last executing test programs: 20.310883468s ago: executing program 2 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b00000007000000010001000900000005"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a00010000000500040002"], 0x88}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x14}, 0x18) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000240)=r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r10 = accept(r9, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x22008000) accept4(r10, 0x0, 0x0, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x114, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008405) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601c0"], 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38) 19.806856266s ago: executing program 2 (id=182): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000006, 0x4132, 0xffffffffffffffff, 0xab7ee000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b04000000a6f13659c3a000000000000200000028000480240001800b000100657874686472000014000280080006400000000105000200000000000900010073797a30000000000901020073797a32000000001400000011000100000000000000eb181cd6c49f384fb79b0175d206736ae7a09255118ecc0bfa8688091aae538dc8b71613dc0c1f06"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0x10}}, 0x51) sendmsg$AUDIT_TTY_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x0, 0x0, 0xfffffffe}, 0x10}}, 0x0) clock_gettime(0x9, &(0x7f0000000280)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fbdbdf250c000000180001801400020076657468305f746f5f626f5d444d82a5f932bd0c77b80a8a1850556e640000000c0003800800038004000180"], 0x38}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) socket$phonet_pipe(0x23, 0x5, 0x2) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000950000000008000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) close(0x3) 19.614388378s ago: executing program 1 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x2, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x3, 0x4, 0x4, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 19.384429868s ago: executing program 1 (id=188): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000000)={'pimreg1\x00', 0xb4f1, 0x6d0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.36673964s ago: executing program 2 (id=189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="010000001184f9bb1c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r3], 0x44}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6e030700) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r6], 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x40) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x391}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c880) tee(r4, r1, 0x80000001, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) 19.215126271s ago: executing program 1 (id=191): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) setsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000440)="4ed57648b7b5d9414da83eca810f6d26e0c69adca507362f703e76436ddb901dd04e5e3d00197a8bf5619cb11ee5df30b5a1cc851ea2427a6676cb81ed32d689eae8c81abc70bcaad1b9a94fa22f8bfdae30b7d9d3a10e4a74680bcc391bdc6428bceb61ee0d9b7511768f3d02e8179139037f8b4e27fafa01df85118c21cab749b802c2f78122734fc871d999dbae6c1842c43c7d4ae298fb1a94", 0x9b) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) write$cgroup_subtree(r4, 0x0, 0x9) (async) write$cgroup_subtree(r4, 0x0, 0x9) socketpair(0x1, 0x5, 0x0, 0x0) (async) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x40000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) (async) sendto(r6, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) (async) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r8, &(0x7f0000000040)='\v', 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(r7, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1}, 0x94) accept$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x9, 0xa1, 0x4, 0x4003, 0x200, 0x20}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv6=@mcast2, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0xff, 0x1, 0x1, [0x9, 0x1, 0x8, 0x2, 0x4, 0x9, 0xe000, 0xeb, 0x1, 0xd9, 0x40, 0x1, 0x4d24, 0x7, 0x15c, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x98, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 18.719956574s ago: executing program 2 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xb4cca000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 18.505862884s ago: executing program 1 (id=199): pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r2, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@generic={0x2, 0x9, 0x3, 0x1, 0x8}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) 18.415300781s ago: executing program 2 (id=200): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) shutdown(r4, 0x0) poll(&(0x7f00000001c0)=[{r4}], 0x1, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff09, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="14f20e0000000d00000000d70303443532623ff0c507008f8237ae0f3b6a552ed3ae33b8e2efe5488475fe0d4a20bf511a9cbca4a838ea1712e897b6f0e77eda002dd09693f630c35755c14a65b02c90ff327256c9a08a8342ea2dff275fc45bad3a14cbaf"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01030000000000000000050000", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000140)={0xfffffff8, 0x800000000000000, 0x9, 0xc, 0x9, 0xd}) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r9) 18.299673353s ago: executing program 1 (id=202): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x617}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r0, 0x78}, 0x8) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x106, 0x0, 0x0, 0x0, 0x100, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x9, 0x0, 0xab9b}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r0, 0x25, "0be5e065325d9a635f96cd54639c057c2eaaa2f5cce4020da18eaeb097328310d7c49a2738"}, &(0x7f00000001c0)=0x2d) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r5) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r6 = accept$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @remote}, &(0x7f0000000300)=0x10) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000340)={{0x2, 0x4e23, @multicast2}, {0x6, @random="38e77849b4a4"}, 0x18, {0x2, 0x4e22, @rand_addr=0x64010100}, 'syzkaller0\x00'}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x68}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x4, 0x4, 0x7, 0x442b, 0x72}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0xa5, 0x78, &(0x7f0000000500)=""/120, 0x40f00, 0x30, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xc, 0x2de, 0x8}, 0x10, 0x2d3d5, 0xffffffffffffffff, 0x2, &(0x7f0000000600)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000640)=[{0x4, 0x5, 0xd, 0x270c0f25f8a2af33}, {0x5, 0x5, 0x4, 0x6e31cbb766adc4f3}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x0, 0x53, 0xf9, &(0x7f0000000740)="63f2d02f74d2c7d2a5d1c15b09f8e6c26ae5cf913e958fa16b9ba481a296b1bc47d8eab2cbb0c1fb72135ba2023636fed49130ae4c5fa026c737ca65ca55683c3e4fd8e6c017d38b387e2e53885a89fc45d279", &(0x7f00000007c0)=""/249, 0x4, 0x0, 0x46, 0xe4, &(0x7f00000008c0)="fa91331a6c21e19a92ce8c103890c4ded5468ec2e1a3eeaeef110ca1e1341d54dfc8a7af087eab2f9ec80ef36e77cec4f913bc429d0e27efc509757437b96e9f4611e665c2d9", &(0x7f0000000940)="c97d6d5c8471da61fa39dc609734ba41de531ca13956870771e4dfaec5e8b4f65a7071d8adf45591e982af981c8b5a2cd161569f0e3a15b84de065920fb8d6347d2e7d114d95d7800ced14847e469a712f51fdef7dda34ada1d792caf0d86aa2f13752d0625fb0f11d34a9b224aa233c7207c778eaf7b58736299807f279a0387a87685990b3841cc76c6f53b485d352b9726d799fb482a5a89c1a4c63ba7e4986dbaf1ac8b6e5c7cdf621a7407289059a9d3811c897c724252b3a04ad9b7ffaa5134f121f05734e6a7b3e350f8cebd8d4bb25af19fb73acd618f95d95313e4633b18e63", 0x2, 0x0, 0x8}, 0x50) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000b00), 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b40)={'pim6reg\x00', 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@loopback, @in=@loopback, 0x4e24, 0xfff0, 0x4e21, 0x4, 0x2, 0x80, 0x20, 0x0, r9, r10}, {0x3ff, 0x7, 0x4, 0x6, 0x100, 0x6, 0x5, 0x59af5140}, {0x3, 0x7, 0x1, 0x763}, 0x3, 0x6e6bbe, 0x1, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, 0x4d4, 0x32}, 0x2, @in=@empty, 0x0, 0x1, 0x2, 0xb, 0xffffffff, 0xffffff3a, 0x1}}, 0xe8) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x74, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1a}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x16b, 0x66}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x10000}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000e40), &(0x7f0000000e80)=0x8) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r11 = accept4(r1, &(0x7f0000000ec0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000f40)=0x80, 0x80800) connect$can_bcm(r12, &(0x7f0000000f80), 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000fc0)={0x3, 'pim6reg0\x00', {0x3}, 0xf801}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r12, 0x8008f511, &(0x7f0000001000)) sendmsg$can_bcm(r11, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x5, 0xc09, 0x2, {0x77359400}, {0x77359400}, {0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x0, 0x1}, 0xf, 0x2, 0x0, 0x0, "ae64fbd9a967707a7964c0fdf7d57040f440712acb475ce8983847f2b14cc64dccd669757368496cac0fdf72c6b84b34273274cf37969bd035cadc9c9a5f65f1"}}, 0x80}, 0x1, 0x0, 0x0, 0x4002010}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r11, 0x84, 0x79, &(0x7f0000001140)={r2, 0x100, 0x9}, 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000001180)={'macsec0\x00', 0xa00}) 18.049735569s ago: executing program 1 (id=204): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x982754c1534c38ef, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20) socket$netlink(0x10, 0x3, 0x8) (async) r2 = socket$netlink(0x10, 0x3, 0x8) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x307, 0x0, 0x0, {0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)=""/244, 0xf4}], 0x1, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x188}, 0x10000) syz_genetlink_get_family_id$nfc(&(0x7f0000000700), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r14, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x24014) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r17, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8782}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x5, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000081) (async) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r17, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8782}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x5, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000081) bind$qrtr(r8, &(0x7f0000000a40)={0x2a, 0x1, 0x7fff}, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r11, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r11, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b80)) r19 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r13) sendmsg$TIPC_CMD_GET_MAX_PORTS(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r19, 0x1, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x8004) openat$nci(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r17, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x44000) accept4$nfc_llcp(r4, &(0x7f0000000e40), &(0x7f0000000ec0)=0x60, 0x80000) (async) r20 = accept4$nfc_llcp(r4, &(0x7f0000000e40), &(0x7f0000000ec0)=0x60, 0x80000) getsockopt$nfc_llcp(r20, 0x118, 0x1, &(0x7f0000000f00)=""/127, 0x7f) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000f80)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000f80)={'tunl0\x00'}) r21 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r21, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r21, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r22 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001180)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000001440)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f00000011c0)={0x21c, r22, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xe4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5149}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x43}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}]}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r23}, @NL802154_ATTR_SEC_KEY={0x70, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3118c872e9a18f4e4f06ac613c89d589"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8c3370ea3e3d5df39c51d7c8a8f561e34efccf09706017fe7e2b7660706ec27e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "330fea6c98d12d4f3288b65951121c477866b119005d33bfe5b2e54a7084650c"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cd2e8b7306e9f55c3002dec45245ecc3f1e5dc7d0fd905a129ac35ff4a8d655f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9789ec9a39901269bb2b3e62b22d3cbdf612946772fb5a8cb452f42f861f6116"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d6e63a9a944f11211757c67941a3ec51"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x400c040) 18.046523316s ago: executing program 2 (id=205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800ff000000910000b702000043e7b5538500000085000000b7004000000000009500000000000000000000007344bd4c637493a3ddb9683a2961fe707dff165543941eccba1f45ff5e04a0a1dfa8446c3646e8e13fdb1b7faeabb2a94066ede1"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a9ff0000", @ANYRES16=r6, @ANYBLOB="040027bd7000fddbdf2502000000040001805000068014000400fc02000000000000000000000000000114000400fc010000000000000000000000000001050002000100000014000400fc02000000000000000000000000000108000700", @ANYRES32=r7, @ANYBLOB="2800068014000400ff0200000000000000000000000000010600010002000000060005004e2100000c00068008000700", @ANYRES32=0x0, @ANYBLOB="080003000600000008000400ff000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1}}], 0x1, 0x8810) accept$packet(r9, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x1, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17.607356577s ago: executing program 0 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e48864", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.37205472s ago: executing program 0 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socketpair(0x26, 0x800, 0xfffffff7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) unshare(0x22020600) r9 = epoll_create(0x2040) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=@ipv4_getaddr={0xdc, 0x16, 0x4, 0x70bd2a, 0x25dfdbfe, {0x2, 0x68, 0x4b2a2f78c29d6439, 0xfe, r8}, [@IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x124}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x7fff, 0xffff9130, 0x10001, 0x7}}, @IFA_LABEL={0x14, 0x3, 'macvlan1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0xfffe0000, 0x6, 0x2, 0x9d0c}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x0, 0x6fb, 0x7}}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_FLAGS={0x8, 0x8, 0x80}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000084}, 0x4c084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000440)="487114697d50f1c18b64cb47db286fcb605824d8505ce7eabe38d1dec32a0fe578e7f96866a1d8fc546a98ccf7ba1009a03c2bfe87d78b21082765cec02b2920b494efaa576cb42faec6") ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000100003040161000000000000000000008de3c08e3a2cae4e65fc950dae03f9d022bedb3648522228b1c489bbba2c6305a9fcdadc147580f95d5c27e6d8c4954167f6e482a2b9f8647200593efc72de3c9dedda0da7412668952eb5da04b78d4ce76bc8de118d8e3e28115cf0da4048cb1965f99289575d41813bf2af2c832a356c8b15306e1eea1b89a94f4314484552dbc8cfb911122959ef3b792fbceca8988ac3b61beefbe2dac5cc53e8911fd2712be4d533d776218248b80b6409e4fbfb639ce822378640585627381a0e3385d40220a79800fdc77b13165052ca1ed9", @ANYRES32=0x0, @ANYBLOB="d3ddd1de000000001800128008000100677265000c00028006000300ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f0000000340)=0x1e) 17.110468623s ago: executing program 3 (id=214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, r5, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0xf000, 0x0, 0x7008040}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x2000000, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1}, [@RTA_MARK={0x8, 0x10, 0x1}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x5}}, @RTA_FLOW={0x8, 0xb, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000940)=0x8, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000180)=0x4, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xe0000000}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) 17.10978132s ago: executing program 4 (id=215): r0 = socket(0x2a, 0x2, 0x0) sendto$isdn(r0, 0x0, 0xfffffeb3, 0x0, &(0x7f00000003c0)={0x22, 0xff, 0x4, 0xd, 0x81}, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x7, 0x7, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8, 0x80, 0x6, 0x8}}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@allocspi={0xf8, 0x16, 0x30, 0x70bd2d, 0x25dfdbfb, {{{@in6=@empty, @in=@multicast2, 0x4e20, 0xd5, 0x4e22, 0xc, 0xa, 0x0, 0x20, 0x1a, r1, 0xee01}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d6, 0x2b}, @in=@multicast1, {0xc63d, 0x100, 0x6, 0x7fffffff, 0x6, 0x10, 0x2, 0x10001}, {0x2, 0x3, 0xd, 0x7ff}, {0x8, 0xfffff28c, 0xa4}, 0x70bd2d, 0x3500, 0x2, 0x1, 0x3}, 0x5, 0x4}}, 0xf8}, 0x1, 0x0, 0x0, 0x8810}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="2daaff0000000000711013000000000018258e00ca5c5927b216c2af42b9f95bcc6e5125adbfe7779ed226fd3253450ee9755e6ee2b9c2225b", @ANYRES32=r2, @ANYBLOB="00000000020000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) 16.98404173s ago: executing program 4 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0xfffff000, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x1b, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa0}}, 0x0) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000780040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x5, 0x2, 0x7e0471a3) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2d, &(0x7f0000000000)=0x92d5, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) (rerun: 64) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r6}, 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="05000000300800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000040010000000000001d2b000000f33d8eb4847ec8b36f1107e036dd98fc469107485e371bcf5c8177db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866ba6ef10d062715ffe8a5f9f0e6f0cc7eeb22b141d34ead6573e4e6ce2c345bfee79cc3a4b3f82965"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}}, 0x80) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r10, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1, 0xa}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x17}}]}, 0x3c}}, 0x48000) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x8, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) close(0x4) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r13) sendmsg$ETHTOOL_MSG_STRSET_GET(r13, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r12, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) (async, rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r12, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xf92a}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x81}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xe}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40001) (rerun: 32) 16.946541543s ago: executing program 3 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r2, 0x209, 0x40, 0x1000000, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2b, 0x801, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) 16.758718178s ago: executing program 4 (id=218): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r1], 0x64}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x0, @empty, 0x4c23, 0x1000, 'wrr\x00', 0x7, 0x8, 0x4002b}, 0x2c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket(0x840000000002, 0x3, 0x8af5) setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f0000000200)=0x2, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000d7"], 0x0, 0x1a}, 0x28) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x3) getsockopt$ax25_int(r6, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000280)=0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000240)=0x5, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r7}, 0xc) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 16.646962461s ago: executing program 0 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) (async) listen(r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/45, 0x2d}, {&(0x7f0000000f80)=""/12, 0xc}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x3, 0x726, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64000000020605000000000000000086d3d9cae8932100000000000900020073797a32000000000500040000000000050001000600000014000780089c0640000000000800134000000000050005000a00000016000300686173683a6e65742c706f72742c6e6574000000"], 0x64}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES64=r7, @ANYRES32=0x0, @ANYRES16=r6, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES16=r5, @ANYBLOB="52324f1a080e1330c5948c0358926813a7e8c745fbb90254d3fe", @ANYBLOB="6228ef46f25bd458163d10bd5655d0", @ANYBLOB="00000000000000000000cc3aa9d48f1f4b2200000000000000030000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES16=r5, @ANYBLOB="52324f1a080e1330c5948c0358926813a7e8c745fbb90254d3fe", @ANYBLOB="6228ef46f25bd458163d10bd5655d0", @ANYBLOB="00000000000000000000cc3aa9d48f1f4b2200000000000000030000"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYRES16=r6, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r9, 0x0, 0x0}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000f00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x20024054}, 0x0) socketpair(0xb, 0x1, 0x67, &(0x7f00000001c0)) (async) socketpair(0xb, 0x1, 0x67, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c000000100003042abd7000fddbdf2500000000", @ANYRESDEC=r11, @ANYRES32=r7], 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r12 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x20000040) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)=ANY=[@ANYRES64=r12, @ANYRES16, @ANYBLOB, @ANYRESOCT=r2, @ANYBLOB="5ced1a9ed4e19044b2e1d182e389e0395bb14472b95056fa0df9e8a891b12197cd2d7e1b049a5d7b9d9423601188014c2d6f2afe609464032d78738a390c1e8320cc6798f9776e46c9561cf666a7bf2c28c03f0847fd8aa908d420a2dbcd7fe68a95e0b9349c334f065ed1814e4e61b3846d8729"], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x4000) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)=ANY=[@ANYRES64=r12, @ANYRES16, @ANYBLOB, @ANYRESOCT=r2, @ANYBLOB="5ced1a9ed4e19044b2e1d182e389e0395bb14472b95056fa0df9e8a891b12197cd2d7e1b049a5d7b9d9423601188014c2d6f2afe609464032d78738a390c1e8320cc6798f9776e46c9561cf666a7bf2c28c03f0847fd8aa908d420a2dbcd7fe68a95e0b9349c334f065ed1814e4e61b3846d8729"], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x4000) sendmsg$AUDIT_USER(r5, &(0x7f0000000dc0)={0x0, 0xfeb4, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYRES64=r3], 0xf8}}, 0xc4) 16.56874431s ago: executing program 3 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x48) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x24, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94) 16.478808997s ago: executing program 4 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000080000010000000500040002000000050002000a0000fe5b00070000000000000000000000000000000001060001000000000057"], 0x40}}, 0x0) 16.429655346s ago: executing program 0 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x7, 0x5, 0x22, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x20, 0x6}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xff}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x22044080) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @rand_addr, @remote}, &(0x7f0000000300)=0xc) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7fff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044040}, 0x240000a0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r2, 0x600, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240488c4}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r9, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r12, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c000380060003000100000006000100000000fd07000200020000000800010000000000050002"], 0x64}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x50, r11, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x17}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x881) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r13, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r13, @ANYBLOB="c0184041e48f05d9f0cc515e181439213c277339500d8298eed27c696417d461b5fe19c29d69a64f9f8422a0b759b713f91945138fd76de27ab88d1dcf7db792af260f53d10dc437789277afb3bb91059a43c370f3bde50c59affc8a39bb4edb09b8c417d2e5b4561abef98dcb6cd7ae8ceb329101f8dbf16672b8d33106c6f0acaa01cad7b42745", @ANYRESDEC=r13, @ANYRESHEX=r13, @ANYRES64=r13], 0x20}}], 0x1, 0x2000c090) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r14, 0x84, 0x7a, &(0x7f0000000340)={r15, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 16.409383943s ago: executing program 3 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x4b2e8a62f15ec81c, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0xffffc2f3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in6={0xa, 0x4e21, 0x8, @remote, 0x82}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00"], 0x3c}}, 0x0) 16.359593281s ago: executing program 4 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x0, 0x0, 0x2, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000000)={0x3, 0xd, 0x90, &(0x7f0000000100)=""/144}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x0) (async) syz_emit_ethernet(0x84, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, 'V\ak', 0x4e, 0x88, 0xff, @local, @mcast2, {[@routing={0x3a, 0x0, 0x1, 0x8, 0x8004e00}], "4b1fd8cc2c4c4a9b6473b50eab09d362926e1581157c9b0f2fa44de8bfb24e9177ac8476292901261b7bd9e62f4b02f9ea35a2a23e826c809588a153bb6ecc015155f6625671"}}}}}, 0x0) 16.202711003s ago: executing program 3 (id=225): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000008b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 16.139049529s ago: executing program 4 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x8000000, 0x0, 0x0, 0x8, 0x900, 0x8}, 0x20) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8948, &(0x7f0000000300)={'bond0\x00', 0xb}) r3 = socket(0x14, 0x2, 0x4) bind$bt_rfcomm(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r5, 0x1, 0x70bd28, 0x40, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000042}, 0x4048000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_vlan={0x78, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x800, 0xe, 0x2, 0x5, 0x7f}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x400}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'pimreg\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r10 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r10, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x800}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}]}}]}, 0x46}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r11) 16.06272511s ago: executing program 0 (id=227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002b00e6"], 0xa0}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd60fca33f00306700fe800000000000000000000000000000fe8000000000000000000000000000aa2100"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c0006000300000000000000"], 0x6c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x64, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffffffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x4003}, 0x50) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0x86, &(0x7f0000002600)}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000020500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x4106, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 16.058205432s ago: executing program 3 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000002380)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xccc}, 0x1c, 0x0}}], 0x1, 0x20004000) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a000000010001fff27b97e000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c0004000000000008001e0008000000200012800f000100626f6e645f736c61766500000c0005800600050000800000080023000000000008002e00020000000a000200aaaaaaaaaabb000008000d00df00000008002e000100000024000e00010400000000000003000000000000000a000000000000000008d70c0000000008002c0000000100"], 0xa0}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) (async) listen(0xffffffffffffffff, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000002380)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xccc}, 0x1c, 0x0}}], 0x1, 0x20004000) (async) listen(r1, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) (async) listen(r2, 0x2) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a000000010001fff27b97e000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c0004000000000008001e0008000000200012800f000100626f6e645f736c61766500000c0005800600050000800000080023000000000008002e00020000000a000200aaaaaaaaaabb000008000d00df00000008002e000100000024000e00010400000000000003000000000000000a000000000000000008d70c0000000008002c0000000100"], 0xa0}}, 0x4000) (async) 15.714822436s ago: executing program 0 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000001c0)={'veth0_to_bridge\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103fcffffff7e394bcd2b0000000c00060001"], 0x20}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.049432016s ago: executing program 32 (id=204): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x982754c1534c38ef, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20) socket$netlink(0x10, 0x3, 0x8) (async) r2 = socket$netlink(0x10, 0x3, 0x8) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x307, 0x0, 0x0, {0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)=""/244, 0xf4}], 0x1, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x188}, 0x10000) syz_genetlink_get_family_id$nfc(&(0x7f0000000700), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r14, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x24014) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r17, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8782}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x5, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000081) (async) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r17, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8782}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x5, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000081) bind$qrtr(r8, &(0x7f0000000a40)={0x2a, 0x1, 0x7fff}, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r11, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r11, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b80)) r19 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r13) sendmsg$TIPC_CMD_GET_MAX_PORTS(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r19, 0x1, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x8004) openat$nci(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r17, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x44000) accept4$nfc_llcp(r4, &(0x7f0000000e40), &(0x7f0000000ec0)=0x60, 0x80000) (async) r20 = accept4$nfc_llcp(r4, &(0x7f0000000e40), &(0x7f0000000ec0)=0x60, 0x80000) getsockopt$nfc_llcp(r20, 0x118, 0x1, &(0x7f0000000f00)=""/127, 0x7f) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000f80)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000f80)={'tunl0\x00'}) r21 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r21, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r21, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r22 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001180)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000001440)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f00000011c0)={0x21c, r22, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xe4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5149}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x43}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}]}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r23}, @NL802154_ATTR_SEC_KEY={0x70, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3118c872e9a18f4e4f06ac613c89d589"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8c3370ea3e3d5df39c51d7c8a8f561e34efccf09706017fe7e2b7660706ec27e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "330fea6c98d12d4f3288b65951121c477866b119005d33bfe5b2e54a7084650c"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cd2e8b7306e9f55c3002dec45245ecc3f1e5dc7d0fd905a129ac35ff4a8d655f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9789ec9a39901269bb2b3e62b22d3cbdf612946772fb5a8cb452f42f861f6116"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d6e63a9a944f11211757c67941a3ec51"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x400c040) 2.012881624s ago: executing program 33 (id=205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800ff000000910000b702000043e7b5538500000085000000b7004000000000009500000000000000000000007344bd4c637493a3ddb9683a2961fe707dff165543941eccba1f45ff5e04a0a1dfa8446c3646e8e13fdb1b7faeabb2a94066ede1"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a9ff0000", @ANYRES16=r6, @ANYBLOB="040027bd7000fddbdf2502000000040001805000068014000400fc02000000000000000000000000000114000400fc010000000000000000000000000001050002000100000014000400fc02000000000000000000000000000108000700", @ANYRES32=r7, @ANYBLOB="2800068014000400ff0200000000000000000000000000010600010002000000060005004e2100000c00068008000700", @ANYRES32=0x0, @ANYBLOB="080003000600000008000400ff000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1}}], 0x1, 0x8810) accept$packet(r9, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x1, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.048780331s ago: executing program 34 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x8000000, 0x0, 0x0, 0x8, 0x900, 0x8}, 0x20) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8948, &(0x7f0000000300)={'bond0\x00', 0xb}) r3 = socket(0x14, 0x2, 0x4) bind$bt_rfcomm(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r5, 0x1, 0x70bd28, 0x40, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000042}, 0x4048000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_vlan={0x78, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x800, 0xe, 0x2, 0x5, 0x7f}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x400}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'pimreg\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r10 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r10, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x800}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}]}}]}, 0x46}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r11) 31.892001ms ago: executing program 35 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000001c0)={'veth0_to_bridge\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103fcffffff7e394bcd2b0000000c00060001"], 0x20}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 36 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000002380)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xccc}, 0x1c, 0x0}}], 0x1, 0x20004000) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a000000010001fff27b97e000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c0004000000000008001e0008000000200012800f000100626f6e645f736c61766500000c0005800600050000800000080023000000000008002e00020000000a000200aaaaaaaaaabb000008000d00df00000008002e000100000024000e00010400000000000003000000000000000a000000000000000008d70c0000000008002c0000000100"], 0xa0}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) (async) listen(0xffffffffffffffff, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000002380)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xccc}, 0x1c, 0x0}}], 0x1, 0x20004000) (async) listen(r1, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) (async) listen(r2, 0x2) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a000000010001fff27b97e000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c0004000000000008001e0008000000200012800f000100626f6e645f736c61766500000c0005800600050000800000080023000000000008002e00020000000a000200aaaaaaaaaabb000008000d00df00000008002e000100000024000e00010400000000000003000000000000000a000000000000000008d70c0000000008002c0000000100"], 0xa0}}, 0x4000) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 64.872029][ T5809] cgroup: Unknown subsys name 'net' [ 64.978622][ T5809] cgroup: Unknown subsys name 'cpuset' [ 64.987051][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.357039][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.836554][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.866235][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.873997][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.879765][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.882228][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.897404][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.897699][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.913539][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.926127][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.937355][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.945406][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.957247][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.965566][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.967022][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.980159][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.981207][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.996565][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.004981][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.016312][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.016375][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.023607][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.031868][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.048032][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.056158][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.066353][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.505456][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 69.747521][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 69.828167][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.836087][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.843562][ T5819] bridge_slave_0: entered allmulticast mode [ 69.852173][ T5819] bridge_slave_0: entered promiscuous mode [ 69.898084][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.931474][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.940076][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.948366][ T5819] bridge_slave_1: entered allmulticast mode [ 69.955447][ T5819] bridge_slave_1: entered promiscuous mode [ 70.023292][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 70.084547][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 70.096901][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.104075][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.112131][ T5825] bridge_slave_0: entered allmulticast mode [ 70.119295][ T5825] bridge_slave_0: entered promiscuous mode [ 70.134413][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.157059][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.164219][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.171933][ T5825] bridge_slave_1: entered allmulticast mode [ 70.179034][ T5825] bridge_slave_1: entered promiscuous mode [ 70.199992][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.296840][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.304045][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.311391][ T5820] bridge_slave_0: entered allmulticast mode [ 70.318932][ T5820] bridge_slave_0: entered promiscuous mode [ 70.327630][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.334741][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.342090][ T5820] bridge_slave_1: entered allmulticast mode [ 70.349092][ T5820] bridge_slave_1: entered promiscuous mode [ 70.385113][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.406290][ T5819] team0: Port device team_slave_0 added [ 70.430915][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.453510][ T5819] team0: Port device team_slave_1 added [ 70.464149][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.471458][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.479358][ T5831] bridge_slave_0: entered allmulticast mode [ 70.486356][ T5831] bridge_slave_0: entered promiscuous mode [ 70.506507][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.540766][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.548366][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.555911][ T5831] bridge_slave_1: entered allmulticast mode [ 70.562866][ T5831] bridge_slave_1: entered promiscuous mode [ 70.583249][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.646425][ T5825] team0: Port device team_slave_0 added [ 70.678347][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.685423][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.711540][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.723388][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.730649][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.737899][ T5830] bridge_slave_0: entered allmulticast mode [ 70.744875][ T5830] bridge_slave_0: entered promiscuous mode [ 70.754762][ T5825] team0: Port device team_slave_1 added [ 70.762733][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.774080][ T5820] team0: Port device team_slave_0 added [ 70.780777][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.787826][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.814570][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.833788][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.841042][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.848587][ T5830] bridge_slave_1: entered allmulticast mode [ 70.855929][ T5830] bridge_slave_1: entered promiscuous mode [ 70.874855][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.886984][ T5820] team0: Port device team_slave_1 added [ 70.955398][ T5831] team0: Port device team_slave_0 added [ 70.963822][ T5831] team0: Port device team_slave_1 added [ 70.980216][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.987325][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.013272][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.024318][ T5838] Bluetooth: hci0: command tx timeout [ 71.063547][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.073544][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.080768][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.107532][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.107593][ T5829] Bluetooth: hci1: command tx timeout [ 71.123964][ T5147] Bluetooth: hci4: command tx timeout [ 71.128061][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.129729][ T5838] Bluetooth: hci3: command tx timeout [ 71.137554][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.168352][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.179516][ T5838] Bluetooth: hci2: command tx timeout [ 71.181653][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.192133][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.218127][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.252577][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.259804][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.286153][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.299879][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.336919][ T5819] hsr_slave_0: entered promiscuous mode [ 71.343262][ T5819] hsr_slave_1: entered promiscuous mode [ 71.350486][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.357688][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.383636][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.407260][ T5830] team0: Port device team_slave_0 added [ 71.421691][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.428264][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.458783][ T5825] hsr_slave_0: entered promiscuous mode [ 71.465030][ T5825] hsr_slave_1: entered promiscuous mode [ 71.471605][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 71.477473][ T5825] Cannot create hsr debugfs directory [ 71.492054][ T5830] team0: Port device team_slave_1 added [ 71.608409][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.615460][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.642669][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.694903][ T5820] hsr_slave_0: entered promiscuous mode [ 71.701597][ T5820] hsr_slave_1: entered promiscuous mode [ 71.707811][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 71.713537][ T5820] Cannot create hsr debugfs directory [ 71.719953][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.727161][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.753648][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.807633][ T5831] hsr_slave_0: entered promiscuous mode [ 71.813822][ T5831] hsr_slave_1: entered promiscuous mode [ 71.820455][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 71.826240][ T5831] Cannot create hsr debugfs directory [ 72.004162][ T5830] hsr_slave_0: entered promiscuous mode [ 72.012247][ T5830] hsr_slave_1: entered promiscuous mode [ 72.018566][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 72.024299][ T5830] Cannot create hsr debugfs directory [ 72.317017][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.346521][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.371803][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.389199][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.454091][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.468743][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.492863][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.511864][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.580239][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.592167][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.602787][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.618942][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.723809][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.735812][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.750380][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.761136][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.843620][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.881877][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.914363][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.922387][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.934928][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.948235][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.989500][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.996844][ T4893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.034774][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.047967][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.055074][ T4893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.096033][ T5838] Bluetooth: hci0: command tx timeout [ 73.104421][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.149971][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.176277][ T5838] Bluetooth: hci3: command tx timeout [ 73.181732][ T5838] Bluetooth: hci1: command tx timeout [ 73.187738][ T5829] Bluetooth: hci4: command tx timeout [ 73.189748][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.216543][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.230547][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.237728][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.256325][ T5838] Bluetooth: hci2: command tx timeout [ 73.271724][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.278950][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.290480][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.297701][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.315721][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.322972][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.380102][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.443008][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.450225][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.469192][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.522964][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.530181][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.577848][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.593839][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.641893][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.723949][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.731148][ T4893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.779281][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.786485][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.878444][ T5825] veth0_vlan: entered promiscuous mode [ 73.899711][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.933605][ T5825] veth1_vlan: entered promiscuous mode [ 74.052942][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.092141][ T5825] veth0_macvtap: entered promiscuous mode [ 74.153749][ T5825] veth1_macvtap: entered promiscuous mode [ 74.184221][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.253928][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.316465][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.354591][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.379988][ T5819] veth0_vlan: entered promiscuous mode [ 74.390953][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.416327][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.427627][ T5819] veth1_vlan: entered promiscuous mode [ 74.438275][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.480083][ T5831] veth0_vlan: entered promiscuous mode [ 74.508039][ T5831] veth1_vlan: entered promiscuous mode [ 74.580002][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.603353][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.619716][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.624060][ T5820] veth0_vlan: entered promiscuous mode [ 74.652689][ T5831] veth0_macvtap: entered promiscuous mode [ 74.666066][ T5819] veth0_macvtap: entered promiscuous mode [ 74.688125][ T5831] veth1_macvtap: entered promiscuous mode [ 74.719015][ T5819] veth1_macvtap: entered promiscuous mode [ 74.729247][ T5820] veth1_vlan: entered promiscuous mode [ 74.750423][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.756020][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.766151][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.800306][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.813023][ T5830] veth0_vlan: entered promiscuous mode [ 74.829112][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.860364][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.878318][ T4893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.890127][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.900078][ T5830] veth1_vlan: entered promiscuous mode [ 74.910688][ T4893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.923869][ T4893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.950978][ T4893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.998383][ T4893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.010985][ T4893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.022583][ T4893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.056667][ T5820] veth0_macvtap: entered promiscuous mode [ 75.082029][ T4893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.111381][ T5820] veth1_macvtap: entered promiscuous mode [ 75.133413][ T5830] veth0_macvtap: entered promiscuous mode [ 75.144807][ T5830] veth1_macvtap: entered promiscuous mode [ 75.176802][ T5838] Bluetooth: hci0: command tx timeout [ 75.218528][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.253193][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.260736][ T5838] Bluetooth: hci1: command tx timeout [ 75.260754][ T5147] Bluetooth: hci4: command tx timeout [ 75.266723][ T5838] Bluetooth: hci3: command tx timeout [ 75.291524][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.316896][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.327184][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.336770][ T5838] Bluetooth: hci2: command tx timeout [ 75.341470][ T4893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.349403][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.359941][ T4893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.378734][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.415973][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.468001][ T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.505785][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.506868][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.513628][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.530309][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.557455][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.584366][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.606676][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.659142][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.669666][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.715706][ T5951] syzkaller0: entered promiscuous mode [ 75.723293][ T5951] syzkaller0: entered allmulticast mode [ 75.800010][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.825002][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.862917][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.892686][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.985186][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.007755][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.033874][ T5951] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8'. [ 76.097484][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.125470][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.394065][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10'. [ 76.443195][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 76.594474][ T5994] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 76.609120][ T5979] Zero length message leads to an empty skb [ 76.899604][ T6005] pim6reg1: entered promiscuous mode [ 76.920167][ T6005] pim6reg1: entered allmulticast mode [ 76.968429][ T6007] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.116791][ T6015] netlink: 'syz.3.15': attribute type 5 has an invalid length. [ 77.196536][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 77.258197][ T5838] Bluetooth: hci0: command tx timeout [ 77.280939][ T6017] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 77.318692][ T6017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.338472][ T5838] Bluetooth: hci3: command tx timeout [ 77.340847][ T5829] Bluetooth: hci4: command tx timeout [ 77.343970][ T5838] Bluetooth: hci1: command tx timeout [ 77.417484][ T5829] Bluetooth: hci2: command tx timeout [ 77.438976][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 77.507293][ T6031] netlink: 52 bytes leftover after parsing attributes in process `syz.2.23'. [ 77.724267][ T6039] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.972219][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.29'. [ 78.087236][ T6055] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 78.095018][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.129067][ T6039] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26'. [ 78.151018][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 78.405632][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 78.536957][ T6069] bond0: (slave bond_slave_1): Releasing backup interface [ 78.668144][ T6082] Cannot find add_set index 1 as target [ 79.055636][ T6095] openvswitch: netlink: Duplicate or invalid key (type 0). [ 79.076945][ T6095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.330714][ T6110] block nbd0: Unsupported socket: should be TCP or UNIX. [ 79.608314][ T6119] netlink: 'syz.4.49': attribute type 13 has an invalid length. [ 79.716437][ T6126] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 79.812071][ T5954] IPVS: starting estimator thread 0... [ 79.849603][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.857954][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.935544][ T6132] IPVS: using max 33 ests per chain, 79200 per kthread [ 80.084152][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.102692][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.362030][ T6131] bridge: RTM_NEWNEIGH with invalid ether address [ 80.387931][ T1148] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.411931][ T1148] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.582200][ T1148] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.609783][ T1148] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.613191][ T6148] netlink: 'syz.4.55': attribute type 7 has an invalid length. [ 80.655458][ T6148] netlink: 'syz.4.55': attribute type 8 has an invalid length. [ 80.796135][ T6148] bridge0: entered promiscuous mode [ 80.802785][ T6148] ip6gretap0: entered promiscuous mode [ 80.815299][ T6148] bridge0: left promiscuous mode [ 80.824667][ T6148] ip6gretap0: left promiscuous mode [ 80.953042][ T6160] syzkaller0: entered promiscuous mode [ 80.963762][ T6160] syzkaller0: entered allmulticast mode [ 81.472076][ T6174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.490471][ T6173] __nla_validate_parse: 5 callbacks suppressed [ 81.490487][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 82.761543][ T6192] netlink: 'syz.4.67': attribute type 3 has an invalid length. [ 82.766863][ T6191] netlink: 44 bytes leftover after parsing attributes in process `syz.0.66'. [ 82.769511][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 82.790928][ T6191] netlink: 44 bytes leftover after parsing attributes in process `syz.0.66'. [ 83.103132][ T6212] netlink: 'syz.3.73': attribute type 3 has an invalid length. [ 83.166696][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 83.300237][ T6216] bridge_slave_1: left allmulticast mode [ 83.327408][ T6216] bridge_slave_1: left promiscuous mode [ 83.333387][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.384505][ T6216] bridge_slave_0: left allmulticast mode [ 83.399879][ T6216] bridge_slave_0: left promiscuous mode [ 83.409139][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.419658][ T6226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.76'. [ 83.816635][ T6239] tipc: Started in network mode [ 83.821863][ T6239] tipc: Node identity 164fe52e25fd, cluster identity 4711 [ 83.829806][ T6239] tipc: Enabled bearer , priority 0 [ 83.839289][ T6239] syzkaller0: entered promiscuous mode [ 83.844776][ T6239] syzkaller0: entered allmulticast mode [ 83.849104][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.83'. [ 83.862739][ T6239] tipc: Resetting bearer [ 83.887851][ T6238] tipc: Resetting bearer [ 83.937736][ T6238] tipc: Disabling bearer [ 84.110258][ T6253] IPv6: sit1: Disabled Multicast RS [ 85.029954][ T6300] bridge1: entered allmulticast mode [ 85.048323][ T6300] netlink: 268 bytes leftover after parsing attributes in process `syz.1.95'. [ 85.328934][ T6311] macvlan2: entered promiscuous mode [ 85.350483][ T6311] macvlan3: entered promiscuous mode [ 86.081392][ T6337] xt_hashlimit: size too large, truncated to 1048576 [ 86.133400][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.109'. [ 86.383342][ T6354] netlink: 'syz.1.108': attribute type 21 has an invalid length. [ 86.448166][ T6354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.108'. [ 86.781488][ T980] cfg80211: failed to load regulatory.db [ 86.849034][ T6363] syz.0.114: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 86.883250][ T6363] CPU: 0 UID: 0 PID: 6363 Comm: syz.0.114 Not tainted syzkaller #0 PREEMPT(full) [ 86.883272][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.883290][ T6363] Call Trace: [ 86.883297][ T6363] [ 86.883304][ T6363] dump_stack_lvl+0x189/0x250 [ 86.883342][ T6363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.883364][ T6363] ? __pfx__printk+0x10/0x10 [ 86.883381][ T6363] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 86.883403][ T6363] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 86.883427][ T6363] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 86.883452][ T6363] warn_alloc+0x214/0x310 [ 86.883483][ T6363] ? __pfx_warn_alloc+0x10/0x10 [ 86.883516][ T6363] ? __get_vm_area_node+0x28f/0x300 [ 86.883538][ T6363] ? xskq_create+0xbf/0x170 [ 86.883561][ T6363] __vmalloc_node_range_noprof+0x690/0x12d0 [ 86.883615][ T6363] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 86.883642][ T6363] ? __kasan_kmalloc+0x93/0xb0 [ 86.883664][ T6363] vmalloc_user_noprof+0xad/0xf0 [ 86.883687][ T6363] ? xskq_create+0xbf/0x170 [ 86.883705][ T6363] xskq_create+0xbf/0x170 [ 86.883726][ T6363] xsk_init_queue+0xb0/0x110 [ 86.883747][ T6363] xsk_setsockopt+0x57b/0x8d0 [ 86.883767][ T6363] ? __pfx_xsk_setsockopt+0x10/0x10 [ 86.883787][ T6363] ? __pfx_aa_sk_perm+0x10/0x10 [ 86.883813][ T6363] ? aa_sock_opt_perm+0xff/0x1b0 [ 86.883840][ T6363] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 86.883856][ T6363] ? __pfx_xsk_setsockopt+0x10/0x10 [ 86.883875][ T6363] do_sock_setsockopt+0x17c/0x1b0 [ 86.883900][ T6363] __x64_sys_setsockopt+0x13f/0x1b0 [ 86.883925][ T6363] do_syscall_64+0xfa/0xfa0 [ 86.883944][ T6363] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.883963][ T6363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.883979][ T6363] ? clear_bhb_loop+0x60/0xb0 [ 86.884000][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.884016][ T6363] RIP: 0033:0x7f9b8698f749 [ 86.884036][ T6363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.884050][ T6363] RSP: 002b:00007f9b8779e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.884069][ T6363] RAX: ffffffffffffffda RBX: 00007f9b86be6090 RCX: 00007f9b8698f749 [ 86.884081][ T6363] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 86.884091][ T6363] RBP: 00007f9b86a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 86.884102][ T6363] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 86.884112][ T6363] R13: 00007f9b86be6128 R14: 00007f9b86be6090 R15: 00007ffdad4a1148 [ 86.884150][ T6363] [ 87.140535][ T6363] Mem-Info: [ 87.143686][ T6363] active_anon:5848 inactive_anon:0 isolated_anon:0 [ 87.143686][ T6363] active_file:2884 inactive_file:39880 isolated_file:0 [ 87.143686][ T6363] unevictable:768 dirty:1609 writeback:0 [ 87.143686][ T6363] slab_reclaimable:10398 slab_unreclaimable:123373 [ 87.143686][ T6363] mapped:31290 shmem:1356 pagetables:1129 [ 87.143686][ T6363] sec_pagetables:0 bounce:0 [ 87.143686][ T6363] kernel_misc_reclaimable:0 [ 87.143686][ T6363] free:1293200 free_pcp:24771 free_cma:0 [ 87.167973][ T6375] IPVS: set_ctl: invalid protocol: 94 172.20.20.43:20004 [ 87.192988][ T6363] Node 0 active_anon:23656kB inactive_anon:0kB active_file:11536kB inactive_file:159320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125136kB dirty:6420kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12140kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 87.256681][ T6373] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 87.311360][ T6363] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 87.364522][ T6363] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.393800][ T6373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.395692][ T6363] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 87.411120][ T6363] Node 0 DMA32 free:1272092kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23556kB inactive_anon:0kB active_file:11536kB inactive_file:159320kB unevictable:1536kB writepending:6420kB zspages:0kB present:3129332kB managed:2565032kB mlocked:0kB bounce:0kB free_pcp:77044kB local_pcp:28664kB free_cma:0kB [ 87.470454][ T6363] lowmem_reserve[]: 0 0 0 0 0 [ 87.475353][ T6363] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.506723][ T6363] lowmem_reserve[]: 0 0 0 0 0 [ 87.555357][ T6363] Node 1 Normal free:3887024kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21088kB local_pcp:14368kB free_cma:0kB [ 87.605852][ T6363] lowmem_reserve[]: 0 0 0 0 0 [ 87.611655][ T6363] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.625472][ T6363] Node 0 DMA32: 474*4kB (UME) 388*8kB (UM) 85*16kB (UME) 90*32kB (UME) 36*64kB (UM) 22*128kB (UME) 5*256kB (UM) 5*512kB (UME) 5*1024kB (UME) 4*2048kB (UM) 303*4096kB (M) = 1272600kB [ 87.701000][ T6363] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 87.728810][ T6363] Node 1 Normal: 206*4kB (UE) 47*8kB (UME) 38*16kB (UME) 51*32kB (UME) 19*64kB (UME) 5*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3887024kB [ 87.752310][ T6398] tipc: Enabling of bearer rejected, failed to enable media [ 87.783129][ T6363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.794764][ T6363] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.807305][ T6363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.822170][ T6363] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.837756][ T6363] 44116 total pagecache pages [ 87.842603][ T6363] 0 pages in swap cache [ 87.882206][ T6363] Free swap = 124996kB [ 87.897107][ T6363] Total swap = 124996kB [ 87.906972][ T6363] 2097051 pages RAM [ 87.925932][ T6363] 0 pages HighMem/MovableOnly [ 87.930681][ T6363] 424151 pages reserved [ 87.935047][ T6363] 0 pages cma reserved [ 87.944176][ T6404] __nla_validate_parse: 1 callbacks suppressed [ 87.944193][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.126'. [ 88.016501][ T6406] Illegal XDP return value 4294967274 on prog (id 40) dev N/A, expect packet loss! [ 88.118752][ T3578] IPVS: starting estimator thread 0... [ 88.249001][ T6412] IPVS: using max 30 ests per chain, 72000 per kthread [ 89.051564][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 89.198168][ T6429] netlink: 'syz.2.130': attribute type 5 has an invalid length. [ 89.231289][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 89.396553][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 89.485542][ T6451] netlink: 'syz.3.138': attribute type 2 has an invalid length. [ 89.614709][ T6451] @;: entered promiscuous mode [ 89.696006][ T6458] TCP: TCP_TX_DELAY enabled [ 89.752268][ T6460] x_tables: ip_tables: ah match: only valid for protocol 51 [ 89.769306][ T6460] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 89.791237][ T6456] syzkaller0: entered promiscuous mode [ 89.797985][ T6456] syzkaller0: entered allmulticast mode [ 89.808582][ T6460] netlink: 'syz.1.141': attribute type 13 has an invalid length. [ 89.995644][ T6474] syz.3.142 uses obsolete (PF_INET,SOCK_PACKET) [ 90.123881][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 90.241835][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.257385][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.592206][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.614545][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.942280][ T6499] wg1 speed is unknown, defaulting to 1000 [ 90.976863][ T6499] wg1 speed is unknown, defaulting to 1000 [ 91.022168][ T6499] wg1 speed is unknown, defaulting to 1000 [ 91.080229][ T6499] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.123460][ T6499] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 91.263100][ T6499] wg1 speed is unknown, defaulting to 1000 [ 91.277773][ T6499] wg1 speed is unknown, defaulting to 1000 [ 91.318829][ T6499] wg1 speed is unknown, defaulting to 1000 [ 91.338479][ T6499] wg1 speed is unknown, defaulting to 1000 [ 91.354876][ T6499] wg1 speed is unknown, defaulting to 1000 [ 91.417842][ T6499] wg1 speed is unknown, defaulting to 1000 [ 91.571665][ T6543] pim6reg: entered allmulticast mode [ 91.610362][ T6548] pim6reg: left allmulticast mode [ 91.853622][ T6562] ipvlan2: entered promiscuous mode [ 92.010859][ T6566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.166'. [ 92.211963][ T6574] netlink: 64 bytes leftover after parsing attributes in process `syz.2.170'. [ 92.245360][ T6574] netlink: 64 bytes leftover after parsing attributes in process `syz.2.170'. [ 92.270534][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 92.351165][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 92.390548][ T6577] team0: Port device batadv1 added [ 92.760825][ T6605] wg1 speed is unknown, defaulting to 1000 [ 92.973174][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 92.974132][ T6610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.178'. [ 92.992594][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.2.179'. [ 93.407843][ T6635] netlink: 64 bytes leftover after parsing attributes in process `syz.2.182'. [ 93.500387][ T6625] "syz.3.181" (6625) uses obsolete ecb(arc4) skcipher [ 93.695034][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.856994][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.908797][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 94.022545][ T6653] erspan0: entered promiscuous mode [ 94.098151][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 94.359237][ T6671] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 94.522214][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 94.686390][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 94.774633][ T6686] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 94.790589][ T6699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 94.812928][ T6694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'. [ 94.848595][ T6693] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 94.876391][ T6693] bond1 (unregistering): Released all slaves [ 94.895647][ T6711] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 94.912094][ T6677] wg1 speed is unknown, defaulting to 1000 [ 95.100011][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 95.445762][ T6738] tipc: Enabling of bearer rejected, media not registered [ 95.535721][ T6745] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 95.688562][ T6745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.968962][ T6763] tipc: Enabling of bearer rejected, failed to enable media [ 96.296246][ T6730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.304226][ T6720] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 96.343715][ T6730] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 96.510733][ T6730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.540341][ T6730] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 96.585071][ T6730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.630556][ T6730] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 96.729949][ T6730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.760552][ T6806] nbd: illegal input index -1 [ 96.762686][ T6730] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 96.844549][ T6730] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.866861][ T6730] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 97.075358][ T6825] nbd: must specify at least one socket [ 132.858416][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.864753][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.301010][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.307652][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.695531][ T31] INFO: task kworker/1:2:980 blocked for more than 143 seconds. [ 248.703235][ T31] Not tainted syzkaller #0 [ 248.708422][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.717236][ T31] task:kworker/1:2 state:D stack:24888 pid:980 tgid:980 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 248.729379][ T31] Workqueue: events rfkill_sync_work [ 248.734725][ T31] Call Trace: [ 248.738087][ T31] [ 248.741022][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.745568][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.752340][ T31] ? __pfx___schedule+0x10/0x10 [ 248.757298][ T31] ? schedule+0x91/0x360 [ 248.761562][ T31] schedule+0x165/0x360 [ 248.765834][ T31] schedule_preempt_disabled+0x13/0x30 [ 248.771304][ T31] __mutex_lock+0x7e6/0x1350 [ 248.776106][ T31] ? __mutex_lock+0x5bb/0x1350 [ 248.780908][ T31] ? rfkill_sync_work+0x2e/0x200 [ 248.785954][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 248.791757][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 248.797577][ T31] rfkill_sync_work+0x2e/0x200 [ 248.802362][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 248.808216][ T31] process_scheduled_works+0xae1/0x17b0 [ 248.813812][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.864880][ T31] worker_thread+0x8a0/0xda0 [ 248.869584][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.875989][ T31] ? __kthread_parkme+0x7b/0x200 [ 248.880937][ T31] kthread+0x711/0x8a0 [ 248.885006][ T31] ? __pfx_worker_thread+0x10/0x10 [ 248.890172][ T31] ? __pfx_kthread+0x10/0x10 [ 248.894767][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.900026][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.905273][ T31] ? __pfx_kthread+0x10/0x10 [ 248.909875][ T31] ret_from_fork+0x4bc/0x870 [ 248.914449][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 248.919608][ T31] ? __switch_to_asm+0x39/0x70 [ 248.924368][ T31] ? __switch_to_asm+0x33/0x70 [ 248.929230][ T31] ? __pfx_kthread+0x10/0x10 [ 248.933833][ T31] ret_from_fork_asm+0x1a/0x30 [ 248.938928][ T31] [ 248.942858][ T31] INFO: task kworker/1:5:5892 blocked for more than 143 seconds. [ 248.950737][ T31] Not tainted syzkaller #0 [ 248.955710][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.964373][ T31] task:kworker/1:5 state:D stack:23624 pid:5892 tgid:5892 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 248.976491][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 248.983187][ T31] Call Trace: [ 248.986513][ T31] [ 248.989451][ T31] __schedule+0x1798/0x4cc0 [ 248.993955][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.000333][ T31] ? __pfx___schedule+0x10/0x10 [ 249.005197][ T31] ? schedule+0x91/0x360 [ 249.009507][ T31] schedule+0x165/0x360 [ 249.013650][ T31] schedule_preempt_disabled+0x13/0x30 [ 249.019285][ T31] __mutex_lock+0x7e6/0x1350 [ 249.023888][ T31] ? __mutex_lock+0x5bb/0x1350 [ 249.028715][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 249.034971][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 249.040074][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 249.045854][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 249.051584][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 249.057912][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 249.063658][ T31] process_scheduled_works+0xae1/0x17b0 [ 249.069318][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.075362][ T31] worker_thread+0x8a0/0xda0 [ 249.079964][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.086322][ T31] ? __kthread_parkme+0x7b/0x200 [ 249.091297][ T31] kthread+0x711/0x8a0 [ 249.095503][ T31] ? __pfx_worker_thread+0x10/0x10 [ 249.100623][ T31] ? __pfx_kthread+0x10/0x10 [ 249.105260][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.110464][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.115727][ T31] ? __pfx_kthread+0x10/0x10 [ 249.120335][ T31] ret_from_fork+0x4bc/0x870 [ 249.124915][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 249.130078][ T31] ? __switch_to_asm+0x39/0x70 [ 249.134870][ T31] ? __switch_to_asm+0x33/0x70 [ 249.139677][ T31] ? __pfx_kthread+0x10/0x10 [ 249.144290][ T31] ret_from_fork_asm+0x1a/0x30 [ 249.149121][ T31] [ 249.152320][ T31] INFO: task syz.1.204:6720 blocked for more than 143 seconds. [ 249.159937][ T31] Not tainted syzkaller #0 [ 249.164878][ T31] Blocked by coredump. [ 249.169721][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.178497][ T31] task:syz.1.204 state:D stack:26888 pid:6720 tgid:6713 ppid:5825 task_flags:0x40054c flags:0x00080001 [ 249.190671][ T31] Call Trace: [ 249.193963][ T31] [ 249.196979][ T31] __schedule+0x1798/0x4cc0 [ 249.201506][ T31] ? validate_chain+0x897/0x2140 [ 249.206536][ T31] ? __lock_acquire+0xab9/0xd20 [ 249.211399][ T31] ? __pfx___schedule+0x10/0x10 [ 249.216331][ T31] ? schedule+0x91/0x360 [ 249.220582][ T31] schedule+0x165/0x360 [ 249.224726][ T31] schedule_timeout+0x9a/0x270 [ 249.229538][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 249.234919][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.240174][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.245399][ T31] ? wait_for_completion+0x267/0x5d0 [ 249.250675][ T31] wait_for_completion+0x2bf/0x5d0 [ 249.255850][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 249.261493][ T31] ? __flush_work+0xd2/0xbc0 [ 249.266124][ T31] ? __flush_work+0xd2/0xbc0 [ 249.270721][ T31] __flush_work+0x9b9/0xbc0 [ 249.275508][ T31] ? __flush_work+0xd2/0xbc0 [ 249.280110][ T31] ? __pfx___flush_work+0x10/0x10 [ 249.285273][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 249.290572][ T31] ? __pfx___cancel_work+0x10/0x10 [ 249.295737][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 249.301379][ T31] __cancel_work_sync+0xbe/0x110 [ 249.306354][ T31] rfkill_unregister+0x92/0x220 [ 249.311216][ T31] nfc_unregister_device+0x96/0x2a0 [ 249.316500][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 249.322229][ T31] virtual_ncidev_close+0x56/0x90 [ 249.327324][ T31] __fput+0x44c/0xa70 [ 249.331332][ T31] task_work_run+0x1d4/0x260 [ 249.336053][ T31] ? __pfx_task_work_run+0x10/0x10 [ 249.341181][ T31] do_exit+0x6b5/0x2300 [ 249.345395][ T31] ? do_raw_spin_lock+0x121/0x290 [ 249.350469][ T31] ? __pfx_do_exit+0x10/0x10 [ 249.355058][ T31] do_group_exit+0x21c/0x2d0 [ 249.359784][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.364988][ T31] get_signal+0x1285/0x1340 [ 249.369562][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 249.375119][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 249.381327][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.386687][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 249.392139][ T31] exit_to_user_mode_loop+0x72/0x130 [ 249.397511][ T31] do_syscall_64+0x2bd/0xfa0 [ 249.402116][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.407366][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.413445][ T31] ? clear_bhb_loop+0x60/0xb0 [ 249.418180][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.424077][ T31] RIP: 0033:0x7f3aa4b8f749 [ 249.428559][ T31] RSP: 002b:00007f3aa5950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.437028][ T31] RAX: fffffffffffffff4 RBX: 00007f3aa4de6090 RCX: 00007f3aa4b8f749 [ 249.444987][ T31] RDX: 0000000000000002 RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 249.453002][ T31] RBP: 00007f3aa4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 249.461071][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.469090][ T31] R13: 00007f3aa4de6128 R14: 00007f3aa4de6090 R15: 00007ffe503cac78 [ 249.477135][ T31] [ 249.480193][ T31] INFO: task syz.2.205:6730 blocked for more than 144 seconds. [ 249.490370][ T31] Not tainted syzkaller #0 [ 249.495801][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.504479][ T31] task:syz.2.205 state:D stack:27752 pid:6730 tgid:6715 ppid:5830 task_flags:0x400040 flags:0x00080003 [ 249.516473][ T31] Call Trace: [ 249.519756][ T31] [ 249.522678][ T31] __schedule+0x1798/0x4cc0 [ 249.527233][ T31] ? __lock_acquire+0xab9/0xd20 [ 249.532096][ T31] ? __lock_acquire+0xab9/0xd20 [ 249.537005][ T31] ? __pfx___schedule+0x10/0x10 [ 249.541872][ T31] ? schedule+0x91/0x360 [ 249.546149][ T31] schedule+0x165/0x360 [ 249.550311][ T31] schedule_preempt_disabled+0x13/0x30 [ 249.555835][ T31] __mutex_lock+0x7e6/0x1350 [ 249.560433][ T31] ? __mutex_lock+0x5bb/0x1350 [ 249.565187][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 249.570560][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 249.577407][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.582669][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 249.588939][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.595397][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 249.601291][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 249.606636][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 249.612389][ T31] rfkill_set_block+0x1d2/0x440 [ 249.617332][ T31] rfkill_fop_write+0x44b/0x570 [ 249.622232][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 249.627675][ T31] ? security_kernfs_init_security+0x260/0x290 [ 249.633840][ T31] ? rw_verify_area+0x255/0x4d0 [ 249.638759][ T31] ? __lock_acquire+0xab9/0xd20 [ 249.643618][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 249.649029][ T31] vfs_write+0x27e/0xb30 [ 249.653387][ T31] ? __pfx_vfs_write+0x10/0x10 [ 249.658342][ T31] ? __fget_files+0x2a/0x420 [ 249.662947][ T31] ? __fget_files+0x2a/0x420 [ 249.667675][ T31] ? __fget_files+0x3a0/0x420 [ 249.672358][ T31] ? __fget_files+0x2a/0x420 [ 249.677057][ T31] ksys_write+0x145/0x250 [ 249.681403][ T31] ? __pfx_ksys_write+0x10/0x10 [ 249.686280][ T31] ? do_syscall_64+0xbe/0xfa0 [ 249.690965][ T31] do_syscall_64+0xfa/0xfa0 [ 249.695524][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.700725][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.706832][ T31] ? clear_bhb_loop+0x60/0xb0 [ 249.711547][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.717690][ T31] RIP: 0033:0x7fe15e38f749 [ 249.722106][ T31] RSP: 002b:00007fe15f16b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.730566][ T31] RAX: ffffffffffffffda RBX: 00007fe15e5e6180 RCX: 00007fe15e38f749 [ 249.738699][ T31] RDX: 0000000000000008 RSI: 0000200000000340 RDI: 0000000000000004 [ 249.747047][ T31] RBP: 00007fe15e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 249.755044][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.763131][ T31] R13: 00007fe15e5e6218 R14: 00007fe15e5e6180 R15: 00007ffed0c6c8c8 [ 249.771227][ T31] [ 249.774258][ T31] INFO: task syz.4.226:6823 blocked for more than 144 seconds. [ 249.782174][ T31] Not tainted syzkaller #0 [ 249.787226][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.795939][ T31] task:syz.4.226 state:D stack:25608 pid:6823 tgid:6820 ppid:5820 task_flags:0x400140 flags:0x00080002 [ 249.807893][ T31] Call Trace: [ 249.811175][ T31] [ 249.814096][ T31] __schedule+0x1798/0x4cc0 [ 249.818675][ T31] ? __lock_acquire+0xab9/0xd20 [ 249.823533][ T31] ? __lock_acquire+0xab9/0xd20 [ 249.828419][ T31] ? __pfx___schedule+0x10/0x10 [ 249.833284][ T31] ? schedule+0x91/0x360 [ 249.837691][ T31] schedule+0x165/0x360 [ 249.841863][ T31] schedule_preempt_disabled+0x13/0x30 [ 249.847574][ T31] __mutex_lock+0x7e6/0x1350 [ 249.852295][ T31] ? __mutex_lock+0x5bb/0x1350 [ 249.857125][ T31] ? genl_rcv_msg+0x10d/0x790 [ 249.861808][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 249.866969][ T31] ? stack_trace_save+0x9c/0xe0 [ 249.871838][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 249.877307][ T31] ? radix_tree_lookup+0x240/0x290 [ 249.882431][ T31] genl_rcv_msg+0x10d/0x790 [ 249.887083][ T31] ? __lock_acquire+0xab9/0xd20 [ 249.891950][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.897131][ T31] netlink_rcv_skb+0x208/0x470 [ 249.901901][ T31] ? __lock_acquire+0xab9/0xd20 [ 249.906894][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.911928][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.917281][ T31] ? down_read+0x1ad/0x2e0 [ 249.921708][ T31] genl_rcv+0x28/0x40 [ 249.925793][ T31] netlink_unicast+0x82f/0x9e0 [ 249.930567][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 249.936086][ T31] ? netlink_sendmsg+0x642/0xb30 [ 249.941126][ T31] ? skb_put+0x11b/0x210 [ 249.945591][ T31] netlink_sendmsg+0x805/0xb30 [ 249.950374][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.955712][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 249.960658][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.966052][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.971349][ T31] __sock_sendmsg+0x21c/0x270 [ 249.976210][ T31] __sys_sendto+0x3bd/0x520 [ 249.980725][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 249.985901][ T31] ? count_memcg_event_mm+0x21/0x260 [ 249.991224][ T31] ? exc_page_fault+0x82/0x100 [ 249.996065][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 250.001364][ T31] __x64_sys_sendto+0xde/0x100 [ 250.006257][ T31] do_syscall_64+0xfa/0xfa0 [ 250.010771][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.016019][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.022112][ T31] ? clear_bhb_loop+0x60/0xb0 [ 250.026880][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.032779][ T31] RIP: 0033:0x7f2ab4b915dc [ 250.037247][ T31] RSP: 002b:00007f2ab2df4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 250.045868][ T31] RAX: ffffffffffffffda RBX: 00007f2ab2df4fc0 RCX: 00007f2ab4b915dc [ 250.053833][ T31] RDX: 000000000000001c RSI: 00007f2ab2df5010 RDI: 0000000000000007 [ 250.062020][ T31] RBP: 0000000000000000 R08: 00007f2ab2df4f14 R09: 000000000000000c [ 250.070045][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 250.078062][ T31] R13: 00007f2ab2df4f68 R14: 00007f2ab2df5010 R15: 0000000000000000 [ 250.086074][ T31] [ 250.089095][ T31] INFO: task syz.4.226:6841 blocked for more than 144 seconds. [ 250.096712][ T31] Not tainted syzkaller #0 [ 250.101645][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.110370][ T31] task:syz.4.226 state:D stack:28712 pid:6841 tgid:6820 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 250.122381][ T31] Call Trace: [ 250.125683][ T31] [ 250.128615][ T31] __schedule+0x1798/0x4cc0 [ 250.133140][ T31] ? __lock_acquire+0xab9/0xd20 [ 250.138067][ T31] ? __lock_acquire+0xab9/0xd20 [ 250.142925][ T31] ? __pfx___schedule+0x10/0x10 [ 250.147829][ T31] ? schedule+0x91/0x360 [ 250.152088][ T31] schedule+0x165/0x360 [ 250.156510][ T31] schedule_preempt_disabled+0x13/0x30 [ 250.161978][ T31] __mutex_lock+0x7e6/0x1350 [ 250.166622][ T31] ? __mutex_lock+0x5bb/0x1350 [ 250.171392][ T31] ? genl_rcv_msg+0x10d/0x790 [ 250.176145][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 250.181178][ T31] ? stack_trace_save+0x9c/0xe0 [ 250.186125][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 250.191508][ T31] ? radix_tree_lookup+0x240/0x290 [ 250.196664][ T31] genl_rcv_msg+0x10d/0x790 [ 250.201170][ T31] ? __lock_acquire+0xab9/0xd20 [ 250.206075][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.211114][ T31] netlink_rcv_skb+0x208/0x470 [ 250.215957][ T31] ? __lock_acquire+0xab9/0xd20 [ 250.220812][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.225881][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.231185][ T31] ? down_read+0x1ad/0x2e0 [ 250.235674][ T31] genl_rcv+0x28/0x40 [ 250.239671][ T31] netlink_unicast+0x82f/0x9e0 [ 250.244427][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 250.249762][ T31] ? netlink_sendmsg+0x642/0xb30 [ 250.254722][ T31] ? skb_put+0x11b/0x210 [ 250.259049][ T31] netlink_sendmsg+0x805/0xb30 [ 250.263861][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.269399][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 250.274365][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.279768][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.285086][ T31] __sock_sendmsg+0x21c/0x270 [ 250.289838][ T31] __sys_sendto+0x3bd/0x520 [ 250.294407][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 250.299571][ T31] ? count_memcg_event_mm+0x21/0x260 [ 250.304885][ T31] ? exc_page_fault+0x82/0x100 [ 250.309690][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 250.314986][ T31] __x64_sys_sendto+0xde/0x100 [ 250.319811][ T31] do_syscall_64+0xfa/0xfa0 [ 250.324320][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.329578][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.335731][ T31] ? clear_bhb_loop+0x60/0xb0 [ 250.340421][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.346368][ T31] RIP: 0033:0x7f2ab4b915dc [ 250.350784][ T31] RSP: 002b:00007f2ab2dd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 250.359257][ T31] RAX: ffffffffffffffda RBX: 00007f2ab2dd3fc0 RCX: 00007f2ab4b915dc [ 250.367282][ T31] RDX: 000000000000001c RSI: 00007f2ab2dd4010 RDI: 000000000000000c [ 250.375485][ T31] RBP: 0000000000000000 R08: 00007f2ab2dd3f14 R09: 000000000000000c [ 250.383461][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 250.391498][ T31] R13: 00007f2ab2dd3f68 R14: 00007f2ab2dd4010 R15: 0000000000000000 [ 250.399568][ T31] [ 250.402604][ T31] INFO: task syz.3.228:6828 blocked for more than 145 seconds. [ 250.410233][ T31] Not tainted syzkaller #0 [ 250.415176][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.423909][ T31] task:syz.3.228 state:D stack:22744 pid:6828 tgid:6827 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 250.435864][ T31] Call Trace: [ 250.439149][ T31] [ 250.442069][ T31] __schedule+0x1798/0x4cc0 [ 250.446618][ T31] ? __lock_acquire+0xab9/0xd20 [ 250.451490][ T31] ? __lock_acquire+0xab9/0xd20 [ 250.456424][ T31] ? __pfx___schedule+0x10/0x10 [ 250.461292][ T31] ? schedule+0x91/0x360 [ 250.465599][ T31] schedule+0x165/0x360 [ 250.469760][ T31] schedule_preempt_disabled+0x13/0x30 [ 250.475319][ T31] __mutex_lock+0x7e6/0x1350 [ 250.479946][ T31] ? __mutex_lock+0x5bb/0x1350 [ 250.484700][ T31] ? rfkill_register+0x37/0x8e0 [ 250.489778][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 250.494816][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 250.499815][ T31] ? nl80211_common_reg_change_event+0x55d/0x6b0 [ 250.506169][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 250.511447][ T31] ? mod_delayed_work_on+0x2/0x200 [ 250.516631][ T31] rfkill_register+0x37/0x8e0 [ 250.521334][ T31] wiphy_register+0x246a/0x2d20 [ 250.526244][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 250.531528][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 250.536916][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 250.543024][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 250.548662][ T31] ? ieee80211_register_hw+0x1431/0x40d0 [ 250.554367][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 250.560255][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 250.566224][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 250.572128][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.578564][ T31] ? __hrtimer_setup+0x187/0x210 [ 250.583541][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 250.589391][ T31] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 250.595143][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 250.601613][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 250.607415][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 250.612555][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 250.617838][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 250.623579][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 250.630272][ T31] ? rcu_is_watching+0x15/0xb0 [ 250.635070][ T31] ? __nla_parse+0x40/0x60 [ 250.639762][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 250.646289][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 250.651935][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 250.658092][ T31] ? bpf_lsm_capable+0x9/0x20 [ 250.662776][ T31] ? security_capable+0x7e/0x2e0 [ 250.667797][ T31] genl_rcv_msg+0x60e/0x790 [ 250.672316][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.677419][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 250.682970][ T31] ? __asan_memcpy+0x40/0x70 [ 250.687602][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 250.692983][ T31] netlink_rcv_skb+0x208/0x470 [ 250.697842][ T31] ? __lock_acquire+0xab9/0xd20 [ 250.702702][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.707938][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.713243][ T31] ? down_read+0x1ad/0x2e0 [ 250.717709][ T31] genl_rcv+0x28/0x40 [ 250.721698][ T31] netlink_unicast+0x82f/0x9e0 [ 250.726517][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 250.731805][ T31] ? netlink_sendmsg+0x642/0xb30 [ 250.736785][ T31] ? skb_put+0x11b/0x210 [ 250.741037][ T31] netlink_sendmsg+0x805/0xb30 [ 250.745841][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.751132][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 250.756138][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.761430][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.766760][ T31] __sock_sendmsg+0x21c/0x270 [ 250.771455][ T31] ____sys_sendmsg+0x505/0x830 [ 250.776366][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.781670][ T31] ? import_iovec+0x74/0xa0 [ 250.786268][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 250.790963][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.796265][ T31] ? __fget_files+0x2a/0x420 [ 250.800863][ T31] ? __fget_files+0x3a0/0x420 [ 250.805602][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 250.810547][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.816234][ T31] ? do_syscall_64+0xbe/0xfa0 [ 250.820913][ T31] do_syscall_64+0xfa/0xfa0 [ 250.825451][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.830652][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.836762][ T31] ? clear_bhb_loop+0x60/0xb0 [ 250.841443][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.847377][ T31] RIP: 0033:0x7fefebd8f749 [ 250.851804][ T31] RSP: 002b:00007fefecc81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.860338][ T31] RAX: ffffffffffffffda RBX: 00007fefebfe5fa0 RCX: 00007fefebd8f749 [ 250.868353][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 250.876380][ T31] RBP: 00007fefebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 250.884353][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.892382][ T31] R13: 00007fefebfe6038 R14: 00007fefebfe5fa0 R15: 00007fff5f88da88 [ 250.900423][ T31] [ 250.903446][ T31] INFO: task syz.0.229:6840 blocked for more than 145 seconds. [ 250.911035][ T31] Not tainted syzkaller #0 [ 250.916025][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.924703][ T31] task:syz.0.229 state:D stack:26088 pid:6840 tgid:6839 ppid:5819 task_flags:0x400140 flags:0x00080002 [ 250.937141][ T31] Call Trace: [ 250.940438][ T31] [ 250.943356][ T31] __schedule+0x1798/0x4cc0 [ 250.948003][ T31] ? __lock_acquire+0xab9/0xd20 [ 250.952868][ T31] ? __lock_acquire+0xab9/0xd20 [ 250.957778][ T31] ? __pfx___schedule+0x10/0x10 [ 250.962643][ T31] ? schedule+0x91/0x360 [ 250.966925][ T31] schedule+0x165/0x360 [ 250.971086][ T31] schedule_preempt_disabled+0x13/0x30 [ 250.976598][ T31] __mutex_lock+0x7e6/0x1350 [ 250.981204][ T31] ? __mutex_lock+0x5bb/0x1350 [ 250.986025][ T31] ? genl_rcv_msg+0x10d/0x790 [ 250.990714][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 250.995808][ T31] ? radix_tree_lookup+0x240/0x290 [ 251.000923][ T31] genl_rcv_msg+0x10d/0x790 [ 251.005482][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.010507][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 251.015618][ T31] ? __asan_memcpy+0x40/0x70 [ 251.020218][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 251.025641][ T31] netlink_rcv_skb+0x208/0x470 [ 251.030410][ T31] ? __lock_acquire+0xab9/0xd20 [ 251.035350][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.040377][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.045904][ T31] ? down_read+0x1ad/0x2e0 [ 251.050398][ T31] genl_rcv+0x28/0x40 [ 251.054367][ T31] netlink_unicast+0x82f/0x9e0 [ 251.059208][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 251.064507][ T31] ? netlink_sendmsg+0x642/0xb30 [ 251.069536][ T31] ? skb_put+0x11b/0x210 [ 251.073804][ T31] netlink_sendmsg+0x805/0xb30 [ 251.078653][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.083946][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 251.088938][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.094222][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.099688][ T31] __sock_sendmsg+0x21c/0x270 [ 251.104414][ T31] __sys_sendto+0x3bd/0x520 [ 251.108956][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 251.113988][ T31] ? count_memcg_event_mm+0x21/0x260 [ 251.119340][ T31] ? exc_page_fault+0x82/0x100 [ 251.124115][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 251.129471][ T31] __x64_sys_sendto+0xde/0x100 [ 251.134246][ T31] do_syscall_64+0xfa/0xfa0 [ 251.138806][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.144011][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.150115][ T31] ? clear_bhb_loop+0x60/0xb0 [ 251.154798][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.160910][ T31] RIP: 0033:0x7f9b869915dc [ 251.165431][ T31] RSP: 002b:00007f9b877bdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 251.173828][ T31] RAX: ffffffffffffffda RBX: 00007f9b877bdfc0 RCX: 00007f9b869915dc [ 251.181844][ T31] RDX: 0000000000000024 RSI: 00007f9b877be010 RDI: 0000000000000007 [ 251.189899][ T31] RBP: 0000000000000000 R08: 00007f9b877bdf14 R09: 000000000000000c [ 251.197949][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 251.206019][ T31] R13: 00007f9b877bdf68 R14: 00007f9b877be010 R15: 0000000000000000 [ 251.214006][ T31] [ 251.217126][ T31] [ 251.217126][ T31] Showing all locks held in the system: [ 251.224845][ T31] 1 lock held by khungtaskd/31: [ 251.229727][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 251.239649][ T31] 3 locks held by kworker/1:2/980: [ 251.244744][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 251.256064][ T31] #1: ffffc9000375fba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 251.268612][ T31] #2: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 251.278682][ T31] 2 locks held by getty/5582: [ 251.283360][ T31] #0: ffff88814d1de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 251.293175][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 251.303330][ T31] 1 lock held by syz-executor/5825: [ 251.308576][ T31] #0: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 251.318750][ T31] 3 locks held by kworker/1:5/5892: [ 251.323929][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 251.336312][ T31] #1: ffffc900050f7ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 251.349968][ T31] #2: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 251.361440][ T31] 1 lock held by syz.1.204/6720: [ 251.366528][ T31] #0: ffff888078e51100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 251.376345][ T31] 2 locks held by syz.2.205/6730: [ 251.381370][ T31] #0: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 251.391493][ T31] #1: ffff888078e51100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 251.401194][ T31] 2 locks held by syz.4.226/6823: [ 251.406358][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 251.414587][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 251.423637][ T31] 2 locks held by syz.4.226/6841: [ 251.428682][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 251.436882][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 251.445933][ T31] 3 locks held by syz.3.228/6828: [ 251.450955][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 251.459180][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 251.468203][ T31] #2: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.478183][ T31] 2 locks held by syz.0.229/6840: [ 251.483221][ T31] #0: ffffffff8f3338f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 251.491541][ T31] #1: ffffffff8f333708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 251.500600][ T31] 2 locks held by syz-executor/6902: [ 251.505921][ T31] #0: ffff88805471b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.515976][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.525999][ T31] 2 locks held by syz-executor/6903: [ 251.531278][ T31] #0: ffff88802f225118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.541330][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.551293][ T31] 2 locks held by syz-executor/6905: [ 251.556627][ T31] #0: ffff88802f224918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.566771][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.576808][ T31] 2 locks held by syz-executor/6908: [ 251.582100][ T31] #0: ffff8880323c4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.592153][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.602129][ T31] 2 locks held by syz-executor/6909: [ 251.607467][ T31] #0: ffff8880323c3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.617512][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.627489][ T31] 2 locks held by syz-executor/6915: [ 251.632775][ T31] #0: ffff888030119118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.642870][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.652865][ T31] 2 locks held by syz-executor/6917: [ 251.658345][ T31] #0: ffff888030118918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.668648][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.678648][ T31] 2 locks held by syz-executor/6921: [ 251.683933][ T31] #0: ffff888020bd6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.693989][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.703981][ T31] 2 locks held by syz-executor/6924: [ 251.709284][ T31] #0: ffff88802c363918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.719350][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.729304][ T31] 2 locks held by syz-executor/6925: [ 251.734584][ T31] #0: ffff888027745918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.744757][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.754747][ T31] 2 locks held by syz-executor/6928: [ 251.760110][ T31] #0: ffff88802f441918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.770300][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.780490][ T31] 2 locks held by syz-executor/6930: [ 251.785836][ T31] #0: ffff88807c60d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.796072][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.806116][ T31] 2 locks held by syz-executor/6932: [ 251.811405][ T31] #0: ffff88807895e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.821751][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.831785][ T31] 2 locks held by syz-executor/6936: [ 251.837177][ T31] #0: ffff888053605118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.847308][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.857498][ T31] 2 locks held by syz-executor/6937: [ 251.862781][ T31] #0: ffff88807895d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 251.872839][ T31] #1: ffffffff8f5ae668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 251.882922][ T31] [ 251.885352][ T31] ============================================= [ 251.885352][ T31] [ 251.893788][ T31] NMI backtrace for cpu 0 [ 251.893808][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 251.893823][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.893832][ T31] Call Trace: [ 251.893838][ T31] [ 251.893844][ T31] dump_stack_lvl+0x189/0x250 [ 251.893870][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.893887][ T31] ? __pfx__printk+0x10/0x10 [ 251.893911][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 251.893934][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 251.893955][ T31] ? __pfx__printk+0x10/0x10 [ 251.893972][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 251.893994][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 251.894016][ T31] watchdog+0xf60/0xfa0 [ 251.894034][ T31] ? watchdog+0x1e2/0xfa0 [ 251.894052][ T31] kthread+0x711/0x8a0 [ 251.894072][ T31] ? __pfx_watchdog+0x10/0x10 [ 251.894085][ T31] ? __pfx_kthread+0x10/0x10 [ 251.894103][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.894118][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.894132][ T31] ? __pfx_kthread+0x10/0x10 [ 251.894150][ T31] ret_from_fork+0x4bc/0x870 [ 251.894167][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 251.894186][ T31] ? __switch_to_asm+0x39/0x70 [ 251.894196][ T31] ? __switch_to_asm+0x33/0x70 [ 251.894206][ T31] ? __pfx_kthread+0x10/0x10 [ 251.894224][ T31] ret_from_fork_asm+0x1a/0x30 [ 251.894249][ T31] [ 251.894256][ T31] Sending NMI from CPU 0 to CPUs 1: [ 252.040149][ C1] NMI backtrace for cpu 1 [ 252.040178][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 252.040194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.040203][ C1] RIP: 0010:kthread_is_per_cpu+0xb9/0xf0 [ 252.040224][ C1] Code: bd 02 99 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 37 00 99 00 48 8b 1b 83 e3 01 31 ff 48 89 de e8 57 41 33 00 <89> d8 5b 41 5e 41 5f 5d e9 5a 4d be 09 cc 44 89 f1 80 e1 07 80 c1 [ 252.040236][ C1] RSP: 0018:ffffc90000a086c8 EFLAGS: 00000046 [ 252.040250][ C1] RAX: ffffffff818cc739 RBX: 0000000000000000 RCX: ffff88801caf5ac0 [ 252.040260][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.040268][ C1] RBP: 0000000000200000 R08: ffff88801b2d9c07 R09: 1ffff1100365b380 [ 252.040279][ C1] R10: dffffc0000000000 R11: ffffed100365b381 R12: ffff88801da9bc80 [ 252.040289][ C1] R13: 1ffff9200014116a R14: ffff88801da9bcac R15: dffffc0000000000 [ 252.040300][ C1] FS: 0000000000000000(0000) GS:ffff888126231000(0000) knlGS:0000000000000000 [ 252.040312][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.040322][ C1] CR2: 0000563ff29b3000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 252.040334][ C1] Call Trace: [ 252.040340][ C1] [ 252.040349][ C1] can_migrate_task+0x227/0xb70 [ 252.040369][ C1] sched_balance_rq+0x35e3/0x57a0 [ 252.040383][ C1] ? sched_clock+0x3f/0x60 [ 252.040412][ C1] ? sched_balance_rq+0x42cd/0x57a0 [ 252.040429][ C1] ? __pfx_sched_balance_rq+0x10/0x10 [ 252.040452][ C1] ? __lock_acquire+0xab9/0xd20 [ 252.040478][ C1] ? __lock_acquire+0xab9/0xd20 [ 252.040497][ C1] ? sched_clock+0x3f/0x60 [ 252.040519][ C1] sched_balance_domains+0x49f/0x9e0 [ 252.040535][ C1] ? sched_balance_domains+0x121/0x9e0 [ 252.040551][ C1] _nohz_idle_balance+0x59d/0x810 [ 252.040567][ C1] ? sched_clock+0x3f/0x60 [ 252.040589][ C1] ? __pfx__nohz_idle_balance+0x10/0x10 [ 252.040608][ C1] ? sched_balance_softirq+0x13/0x1a0 [ 252.040627][ C1] handle_softirqs+0x286/0x870 [ 252.040644][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 252.040661][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 252.040674][ C1] ? sched_clock_cpu+0x74/0x430 [ 252.040688][ C1] ? tick_do_update_jiffies64+0x54/0x310 [ 252.040707][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 252.040726][ C1] __irq_exit_rcu+0xca/0x1f0 [ 252.040740][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 252.040756][ C1] ? rcu_is_watching+0x15/0xb0 [ 252.040772][ C1] irq_exit_rcu+0x9/0x30 [ 252.040785][ C1] sysvec_call_function_single+0xa3/0xc0 [ 252.040801][ C1] [ 252.040806][ C1] [ 252.040812][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 252.040826][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 252.040842][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 01 20 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 252.040853][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 252.040864][ C1] RAX: 98bf651906af0700 RBX: ffffffff81967b47 RCX: 98bf651906af0700 [ 252.040875][ C1] RDX: 0000000000000001 RSI: ffffffff8d713f90 RDI: ffffffff8bbf08e0 [ 252.040885][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 252.040895][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7d1a70 [ 252.040905][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395eb58 [ 252.040916][ C1] ? do_idle+0x1e7/0x510 [ 252.040936][ C1] default_idle+0x13/0x20 [ 252.040952][ C1] default_idle_call+0x73/0xb0 [ 252.040968][ C1] do_idle+0x1e7/0x510 [ 252.040985][ C1] ? __pfx_do_idle+0x10/0x10 [ 252.041007][ C1] cpu_startup_entry+0x44/0x60 [ 252.041021][ C1] start_secondary+0x101/0x110 [ 252.041042][ C1] common_startup_64+0x13e/0x147 [ 252.041067][ C1] [ 255.737627][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.744106][ T1299] ieee802154 phy1 wpan1: encryption failed: -22