last executing test programs: 3.540129482s ago: executing program 2 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 2.880841795s ago: executing program 2 (id=392): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'dh\x00', 0x0, 0x10000004, 0x30}, 0x2c) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x45833af92e4b39ff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'dh\x00', 0x0, 0x10000004, 0x30}, 0x2c) (async) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) (async) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x45833af92e4b39ff, 0x0) (async) 2.091992989s ago: executing program 2 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f40)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x8902, r3, {0x0, 0xffe0}, {0xb, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x7409987b0007f848}, 0x4000) 1.95203672s ago: executing program 1 (id=403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000285000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) 1.803444476s ago: executing program 3 (id=405): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) recvmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/11, 0xb}], 0x1}, 0x22) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e09"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'rose0\x00', 0x4}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES32=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000240)=""/85, 0x55}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/211, 0xd3}], 0x3, &(0x7f0000001a80)}, 0x2060) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.743387631s ago: executing program 1 (id=406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x0, 0x5, 0x8, 0xd}, {0x8, 0x2, 0x7, 0x6}]}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x8, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) 1.736108646s ago: executing program 2 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="5ecab3e41221ede7109cde92647587f7b9f66250dc41e3f2f286a335f0757d19163cfe3b709982e49820a2b8ba238735c050c24ace5af24db10f68d30cc0af39ebc61dfbbd5c6cc8d9b1bb33cb24c165af95e25f0c0119efe1661e025840bfcdea9839925835b30ab7031a0fc81513b745f85509c39fcdc284a2a59fda8a3be4ebfce17067d86cd783e75406e8", 0x8d}, {&(0x7f0000000280)="55b96d8d15f01f7450ef1731fd3e3174e4618a3495e07471beec7cdec3d23bdd8278bdc3f525e40ca9dbd4b46dd03c7e7b57c627427b3b67ac89c72209b103a73188996be0ac8571097e7e0464f029508ed008b54ccc378ec149d0816996f21090c10603b8934c727096347ab9c9d40a14feaad342a3fedb6bf9e53b568bfcb4ce8e1ddba054", 0x86}, {&(0x7f0000000340)="fb23481559ddbe4400b416ebdfbc274ff8c6881820ff45a40f04a8007d3a067f24501a039ab91a0b4ab65066546677c13e43f6e2edbba34ac6f283183c8813a7843f171fc12cfa3eb6062554dc12a357265f245bb481d26c661db7d055edfde6fabbdefff89e67420f5432a6889653d302607ce888e1e86d6ecab9b8462522c8911189ff0c80990d4be32ef9c1ea6a9df630d924175beb0e84a855a566b0cec925e63dcf721ce73d2aee41105c4e4530a172b4635367859dcb77a610dfc30ee835bc91dc8fb601a206643a93365d3f53f0d36f91", 0xd4}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000580)="94792bb3aaad2e6b22d0aec20fa16048", 0x10}, {&(0x7f00000005c0)="0aef195c1d1f4583298e689892e6f8f359e1943f1cbcfa06e9ebc60d9f1a36521d763f2655339b01f91e8f8825ae08e93579d1c718b39eb2d95e6653a480d4e7fe635e8a3297cc8a25b35320905ab66684b962c3c6e83def51a844a275a78811efe42d4df9130adcffd649a78cda4a59f600f894d3ce2cfc6b66fde7a5b7f2c2235e1efef083746f9a1e71a81213a10b8a59b8aa6ea2b60fbba239aa6f55c076f2109885a632b85af73c0d93a10e81c5", 0xb0}, {&(0x7f0000000680)="83129be59edabbb0e63515fecc42b608f230e1543c9bb650aca100e756785657628ec234a7f14b6c7134c5da3b7630f2d547522ad52087a6c04d38f426a59f7ed906c73bb13fc523579e3e8e3b151d48a35e4446e80aad1e25099e2f7f60d9b93f425aefb7a010cc9387d3f654419e1136b1d1204e6d6f889284462b15162c5f74e3e60f2bb8fbc196ed60413e4674cdc29a8844396fd81cbbd7741653416e049e0de4857c71448877225dcf8b51e8016a51fc95aa3b06", 0xb7}], 0x7, &(0x7f00000007c0)=[@assoc={0x18, 0x117, 0x4, 0x3ff}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x8b, "cfc98952213f9ba6ce957e3ad4ee01c96fc07ec75f64c03560e5b61633f9a8c9a6e54be8fdb7ec272e951f55405f6d0df0dd47c93847246f39f735dad511aa0b3da7b287e937e93d9bb6288c57c0ad50ed187c369a48e0034e807c2d0a34c4bb4e2f503b8ffe74df1603c4bcd5500372cc56517312be932eabb48ec298ed36312ad54e1936a473029ee375"}, @iv={0x88, 0x117, 0x2, 0x6f, "f413028e6ea1ebe2ee059ce75e2acd5031673d0a2988f0c8ab9c73f1add2e102f05fc639b3d4731486e777fe10bf87c0f108cd64c5a8cc5d219cb088a53b42c3b6d12b668bf4e9f3a238e46b36074811396545f02421425bcb21be5268af0ad9dd1a5e1b50296ce6281e274b027f96"}, @assoc={0x18, 0x117, 0x4, 0xffffff7f}, @iv={0xe0, 0x117, 0x2, 0xc7, "717b4b029fc9888839d8b2beccf207b45a6d4858983b42a54944a77d2abdeff3cc2c70dcca871938245c4bcfa1607bb20f6b8471fd8401e3b578ef37ad65941e8343d435b11eb937e58801a988e2ccbc0bc7b393f355a75208e0da9f95b946d187c2ef164c7cdcd6ceef3bdb9548a9e282cc13805e0efa72c88dcd4483ab443a60640f86fea580d83fab9bec51ed28869d83824fb8d3552929015bb057f3d41fe6f123f9e01dfcd2672560a2df472a395ea8999e1d4e742524a0752a0566eace39a1d330472d81"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x50, 0x117, 0x2, 0x36, "2864ec3ae501661b550fb9a2a1123197017d2b5441b567374203756f84fafb9a0e7cad0908c0d76c64ee557092c87e1cdaef489a70ee"}], 0x2b8, 0x4040000}, 0x1841) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) (async) syz_emit_ethernet(0xf8f, &(0x7f0000003180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a60f5900fffe8000000000000000000000000000aaff0200000000000000000000000000013c"], 0x0) 1.548893s ago: executing program 0 (id=408): syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x68, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x700, [{0x3, 0x9, "d33e6d4706598090a8030037ffffefffffffff23732407010000ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0) 1.54741089s ago: executing program 4 (id=409): unshare(0x28000600) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="e39e9525677dc1c9763a0f3484947017dba4ee4c879b3a54cb63a7b4a3", @ANYRES16], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x4}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYRES8=r0, @ANYRES8=r2, @ANYRES32], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05f858a60aa00000ffffffe600"/27, @ANYRES32=0x0, @ANYBLOB="0a003400020202020202000014002a0075080000050002002d001001de1001090800350007000000080026006c090000"], 0x4c}}, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000080)=0xb1, 0x4) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7ffe}, @random="43b6b0148103", @device_a, @device_b, {0x7, 0xff4}, "", @value={0xd, 0x0, 0x2, 0x0, 0xaa}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x0, 0x0, 0x1, 0x1}}, @random="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"}, 0x339) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040200000000", @ANYRES32, @ANYBLOB="1f00000000973697e8a5cd706800000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) (async) recvmsg$kcm(r4, &(0x7f0000002d80)={&(0x7f0000000b00)=@can, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/13, 0xd}, {&(0x7f0000002ac0)=""/45, 0x2d}, {&(0x7f0000002b00)=""/104, 0x68}, {&(0x7f0000002b80)=""/162, 0xa2}, {&(0x7f0000002c40)=""/113, 0x71}], 0x6, &(0x7f0000002d40)}, 0x40000002) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x256, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) (async) recvmmsg$unix(r4, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000280)={0x77359400}) 1.54465621s ago: executing program 1 (id=410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xcc, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0xccb34206baa26cc8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044805}, 0xc000) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x1, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x20000007, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x3ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0xd03, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x100, 0x0, {0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x0) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000140)="725aafb797eea58e7f8fe9110192e722887ed0708918eec457b7dee6da28ec947a14a345236c0f8cf448729a4a212ea2624e8c1eaa9b686b2a1c4e8d3cedb28451d7d5cee81ed1e2e284e1b9d04046", 0x4f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a", 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000180), &(0x7f00000001c0)=0x8) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xc}, {}, {0xa, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 1.514669708s ago: executing program 3 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x14000851}, 0x20040040) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28"], 0x7c}}, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r5, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x19, 0x4, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) (async) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000100), 0x8) (async) sendmmsg$sock(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}], 0x18}}], 0x1, 0x20000000) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x30, 0x2f}, {0xffffffff, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0xffffffff, 0x7fff}, {0x5e, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x6e6bb8, 0x1, 0x0, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x3c}, 0xa, @in6=@loopback, 0xfffffffe, 0x0, 0x1, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 1.357370354s ago: executing program 4 (id=412): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1412, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c010}, 0x5) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x1dc, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x84}, @NL80211_ATTR_FRAME_MATCH={0xd9, 0x5b, "6411da5f3936a3a2c05975b005ee7d0e30785a6be4ca38fd87ada9426a2b47c8389d4827a53fa87ad8ce9796d633f3c9630325c0b046ef39019d327317ccdf6c01ee84df4d51e53ffe2cdb696701478a4e1e0c7368591ecccd7913a45b18c9329e44f150dafb3e23005293ff7f3a17d64092a0c121769a4b2ce31e71a047567c122774fe8ddd0f4d977db631dc5f61d30bdc7b3c08a0b96e9cfde0b7c177b05f75ae8e571ce8923c85a35fda925724f31a26d09893885b4ce9037f5fcc895c31df7417dcc83b8c586e195d9dd93d72024c17bab03e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x621a}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "0263ad243ba314f54b670b4ea1a86bacc806a2565b245a95f901969af107d7ee3b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x8f, 0x5b, "2dde8d975a84322fc60919c86760dc617a9b330e2e344ea41aa692daab3b29f695f96d540b2fb2119b846f01fb87e29cc7e22bd9ebeba89faffedafb8578c6aeb892bef54af94ecc6ecf608ecfc35fe706ee1b8bb49de15127e96144cb4d37c074fbd853c53a7d6187044790be70b9bc12fd20db20bc1b8cbd326943d1d81902a23ed2af339f567f70a9c9"}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2c, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x3, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x4042015}, 0x40c0049) 1.261107563s ago: executing program 0 (id=413): sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000740)={0x1bc, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff8ac}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ec}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4f7}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6bb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1b9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x810}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x31b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x240408c0}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x4810}, 0x3da021b121dea902) 1.238385541s ago: executing program 3 (id=414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x3) 1.142466197s ago: executing program 2 (id=415): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0xd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x160, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x8}}, [@TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x36, 0x7, 0x9, 0x8001, 0x1, 0x5, 0x1, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0xe, 0x3ff, 0x7ff]}}, {{0x1c, 0x1, {0x6, 0x2, 0xe813, 0xfffffff8, 0x2, 0x6, 0x5, 0x6}}, {0x10, 0x2, [0xfbff, 0x9, 0x1, 0x3, 0x6, 0xfa9f]}}, {{0x1c, 0x1, {0x80, 0x0, 0x3, 0xfbf0, 0x2, 0xf, 0x4, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x9435]}}, {{0x1c, 0x1, {0x9, 0x72, 0x25, 0x10f3, 0x2, 0x10001, 0x3, 0xa}}, {0x18, 0x2, [0xd70, 0x8, 0x7fff, 0x1000, 0x8000, 0x8, 0x0, 0xa, 0x3, 0xfff7]}}, {{0x1c, 0x1, {0x1, 0x4, 0x80, 0x0, 0x30d82a71e23504ba, 0x9, 0x7, 0x4}}, {0xc, 0x2, [0x6, 0x1, 0x81, 0x3ff]}}, {{0x1c, 0x1, {0x91, 0x0, 0x0, 0x9, 0x1, 0x9, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0xb, 0x0]}}, {{0x1c, 0x1, {0x9, 0xa7, 0x2, 0x3, 0x2, 0x4c6, 0x7, 0x9}}, {0x16, 0x2, [0x8, 0xdc9, 0xd, 0x0, 0x8, 0x0, 0x3, 0x15d3, 0x0]}}]}]}, 0x160}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000002900)=r9, 0x4) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000300d9cc80066e5364efbda0cb328cadc71f213d4eb761d0c87493e346e5fe358ceae30f00005df4d5b891dae65240e923f181c9e13015e4e37a1ce37165f1d1d5093d1e316c494919228ed9b1874164bb2582ae37facb5cd1a27ace4c1650f399d56108dd4be6f45e5ad60e9d62e8baefedc088ce46b49a35b1a6450711a03d04f1fb840ddc425f340535e4d629f74be7e729ecccd7c160e59c8c6c6bf807425b0f1e7f5cd3ee7ef3d48d2f06cf5c04d57af2cf15b97198f753774db70e51cdb908e994175937603e19d300000068d7ac9faa80ee99c76b4c76943e4fb0d319430cdad72ccfd026a0be4d7ceef79fa8e836429211282b429e04eada8e064d43b5c548ee821640d25471f6955a6e6c04b1b997da665c2376b73da6c8ad76f63059cb36ac73501b64f5cb47c8a0f78f744f2f33199347068181d057aceefc9a6e5bab96a294d422e2f693cb0fa3810c5faae7e4f2a5cdc04b6e", @ANYRES32, @ANYBLOB="240012800b0001006272696467"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.087208941s ago: executing program 4 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000000206050000000000000000000100000a05000400030000004c0007801800028014000240fc0000000000000000000000000000011800028014000240fc010000000000000000000000000000050003008b000000080006400000000708000a40ff00686173683a69702c706f727400000000"], 0x7c}, 0x1, 0x0, 0x0, 0x400c001}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt(r1, 0xaa20, 0x24000000, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x198, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x110, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x835d}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffb1a}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x60c}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe00000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xcb3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x32a}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe2d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}]}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffff9cd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xacec}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x198}, 0x1, 0x0, 0x0, 0x4840}, 0x400c1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000000206050000000000000000000100000a05000400030000004c0007801800028014000240fc0000000000000000000000000000011800028014000240fc010000000000000000000000000000050003008b000000080006400000000708000a40ff00686173683a69702c706f727400000000"], 0x7c}, 0x1, 0x0, 0x0, 0x400c001}, 0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) setsockopt(r1, 0xaa20, 0x24000000, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x198, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x110, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x835d}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffb1a}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x60c}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe00000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xcb3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x32a}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe2d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}]}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffff9cd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xacec}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x198}, 0x1, 0x0, 0x0, 0x4840}, 0x400c1) (async) 1.058355006s ago: executing program 0 (id=417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000010285000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) 880.505472ms ago: executing program 0 (id=418): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r1], 0xe8}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfa1, 0x65, 0x0, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}}, "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"}}, 0xfaf) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x7, 0x4e23, 0x7, 0xa, 0x80, 0x80, 0x32}, {0x1, 0x2, 0x836, 0x5, 0x80000001, 0xffffffffffffa770, 0x40, 0xffffffff7fffffff}, {0xfff, 0x4, 0x0, 0x1000}, 0x2, 0x6e6bb2, 0xf801403945ef9d8b, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d6, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x3505, 0x0, 0x3, 0xa, 0x5, 0x1, 0x5}}, 0xe8) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, 0x0, 0xf371cc2a4cc195fb) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20000010}, 0x4090) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(r8, 0x5421, &(0x7f00000000c0)=0x9732) listen(r8, 0xec) accept4$bt_l2cap(r8, 0x0, 0x0, 0x800) 835.198164ms ago: executing program 4 (id=419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xb1c, 0x1000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xfffffff9}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9c}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=ANY=[@ANYBLOB="3800000041000701feffffff00000000017c0000040040001c00018010000400b2b1893a20b8d2a93521800a05001c806c00000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x48880}, 0xc000) 793.083936ms ago: executing program 1 (id=420): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061100c000000000063014b00000000009500090000000000005bbfeb9b312772330bea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061100c000000000063014b00000000009500090000000000005bbfeb9b312772330bea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = socket(0x2d, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) (async) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x48}, 0x10) (async) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x48}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0xc075}, 0x20044800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x40000002}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x40000002}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x78}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20, 0xa8f1e416535134e9, 0x1, 0xfd, 0x0, 0xff, 0x0, 0x2d00}}, 0x1c}}, 0x0) r11 = socket(0x2d, 0x2, 0x0) bind$xdp(r11, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, 0x7, 0xa, 0x5, 0x0, 0x0, {0x19, 0x0, 0x8}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x81) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) 685.68312ms ago: executing program 3 (id=421): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0x31, 0x0, &(0x7f0000000040)) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="500000002e00030500000400000000003c0000800c00"], 0x50}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000000)={@rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f00000003c0)={&(0x7f0000000300)=""/129, 0x81, 0x4, 0xc}) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 614.363542ms ago: executing program 2 (id=422): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x0, 0x3, 0x200}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000000107000004000000186600000b00000000000000050000", @ANYRES32=0x1, @ANYBLOB="000000000000b5c963a47f00000000008500000086000000d0080000f0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000700000000000000ffffffff85100000fbffffff9500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xf, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0xa, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x0, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}, {0x1, 0x3, 0xe, 0x4}, {0x2, 0x1, 0x4, 0xa}, {0x5, 0x1, 0x10, 0xc}, {0x3, 0x3, 0x8, 0x9}, {0x0, 0x5, 0x9, 0x5}], 0x10, 0x1ff}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000001280), 0x4) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r5, 0x0, 0x2002) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x2e, 0x1, 0xba22, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@ifindex, r3, 0x2, 0x8, 0x0, @void, @value, @void, @void, r6}, 0x20) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000000)=0xb, 0x4) getsockopt$MRT(r7, 0x0, 0xd0, 0x0, &(0x7f0000001080)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x9, 0x40, {{0x13, 0x4, 0x2, 0x4, 0x4c, 0x66, 0x0, 0x9, 0x0, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4}, @generic={0x88, 0x12, "409811ececffc1d450c5ae6b8cd7c8c3"}, @rr={0x7, 0x17, 0x42, [@multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, @empty, @empty]}, @rr={0x7, 0xb, 0x57, [@local, @private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000300)={'tunl0\x00', r8, 0x7800, 0x1, 0x1, 0x3, {{0x21, 0x4, 0x2, 0x14, 0x84, 0x67, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, {[@generic={0x89, 0x12, "2706c3559abfc715dffe9e25b0c71041"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x55, 0x0, 0xf}, @ssrr={0x89, 0x1b, 0x40, [@local, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x13}, @local, @multicast2]}, @timestamp={0x44, 0x2c, 0xe7, 0x0, 0x8, [0x400, 0x8, 0x81, 0x6, 0x7, 0x3, 0xc, 0x8, 0x8000, 0x884]}, @timestamp_prespec={0x44, 0xc, 0x8c, 0x3, 0x9, [{@remote, 0x6}]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 509.953108ms ago: executing program 0 (id=423): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) r5 = socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r5, 0x5) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r6, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001640)="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", 0x101}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "05"}], 0x18}, 0x20000000) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x100}], 0x1}, 0x40) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24008001) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r2, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000016c0)={&(0x7f00000005c0)={0x10cc, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1028, 0x2a, [@link_id={0x65, 0x12, {@random="aef7d3e5e1b5"}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x1003, {0x8, 0x2, 0x2, "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"}}, @dsss={0x3, 0x1, 0x70}]}, @NL80211_ATTR_IE={0x88, 0x2a, [@tim={0x5, 0x82, {0x8, 0xd1, 0xe, "3dda532870a92a216e8a8a2d0c6d3c0656046078c8eef4b8732cc887b5dfa7833fde127d3f5662eb2d5cd304c6cf7a7d1a3f5b35c022d2fbed5a9555d675320c57696a9b02b66308d85cf9dbed0aa1db4f599cb21d3b302820636b84ba68fbdaa614cac90a9d8c6ff7ac2d144c4bbc0f5ad59a0c809c0852898627c0aebb0e"}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xa6}]}]}, 0x10cc}, 0x1, 0x0, 0x0, 0x5}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)={[{0x2b, 'rdma'}]}, 0x6) 486.546357ms ago: executing program 4 (id=424): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffa, @private0, 0x1}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaa23bbbbbbbbfbbb0800450000780000000000119078000000000000000000004e20006490780200000004000000040000007ee313db6cbed746d3c6e3232d059a938d60b0adb6a2d36881d7ef471fc7ab46663e916223df7cdea2ff007874b4354eec5c2fddae94556e4ae40ee00600080000000c00231eba260db6e3294e45425284a03ed5bd6b78b683e726"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00178008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00100000000000000000000c000f00050000000000000006000200010000000500130000000000050014"], 0x6c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000226bd4800fcdbdf250700000008000900020000005baf0000000000f0780b74f23f64fc55e8cf5065f917c7a0babbd1420401b4b6efa9ea912b9c22cb9a9b936011156fcb47c16274b8d8715075196c6053d8f7edeae0a00371d9c3722d665f191e43244844d8a1bedefc3d9a409cd7c65a1afe428b4d4779d35157add4be1b2b7f5de5bfe32099f99f38a674de0c3e1dd1d272b00121a78190dbccb334075617b50b909a97769be66e57"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="01330130ec07"}) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5dcce44cb12328f7ca069733c9bb63a1af377a3a41d314b2aa6e29688bcbe8adfb89ad0b8456a89467527c058f767427dc87c6f65d00f33e1d07a53e97f851d1b9e945705824e27b5649e4a141247389fbe9c78b35badf562437b904201c19d51d75c50dd777acded8249a26ae4997e1a92bd2afb167ddb82f68b2e850766a47d3a79d220cb1048beef63932c4629846d2", @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf25030000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) (async, rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="db2048787e000008000000100800310000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x24) (async, rerun: 64) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async) r10 = accept(r9, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r10) (async, rerun: 32) sendmmsg$inet(r10, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) (rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"d0942af5df8606a6af15b416ea66c7e1", 0x0, 0x0, {0x1, 0x1}, {0x1, 0x3}, 0x9, [0xfff, 0x6, 0x1, 0x3, 0x5, 0x6, 0x8, 0x7, 0x198, 0x80, 0x9, 0x6, 0x2, 0x7fff, 0x10000, 0x35]}) unshare(0x2a060400) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 32) recvfrom(r0, 0x0, 0x94, 0x10132, 0x0, 0x0) (rerun: 32) 413.334254ms ago: executing program 3 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) 274.818483ms ago: executing program 3 (id=426): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113700000000001600000000001fff9500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x12, &(0x7f0000000100)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x0, 0x4, 0xb, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4b8}}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x88, &(0x7f0000000200)=""/136, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xfffffffe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x2}], 0x10, 0x1}, 0x94) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x38, 0x811}}], 0x1, 0x2400c010) socket$inet6(0xa, 0x2, 0xffffffff) 209.282496ms ago: executing program 1 (id=427): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0xb}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) 152.832156ms ago: executing program 4 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x6, 0xff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.304419ms ago: executing program 1 (id=429): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 0s ago: executing program 0 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000409000000030000000000000002000000007600571e002e0061"], 0x0, 0x3a, 0x0, 0x1, 0x3}, 0x28) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b2000ed00ffdbdf25030000000100000008000a"], 0x28}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) connect$x25(r1, &(0x7f0000000a80), 0x12) socket$inet6(0xa, 0x2, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x8040480) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f00000003c0)=""/103, 0x67}, 0xffffffff}], 0x1, 0x2000000022, &(0x7f00000002c0)={0x77359400}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000980)={0x170, 0x8, 0x400}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="05000000010900"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000120000000000d7a8b9b521fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15e46b5b4a15ab87a8591806635ac3289198e3042541a19b2b65f06ca8645b93c1a1c1bde0ac212d4ad8bb828252bb1d523438b86ac880"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x54, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xffffffff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x100}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 76.124362][ T5593] cgroup: Unknown subsys name 'net' [ 76.238810][ T5593] cgroup: Unknown subsys name 'cpuset' [ 76.249141][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.837132][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.545673][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.559009][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.567544][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.568886][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.583911][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.591655][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.592081][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.606253][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.614585][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.622272][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.629958][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.639087][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.646348][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.653826][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.657055][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.663304][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.676285][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.677338][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.684650][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.698986][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.706413][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.713825][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.715174][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.727612][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.736371][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.577854][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.585315][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.593732][ T5618] bridge_slave_0: entered allmulticast mode [ 83.601602][ T5618] bridge_slave_0: entered promiscuous mode [ 83.626598][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.633836][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.641490][ T5606] bridge_slave_0: entered allmulticast mode [ 83.649097][ T5606] bridge_slave_0: entered promiscuous mode [ 83.663592][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.670913][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.678452][ T5618] bridge_slave_1: entered allmulticast mode [ 83.685856][ T5618] bridge_slave_1: entered promiscuous mode [ 83.705815][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.712954][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.720192][ T5606] bridge_slave_1: entered allmulticast mode [ 83.727497][ T5606] bridge_slave_1: entered promiscuous mode [ 83.816392][ T5614] Bluetooth: hci2: command tx timeout [ 83.817244][ T5620] Bluetooth: hci4: command tx timeout [ 83.822879][ T5617] Bluetooth: hci3: command tx timeout [ 83.829727][ T50] Bluetooth: hci1: command tx timeout [ 83.833933][ T5621] Bluetooth: hci0: command tx timeout [ 83.860746][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.867989][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.875473][ T5607] bridge_slave_0: entered allmulticast mode [ 83.882793][ T5607] bridge_slave_0: entered promiscuous mode [ 83.893688][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.903103][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.910813][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.918073][ T5604] bridge_slave_0: entered allmulticast mode [ 83.925580][ T5604] bridge_slave_0: entered promiscuous mode [ 83.947883][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.960060][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.969577][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.977446][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.984790][ T5607] bridge_slave_1: entered allmulticast mode [ 83.992032][ T5607] bridge_slave_1: entered promiscuous mode [ 84.001966][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.021649][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.028960][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.036519][ T5604] bridge_slave_1: entered allmulticast mode [ 84.043664][ T5604] bridge_slave_1: entered promiscuous mode [ 84.127179][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.134360][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.142098][ T5605] bridge_slave_0: entered allmulticast mode [ 84.149646][ T5605] bridge_slave_0: entered promiscuous mode [ 84.160005][ T5606] team0: Port device team_slave_0 added [ 84.178111][ T5618] team0: Port device team_slave_0 added [ 84.186713][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.196595][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.203920][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.211414][ T5605] bridge_slave_1: entered allmulticast mode [ 84.218714][ T5605] bridge_slave_1: entered promiscuous mode [ 84.227756][ T5606] team0: Port device team_slave_1 added [ 84.236509][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.247673][ T5618] team0: Port device team_slave_1 added [ 84.255753][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.287977][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.375166][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.385602][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.392607][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.419553][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.443597][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.450903][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.482210][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.495654][ T5604] team0: Port device team_slave_0 added [ 84.503828][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.513790][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.521179][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.547197][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.560129][ T5607] team0: Port device team_slave_0 added [ 84.566621][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.573598][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.599881][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.612937][ T5604] team0: Port device team_slave_1 added [ 84.639056][ T5607] team0: Port device team_slave_1 added [ 84.685489][ T5605] team0: Port device team_slave_0 added [ 84.694133][ T5605] team0: Port device team_slave_1 added [ 84.735731][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.742740][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.768975][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.791312][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.798748][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.825004][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.857622][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.864909][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.890911][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.902877][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.910105][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.936056][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.947735][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.955043][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.981028][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.040657][ T5606] hsr_slave_0: entered promiscuous mode [ 85.047323][ T5606] hsr_slave_1: entered promiscuous mode [ 85.054329][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.061326][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.088247][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.112388][ T5618] hsr_slave_0: entered promiscuous mode [ 85.118961][ T5618] hsr_slave_1: entered promiscuous mode [ 85.125613][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 85.131468][ T5618] Cannot create hsr debugfs directory [ 85.297950][ T5607] hsr_slave_0: entered promiscuous mode [ 85.304315][ T5607] hsr_slave_1: entered promiscuous mode [ 85.311151][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 85.317979][ T5607] Cannot create hsr debugfs directory [ 85.329273][ T5604] hsr_slave_0: entered promiscuous mode [ 85.335738][ T5604] hsr_slave_1: entered promiscuous mode [ 85.341908][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 85.347730][ T5604] Cannot create hsr debugfs directory [ 85.365288][ T5605] hsr_slave_0: entered promiscuous mode [ 85.371748][ T5605] hsr_slave_1: entered promiscuous mode [ 85.378293][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 85.384044][ T5605] Cannot create hsr debugfs directory [ 85.876592][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.894111][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.901859][ T5617] Bluetooth: hci3: command tx timeout [ 85.904951][ T5614] Bluetooth: hci2: command tx timeout [ 85.907506][ T5621] Bluetooth: hci0: command tx timeout [ 85.912706][ T5620] Bluetooth: hci4: command tx timeout [ 85.912732][ T5620] Bluetooth: hci1: command tx timeout [ 85.929699][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.939440][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.947347][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.958323][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.966515][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.980154][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.061294][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.074110][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.082552][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.094348][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.102272][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.114021][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.129229][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.139737][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.230498][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.241490][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.250288][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.261647][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.269682][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.279538][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.287975][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.299421][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.410676][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.449514][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.460297][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.468819][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.483612][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.509112][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.523337][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.531965][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.546760][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.582193][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.629728][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.637255][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.674480][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.681699][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.719342][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.732297][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.745991][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.758317][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.768984][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.780802][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.796275][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.811823][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.871919][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.942964][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.978015][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.035325][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.042616][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.073585][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.080915][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.121104][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.180503][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.188083][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.239816][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.247005][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.279127][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.412684][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.431094][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.479149][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.486377][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.536229][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.543593][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.613332][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.661681][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.668956][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.743662][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.750990][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.944085][ T5607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.978775][ T5621] Bluetooth: hci0: command tx timeout [ 87.978797][ T5617] Bluetooth: hci3: command tx timeout [ 87.984296][ T5621] Bluetooth: hci2: command tx timeout [ 87.990101][ T5614] Bluetooth: hci1: command tx timeout [ 87.997107][ T5621] Bluetooth: hci4: command tx timeout [ 88.029469][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.218642][ T5606] veth0_vlan: entered promiscuous mode [ 88.283621][ T5606] veth1_vlan: entered promiscuous mode [ 88.530127][ T5606] veth0_macvtap: entered promiscuous mode [ 88.567775][ T5606] veth1_macvtap: entered promiscuous mode [ 88.629849][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.657740][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.695942][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.737503][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.877162][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.907078][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.922490][ T5618] veth0_vlan: entered promiscuous mode [ 88.937674][ T5605] veth0_vlan: entered promiscuous mode [ 89.001137][ T5605] veth1_vlan: entered promiscuous mode [ 89.021261][ T5618] veth1_vlan: entered promiscuous mode [ 89.095793][ T141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.110877][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.132620][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.142296][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.212219][ T5618] veth0_macvtap: entered promiscuous mode [ 89.238987][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.250913][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.264705][ T1113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.279972][ T5618] veth1_macvtap: entered promiscuous mode [ 89.302372][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.312249][ T5605] veth0_macvtap: entered promiscuous mode [ 89.329493][ T5605] veth1_macvtap: entered promiscuous mode [ 89.372714][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.402204][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.429881][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.488917][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.529187][ T5604] veth0_vlan: entered promiscuous mode [ 89.553927][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.677463][ T5604] veth1_vlan: entered promiscuous mode [ 89.696908][ T141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.724202][ T5803] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 89.732258][ T5803] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 89.763013][ T5803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 89.811658][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.819911][ T1019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.832028][ T1019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.846795][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.874679][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.957495][ T1113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.983595][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.999820][ T303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.024324][ T303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.050203][ T5604] veth0_macvtap: entered promiscuous mode [ 90.057114][ T5621] Bluetooth: hci4: command tx timeout [ 90.066482][ T5621] Bluetooth: hci1: command tx timeout [ 90.068440][ T5614] Bluetooth: hci3: command tx timeout [ 90.071962][ T5621] Bluetooth: hci2: command tx timeout [ 90.082271][ T5617] Bluetooth: hci0: command tx timeout [ 90.139077][ T5604] veth1_macvtap: entered promiscuous mode [ 90.146927][ T5809] Cannot find set identified by id 0 to match [ 90.180567][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.197717][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.305851][ T1113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.334722][ T141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.365084][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.399685][ T5607] veth0_vlan: entered promiscuous mode [ 90.412395][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.423012][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.436958][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.513372][ T5607] veth1_vlan: entered promiscuous mode [ 90.582306][ T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.617530][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.744829][ T1019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.830538][ T5607] veth0_macvtap: entered promiscuous mode [ 90.860471][ T5607] veth1_macvtap: entered promiscuous mode [ 90.893047][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.917348][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.945728][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.022137][ T5842] netlink: 'syz.2.10': attribute type 13 has an invalid length. [ 91.038580][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.108995][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 91.118034][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 91.292302][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 91.313562][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.341343][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.358921][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.603038][ T5851] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 91.688885][ T1113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.729946][ T1113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.820875][ T187] cfg80211: failed to load regulatory.db [ 91.830967][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.874895][ T1019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.911868][ T1019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.945722][ T303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.182849][ T5614] block nbd0: Receive control failed (result -32) [ 92.190198][ T5617] block nbd0: Receive control failed (result -32) [ 92.569963][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.590984][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.851573][ T5891] netlink: 'syz.0.28': attribute type 10 has an invalid length. [ 93.342497][ T5908] syzkaller1: entered promiscuous mode [ 93.365560][ T5908] syzkaller1: entered allmulticast mode [ 93.500733][ T5914] netlink: 596 bytes leftover after parsing attributes in process `syz.2.35'. [ 93.664816][ T5917] xt_bpf: check failed: parse error [ 93.759890][ T5919] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 93.792283][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 93.861485][ T5926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 94.063037][ T5928] ipvlan2: entered promiscuous mode [ 94.090208][ T5928] batman_adv: batadv0: Adding interface: ipvlan2 [ 94.108353][ T5928] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.203024][ T5928] batman_adv: batadv0: Interface activated: ipvlan2 [ 94.288281][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 94.333267][ T5946] Zero length message leads to an empty skb [ 94.586424][ T5956] netlink: 596 bytes leftover after parsing attributes in process `syz.2.48'. [ 94.694001][ T5955] bridge1: entered promiscuous mode [ 94.716047][ T5955] bridge1: entered allmulticast mode [ 94.717804][ T5962] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.49'. [ 94.733625][ T5955] team0: Port device bridge1 added [ 94.740084][ T5952] syzkaller0: entered promiscuous mode [ 94.747026][ T5952] syzkaller0: entered allmulticast mode [ 94.767800][ T5959] bridge0: port 3(team0) entered blocking state [ 94.782166][ T5959] bridge0: port 3(team0) entered disabled state [ 94.789309][ T5959] team0: entered allmulticast mode [ 94.794723][ T5959] team_slave_0: entered allmulticast mode [ 94.800667][ T5959] team_slave_1: entered allmulticast mode [ 94.810469][ T5959] team0: entered promiscuous mode [ 94.817027][ T5959] team_slave_0: entered promiscuous mode [ 94.823279][ T5959] team_slave_1: entered promiscuous mode [ 94.832724][ T5959] bridge0: port 3(team0) entered blocking state [ 94.839871][ T5959] bridge0: port 3(team0) entered forwarding state [ 94.938327][ T5961] ipvlan2: entered promiscuous mode [ 94.959397][ T5961] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 94.995180][ T5961] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 95.022475][ T5966] netlink: 104 bytes leftover after parsing attributes in process `syz.0.52'. [ 95.034744][ T5961] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 95.795749][ T5996] netlink: 596 bytes leftover after parsing attributes in process `syz.4.60'. [ 95.803885][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.61'. [ 95.821899][ T5998] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 96.095951][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.651664][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 96.691415][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 96.726171][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 96.779110][ T6046] netlink: 'syz.1.67': attribute type 12 has an invalid length. [ 96.802376][ T6046] netlink: 'syz.1.67': attribute type 29 has an invalid length. [ 96.829394][ T6046] netlink: 148 bytes leftover after parsing attributes in process `syz.1.67'. [ 96.843036][ T6046] netlink: 59 bytes leftover after parsing attributes in process `syz.1.67'. [ 97.104977][ T6053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 97.216443][ T6061] block nbd1: server does not support multiple connections per device. [ 97.271680][ T6061] block nbd1: shutting down sockets [ 97.634188][ T6082] IPv6: addrconf: prefix option has invalid lifetime [ 98.523669][ T6125] netlink: 'syz.4.94': attribute type 1 has an invalid length. [ 98.653846][ T6131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.537930][ T6127] syzkaller0: entered promiscuous mode [ 99.555939][ T6127] syzkaller0: entered allmulticast mode [ 99.827214][ T6142] Bluetooth: MGMT ver 1.23 [ 99.970694][ T6148] FAULT_INJECTION: forcing a failure. [ 99.970694][ T6148] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.022468][ T6148] CPU: 0 UID: 0 PID: 6148 Comm: syz.3.100 Not tainted syzkaller #0 PREEMPT(full) [ 100.022498][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.022518][ T6148] Call Trace: [ 100.022527][ T6148] [ 100.022536][ T6148] dump_stack_lvl+0xe8/0x150 [ 100.022582][ T6148] should_fail_ex+0x40c/0x560 [ 100.022609][ T6148] _copy_to_iter+0x1e4/0x1810 [ 100.022649][ T6148] ? __asan_memset+0x22/0x50 [ 100.022672][ T6148] ? __pfx__copy_to_iter+0x10/0x10 [ 100.022694][ T6148] ? sctp_skb_recv_datagram+0x833/0x9a0 [ 100.022743][ T6148] __skb_datagram_iter+0xf8/0x980 [ 100.022768][ T6148] ? __pfx_sctp_skb_recv_datagram+0x10/0x10 [ 100.022820][ T6148] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 100.022848][ T6148] ? sctp_recvmsg+0x16c/0xcd0 [ 100.022883][ T6148] skb_copy_datagram_iter+0xb5/0x240 [ 100.022913][ T6148] sctp_recvmsg+0x2a5/0xcd0 [ 100.022950][ T6148] ? __pfx_inet_recvmsg+0x10/0x10 [ 100.022975][ T6148] sock_recvmsg+0x166/0x1e0 [ 100.023007][ T6148] ____sys_recvmsg+0x1e6/0x4a0 [ 100.023041][ T6148] ? __pfx_____sys_recvmsg+0x10/0x10 [ 100.023081][ T6148] ? import_iovec+0x73/0xa0 [ 100.023113][ T6148] ___sys_recvmsg+0x213/0x5a0 [ 100.023143][ T6148] ? __pfx____sys_recvmsg+0x10/0x10 [ 100.023172][ T6148] ? __fget_files+0x2a/0x420 [ 100.023217][ T6148] ? __fget_files+0x3a2/0x420 [ 100.023255][ T6148] do_recvmmsg+0x31a/0x7f0 [ 100.023289][ T6148] ? __pfx_do_recvmmsg+0x10/0x10 [ 100.023326][ T6148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.023366][ T6148] ? __fget_files+0x3a2/0x420 [ 100.023411][ T6148] __x64_sys_recvmmsg+0x198/0x250 [ 100.023439][ T6148] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 100.023483][ T6148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.023506][ T6148] do_syscall_64+0x174/0x580 [ 100.023535][ T6148] ? trace_irq_disable+0x3b/0x140 [ 100.023561][ T6148] ? clear_bhb_loop+0x70/0xc0 [ 100.023586][ T6148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.023606][ T6148] RIP: 0033:0x7f7144b9e0d9 [ 100.023635][ T6148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.023652][ T6148] RSP: 002b:00007f7145b3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 100.023678][ T6148] RAX: ffffffffffffffda RBX: 00007f7144e25fa0 RCX: 00007f7144b9e0d9 [ 100.023708][ T6148] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 100.023719][ T6148] RBP: 00007f7145b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 100.023731][ T6148] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 100.023742][ T6148] R13: 00007f7144e26038 R14: 00007f7144e25fa0 R15: 00007ffc09f8d8e8 [ 100.023774][ T6148] [ 100.730871][ T6168] __nla_validate_parse: 8 callbacks suppressed [ 100.730891][ T6168] netlink: 56 bytes leftover after parsing attributes in process `syz.0.109'. [ 100.750943][ T6168] netlink: 'syz.0.109': attribute type 2 has an invalid length. [ 100.760235][ T6168] netlink: 'syz.0.109': attribute type 1 has an invalid length. [ 100.768540][ T6168] netlink: 116 bytes leftover after parsing attributes in process `syz.0.109'. [ 100.829857][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.110'. [ 100.875160][ T6172] netlink: 240 bytes leftover after parsing attributes in process `syz.3.111'. [ 100.906793][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 100.963140][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 100.977591][ T6176] netlink: 'syz.0.113': attribute type 30 has an invalid length. [ 101.005720][ T6176] vxlan0: entered promiscuous mode [ 101.023354][ T6176] vxlan0: entered allmulticast mode [ 101.033522][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 101.053380][ T6177] netlink: 'syz.0.113': attribute type 30 has an invalid length. [ 101.074679][ T6028] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.093506][ T6031] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.110292][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 101.118401][ T6031] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.137176][ T6179] FAULT_INJECTION: forcing a failure. [ 101.137176][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.153969][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.3.114 Not tainted syzkaller #0 PREEMPT(full) [ 101.153994][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.154007][ T6179] Call Trace: [ 101.154014][ T6179] [ 101.154023][ T6179] dump_stack_lvl+0xe8/0x150 [ 101.154057][ T6179] should_fail_ex+0x40c/0x560 [ 101.154085][ T6179] _copy_to_user+0x31/0xb0 [ 101.154116][ T6179] simple_read_from_buffer+0xe1/0x170 [ 101.154149][ T6179] proc_fail_nth_read+0x1bb/0x230 [ 101.154182][ T6179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.154215][ T6179] ? rw_verify_area+0x24a/0x4c0 [ 101.154248][ T6179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.154285][ T6179] vfs_read+0x213/0xa80 [ 101.154321][ T6179] ? __pfx___mutex_lock+0x10/0x10 [ 101.154353][ T6179] ? __pfx_vfs_read+0x10/0x10 [ 101.154385][ T6179] ? __fget_files+0x2a/0x420 [ 101.154416][ T6179] ? __fget_files+0x3a2/0x420 [ 101.154441][ T6179] ? __fget_files+0x2a/0x420 [ 101.154476][ T6179] ksys_read+0x150/0x270 [ 101.154509][ T6179] ? __pfx_ksys_read+0x10/0x10 [ 101.154552][ T6179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.154575][ T6179] do_syscall_64+0x174/0x580 [ 101.154611][ T6179] ? trace_irq_disable+0x3b/0x140 [ 101.154635][ T6179] ? clear_bhb_loop+0x70/0xc0 [ 101.154661][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.154681][ T6179] RIP: 0033:0x7f7144b5e90e [ 101.154700][ T6179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.154717][ T6179] RSP: 002b:00007f7145b3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.154739][ T6179] RAX: ffffffffffffffda RBX: 00007f7145b3f6c0 RCX: 00007f7144b5e90e [ 101.154753][ T6179] RDX: 000000000000000f RSI: 00007f7145b3f0a0 RDI: 0000000000000004 [ 101.154766][ T6179] RBP: 00007f7145b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 101.154779][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.154791][ T6179] R13: 00007f7144e26038 R14: 00007f7144e25fa0 R15: 00007ffc09f8d8e8 [ 101.154825][ T6179] [ 101.281712][ T6177] vxlan1: entered promiscuous mode [ 101.422875][ T6182] GUP no longer grows the stack in syz.1.116 (6182): 200000003000-20000000a000 (200000001000) [ 101.444501][ T6177] vxlan1: entered allmulticast mode [ 101.464384][ T6182] CPU: 1 UID: 0 PID: 6182 Comm: syz.1.116 Not tainted syzkaller #0 PREEMPT(full) [ 101.464411][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.464425][ T6182] Call Trace: [ 101.464433][ T6182] [ 101.464442][ T6182] dump_stack_lvl+0xe8/0x150 [ 101.464478][ T6182] __get_user_pages+0x238c/0x2720 [ 101.464521][ T6182] ? __gup_longterm_locked+0xc3b/0x15c0 [ 101.464574][ T6182] __gup_longterm_locked+0xd52/0x15c0 [ 101.464605][ T6182] ? lock_acquire+0x106/0x350 [ 101.464653][ T6182] gup_fast_fallback+0x1d8c/0x20e0 [ 101.464711][ T6182] ? __pfx_gup_fast_fallback+0x10/0x10 [ 101.464737][ T6182] ? is_valid_gup_args+0x11f/0x200 [ 101.464771][ T6182] ? get_user_pages_fast+0x4d/0xb0 [ 101.464794][ T6182] __iov_iter_get_pages_alloc+0x378/0xa40 [ 101.464830][ T6182] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 101.464867][ T6182] iov_iter_get_pages2+0x5e/0xa0 [ 101.464898][ T6182] __se_sys_vmsplice+0x7b5/0x1660 [ 101.464948][ T6182] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 101.464979][ T6182] ? __pfx_futex_wait+0x10/0x10 [ 101.465036][ T6182] ? kmem_cache_free+0x182/0x650 [ 101.465104][ T6182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.465128][ T6182] do_syscall_64+0x174/0x580 [ 101.465159][ T6182] ? trace_irq_disable+0x3b/0x140 [ 101.465185][ T6182] ? clear_bhb_loop+0x70/0xc0 [ 101.465211][ T6182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.465241][ T6182] RIP: 0033:0x7fe8f519e0d9 [ 101.465261][ T6182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.465279][ T6182] RSP: 002b:00007fe8f6026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 101.465301][ T6182] RAX: ffffffffffffffda RBX: 00007fe8f5425fa0 RCX: 00007fe8f519e0d9 [ 101.465317][ T6182] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 101.465330][ T6182] RBP: 00007fe8f5235024 R08: 0000000000000000 R09: 0000000000000000 [ 101.465342][ T6182] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 101.465354][ T6182] R13: 00007fe8f5426038 R14: 00007fe8f5425fa0 R15: 00007fff2848eef8 [ 101.465389][ T6182] [ 101.757714][ T6190] vlan2: entered allmulticast mode [ 101.763112][ T6190] bond0: entered allmulticast mode [ 101.779488][ T6190] bond_slave_0: entered allmulticast mode [ 101.802726][ T6190] bond_slave_1: entered allmulticast mode [ 101.827165][ T6177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.113'. [ 101.836722][ T6181] netlink: 284 bytes leftover after parsing attributes in process `syz.0.113'. [ 101.847302][ T34] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.894970][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.903131][ T5617] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.008392][ T6195] dummy0: entered allmulticast mode [ 102.177337][ T6212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.340235][ T6216] nbd4: detected capacity change from 0 to 63 [ 102.379194][ T6212] block nbd4: NBD_DISCONNECT [ 102.401960][ T6212] block nbd4: Disconnected due to user request. [ 102.416247][ T6212] block nbd4: shutting down sockets [ 102.471545][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 102.481397][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 102.489242][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 102.498838][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 102.506651][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 102.516220][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 102.523995][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 102.533619][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 102.575377][ T1678] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 102.586355][ T1678] Buffer I/O error on dev nbd4, logical block 0, async page read [ 102.595018][ T1678] Buffer I/O error on dev nbd4, logical block 1, async page read [ 102.602948][ T1678] Buffer I/O error on dev nbd4, logical block 2, async page read [ 102.610863][ T1678] Buffer I/O error on dev nbd4, logical block 3, async page read [ 102.620720][ T1678] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 102.630508][ T1678] Buffer I/O error on dev nbd4, logical block 0, async page read [ 102.638365][ T1678] Buffer I/O error on dev nbd4, logical block 1, async page read [ 102.646818][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 102.656849][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 102.671955][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 102.683732][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 102.693779][ T5608] ldm_validate_partition_table(): Disk read failed. [ 102.707897][ T5608] Dev nbd4: unable to read RDB block 0 [ 102.715012][ T5608] nbd4: unable to read partition table [ 102.727909][ T5608] ldm_validate_partition_table(): Disk read failed. [ 102.745730][ T5608] Dev nbd4: unable to read RDB block 0 [ 102.758501][ T5608] nbd4: unable to read partition table [ 102.781391][ T6232] x_tables: ip_tables: osf match: only valid for protocol 6 [ 103.165852][ T6249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.520409][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.529007][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.720554][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.741008][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.979438][ T141] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.996977][ T141] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.006596][ T141] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.015666][ T141] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.238714][ T6283] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 104.728358][ T6302] xfrm0 speed is unknown, defaulting to 1000 [ 104.810769][ T6302] xfrm0 speed is unknown, defaulting to 1000 [ 104.879604][ T6302] xfrm0 speed is unknown, defaulting to 1000 [ 104.892719][ T6311] Illegal XDP return value 2468649216 on prog (id 42) dev N/A, expect packet loss! [ 104.924232][ T6311] netlink: 'syz.4.153': attribute type 21 has an invalid length. [ 104.953814][ T6311] netlink: 'syz.4.153': attribute type 4 has an invalid length. [ 104.964048][ T6311] netlink: 'syz.4.153': attribute type 3 has an invalid length. [ 104.974967][ T6311] warning: `syz.4.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.350702][ T5622] udevd[5622]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 105.410997][ T5608] udevd[5608]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 105.777865][ T6329] xt_bpf: check failed: parse error [ 106.051832][ T6302] infiniband syz0: set active [ 106.068338][ T6302] infiniband syz0: added xfrm0 [ 106.143542][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.187567][ T6302] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 106.218062][ T6302] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 106.257229][ T6302] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 106.317737][ T29] xfrm0 speed is unknown, defaulting to 1000 [ 106.505364][ T6302] RDS/IB: syz0: added [ 106.518694][ T6302] smc: adding ib device syz0 with port count 1 [ 106.536820][ T6302] smc: ib device syz0 port 1 has no pnetid [ 106.544445][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.559840][ T29] xfrm0 speed is unknown, defaulting to 1000 [ 106.578656][ T6302] xfrm0 speed is unknown, defaulting to 1000 [ 106.708839][ T6365] __nla_validate_parse: 6 callbacks suppressed [ 106.708857][ T6365] netlink: 76 bytes leftover after parsing attributes in process `syz.1.166'. [ 106.938771][ T6375] netlink: 'syz.3.168': attribute type 9 has an invalid length. [ 106.960818][ T6375] netlink: 'syz.3.168': attribute type 5 has an invalid length. [ 106.993676][ T6378] wg2: entered promiscuous mode [ 107.160785][ T6302] xfrm0 speed is unknown, defaulting to 1000 [ 107.177416][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.287081][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'. [ 107.328491][ T6383] netlink: 'syz.4.170': attribute type 21 has an invalid length. [ 107.337689][ T6383] netlink: 128 bytes leftover after parsing attributes in process `syz.4.170'. [ 107.349575][ T6383] netlink: 'syz.4.170': attribute type 4 has an invalid length. [ 107.366754][ T6383] netlink: 'syz.4.170': attribute type 5 has an invalid length. [ 107.385832][ T6383] netlink: 3 bytes leftover after parsing attributes in process `syz.4.170'. [ 107.471095][ T6386] xt_bpf: check failed: parse error [ 107.626832][ T6302] xfrm0 speed is unknown, defaulting to 1000 [ 107.698010][ T6394] netlink: 44 bytes leftover after parsing attributes in process `syz.2.173'. [ 107.830956][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.839807][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.850628][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.866255][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.929288][ T6302] xfrm0 speed is unknown, defaulting to 1000 [ 108.109448][ T6302] xfrm0 speed is unknown, defaulting to 1000 [ 108.214817][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.254826][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.783988][ T6369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.220737][ T6425] xt_bpf: check failed: parse error [ 110.330987][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.515466][ T6434] netlink: 'syz.2.187': attribute type 2 has an invalid length. [ 110.871454][ T6442] bond2: entered promiscuous mode [ 111.057010][ T6458] syzkaller0: entered promiscuous mode [ 111.068548][ T6458] syzkaller0: entered allmulticast mode [ 111.080619][ T6458] tipc: Started in network mode [ 111.085691][ T6458] tipc: Node identity 62021e63b258, cluster identity 4711 [ 111.094150][ T6458] tipc: Enabled bearer , priority 0 [ 111.129499][ T6457] tipc: Resetting bearer [ 111.202632][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 111.269378][ T6457] tipc: Disabling bearer [ 111.386174][ T29] net_ratelimit: 3 callbacks suppressed [ 111.386191][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.421655][ T6468] xt_bpf: check failed: parse error [ 111.777184][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 111.847636][ T6478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.966385][ T6490] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 112.033135][ T6490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.079893][ T6490] : renamed from dummy0 (while UP) [ 112.114494][ T6498] netlink: 596 bytes leftover after parsing attributes in process `syz.2.206'. [ 112.140099][ T6493] IPVS: Scheduler module ip_vs_sip not found [ 112.342894][ T6501] syzkaller0: entered promiscuous mode [ 112.378899][ T6501] syzkaller0: entered allmulticast mode [ 112.417263][ T6501] tipc: Enabled bearer , priority 0 [ 112.446076][ T6501] tipc: Resetting bearer [ 112.455895][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.490454][ T6509] xt_bpf: check failed: parse error [ 112.498409][ T6500] tipc: Resetting bearer [ 112.575756][ T6500] tipc: Disabling bearer [ 112.650992][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.214'. [ 112.844471][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 112.874697][ T6525] netlink: 596 bytes leftover after parsing attributes in process `syz.2.217'. [ 112.882034][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 112.885112][ T6031] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.938571][ T6031] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.975573][ T6031] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.045098][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.371903][ T6550] sch_fq: defrate 0 ignored. [ 113.381076][ T6542] bridge_slave_0: left allmulticast mode [ 113.402598][ T6542] bridge_slave_0: left promiscuous mode [ 113.415434][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.474251][ T6542] bridge_slave_1: left allmulticast mode [ 113.505533][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.527542][ T6542] bridge_slave_1: left promiscuous mode [ 113.548153][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.579130][ T6028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.588116][ T5339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.605339][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.620968][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.637665][ T6542] bond0: (slave bond_slave_0): Releasing backup interface [ 113.659474][ T6542] bond_slave_0: left allmulticast mode [ 113.679920][ T6542] bond0: (slave bond_slave_1): Releasing backup interface [ 113.701954][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 113.715441][ T6542] bond_slave_1: left allmulticast mode [ 113.738679][ T6542] team0: Port device team_slave_0 removed [ 113.749769][ T6542] team0: Port device team_slave_1 removed [ 113.762933][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.786643][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.796434][ T6542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.829206][ T6561] 8021q: VLANs not supported on ipvlan0 [ 114.172454][ T6584] netlink: 596 bytes leftover after parsing attributes in process `syz.1.230'. [ 114.291316][ T6586] netlink: 'syz.4.231': attribute type 4 has an invalid length. [ 114.535064][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.870154][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.076832][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 115.255221][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.262177][ T5617] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 115.278638][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 115.352584][ T6620] SET target dimension over the limit! [ 115.582562][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 115.788436][ T6642] xt_hashlimit: size too large, truncated to 1048576 [ 115.808134][ T6641] lo speed is unknown, defaulting to 1000 [ 115.898643][ T6641] lo speed is unknown, defaulting to 1000 [ 115.967958][ T6641] lo speed is unknown, defaulting to 1000 [ 115.993213][ T6641] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 116.027274][ T6641] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 116.083514][ T6641] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 116.120914][ T6641] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.170463][ T6641] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.243327][ T6641] lo speed is unknown, defaulting to 1000 [ 116.267258][ T6641] lo speed is unknown, defaulting to 1000 [ 116.286988][ T6641] lo speed is unknown, defaulting to 1000 [ 116.302574][ T6641] lo speed is unknown, defaulting to 1000 [ 116.344294][ T6641] lo speed is unknown, defaulting to 1000 [ 116.616388][ T29] net_ratelimit: 4 callbacks suppressed [ 116.616405][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.718169][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.384397][ T6702] __nla_validate_parse: 6 callbacks suppressed [ 117.384416][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 117.655490][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.693838][ T6686] netlink: 84 bytes leftover after parsing attributes in process `syz.3.259'. [ 117.891408][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 117.978805][ T6717] block nbd1: server does not support multiple connections per device. [ 117.992092][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 118.006257][ T6717] block nbd1: shutting down sockets [ 118.050197][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 118.698910][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.708691][ T6717] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.734322][ T6717] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 118.837431][ T6717] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.846577][ T6717] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 118.885040][ T6717] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.904963][ T6717] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 118.977626][ T6717] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.997020][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.275'. [ 119.009812][ T6717] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 119.070297][ T6717] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 119.096360][ T6717] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 119.183394][ T6770] syzkaller1: entered promiscuous mode [ 119.203814][ T6770] syzkaller1: entered allmulticast mode [ 119.338381][ T5339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.347297][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.358118][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.377963][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.387422][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.438172][ T6786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.522185][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 119.580019][ T30] audit: type=1804 audit(1786422081.154:2): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.281" name="/newroot/48/cgroup.controllers" dev="tmpfs" ino=266 res=1 errno=0 [ 119.603892][ T30] audit: type=1800 audit(1786422081.154:3): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.281" name="cgroup.controllers" dev="tmpfs" ino=266 res=0 errno=0 [ 120.696829][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 120.784934][ T6837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.287'. [ 120.908637][ T6828] RDS: rds_bind could not find a transport for ::80:0:8000:0:20:0, load rds_tcp or rds_rdma? [ 121.334865][ T6862] netlink: 'syz.3.295': attribute type 2 has an invalid length. [ 121.526384][ T6868] tc_dump_action: action bad kind [ 121.564050][ T6869] tc_dump_action: action bad kind [ 121.662601][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 121.784659][ T303] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.807501][ T303] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.817573][ T5735] net_ratelimit: 66 callbacks suppressed [ 121.817590][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.844687][ T303] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.881741][ T303] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.923196][ T6886] xt_bpf: check failed: parse error [ 122.015390][ T6890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.023811][ T6890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.032491][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.041419][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.049620][ T6889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.058171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.339511][ T6904] IPv6: addrconf: prefix option has invalid lifetime [ 122.455618][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.517056][ T6911] __nla_validate_parse: 5 callbacks suppressed [ 122.517077][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 122.545360][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.562623][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 122.999126][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 123.057417][ T6935] netlink: 84 bytes leftover after parsing attributes in process `syz.3.318'. [ 123.268237][ T6936] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 123.340724][ T6936] bond4 (unregistering): Released all slaves [ 124.143791][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'. [ 124.189867][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'. [ 124.201898][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 124.311603][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.355221][ T6970] bridge0: port 3(bond1) entered blocking state [ 124.389924][ T6970] bridge0: port 3(bond1) entered disabled state [ 124.423743][ T6970] bond1: entered allmulticast mode [ 124.445517][ T6970] bond1: entered promiscuous mode [ 124.465573][ T6970] bridge0: port 3(bond1) entered blocking state [ 124.473292][ T6970] bridge0: port 3(bond1) entered forwarding state [ 124.509985][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 124.602230][ T12] bridge0: port 3(bond1) entered disabled state [ 125.077658][ T7012] xt_bpf: check failed: parse error [ 125.390527][ T7024] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 125.509083][ T7024] block nbd0: reconnected socket [ 125.540516][ T5617] block nbd0: Receive control failed (result -32) [ 125.582234][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 126.269204][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 126.467333][ T7075] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.689147][ T7083] sch_fq: defrate 4294967293 ignored. [ 127.015232][ T5719] net_ratelimit: 15 callbacks suppressed [ 127.015250][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.314800][ T7100] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 127.934899][ T7142] __nla_validate_parse: 11 callbacks suppressed [ 127.934919][ T7142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.368'. [ 128.001180][ T7142] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 128.067629][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.134075][ T7152] netlink: 596 bytes leftover after parsing attributes in process `syz.1.370'. [ 128.152156][ T5339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.359855][ T7158] bridge0: port 3(syz_tun) entered blocking state [ 128.403008][ T7158] bridge0: port 3(syz_tun) entered disabled state [ 128.443642][ T7158] syz_tun: entered allmulticast mode [ 128.506440][ T7158] syz_tun: entered promiscuous mode [ 128.513282][ T7158] bridge0: port 3(syz_tun) entered blocking state [ 128.520134][ T7158] bridge0: port 3(syz_tun) entered forwarding state [ 128.793888][ T7179] netlink: 'syz.2.378': attribute type 1 has an invalid length. [ 129.098549][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.333709][ T7211] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 129.384125][ T7205] syzkaller0: entered promiscuous mode [ 129.388373][ T5735] lo speed is unknown, defaulting to 1000 [ 129.402198][ T7205] syzkaller0: entered allmulticast mode [ 129.415075][ T7215] netlink: 596 bytes leftover after parsing attributes in process `syz.0.387'. [ 129.817842][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 130.136135][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.237518][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.396'. [ 130.529390][ T7270] netlink: 596 bytes leftover after parsing attributes in process `syz.1.400'. [ 130.824899][ T7284] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 130.856418][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.890728][ T30] audit: type=1800 audit(1786422092.464:4): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.404" name="blkio.bfq.time_recursive" dev="tmpfs" ino=548 res=0 errno=0 [ 131.049351][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 131.107349][ T7297] IPv6: addrconf: prefix option has invalid lifetime [ 131.163334][ T7292] ipvlan2: entered allmulticast mode [ 131.174982][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.195744][ T7292] syz_tun: entered allmulticast mode [ 131.410947][ T7318] netlink: 596 bytes leftover after parsing attributes in process `syz.0.413'. [ 131.582548][ T7329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.416'. [ 131.637963][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.416'. [ 131.722408][ T7335] bridge0: entered allmulticast mode [ 132.044985][ T7356] netlink: 'syz.2.422': attribute type 30 has an invalid length. [ 132.135118][ T5339] net_ratelimit: 2 callbacks suppressed [ 132.135135][ T5339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.214964][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.261243][ T7356] bond1: option arp_missed_max: invalid value (0) [ 132.287428][ T7367] openvswitch: netlink: Duplicate or invalid key (type 0). [ 132.290841][ T7356] bond1: option arp_missed_max: allowed values 1 - 255 [ 132.322723][ T7367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.352421][ T7356] bond1 (unregistering): Released all slaves [ 132.631125][ T7375] [ 132.633526][ T7375] ====================================================== [ 132.640653][ T7375] WARNING: possible circular locking dependency detected [ 132.647716][ T7375] syzkaller #0 Not tainted [ 132.652153][ T7375] ------------------------------------------------------ [ 132.659190][ T7375] syz.3.426/7375 is trying to acquire lock: [ 132.665113][ T7375] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 132.675614][ T7375] [ 132.675614][ T7375] but task is already holding lock: [ 132.683010][ T7375] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 132.692483][ T7375] [ 132.692483][ T7375] which lock already depends on the new lock. [ 132.692483][ T7375] [ 132.702909][ T7375] [ 132.702909][ T7375] the existing dependency chain (in reverse order) is: [ 132.711976][ T7375] [ 132.711976][ T7375] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 132.719997][ T7375] down_write+0x96/0x200 [ 132.724781][ T7375] kernfs_add_one+0x41/0x5e0 [ 132.729911][ T7375] kernfs_create_dir_ns+0x1a1/0x230 [ 132.735651][ T7375] internal_create_group+0x440/0x1180 [ 132.741566][ T7375] cpuhp_invoke_callback+0x434/0x810 [ 132.747387][ T7375] cpuhp_issue_call+0x3f0/0x750 [ 132.752776][ T7375] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 132.759374][ T7375] __cpuhp_setup_state+0x3f/0x60 [ 132.764844][ T7375] do_one_initcall+0x250/0x870 [ 132.770153][ T7375] do_initcall_level+0x10a/0x1a0 [ 132.775627][ T7375] do_initcalls+0x59/0xa0 [ 132.780496][ T7375] kernel_init_freeable+0x29d/0x3e0 [ 132.786492][ T7375] kernel_init+0x1d/0x1d0 [ 132.791355][ T7375] ret_from_fork+0x514/0xb70 [ 132.796492][ T7375] ret_from_fork_asm+0x1a/0x30 [ 132.801802][ T7375] [ 132.801802][ T7375] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 132.809639][ T7375] [ 132.809639][ T7375] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 132.817386][ T7375] cpus_read_lock+0x42/0x160 [ 132.822511][ T7375] static_key_slow_inc+0x12/0x30 [ 132.827990][ T7375] nbd_genl_reconfigure+0x1301/0x1e80 [ 132.833905][ T7375] genl_family_rcv_msg_doit+0x233/0x340 [ 132.839999][ T7375] genl_rcv_msg+0x614/0x7a0 [ 132.845048][ T7375] netlink_rcv_skb+0x226/0x4a0 [ 132.850352][ T7375] genl_rcv+0x28/0x40 [ 132.854874][ T7375] netlink_unicast+0x7bb/0x940 [ 132.860168][ T7375] netlink_sendmsg+0x813/0xb40 [ 132.865476][ T7375] sock_sendmsg_nosec+0x13a/0x180 [ 132.871039][ T7375] ____sys_sendmsg+0x54e/0x850 [ 132.876334][ T7375] ___sys_sendmsg+0x2a5/0x360 [ 132.881544][ T7375] __x64_sys_sendmsg+0x1b1/0x290 [ 132.887015][ T7375] do_syscall_64+0x174/0x580 [ 132.892151][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.898575][ T7375] [ 132.898575][ T7375] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 132.906241][ T7375] __mutex_lock+0x19d/0x1550 [ 132.911379][ T7375] nbd_queue_rq+0x373/0x1150 [ 132.916513][ T7375] blk_mq_dispatch_rq_list+0x499/0x1990 [ 132.922599][ T7375] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 132.929469][ T7375] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 132.935984][ T7375] blk_mq_run_work_fn+0x16c/0x300 [ 132.941552][ T7375] process_scheduled_works+0xa8e/0x14e0 [ 132.947717][ T7375] worker_thread+0xa47/0xfb0 [ 132.952843][ T7375] kthread+0x388/0x470 [ 132.957458][ T7375] ret_from_fork+0x514/0xb70 [ 132.962590][ T7375] ret_from_fork_asm+0x1a/0x30 [ 132.967914][ T7375] [ 132.967914][ T7375] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 132.975142][ T7375] __mutex_lock+0x19d/0x1550 [ 132.980274][ T7375] nbd_queue_rq+0xc1/0x1150 [ 132.985317][ T7375] blk_mq_dispatch_rq_list+0x499/0x1990 [ 132.991407][ T7375] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 132.998307][ T7375] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 133.004830][ T7375] blk_mq_run_work_fn+0x16c/0x300 [ 133.010397][ T7375] process_scheduled_works+0xa8e/0x14e0 [ 133.016482][ T7375] worker_thread+0xa47/0xfb0 [ 133.021605][ T7375] kthread+0x388/0x470 [ 133.026218][ T7375] ret_from_fork+0x514/0xb70 [ 133.031347][ T7375] ret_from_fork_asm+0x1a/0x30 [ 133.036654][ T7375] [ 133.036654][ T7375] -> #4 (set->srcu){.+.+}-{0:0}: [ 133.043796][ T7375] __synchronize_srcu+0xc9/0x2f0 [ 133.049276][ T7375] elevator_switch+0x1e8/0x7b0 [ 133.054572][ T7375] elevator_change+0x2fa/0x480 [ 133.059914][ T7375] elevator_set_default+0x375/0x440 [ 133.065651][ T7375] blk_register_queue+0x3f3/0x4e0 [ 133.071220][ T7375] __add_disk+0x6cb/0xe30 [ 133.076093][ T7375] add_disk_fwnode+0x100/0x3a0 [ 133.081397][ T7375] nbd_dev_add+0x733/0xb60 [ 133.086361][ T7375] nbd_init+0x15f/0x1e0 [ 133.091059][ T7375] do_one_initcall+0x250/0x870 [ 133.096367][ T7375] do_initcall_level+0x10a/0x1a0 [ 133.101842][ T7375] do_initcalls+0x59/0xa0 [ 133.106709][ T7375] kernel_init_freeable+0x29d/0x3e0 [ 133.112448][ T7375] kernel_init+0x1d/0x1d0 [ 133.117310][ T7375] ret_from_fork+0x514/0xb70 [ 133.122531][ T7375] ret_from_fork_asm+0x1a/0x30 [ 133.127837][ T7375] [ 133.127837][ T7375] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 133.135672][ T7375] __mutex_lock+0x19d/0x1550 [ 133.140834][ T7375] elevator_change+0x1af/0x480 [ 133.146135][ T7375] elevator_set_none+0xb5/0x140 [ 133.151519][ T7375] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 133.157866][ T7375] nbd_start_device+0x189/0xb30 [ 133.163256][ T7375] nbd_genl_connect+0x1597/0x1c10 [ 133.168819][ T7375] genl_family_rcv_msg_doit+0x233/0x340 [ 133.175001][ T7375] genl_rcv_msg+0x614/0x7a0 [ 133.180052][ T7375] netlink_rcv_skb+0x226/0x4a0 [ 133.185356][ T7375] genl_rcv+0x28/0x40 [ 133.189879][ T7375] netlink_unicast+0x7bb/0x940 [ 133.195182][ T7375] netlink_sendmsg+0x813/0xb40 [ 133.200483][ T7375] sock_sendmsg_nosec+0x13a/0x180 [ 133.206047][ T7375] ____sys_sendmsg+0x54e/0x850 [ 133.211441][ T7375] ___sys_sendmsg+0x2a5/0x360 [ 133.216657][ T7375] __x64_sys_sendmsg+0x1b1/0x290 [ 133.222130][ T7375] do_syscall_64+0x174/0x580 [ 133.227264][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.233690][ T7375] [ 133.233690][ T7375] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 133.242345][ T7375] blk_alloc_queue+0x544/0x690 [ 133.247650][ T7375] __blk_mq_alloc_disk+0x194/0x390 [ 133.253302][ T7375] nbd_dev_add+0x494/0xb60 [ 133.258370][ T7375] nbd_init+0x15f/0x1e0 [ 133.263163][ T7375] do_one_initcall+0x250/0x870 [ 133.268473][ T7375] do_initcall_level+0x10a/0x1a0 [ 133.274030][ T7375] do_initcalls+0x59/0xa0 [ 133.278899][ T7375] kernel_init_freeable+0x29d/0x3e0 [ 133.284634][ T7375] kernel_init+0x1d/0x1d0 [ 133.289508][ T7375] ret_from_fork+0x514/0xb70 [ 133.294641][ T7375] ret_from_fork_asm+0x1a/0x30 [ 133.299952][ T7375] [ 133.299952][ T7375] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 133.307181][ T7375] fs_reclaim_acquire+0x71/0x100 [ 133.312659][ T7375] kmem_cache_alloc_noprof+0x64/0x5f0 [ 133.318568][ T7375] __kernfs_iattrs+0xdd/0x380 [ 133.323784][ T7375] kernfs_iop_setattr+0xe6/0x3f0 [ 133.329523][ T7375] notify_change+0xbba/0xea0 [ 133.334650][ T7375] do_truncate+0x1c2/0x250 [ 133.339613][ T7375] path_openat+0x2fed/0x3830 [ 133.344745][ T7375] do_file_open+0x23e/0x4a0 [ 133.349790][ T7375] do_sys_openat2+0x115/0x200 [ 133.355012][ T7375] __x64_sys_openat+0x138/0x170 [ 133.360402][ T7375] do_syscall_64+0x174/0x580 [ 133.365546][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.371974][ T7375] [ 133.371974][ T7375] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 133.380502][ T7375] __lock_acquire+0x1520/0x2cf0 [ 133.385901][ T7375] lock_acquire+0x106/0x350 [ 133.390944][ T7375] down_write+0x96/0x200 [ 133.395723][ T7375] kernfs_link_sibling+0x4c7/0x5a0 [ 133.401376][ T7375] kernfs_add_one+0x1d2/0x5e0 [ 133.406595][ T7375] kernfs_create_dir_ns+0x1a1/0x230 [ 133.412338][ T7375] sysfs_create_dir_ns+0x12f/0x2a0 [ 133.417990][ T7375] kobject_add_internal+0x622/0xcd0 [ 133.423724][ T7375] kobject_add+0x163/0x240 [ 133.428769][ T7375] device_add+0x3fa/0xb80 [ 133.433646][ T7375] add_one_compat_dev+0x41b/0x650 [ 133.439234][ T7375] rdma_dev_init_net+0x243/0x2f0 [ 133.444712][ T7375] ops_init+0x35d/0x5d0 [ 133.449411][ T7375] setup_net+0x118/0x350 [ 133.454281][ T7375] copy_net_ns+0x4f9/0x720 [ 133.459251][ T7375] create_new_namespaces+0x3f0/0x6b0 [ 133.465075][ T7375] unshare_nsproxy_namespaces+0x149/0x190 [ 133.471327][ T7375] ksys_unshare+0x57d/0xa00 [ 133.476367][ T7375] __x64_sys_unshare+0x38/0x50 [ 133.481678][ T7375] do_syscall_64+0x174/0x580 [ 133.486814][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.493247][ T7375] [ 133.493247][ T7375] other info that might help us debug this: [ 133.493247][ T7375] [ 133.503486][ T7375] Chain exists of: [ 133.503486][ T7375] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 133.503486][ T7375] [ 133.518126][ T7375] Possible unsafe locking scenario: [ 133.518126][ T7375] [ 133.525584][ T7375] CPU0 CPU1 [ 133.530959][ T7375] ---- ---- [ 133.536336][ T7375] lock(&root->kernfs_rwsem); [ 133.541115][ T7375] lock(cpuhp_state_mutex); [ 133.548239][ T7375] lock(&root->kernfs_rwsem); [ 133.555538][ T7375] lock(&root->kernfs_iattr_rwsem); [ 133.560845][ T7375] [ 133.560845][ T7375] *** DEADLOCK *** [ 133.560845][ T7375] [ 133.569000][ T7375] 5 locks held by syz.3.426/7375: [ 133.574042][ T7375] #0: ffffffff90019308 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 133.583473][ T7375] #1: ffffffff8fd77c28 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 133.593163][ T7375] #2: ffffffff8fd77de8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 133.603033][ T7375] #3: ffff8880298b4fe0 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 133.613931][ T7375] #4: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 133.623793][ T7375] [ 133.623793][ T7375] stack backtrace: [ 133.629709][ T7375] CPU: 0 UID: 0 PID: 7375 Comm: syz.3.426 Not tainted syzkaller #0 PREEMPT(full) [ 133.629735][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.629749][ T7375] Call Trace: [ 133.629756][ T7375] [ 133.629763][ T7375] dump_stack_lvl+0xe8/0x150 [ 133.629787][ T7375] print_circular_bug+0x2e1/0x300 [ 133.629816][ T7375] check_noncircular+0x12e/0x150 [ 133.629844][ T7375] __lock_acquire+0x1520/0x2cf0 [ 133.629868][ T7375] ? __lock_acquire+0x683/0x2cf0 [ 133.629897][ T7375] ? kernfs_link_sibling+0x4c7/0x5a0 [ 133.629920][ T7375] lock_acquire+0x106/0x350 [ 133.629941][ T7375] ? kernfs_link_sibling+0x4c7/0x5a0 [ 133.629970][ T7375] down_write+0x96/0x200 [ 133.629986][ T7375] ? kernfs_link_sibling+0x4c7/0x5a0 [ 133.630010][ T7375] ? __pfx_down_write+0x10/0x10 [ 133.630025][ T7375] ? kernfs_root+0x1c/0x230 [ 133.630046][ T7375] ? kernfs_root+0x1c/0x230 [ 133.630067][ T7375] ? kernfs_root+0x1c/0x230 [ 133.630090][ T7375] ? kernfs_root+0x1ea/0x230 [ 133.630112][ T7375] kernfs_link_sibling+0x4c7/0x5a0 [ 133.630141][ T7375] kernfs_add_one+0x1d2/0x5e0 [ 133.630167][ T7375] kernfs_create_dir_ns+0x1a1/0x230 [ 133.630194][ T7375] sysfs_create_dir_ns+0x12f/0x2a0 [ 133.630218][ T7375] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 133.630241][ T7375] ? do_raw_spin_unlock+0xf5/0x210 [ 133.630259][ T7375] kobject_add_internal+0x622/0xcd0 [ 133.630281][ T7375] kobject_add+0x163/0x240 [ 133.630297][ T7375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.630325][ T7375] ? __pfx_kobject_add+0x10/0x10 [ 133.630342][ T7375] ? do_raw_spin_unlock+0xf5/0x210 [ 133.630360][ T7375] ? get_device_parent+0x366/0x3a0 [ 133.630387][ T7375] device_add+0x3fa/0xb80 [ 133.630418][ T7375] add_one_compat_dev+0x41b/0x650 [ 133.630442][ T7375] rdma_dev_init_net+0x243/0x2f0 [ 133.630463][ T7375] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 133.630485][ T7375] ? ops_init+0x7b/0x5d0 [ 133.630502][ T7375] ops_init+0x35d/0x5d0 [ 133.630520][ T7375] setup_net+0x118/0x350 [ 133.630545][ T7375] ? __pfx_setup_net+0x10/0x10 [ 133.630572][ T7375] ? preinit_net+0x492/0x7b0 [ 133.630596][ T7375] copy_net_ns+0x4f9/0x720 [ 133.630621][ T7375] create_new_namespaces+0x3f0/0x6b0 [ 133.630639][ T7375] ? security_capable+0x7e/0x2c0 [ 133.630665][ T7375] unshare_nsproxy_namespaces+0x149/0x190 [ 133.630684][ T7375] ksys_unshare+0x57d/0xa00 [ 133.630708][ T7375] ? __pfx_ksys_unshare+0x10/0x10 [ 133.630728][ T7375] ? rcu_is_watching+0x15/0xb0 [ 133.630755][ T7375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.630772][ T7375] __x64_sys_unshare+0x38/0x50 [ 133.630792][ T7375] do_syscall_64+0x174/0x580 [ 133.630817][ T7375] ? trace_irq_disable+0x3b/0x140 [ 133.630836][ T7375] ? clear_bhb_loop+0x70/0xc0 [ 133.630855][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.630871][ T7375] RIP: 0033:0x7f7144b9e0d9 [ 133.630887][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.630903][ T7375] RSP: 002b:00007f7145b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 133.630920][ T7375] RAX: ffffffffffffffda RBX: 00007f7144e25fa0 RCX: 00007f7144b9e0d9 [ 133.630932][ T7375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 133.630943][ T7375] RBP: 00007f7144c35024 R08: 0000000000000000 R09: 0000000000000000 [ 133.630953][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.630962][ T7375] R13: 00007f7144e26038 R14: 00007f7144e25fa0 R15: 00007ffc09f8d8e8 [ 133.630981][ T7375] [ 133.651104][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.698202][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.924945][ T7375] xfrm0 speed is unknown, defaulting to 1000 [ 133.936560][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.010345][ T7388] __nla_validate_parse: 2 callbacks suppressed [ 134.010372][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 134.180996][ T7375] lo speed is unknown, defaulting to 1000 [ 134.214710][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.707496][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.736537][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.614904][ T303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.776504][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.254797][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.816675][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.856523][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.896551][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.294824][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.936436][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.734959][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.976423][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.374976][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog