533][ T6493] syzkaller0: entered promiscuous mode [ 105.266383][ T6493] syzkaller0: entered allmulticast mode [ 105.386977][ T6495] syzkaller0: entered promiscuous mode [ 105.398034][ T6495] syzkaller0: entered allmulticast mode [ 105.416618][ T6498] syzkaller0: entered promiscuous mode [ 105.422406][ T6498] syzkaller0: entered allmulticast mode [ 105.469978][ T6490] Bluetooth: MGMT ver 1.23 [ 105.525260][ T6502] netlink: 104 bytes leftover after parsing attributes in process `syz.1.167'. [ 105.740363][ T6504] tcf_pedit_act: 7 callbacks suppressed [ 105.740382][ T6504] tc action pedit 'at' offset 6 out of bounds [ 105.859008][ T6506] tipc: Started in network mode [ 105.864699][ T6506] tipc: Node identity 7ecb66d6d667, cluster identity 4711 [ 105.886147][ T6506] tipc: Enabled bearer , priority 0 [ 105.907339][ T6506] syzkaller0: entered promiscuous mode [ 105.923878][ T6506] syzkaller0: entered allmulticast mode [ 106.035244][ T6508] syzkaller0: entered promiscuous mode [ 106.048364][ T6508] syzkaller0: entered allmulticast mode [ 106.111912][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.126841][ T6516] tipc: Resetting bearer [ 106.275475][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.314295][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.727164][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.864752][ T6505] tipc: Resetting bearer [ 107.888166][ T6505] tipc: Disabling bearer [ 108.047203][ T6535] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 108.163927][ T5738] IPVS: starting estimator thread 0... [ 108.261691][ T6557] IPVS: using max 29 ests per chain, 69600 per kthread [ 108.356999][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.726360][ T10] IPVS: starting estimator thread 0... [ 108.821745][ T6574] IPVS: using max 29 ests per chain, 69600 per kthread [ 109.392746][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.608281][ T24] tipc: Node number set to 2829870806 [ 109.626859][ T6546] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 109.632086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.842912][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 109.942742][ T6580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.181'. [ 110.357910][ T6598] syzkaller0: entered promiscuous mode [ 110.379422][ T6598] syzkaller0: entered allmulticast mode [ 110.445236][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.453715][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.752223][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.760589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.866871][ T6609] syzkaller0: entered promiscuous mode [ 110.878406][ T6609] syzkaller0: entered allmulticast mode [ 111.473316][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.481777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.120033][ T6643] syzkaller0: entered promiscuous mode [ 112.142120][ T6643] syzkaller0: entered allmulticast mode [ 112.513424][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.521782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.726809][ T6653] syzkaller0: entered promiscuous mode [ 112.743301][ T6653] syzkaller0: entered allmulticast mode [ 113.460566][ T6680] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 113.552908][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.909407][ T6699] syzkaller0: entered promiscuous mode [ 113.926742][ T6699] syzkaller0: entered allmulticast mode [ 114.097489][ T6704] syzkaller0: entered promiscuous mode [ 114.128449][ T6704] syzkaller0: entered allmulticast mode [ 114.255617][ T6706] tipc: Enabled bearer , priority 0 [ 114.278811][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'. [ 114.425917][ T6707] syzkaller0: entered promiscuous mode [ 114.433829][ T6707] syzkaller0: entered allmulticast mode [ 114.445034][ T6707] tipc: Resetting bearer [ 114.452362][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'. [ 114.521740][ T6710] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 114.560396][ T6710] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 114.578233][ T6705] tipc: Resetting bearer [ 114.584722][ T6710] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 115.257158][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 115.313003][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 115.633326][ T5627] net_ratelimit: 10 callbacks suppressed [ 115.633346][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.647355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.929631][ T6705] tipc: Disabling bearer [ 115.994423][ T6741] macvtap1: entered promiscuous mode [ 116.003309][ T6741] dummy0: entered promiscuous mode [ 116.010420][ T6741] macvtap1: entered allmulticast mode [ 116.037991][ T6741] dummy0: entered allmulticast mode [ 116.082255][ T5821] tipc: Node number set to 4140385440 [ 116.106014][ T6742] dummy0: left allmulticast mode [ 116.139450][ T6742] macvtap1: left promiscuous mode [ 116.156923][ T6742] macvtap1: left allmulticast mode [ 116.189889][ T5738] dummy0: left promiscuous mode [ 116.419540][ T6760] syzkaller1: entered promiscuous mode [ 116.437903][ T6760] syzkaller1: entered allmulticast mode [ 116.489894][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 116.555599][ T5635] block nbd1: Receive control failed (result -1) [ 116.565433][ T5635] [ 116.567776][ T5635] ====================================================== [ 116.574792][ T5635] WARNING: possible circular locking dependency detected [ 116.577087][ T6768] syzkaller0: entered promiscuous mode [ 116.581825][ T5635] syzkaller #0 Not tainted [ 116.581839][ T5635] ------------------------------------------------------ [ 116.581846][ T5635] kworker/u9:4/5635 is trying to acquire lock: [ 116.581855][ T5635] ffff888053e20260 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 116.581917][ T5635] [ 116.581917][ T5635] but task is already holding lock: [ 116.581923][ T5635] ffff88802a840668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40 [ 116.581965][ T5635] [ 116.581965][ T5635] which lock already depends on the new lock. [ 116.581965][ T5635] [ 116.581971][ T5635] [ 116.581971][ T5635] the existing dependency chain (in reverse order) is: [ 116.581978][ T5635] [ 116.581978][ T5635] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 116.582000][ T5635] __mutex_lock+0x1a3/0x1550 [ 116.582015][ T5635] nbd_queue_rq+0x37b/0x1100 [ 116.582030][ T5635] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 116.582052][ T5635] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 116.680161][ T5635] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 116.686665][ T5635] blk_mq_run_hw_queue+0x348/0x4f0 [ 116.692381][ T5635] blk_mq_dispatch_list+0xd16/0xe10 [ 116.698095][ T5635] blk_mq_flush_plug_list+0x48d/0x570 [ 116.703978][ T5635] __blk_flush_plug+0x3ed/0x4d0 [ 116.709350][ T5635] __submit_bio+0x28d/0x580 [ 116.714392][ T5635] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 116.720550][ T5635] block_read_full_folio+0x599/0x830 [ 116.726348][ T5635] filemap_read_folio+0x137/0x3b0 [ 116.731890][ T5635] do_read_cache_folio+0x358/0x590 [ 116.737510][ T5635] read_part_sector+0xb6/0x2b0 [ 116.742785][ T5635] adfspart_check_ICS+0xb1/0x960 [ 116.748236][ T5635] bdev_disk_changed+0x817/0x1770 [ 116.753771][ T5635] blkdev_get_whole+0x380/0x510 [ 116.759133][ T5635] bdev_open+0x31e/0xd30 [ 116.763887][ T5635] blkdev_open+0x470/0x610 [ 116.768806][ T5635] do_dentry_open+0x785/0x14e0 [ 116.774078][ T5635] vfs_open+0x3b/0x340 [ 116.778649][ T5635] path_openat+0x2e08/0x3860 [ 116.783759][ T5635] do_file_open+0x23e/0x4a0 [ 116.788791][ T5635] do_sys_openat2+0x113/0x200 [ 116.793998][ T5635] __x64_sys_openat+0x138/0x170 [ 116.799373][ T5635] do_syscall_64+0x15f/0xf80 [ 116.804476][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.810888][ T5635] [ 116.810888][ T5635] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 116.818172][ T5635] __mutex_lock+0x1a3/0x1550 [ 116.823269][ T5635] nbd_queue_rq+0xc6/0x1100 [ 116.828278][ T5635] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 116.834335][ T5635] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 116.841177][ T5635] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 116.847671][ T5635] blk_mq_run_hw_queue+0x348/0x4f0 [ 116.853293][ T5635] blk_mq_dispatch_list+0xd16/0xe10 [ 116.858998][ T5635] blk_mq_flush_plug_list+0x48d/0x570 [ 116.864881][ T5635] __blk_flush_plug+0x3ed/0x4d0 [ 116.870250][ T5635] __submit_bio+0x28d/0x580 [ 116.875256][ T5635] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 116.881398][ T5635] block_read_full_folio+0x599/0x830 [ 116.887189][ T5635] filemap_read_folio+0x137/0x3b0 [ 116.892730][ T5635] do_read_cache_folio+0x358/0x590 [ 116.898440][ T5635] read_part_sector+0xb6/0x2b0 [ 116.903715][ T5635] adfspart_check_ICS+0xb1/0x960 [ 116.909167][ T5635] bdev_disk_changed+0x817/0x1770 [ 116.914707][ T5635] blkdev_get_whole+0x380/0x510 [ 116.920073][ T5635] bdev_open+0x31e/0xd30 [ 116.924826][ T5635] blkdev_open+0x470/0x610 [ 116.929747][ T5635] do_dentry_open+0x785/0x14e0 [ 116.935017][ T5635] vfs_open+0x3b/0x340 [ 116.939592][ T5635] path_openat+0x2e08/0x3860 [ 116.944692][ T5635] do_file_open+0x23e/0x4a0 [ 116.949711][ T5635] do_sys_openat2+0x113/0x200 [ 116.954895][ T5635] __x64_sys_openat+0x138/0x170 [ 116.960251][ T5635] do_syscall_64+0x15f/0xf80 [ 116.965344][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.971747][ T5635] [ 116.971747][ T5635] -> #4 (set->srcu){.+.+}-{0:0}: [ 116.978859][ T5635] __synchronize_srcu+0xca/0x300 [ 116.984304][ T5635] elevator_switch+0x1e8/0x7a0 [ 116.989582][ T5635] elevator_change+0x2cc/0x450 [ 116.994853][ T5635] elevator_set_default+0x36c/0x430 [ 117.000559][ T5635] blk_register_queue+0x3e9/0x4e0 [ 117.006088][ T5635] __add_disk+0x677/0xd50 [ 117.010925][ T5635] add_disk_fwnode+0xfb/0x480 [ 117.016107][ T5635] nbd_dev_add+0x72c/0xb50 [ 117.021030][ T5635] nbd_init+0x168/0x1f0 [ 117.025691][ T5635] do_one_initcall+0x250/0x870 [ 117.030963][ T5635] do_initcall_level+0x104/0x190 [ 117.036410][ T5635] do_initcalls+0x59/0xa0 [ 117.041248][ T5635] kernel_init_freeable+0x2a6/0x3e0 [ 117.046958][ T5635] kernel_init+0x1d/0x1d0 [ 117.051798][ T5635] ret_from_fork+0x514/0xb70 [ 117.056894][ T5635] ret_from_fork_asm+0x1a/0x30 [ 117.062165][ T5635] [ 117.062165][ T5635] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 117.069975][ T5635] __mutex_lock+0x1a3/0x1550 [ 117.075070][ T5635] elevator_change+0x1b3/0x450 [ 117.080342][ T5635] elevator_set_none+0xb5/0x140 [ 117.085706][ T5635] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 117.092019][ T5635] nbd_start_device+0x17f/0xb10 [ 117.097376][ T5635] nbd_genl_connect+0x165b/0x1cf0 [ 117.102913][ T5635] genl_family_rcv_msg_doit+0x22a/0x330 [ 117.108963][ T5635] genl_rcv_msg+0x61c/0x7a0 [ 117.113971][ T5635] netlink_rcv_skb+0x232/0x4b0 [ 117.119242][ T5635] genl_rcv+0x28/0x40 [ 117.123726][ T5635] netlink_unicast+0x75c/0x8e0 [ 117.128996][ T5635] netlink_sendmsg+0x813/0xb40 [ 117.134270][ T5635] ____sys_sendmsg+0x972/0x9f0 [ 117.139545][ T5635] ___sys_sendmsg+0x2a5/0x360 [ 117.144734][ T5635] __x64_sys_sendmsg+0x1bd/0x2a0 [ 117.150188][ T5635] do_syscall_64+0x15f/0xf80 [ 117.155290][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.161688][ T5635] [ 117.161688][ T5635] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 117.170278][ T5635] blk_alloc_queue+0x546/0x680 [ 117.175554][ T5635] __blk_mq_alloc_disk+0x197/0x390 [ 117.181169][ T5635] nbd_dev_add+0x499/0xb50 [ 117.186091][ T5635] nbd_init+0x168/0x1f0 [ 117.190752][ T5635] do_one_initcall+0x250/0x870 [ 117.196021][ T5635] do_initcall_level+0x104/0x190 [ 117.201469][ T5635] do_initcalls+0x59/0xa0 [ 117.206306][ T5635] kernel_init_freeable+0x2a6/0x3e0 [ 117.212014][ T5635] kernel_init+0x1d/0x1d0 [ 117.216851][ T5635] ret_from_fork+0x514/0xb70 [ 117.221944][ T5635] ret_from_fork_asm+0x1a/0x30 [ 117.227220][ T5635] [ 117.227220][ T5635] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 117.234416][ T5635] fs_reclaim_acquire+0x71/0x100 [ 117.239868][ T5635] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 117.246186][ T5635] __alloc_skb+0x1d0/0x7d0 [ 117.251116][ T5635] __ip6_append_data+0x2d3c/0x3f60 [ 117.256738][ T5635] ip6_append_data+0x10f/0x280 [ 117.262013][ T5635] rawv6_sendmsg+0x12d3/0x18e0 [ 117.267281][ T5635] ____sys_sendmsg+0x80a/0x9f0 [ 117.272555][ T5635] ___sys_sendmsg+0x2a5/0x360 [ 117.277745][ T5635] __x64_sys_sendmsg+0x1bd/0x2a0 [ 117.283193][ T5635] do_syscall_64+0x15f/0xf80 [ 117.288295][ T5635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.294696][ T5635] [ 117.294696][ T5635] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 117.302412][ T5635] __lock_acquire+0x15a5/0x2cf0 [ 117.307770][ T5635] lock_acquire+0x106/0x350 [ 117.312776][ T5635] lock_sock_nested+0x41/0x100 [ 117.318044][ T5635] inet_shutdown+0x6a/0x390 [ 117.323050][ T5635] nbd_mark_nsock_dead+0x2e9/0x560 [ 117.328667][ T5635] recv_work+0x1c2e/0x1d40 [ 117.333591][ T5635] process_scheduled_works+0xb5d/0x1860 [ 117.339640][ T5635] worker_thread+0xa53/0xfc0 [ 117.344732][ T5635] kthread+0x388/0x470 [ 117.349308][ T5635] ret_from_fork+0x514/0xb70 [ 117.354401][ T5635] ret_from_fork_asm+0x1a/0x30 [ 117.359675][ T5635] [ 117.359675][ T5635] other info that might help us debug this: [ 117.359675][ T5635] [ 117.369883][ T5635] Chain exists of: [ 117.369883][ T5635] sk_lock-AF_INET6 --> &cmd->lock --> &nsock->tx_lock [ 117.369883][ T5635] [ 117.382559][ T5635] Possible unsafe locking scenario: [ 117.382559][ T5635] [ 117.389990][ T5635] CPU0 CPU1 [ 117.395336][ T5635] ---- ---- [ 117.400681][ T5635] lock(&nsock->tx_lock); [ 117.405086][ T5635] lock(&cmd->lock); [ 117.411572][ T5635] lock(&nsock->tx_lock); [ 117.418499][ T5635] lock(sk_lock-AF_INET6); [ 117.422990][ T5635] [ 117.422990][ T5635] *** DEADLOCK *** [ 117.422990][ T5635] [ 117.431111][ T5635] 3 locks held by kworker/u9:4/5635: [ 117.436374][ T5635] #0: ffff8880272ff140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 117.447579][ T5635] #1: ffffc90003c0fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 117.459311][ T5635] #2: ffff88802a840668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40 [ 117.468608][ T5635] [ 117.468608][ T5635] stack backtrace: [ 117.474488][ T5635] CPU: 1 UID: 0 PID: 5635 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 117.474504][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.474514][ T5635] Workqueue: nbd1-recv recv_work [ 117.474534][ T5635] Call Trace: [ 117.474539][ T5635] [ 117.474545][ T5635] dump_stack_lvl+0xe8/0x150 [ 117.474561][ T5635] print_circular_bug+0x2e1/0x300 [ 117.474581][ T5635] check_noncircular+0x12e/0x150 [ 117.474600][ T5635] __lock_acquire+0x15a5/0x2cf0 [ 117.474619][ T5635] ? irqentry_exit+0x218/0x730 [ 117.474632][ T5635] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.474653][ T5635] ? inet_shutdown+0x6a/0x390 [ 117.474667][ T5635] lock_acquire+0x106/0x350 [ 117.474680][ T5635] ? inet_shutdown+0x6a/0x390 [ 117.474699][ T5635] lock_sock_nested+0x41/0x100 [ 117.474714][ T5635] ? inet_shutdown+0x6a/0x390 [ 117.474728][ T5635] inet_shutdown+0x6a/0x390 [ 117.474743][ T5635] nbd_mark_nsock_dead+0x2e9/0x560 [ 117.474759][ T5635] recv_work+0x1c2e/0x1d40 [ 117.474779][ T5635] ? lockdep_unlock+0x5d/0xd0 [ 117.474794][ T5635] ? __pfx_recv_work+0x10/0x10 [ 117.474808][ T5635] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.474827][ T5635] ? irqentry_exit+0x218/0x730 [ 117.474838][ T5635] ? trace_irq_disable+0x3b/0x140 [ 117.474864][ T5635] ? lock_acquire+0x221/0x350 [ 117.474877][ T5635] ? process_scheduled_works+0xa70/0x1860 [ 117.474891][ T5635] ? process_scheduled_works+0xa70/0x1860 [ 117.474905][ T5635] process_scheduled_works+0xb5d/0x1860 [ 117.474928][ T5635] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.474943][ T5635] ? assign_work+0x3d5/0x5e0 [ 117.474958][ T5635] worker_thread+0xa53/0xfc0 [ 117.474980][ T5635] kthread+0x388/0x470 [ 117.474997][ T5635] ? __pfx_worker_thread+0x10/0x10 [ 117.475010][ T5635] ? __pfx_kthread+0x10/0x10 [ 117.475026][ T5635] ret_from_fork+0x514/0xb70 [ 117.475041][ T5635] ? __pfx_ret_from_fork+0x10/0x10 [ 117.475055][ T5635] ? __switch_to+0xc79/0x1410 [ 117.475074][ T5635] ? __pfx_kthread+0x10/0x10 [ 117.475091][ T5635] ret_from_fork_asm+0x1a/0x30 [ 117.475112][ T5635] [ 117.484948][ T6768] syzkaller0: entered allmulticast mode [ 117.497481][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.687043][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.695146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.703242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.711326][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.719580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.953481][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.961807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.632325][ T5627] net_ratelimit: 8 callbacks suppressed [ 121.632343][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.646250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.673119][ T5627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.681330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.072164][ T3306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.080562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.713384][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.721658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.351871][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.360057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog