last executing test programs: 25.073550076s ago: executing program 0 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060086dd0000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket(0xa, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x40000000000004) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3fab00000000000000002e0000000e0001006e657464653673696d00"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x8, 0x1, 0x1ff, 0x7d, {{0x42, 0x4, 0x2, 0x25, 0x108, 0x66, 0x0, 0x1c, 0x29, 0x0, @loopback, @private=0xa010101, {[@timestamp_prespec={0x44, 0x1c, 0x88, 0x3, 0x2, [{@remote, 0x800}, {@loopback, 0xf59}, {@broadcast, 0x3}]}, @end, @timestamp_addr={0x44, 0x4c, 0x31, 0x1, 0xe, [{@loopback, 0x5}, {@broadcast, 0x7}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0xd}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x7fffffff}, {@local, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}]}, @noop, @end, @timestamp_addr={0x44, 0x2c, 0xa3, 0x1, 0x4, [{@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr=0x64010101, 0x2}, {@broadcast, 0x7}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x7, 0x45, [@multicast2]}, @lsrr={0x83, 0x27, 0xde, [@multicast2, @local, @private=0xa010102, @local, @local, @multicast2, @empty, @multicast1, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xf0, 0x1, 0x7, [{@rand_addr=0x64010102, 0x6}, {@empty, 0x6}, {@empty, 0x5}, {@multicast2, 0x8}, {@multicast1, 0xfff}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x33, 0x17, &(0x7f0000000200)=@raw=[@ldst={0x2, 0x2, 0x4, 0x5, 0x2, 0xfffffffffffffff4, 0x8}, @alu={0x4, 0x0, 0x5, 0x0, 0x0, 0x10, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @alu={0x4, 0x0, 0x2, 0x8, 0x3d5849fe121fa3a6, 0x0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}], &(0x7f0000000080)='GPL\x00', 0x9, 0x32, &(0x7f00000000c0)=""/50, 0x41100, 0x3, '\x00', r7, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x0, 0x7fffffff}, 0x10, 0xffffffffffffffff, r2, 0x6, 0x0, &(0x7f00000005c0)=[{0xc, 0x3, 0x4, 0xa}, {0x2, 0x5, 0x0, 0x3}, {0x5, 0x3, 0xf, 0x2}, {0x5, 0x2, 0xd, 0x1}, {0x3, 0x1, 0xd, 0x2}, {0x1, 0x3, 0x5}], 0x10, 0x401}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) getsockopt(r1, 0x1, 0x2f, 0x0, &(0x7f0000000040)) 24.585990516s ago: executing program 0 (id=243): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, {0xa, 0x4e22, 0x1, @mcast1, 0x400}}}, 0x3a) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8003}, 0xe) (async) recvmmsg(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f0000001700)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000001200)=""/238, 0xee}, {&(0x7f0000001300)=""/15, 0xf}, {&(0x7f0000001340)=""/46, 0x2e}, {&(0x7f0000001380)=""/193, 0xc1}, {&(0x7f0000001480)=""/230, 0xe6}, {&(0x7f0000001580)=""/166, 0xa6}, {&(0x7f0000001640)=""/144, 0x90}], 0xa}, 0x80}], 0x1, 0x40002000, &(0x7f0000001800)={0x77359400}) 24.384705842s ago: executing program 0 (id=247): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xb, 0x1}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, 0x0, 0x41, 0x0, 0xa, 0x0, 0x10000, @value=r0}, 0x28) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600a843500142bfffe8000000000000000000000000000bbfe8000000000000000000000000000aa00020000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0300000000000000"], 0x0) socket(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000015c0)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x400c845}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 24.308244252s ago: executing program 3 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="010000000d0000000000010000000000000001410000001c001700001000000000006574684e73797a6b616c6c657230", @ANYRESHEX=r1, @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020e00090a000000000000f0ffffffff020005000000000002000000ac1e0001000000000000000005000600000000000a004e2000000922200100000000000000000000000000015eb100d4b7000000"], 0x50}}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@getqdisc={0x24, 0x26, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x8, 0xa}, {0x10, 0xffff}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES16=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r10, 0x0, 0x40000000000d}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r12 = accept4(r11, 0x0, 0x0, 0x0) recvfrom$packet(r12, 0x0, 0x0, 0x40000000, 0x0, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 23.65346852s ago: executing program 3 (id=254): r0 = socket(0x8000000010, 0x2, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000040)={0xc, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a80140007"], 0x15c}}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) unshare(0x400) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x1) write(r0, &(0x7f00000002c0)="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", 0xfc) r6 = socket(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000000)="92c39914c267152ea7f57dfa6b896f0a2588ad207ee53caec2dda2ade370947d52e90e51af80", 0x26}, {&(0x7f00000003c0)="4aa2293cdcf0f4fcc2bb1550bc9f63d829fe7ed961dc0c1f52e9821d76bc0a0a3d2b14b6a12afb4f538ae64481ef0ee7bf2878db8c1d8a0cf529b3ad3b826835b0d2273c8b19cb0a5599b9aabf6be89f4b7e4f52dd3242f12228bb53e8aef0902cc75d572a5f90f5109e81a0e3dfabd0654595c88a2e29e9dbf1b2c481b0977e2acce02490945a01", 0x88}, {&(0x7f0000000480)="0e6debe9d907a8a847f88cedd10ed0549d29636368acd6b608f98fefdc63cd2b8a78cda1ee3b6831680b66d2da811f46a77500730390b1574689e042edeb90951d78aa178114068b8f3fae9bb1639935c35a4e026c033555e0abca632a560646587122494bcc62b775424d703596b564170ddaec83181f3ac20fae35c767c4b691549ddb35709d54f2a79af41b1e9cc8e174f7902ab09bf65b442a6d30d470185b62ebfcbcaa8216ff5995eba5b95bf019", 0xb1}, {&(0x7f0000000540)="33bfd31e345b97f457cc8eb66da3ccdd264f3c39475ff6907f0b2cac92a2366ccfec53a91d7abf299c78f10bfd721c14ea5bdeee2ee75c122ab1a73a37679b0f98eae8bab53defae4e724513a01d38860122227330254b3842226d345f2bd151e44df76d90c20962ff303443ba35faad36bfe2d89672f2f6404fb4e5a89718706175c3ed78f9e5afc1ed6218cf36caa401c0544a74a6d30cae1b2e114b6682816d3f587deaca5a4d4f010e55d469873b3a38308036bf0d4509022d5e290f1abdfa", 0xc1}, {&(0x7f0000000640)="4f9397f3f465a0cec877fcf67befb25cfbf087284087be9a527d2fa2f5de3851c467faf3dcd17927cc508e480b722394b7106abd31c9e93380719192f23aa4ee9f6f64ba7353d9d9d6559fd49ed66cb68ec9d8e9dd661e3e37b4b25428c87978163753f3523a217d6932050e96ce6a2d0afa87df7b86fb0e81b97c27521670959059e2ac66b598ebbb267682cec062c447d3c8fba37726f24f22866d36d44a5ffe4af1558ddbdb17f3cb14719d629d", 0xaf}, {&(0x7f0000000700)="05fa8528eb872b68258bd9fd1d3a02f603e706ded054c98742e8d6a70a8b78a623ce8bb3a0279980ce49cfcea179da0900d56f6ccd3c7e374f5c8915e89f7677b82b5b1f56ac7f38cdf0e810ef397ac6aee9a8d72eb8d6f6b109f862f4a4bab565717514ac4743c8ebff862d46f8e6db337514d01ddc13fd94b1b6fc69c7917202ab5775073d811a52fa4b40c8034081749513371041a4a2bbdc5f55f11a30eddf9a5029b7f1e6b04122edbe112fc63cfea051a21caf92d490e8c5c51d6b1fb12c6e11", 0xc3}, {&(0x7f0000000180)="f160", 0x2}, {&(0x7f0000000800)="32c4c5713568b7b4ec9e57716db639d1d52c6fee25448866c1a6b1dccde8aa41a2de9720dfc71fc8312d94951c00acbd730e91bef5da7060ba876eb92938e35df00cbac50aeca2737633e8fa487d10e6b8ec4b215f082d98ad1908bc6497dad2bf61c0c967547241d0c64044d207cf6cf241d19f254142f7dca02d67508834a98183796280d9b85b906310e179e503afcbe886ac6cbcef385cbdd64fee67137ebc506c9e9f65275fd82c7c7d0e6decc0db77bb9ebae7e19142e16842957f02", 0xbf}], 0x8, &(0x7f0000000940)=[{0x68, 0x10b, 0x40, "8d337cc0ffc34dc77e9741953951bf60b59f9a0440adc7e0d4fff0f78069e3a7bd129f1b0c1f4e653e27103d6f2cc17786c6fd17e1d219a5093f8b16ce527fa8cda2e3c77cd6dbf399819d1f1ec902ffa87376c3ccde"}, {0xc0, 0x103, 0xffff0001, "596c60f8c9a586e66f65494870297537ec24c812e82cab8137f0a0bf38ceb2c81d17b44cea67296f84b5a1766fd026564e7ca4040b6ee33099d42f32e7659b3584a8939163f7ea68c21663cb3f3ea3b6513f1b907bce1dd3f493f87bc1269746ccce3c687b5ee047188f790704bf00cd06eb7caf54c3ce09b1865d91d73eba8947c813c16ef0daffffc6fd4b583cba615552c49e8f574d5e7f60a092f10918d9aef0ca4a161c7103124b1473f93f"}, {0x18, 0x103, 0xbe87, "c859"}], 0x140}, 0x48080) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0) getsockopt(r6, 0x1, 0x2f, 0x0, &(0x7f0000000040)) 23.568372658s ago: executing program 0 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x17}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r10, {}, {0x10, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 23.003382721s ago: executing program 3 (id=260): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="56a8", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) connect$unix(r2, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) (async) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="ac9a", 0x2}], 0x1}, 0x20000081) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xe, 0x9}}}, 0x24}}, 0x4000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xe, 0x9}}}, 0x24}}, 0x4000) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtclass={0x68, 0x28, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xc, 0xc}, {0xc, 0x4}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xfffffff9}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_cbs={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtclass={0x68, 0x28, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xc, 0xc}, {0xc, 0x4}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xfffffff9}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_cbs={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r9) sendmsg$IEEE802154_SCAN_REQ(r9, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000028c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYRESHEX=r10], &(0x7f0000000080)='GPL\x00', 0x5, 0x99, &(0x7f00000002c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r11, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000000c0)={r14, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000000c0)={r14, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) socket$nl_generic(0x10, 0x3, 0x10) 22.537366484s ago: executing program 0 (id=264): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000180), 0x4) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000400), 0x8) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r3, 0x86a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000180), 0x4) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r0, &(0x7f0000000400), 0x8) (async) listen(r0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$unix(0x1, 0x5, 0x0) (async) connect$unix(r4, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) listen(r3, 0x86a) (async) 22.396599479s ago: executing program 3 (id=265): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "887bab675d645bbc", "9b16f04538ff2cbb7571900e9fbd3e81894049bbec4d258bc7531d68c7a61a73", "f8344f3f", "f42c0034b28487ef"}, 0x38) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x22, 0x2, 0x4) close(0x4) 22.31412219s ago: executing program 3 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x20, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) getsockname(r3, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe"], 0x28}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 21.310564918s ago: executing program 0 (id=270): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) syz_genetlink_get_family_id$nl802154(0x0, r1) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="40020415d65f92"], 0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611824000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r9}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000140), 0x0}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x22020600) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) sendmmsg$inet(r11, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@multicast1=0xe0000306]}]}}}], 0x18}}], 0x1, 0x4000c044) r12 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r12, 0x111, 0x4, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x800002}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x800) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x24040884) sendto$packet(r8, &(0x7f00000004c0)="a896aa1a56f487d901b1095cb3d90f14cd523121ecc1af00e6d90ccc73ff332809eacde6005c33fc2237667156ef73365cfcbd49631bb6aa7f9b07e4f58f3a168ab8956a882864af20fa9fe9419df2e5b0f7ef14bb5db66ccf91535d1371c70f0ba12790ff37c17100d5f9276d75ccd3eaef3474a62b6378ac8b7975ea6fa76f48807a7f59e8b2e7e10819", 0x8b, 0x4000000, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x1, 0x69, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r6], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21.192373119s ago: executing program 3 (id=271): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000440)={0x13, 0xfffb, 0x8001, 0x2, 0x5, 0x2, 0x0, 0xffff1757, r6}, &(0x7f0000000500)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e24, 0x37ab, @empty, 0x6}}, [0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffc00, 0xfffffffffffffffe, 0x1, 0x6, 0xb5, 0x100000001, 0x8000000000009, 0x1000, 0x3, 0x9, 0x6, 0x1, 0x6]}, &(0x7f0000000500)=0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000005500)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x44854) recvmmsg(r10, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r8, 0xffffffffffffffff, 0x500}, 0x57) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "9872"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 19.412216753s ago: executing program 2 (id=281): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000dc40ffff00000000", @ANYRES32, @ANYBLOB='\rL\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="04000000020000000300"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, r0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4(r2, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000180)=0x80, 0x800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x46, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb9bbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850588775cdefc80caece305583d19514421d1f398536d86"}}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={0x0, 0xc}, &(0x7f0000000240)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x0, 0x3c, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", 0x0, 0x0, 0x0, 0x0, 0xc4, &(0x7f0000000400), &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18, 0x0, 0x0, r11}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x24}}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x38}}, 0x0) 18.528024484s ago: executing program 2 (id=286): r0 = socket(0x200000000000011, 0x80000, 0x1000) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x3, 0xfd, 0x5}, [@RTA_NH_ID={0x8, 0x1e, 0xfff}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4d4}, 0x4000050) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000940), 0x10) close(0x3) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f0000009480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2b03ab344b", 0x5}], 0x1}}], 0x1, 0x4000884) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x29c, 0x14, 0x2, 0x201, 0x70bd2d, 0x25dfdbfb, {0x3, 0x0, 0x7}, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="ad78a06bdf023103d108f49d4769f25017bb2e44a2c0bf0cd6fd8b8c5cbf21c8c824be8cc8fa8a32fa5696bee43a1669a804ebf093360fe76b880d8ba016c84fb81bbb645ca8e1565664950ff3bd0becd7771344e5838c0b55bc85f99d4ca137278ca72698b0356ca53ec5ce2dc4e6faee88aa14aeedc19dc983c983c7532eb7eee4edff", @nested={0xbb, 0x7, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x3a}, @nested={0x4, 0x60}, @typed={0x4, 0x72}, @nested={0x4, 0x13e}, @generic="292a4e944751e49bf4f47e5e6168b658dde2d1010854be2478d45c4b19645532ec479a19c260e35707893fe83f32914f95eb1eb7a0d43c8adba3721e1da07bf08be3f6b4d287573aa7e9f428342dfc355cdd5bce0b939581cbe59a91472a409af5066b0e6b42ca4fee9a3f4b8c446ed7d0253e22c2c5b727ac48f768834a61a9f60907bcafec57fbed024d3d173e9aad178b58a34c679c43d5d2b6", @nested={0x4, 0x81}]}, @typed={0xc, 0x95, 0x0, 0x0, @u64=0x5}, @generic="ce9f28926ec9510851744828de8ae97bdfde2ea0", @generic="80aa3af5eee9532f5659dbaed844ef6e75a13dd9830ac94a7d483731442c4fc44f9995e1d9642697f49bbddbd7056e7f9b0b085b1ba70f8c6d457917e27e7ab30e4b294c12924e5b6f100348668b238317128686e788f28fc231f27d0b3413d0dfc658e63eb64fa4f53765ff4d0c17ddf3f3833f3c88f1fcaa8fdfc41bc6ab354aeea5e46fd48462794733355631617f0b493f8fdfd9", @generic="eac5dd5d032ccb0e8fdf80b9ea514829ed595b215e39983cd425e86247857b647bfffea50318dfa713a83191e0d7fea6831516e5ff0c89640bfa90435933a168c54898b2565b20bb172bd80f82cb2ffce57ebaecdb16d9faa1b1cb11f025613e6a3335", @nested={0x18, 0x5c, 0x0, 0x1, [@typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@local}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)={@val={0x8, 0xf5}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast}, {{0x4e20, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 18.185743746s ago: executing program 2 (id=289): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x774, 0x65, 0x22, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3, 0xffff}, {0xe, 0xf}, {0xf, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2bc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x298, 0x2, [@m_ct={0x80, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0x55, 0x6, "35dc150b3c9e7a05d46ef9ad27f2a935728944552e89b3471567ef5a3db0fed0967de668672395a89319c17785988436b56d0f76cb113ed3c0cc92b7e71969bf6dbb8eaa0133324cf6bad86e5dcbaba554"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_connmark={0xf8, 0x20, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x40, 0x5, 0x7f, 0x2}, 0x800}}]}, {0xac, 0x6, "fc198d69ab86cb0d1bda075f978886bb1ae31235da2dfe35a032e45d80c610ecead74aa68ada19a8b45e21f3fad01d56fb06e80f768462375d7bbe517c1b68189f6d2fc35823438b588780e1317b976cb874f4a0d6e6244b4ff69c1553e1b960bca501785586ef4f68b935e242766be3c82e2336cac72b618679f6aa0ea08ad7611fde9bf39c5408a380615c17a4df7726f1db83145a60f87e12f188a27c97542896e4135c074423"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x11c, 0x1d, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f8}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0xd6, 0x6, "62b95cb7b7902b253325db8456719b45b9b9fd1c898a70fd65f709cf2bbb25a87733588ad9d2ff9627adf43825029625d16fb23c746aac00812e45610a77ecaad980d3aeb996a2fe9f7c6570ee6b98e74a37829c4b30de57fa797e6c2ae6612b67d56d222a32f0a351fe660f9937faefb4e01a588246b0d9a62bac2d85562ebd870d2e4526c59de5bdacd49beefda98debcf26ee51d210ca58bb9201a5120dfe8b227b8c28eebbc722a62b09344ae6b69d7ee40497e5e104edbc37ef69c3c7b853de1ffa9274559b6bd64335c27edeebe721"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xffe0}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x474, 0x2, [@TCA_BPF_POLICE={0x44c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x0, 0xf42b, 0x2, 0x8, 0x2, 0x5, 0xd523, 0x7, 0x3, 0x9, 0xceb6, 0x6, 0x6, 0x2, 0x3, 0x9, 0x2, 0x9, 0xffff, 0x5, 0x67c, 0x40, 0x3, 0x401, 0x0, 0x40, 0x4, 0xc5a9615, 0xf67, 0xbe3d, 0xb1, 0x9, 0x1000, 0x7, 0x80000001, 0x1, 0x60c, 0x0, 0x6, 0x95, 0x6, 0x5, 0x5, 0x0, 0xffffff3e, 0x80000001, 0x2, 0x0, 0x29, 0x4, 0x9, 0xbe2, 0xfffffff8, 0x4, 0xffffffff, 0x2, 0x4, 0x5, 0xff, 0x6, 0x100000, 0x4db, 0xa, 0x64, 0x800, 0x2, 0xb6, 0x4, 0xa81, 0x8, 0x1, 0x8, 0x2, 0xc59e, 0xe819, 0x0, 0x45, 0x5, 0x10000, 0xb9d, 0xa7, 0x2, 0x7fffffff, 0xd6c, 0xd56a, 0x5, 0x0, 0x5, 0x8, 0x0, 0x5, 0x3, 0xffff8000, 0x6, 0x9, 0x8, 0x3, 0x1dc, 0xa0, 0x10, 0xb436, 0x6, 0x80, 0x7, 0xfffffff7, 0x6, 0x0, 0xc, 0xf6ef, 0x4, 0x1, 0x2, 0x1, 0x400, 0x2, 0x0, 0x2, 0x401, 0x6, 0x5, 0x3, 0x5, 0x22, 0x9, 0x1, 0xfffffffe, 0x401, 0x7fff, 0x1, 0x1, 0x20000000, 0xfffff022, 0xffffffff, 0x7, 0x7fff, 0x5ca7, 0x9, 0x1000, 0x101, 0x4, 0x4, 0x6, 0x8, 0x4, 0x81, 0x0, 0x3, 0x2, 0x5, 0x9, 0x2, 0x1, 0x2, 0x9, 0x1, 0xf, 0x7, 0x1, 0x3, 0x7, 0xfffffff8, 0x1, 0x1, 0x3, 0x9, 0xe2, 0x1ff, 0x0, 0xd937, 0x0, 0x4, 0x4, 0x7, 0x6, 0x7fff, 0x6, 0x6, 0x7, 0x6, 0x9, 0x7, 0x6, 0x7, 0xb4, 0x2, 0x0, 0x9, 0x50d, 0xf4, 0x7fff, 0x5, 0x40, 0x2510c9fe, 0x0, 0x3, 0x2, 0x1, 0x7f, 0x0, 0x10040000, 0xedbf, 0x79b, 0x1, 0x7f, 0x2, 0xffffffff, 0xe, 0x2, 0x3f, 0x10000, 0x1ea1, 0x7, 0x0, 0x96, 0xacb, 0x8, 0x7fff, 0x800, 0x0, 0x1, 0x3f, 0xe3a1, 0x2, 0x5, 0x6ed9, 0x7fff, 0x3, 0x0, 0x40, 0x2, 0x6, 0x3, 0x35e9, 0x800, 0x6, 0x1, 0x9, 0x0, 0x8, 0x2, 0x80, 0x1, 0x3, 0x0, 0x7, 0x2f, 0xffffffff, 0x91, 0x7, 0x1, 0x9, 0x401, 0x9, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4c}]}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x774}}, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 18.008287908s ago: executing program 2 (id=291): sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40090) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x5, './file0\x00'}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000002180)={0x88}, 0x8) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x34}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x20050800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x812, r5, 0xffffd000) ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000480), &(0x7f0000000280)=@udp=r8, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r7, &(0x7f0000000380), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x2c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @lsm=0x2b, r5, 0x8, &(0x7f0000000380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x6, 0xe2, 0xb48}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)=[r5, r5], &(0x7f0000000440)=[{0x3, 0x3, 0x10}, {0x4, 0x5, 0x8, 0x3}, {0x2, 0x3, 0x8, 0xa}, {0x4, 0x3, 0x3, 0x9}, {0x4, 0x1, 0x1, 0xc}, {0x5, 0x4, 0x1, 0x9}, {0x4, 0x2, 0xf, 0x3}, {0x3, 0x4, 0x9}], 0x10, 0x40000}, 0x94) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.582825369s ago: executing program 2 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1084}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000080)={0x8, 0x3}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 17.31380674s ago: executing program 2 (id=296): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev}, 0x8, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x4, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4001800) unshare(0x22020600) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5218) 16.766009735s ago: executing program 4 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94) 16.411665594s ago: executing program 4 (id=306): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4, 0x25, 0x4}, 0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='sched_kthread_work_queue_work\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r7}) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0c02004}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) sendmmsg$inet6(r10, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7240}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x38bfb85b, 0x7f}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x6d}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffe, 0x24}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmmsg$inet6(r7, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 16.216468522s ago: executing program 1 (id=308): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x22}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r2 = socket(0x28, 0x80801, 0x1) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x894b, &(0x7f0000000180)) listen(r0, 0xfff) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000000a080001400000000108000340030000000900010073797a300000"], 0xc8}}, 0x0) 16.144305114s ago: executing program 1 (id=309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4090) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x44}}, 0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2000c841}, 0x20000048) 16.090558148s ago: executing program 1 (id=310): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000040)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/258, 0x102}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0xba1ce7d45aefd2dd) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x40000000}, 0x4c0f4) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16.012524922s ago: executing program 1 (id=311): r0 = socket$kcm(0xa, 0x1, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000400020000008000fb38a8b100000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) (async) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 16.011692679s ago: executing program 1 (id=312): unshare(0x20000400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="14000200ff0200000000000000000000000000010800080002070000"], 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r9}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x5, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x2, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x6, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1e, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x4, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xffffffff, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x8}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x401, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000007, 0x13, r3, 0x1000) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r10, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010700000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c00020000000003000000ffb3c8cb93acc7cf2703bf98080782cf049f78b77df180945fef1d4ee3c817e6ef2ff6d85fa93d9c4aa2f6709934867a0c61ed2880c07ec2190e284165e3f1896763b65089f7bc8d3652e8cc7799a52e7083cf561f164342618ee33c96576f0befdc9b022a20a7175971fbc1a9e355f231e82b567637c2fc58554310d5a0c2f1d2b76a0eda3d24ff9d10daa1e43f5ab037871bb54d8829c4bc72fbae242c72ae9dfe050d1d73a3b76cec92298150a9c182e32ebdac9d7bba2172c7566282c8508421a368db5c9d85997836"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) connect$unix(r0, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 15.907720487s ago: executing program 1 (id=313): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x4a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="001cff000000000060ec97000fc83c00fe8000000000000c0000000000000000000000009af9f4baab2f600f47ede91f6d00000000000000000000000106000000000000000000"], 0xffe) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7, 0xfffffffb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 15.507579698s ago: executing program 4 (id=314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000220000000000000000000000000000019f82acaf339362754f1a5db496713fc91195c71fdbb1b2085a5cc9dc72b94681fe87b"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x54000000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800038004000500080000003e"], 0x44}}, 0x24000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1003, &(0x7f0000000340)=""/4099, 0x41100, 0x6}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg$can_j1939(r5, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40000000) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x73, @multicast2, 0x4e22, 0x3, 'nq\x00', 0x0, 0x7, 0x1}, 0x2c) 15.416468546s ago: executing program 4 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008"], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="200403000000003bdc1106a885c51434d1212e90c352250000200000"], 0x28}}, 0x44) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}}, 0x4000010) 15.318432585s ago: executing program 4 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {0xd, 0xb}, {0xfff1, 0x9}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x34}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x2000c040}, 0x4000014) 15.262743285s ago: executing program 4 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff01076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) (async, rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0x400, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}, @TCA_STAB={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000022c0)={{0x0, 0x9, 0x9, 0x4, 0x1, 0x3, 0x3, 0x4, 0x36, 0x800, 0x2, 0x8000, 0x5, 0x4, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000880)={{r11, 0x0, 0xc3d, 0x4, 0x9, 0x4, 0x2, 0xfffffffc, 0x4, 0x8, 0xdaf5, 0x2, 0x3, 0x5, 0x5}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0xfff3}, {0xffe0, 0xfff3}, {0xa, 0x3}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c061}, 0x4008000) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0303fdffffff000000003e000000"], 0x14}}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0xb10, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xa94, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x22c, 0x1, [@m_mirred={0x90, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x5, 0x4, 0x9}, 0x3}}]}, {0x23, 0x6, "d527360c37d81b077c369a3b452b678d01f8c85889207c9835e2a927b0b612"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x198, 0x1c, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0x1, 0x1, 0x7}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x7, 0x4, 0x5}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x10000, 0x7, 0x8, 0x16}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0xe1, 0x6, "4582bda1d461ed1563abc4d1f3db4614a8bc15eb8b83ea9d21f77e967e9b9099347cd9f8f8896b42328868a141b0695573d840dca43af80cf2e4be55cc6e202c44e962881f7675a93ea956183e5d80cbdbaac58a6e766c59151996ae382cbb3079e86ff9fc348645faa915e4497ff0877cdfe8059d7eb2fac3e3614615922f79e0831c371f4a3babea538803c38d66aae16d38968d206b1d01eae9d03115e6ec54528b80553bd199a299bc40fabda458c0a59a708ca6bcaf922ea7cf7e7be70002498be43d2f40a4ea6807b20a2a816019b4cb802fc6b3ba01a169e0f1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0xffffffff, 0xfffffff8, 0x2, 0x6, 0x1, 0x138, 0x1, 0x4, 0x10, 0x9, 0x80000001, 0x2, 0x6, 0x7fffffff, 0x3, 0x80000001, 0x7, 0x200, 0x4, 0x9, 0x3ff, 0x80000001, 0x6, 0x3, 0x1, 0xf, 0x8000, 0x9, 0x3, 0x9, 0x8, 0x0, 0x6, 0x100, 0xaba, 0x2, 0x9, 0x1, 0x8, 0xd, 0x0, 0x4, 0x6, 0xf187, 0x0, 0x127, 0x200, 0xe, 0xe6d, 0x487b, 0x0, 0xffffffff, 0x4, 0x0, 0x8, 0x5cd, 0x4, 0x2, 0x40, 0x400, 0x7, 0x1, 0x9, 0x5349, 0x1, 0x6, 0x9, 0xe, 0xc, 0x3, 0x3, 0x2, 0xffffffff, 0x42cb, 0x9, 0xfffffffd, 0x2, 0x1, 0x6, 0x7f, 0x1, 0xe, 0x6, 0x5, 0x2, 0x4, 0x8001, 0x1, 0x9, 0xb, 0xc0, 0x1, 0xa5, 0x3, 0x9, 0x7, 0x4, 0xf3, 0x8, 0x7, 0x200, 0x53ac, 0xfffffff6, 0x0, 0x40, 0x8, 0x0, 0x8, 0x0, 0x8, 0x5, 0x3, 0x7, 0x5, 0x8, 0x4, 0x7, 0x6, 0x3, 0xd98, 0x7, 0x8, 0x96d, 0x481, 0x7, 0x6, 0x7, 0x5, 0x7, 0x3, 0x1ff, 0x0, 0xc2, 0xfffffffa, 0x56, 0x3, 0x7, 0xfffffff7, 0x2, 0x80, 0x7, 0x8001, 0x1, 0x6, 0x2, 0x9, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x9, 0x7, 0xfffffffc, 0x2, 0xffffffff, 0x5c, 0x2, 0x6, 0x7fffffff, 0x0, 0x15816d4a, 0x0, 0x32d, 0xb, 0x9, 0x0, 0xffff, 0x6, 0x5, 0x5, 0xfffffeff, 0xfffffffa, 0x9, 0x6, 0x4, 0x8, 0x3, 0xa8f, 0x8, 0x1, 0x0, 0x7, 0xb, 0x2cd1, 0xb, 0x25da, 0x5, 0x8, 0x0, 0x8, 0x2, 0x2, 0x400, 0x2, 0x3, 0x1, 0x9, 0x1, 0xffff, 0x0, 0x5, 0x9, 0x4910, 0x0, 0x0, 0x9, 0x0, 0x8001, 0x7fffffff, 0x4, 0x65, 0x427, 0x7, 0x8, 0x9, 0x40, 0xf, 0x2000000, 0x10000, 0xfff, 0x7, 0xece, 0x6, 0x8, 0x0, 0x8f1, 0x6, 0x5, 0x5, 0x8, 0x3ff, 0x691, 0x3, 0x0, 0x9, 0x9, 0x0, 0x32c00000, 0x2, 0x0, 0x7, 0x0, 0x7, 0x6, 0x8, 0x2, 0x4, 0x1000, 0x3, 0x1, 0xc3, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x61, 0x1, 0x5, 0x9, 0x8000, {0x1, 0x2, 0x7ff, 0xffff, 0x1}, {0xec, 0x2, 0x0, 0x27, 0x8, 0x5}, 0xffff, 0x7, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3acf, 0x6, 0x4, 0x7, 0x0, 0x10001, 0x4, 0x46, 0x9525, 0x2, 0x10001, 0x0, 0x2, 0x6f, 0xff, 0x0, 0x0, 0x2, 0x0, 0x1, 0x401, 0x7, 0x4, 0x4, 0x3, 0x5, 0x7fff, 0x0, 0x8, 0xffffffff, 0x40, 0x80, 0x780d, 0xebf9, 0x1, 0x200, 0x6, 0x3, 0x9, 0x7ff, 0xdb3, 0x3cb9, 0x3, 0x8, 0x4, 0x7, 0x712, 0x3, 0xa, 0xf, 0x40, 0x4, 0x4, 0x2, 0xd5, 0x9, 0x6, 0x6cb6b14, 0x8001, 0x2, 0x5, 0x62f9a2c3, 0x7ff, 0x9, 0xff, 0x1, 0x4, 0x3, 0x3, 0x0, 0x15, 0x2e, 0x3, 0x6, 0x94, 0x55, 0x8, 0x6, 0x2000000, 0x7, 0x400, 0x1, 0x5, 0x6, 0x8, 0x3, 0x6000, 0x3, 0x7, 0x17, 0x8, 0x5, 0x5, 0x2a7, 0xa, 0x0, 0x80000001, 0x5, 0x5, 0x9, 0xb, 0xc0000000, 0x1, 0x1, 0x4, 0x6, 0xe, 0xfff, 0x0, 0x6e, 0x4, 0x10001, 0x8, 0x3, 0x101, 0xeb, 0x7, 0x7, 0xffffffff, 0x400, 0x8, 0x1, 0x3ff, 0x8, 0x1, 0x80, 0x5, 0x7ff, 0x1, 0x5, 0x7cc9, 0xc, 0x1000, 0x86, 0x6, 0x6, 0x45, 0x36c7, 0x4, 0x7, 0x12c, 0x8264, 0x0, 0x9, 0x5, 0xe8f, 0x8, 0xfffffffe, 0x0, 0x8, 0x2, 0x5, 0x401, 0x7, 0xffffa425, 0x2, 0x2, 0x9, 0xd, 0x401, 0x7, 0x7, 0x7, 0x7f, 0xf7f, 0x1ff, 0x8, 0x2, 0x70000000, 0x6d018487, 0x8, 0xa, 0x5, 0x80, 0xffff, 0x81, 0x7, 0x80000000, 0xa, 0x8, 0x8f1, 0x0, 0xf6f, 0x8, 0x200, 0x7, 0x9, 0xae, 0xadc7, 0x1ff, 0x3, 0x9, 0x7, 0x2, 0x40000000, 0x4, 0xec62, 0x0, 0xa, 0x3, 0x7, 0x5, 0x7fffffff, 0x9, 0x8, 0x91cd, 0xfffffff7, 0x1, 0x2513e429, 0x2, 0xfffffffc, 0x8e8c, 0x1, 0x7, 0x3, 0x5, 0xb, 0x6, 0x5, 0x8563, 0x702, 0x5, 0xe994, 0x2, 0x75, 0x5, 0x5, 0x1, 0x4, 0x6, 0x7, 0xd, 0x7, 0x5, 0x6, 0xfffffff7, 0x9, 0x4, 0x0, 0x650494c2, 0x3b, 0xed3, 0x31c, 0xffffffa0, 0x0, 0x7, 0x8, 0x3, 0x97, 0x4d620174, 0x1, 0x6, 0x1b0, 0x468, 0x50af, 0x9]}]}]}}]}, 0xb10}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0), 0x0, 0x42040103, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c0019800800018004"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) 6.003616637s ago: executing program 32 (id=270): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) syz_genetlink_get_family_id$nl802154(0x0, r1) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="40020415d65f92"], 0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611824000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r9}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000140), 0x0}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x22020600) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) sendmmsg$inet(r11, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@multicast1=0xe0000306]}]}}}], 0x18}}], 0x1, 0x4000c044) r12 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r12, 0x111, 0x4, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x800002}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x800) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x24040884) sendto$packet(r8, &(0x7f00000004c0)="a896aa1a56f487d901b1095cb3d90f14cd523121ecc1af00e6d90ccc73ff332809eacde6005c33fc2237667156ef73365cfcbd49631bb6aa7f9b07e4f58f3a168ab8956a882864af20fa9fe9419df2e5b0f7ef14bb5db66ccf91535d1371c70f0ba12790ff37c17100d5f9276d75ccd3eaef3474a62b6378ac8b7975ea6fa76f48807a7f59e8b2e7e10819", 0x8b, 0x4000000, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x1, 0x69, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r6], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.945113517s ago: executing program 33 (id=271): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000440)={0x13, 0xfffb, 0x8001, 0x2, 0x5, 0x2, 0x0, 0xffff1757, r6}, &(0x7f0000000500)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e24, 0x37ab, @empty, 0x6}}, [0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffc00, 0xfffffffffffffffe, 0x1, 0x6, 0xb5, 0x100000001, 0x8000000000009, 0x1000, 0x3, 0x9, 0x6, 0x1, 0x6]}, &(0x7f0000000500)=0x100) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000005500)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x44854) recvmmsg(r10, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r8, 0xffffffffffffffff, 0x500}, 0x57) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "9872"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.99730907s ago: executing program 34 (id=296): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev}, 0x8, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x4, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4001800) unshare(0x22020600) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5218) 497.523125ms ago: executing program 35 (id=313): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x4a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="001cff000000000060ec97000fc83c00fe8000000000000c0000000000000000000000009af9f4baab2f600f47ede91f6d00000000000000000000000106000000000000000000"], 0xffe) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7, 0xfffffffb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 0s ago: executing program 36 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff01076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) (async, rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0x400, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}, @TCA_STAB={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000022c0)={{0x0, 0x9, 0x9, 0x4, 0x1, 0x3, 0x3, 0x4, 0x36, 0x800, 0x2, 0x8000, 0x5, 0x4, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000880)={{r11, 0x0, 0xc3d, 0x4, 0x9, 0x4, 0x2, 0xfffffffc, 0x4, 0x8, 0xdaf5, 0x2, 0x3, 0x5, 0x5}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x54, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0xfff3}, {0xffe0, 0xfff3}, {0xa, 0x3}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c061}, 0x4008000) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0303fdffffff000000003e000000"], 0x14}}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0xb10, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xa94, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x22c, 0x1, [@m_mirred={0x90, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x5, 0x4, 0x9}, 0x3}}]}, {0x23, 0x6, "d527360c37d81b077c369a3b452b678d01f8c85889207c9835e2a927b0b612"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x198, 0x1c, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0x1, 0x1, 0x7}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x7, 0x4, 0x5}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x10000, 0x7, 0x8, 0x16}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0xe1, 0x6, "4582bda1d461ed1563abc4d1f3db4614a8bc15eb8b83ea9d21f77e967e9b9099347cd9f8f8896b42328868a141b0695573d840dca43af80cf2e4be55cc6e202c44e962881f7675a93ea956183e5d80cbdbaac58a6e766c59151996ae382cbb3079e86ff9fc348645faa915e4497ff0877cdfe8059d7eb2fac3e3614615922f79e0831c371f4a3babea538803c38d66aae16d38968d206b1d01eae9d03115e6ec54528b80553bd199a299bc40fabda458c0a59a708ca6bcaf922ea7cf7e7be70002498be43d2f40a4ea6807b20a2a816019b4cb802fc6b3ba01a169e0f1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0xffffffff, 0xfffffff8, 0x2, 0x6, 0x1, 0x138, 0x1, 0x4, 0x10, 0x9, 0x80000001, 0x2, 0x6, 0x7fffffff, 0x3, 0x80000001, 0x7, 0x200, 0x4, 0x9, 0x3ff, 0x80000001, 0x6, 0x3, 0x1, 0xf, 0x8000, 0x9, 0x3, 0x9, 0x8, 0x0, 0x6, 0x100, 0xaba, 0x2, 0x9, 0x1, 0x8, 0xd, 0x0, 0x4, 0x6, 0xf187, 0x0, 0x127, 0x200, 0xe, 0xe6d, 0x487b, 0x0, 0xffffffff, 0x4, 0x0, 0x8, 0x5cd, 0x4, 0x2, 0x40, 0x400, 0x7, 0x1, 0x9, 0x5349, 0x1, 0x6, 0x9, 0xe, 0xc, 0x3, 0x3, 0x2, 0xffffffff, 0x42cb, 0x9, 0xfffffffd, 0x2, 0x1, 0x6, 0x7f, 0x1, 0xe, 0x6, 0x5, 0x2, 0x4, 0x8001, 0x1, 0x9, 0xb, 0xc0, 0x1, 0xa5, 0x3, 0x9, 0x7, 0x4, 0xf3, 0x8, 0x7, 0x200, 0x53ac, 0xfffffff6, 0x0, 0x40, 0x8, 0x0, 0x8, 0x0, 0x8, 0x5, 0x3, 0x7, 0x5, 0x8, 0x4, 0x7, 0x6, 0x3, 0xd98, 0x7, 0x8, 0x96d, 0x481, 0x7, 0x6, 0x7, 0x5, 0x7, 0x3, 0x1ff, 0x0, 0xc2, 0xfffffffa, 0x56, 0x3, 0x7, 0xfffffff7, 0x2, 0x80, 0x7, 0x8001, 0x1, 0x6, 0x2, 0x9, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x9, 0x7, 0xfffffffc, 0x2, 0xffffffff, 0x5c, 0x2, 0x6, 0x7fffffff, 0x0, 0x15816d4a, 0x0, 0x32d, 0xb, 0x9, 0x0, 0xffff, 0x6, 0x5, 0x5, 0xfffffeff, 0xfffffffa, 0x9, 0x6, 0x4, 0x8, 0x3, 0xa8f, 0x8, 0x1, 0x0, 0x7, 0xb, 0x2cd1, 0xb, 0x25da, 0x5, 0x8, 0x0, 0x8, 0x2, 0x2, 0x400, 0x2, 0x3, 0x1, 0x9, 0x1, 0xffff, 0x0, 0x5, 0x9, 0x4910, 0x0, 0x0, 0x9, 0x0, 0x8001, 0x7fffffff, 0x4, 0x65, 0x427, 0x7, 0x8, 0x9, 0x40, 0xf, 0x2000000, 0x10000, 0xfff, 0x7, 0xece, 0x6, 0x8, 0x0, 0x8f1, 0x6, 0x5, 0x5, 0x8, 0x3ff, 0x691, 0x3, 0x0, 0x9, 0x9, 0x0, 0x32c00000, 0x2, 0x0, 0x7, 0x0, 0x7, 0x6, 0x8, 0x2, 0x4, 0x1000, 0x3, 0x1, 0xc3, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x61, 0x1, 0x5, 0x9, 0x8000, {0x1, 0x2, 0x7ff, 0xffff, 0x1}, {0xec, 0x2, 0x0, 0x27, 0x8, 0x5}, 0xffff, 0x7, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3acf, 0x6, 0x4, 0x7, 0x0, 0x10001, 0x4, 0x46, 0x9525, 0x2, 0x10001, 0x0, 0x2, 0x6f, 0xff, 0x0, 0x0, 0x2, 0x0, 0x1, 0x401, 0x7, 0x4, 0x4, 0x3, 0x5, 0x7fff, 0x0, 0x8, 0xffffffff, 0x40, 0x80, 0x780d, 0xebf9, 0x1, 0x200, 0x6, 0x3, 0x9, 0x7ff, 0xdb3, 0x3cb9, 0x3, 0x8, 0x4, 0x7, 0x712, 0x3, 0xa, 0xf, 0x40, 0x4, 0x4, 0x2, 0xd5, 0x9, 0x6, 0x6cb6b14, 0x8001, 0x2, 0x5, 0x62f9a2c3, 0x7ff, 0x9, 0xff, 0x1, 0x4, 0x3, 0x3, 0x0, 0x15, 0x2e, 0x3, 0x6, 0x94, 0x55, 0x8, 0x6, 0x2000000, 0x7, 0x400, 0x1, 0x5, 0x6, 0x8, 0x3, 0x6000, 0x3, 0x7, 0x17, 0x8, 0x5, 0x5, 0x2a7, 0xa, 0x0, 0x80000001, 0x5, 0x5, 0x9, 0xb, 0xc0000000, 0x1, 0x1, 0x4, 0x6, 0xe, 0xfff, 0x0, 0x6e, 0x4, 0x10001, 0x8, 0x3, 0x101, 0xeb, 0x7, 0x7, 0xffffffff, 0x400, 0x8, 0x1, 0x3ff, 0x8, 0x1, 0x80, 0x5, 0x7ff, 0x1, 0x5, 0x7cc9, 0xc, 0x1000, 0x86, 0x6, 0x6, 0x45, 0x36c7, 0x4, 0x7, 0x12c, 0x8264, 0x0, 0x9, 0x5, 0xe8f, 0x8, 0xfffffffe, 0x0, 0x8, 0x2, 0x5, 0x401, 0x7, 0xffffa425, 0x2, 0x2, 0x9, 0xd, 0x401, 0x7, 0x7, 0x7, 0x7f, 0xf7f, 0x1ff, 0x8, 0x2, 0x70000000, 0x6d018487, 0x8, 0xa, 0x5, 0x80, 0xffff, 0x81, 0x7, 0x80000000, 0xa, 0x8, 0x8f1, 0x0, 0xf6f, 0x8, 0x200, 0x7, 0x9, 0xae, 0xadc7, 0x1ff, 0x3, 0x9, 0x7, 0x2, 0x40000000, 0x4, 0xec62, 0x0, 0xa, 0x3, 0x7, 0x5, 0x7fffffff, 0x9, 0x8, 0x91cd, 0xfffffff7, 0x1, 0x2513e429, 0x2, 0xfffffffc, 0x8e8c, 0x1, 0x7, 0x3, 0x5, 0xb, 0x6, 0x5, 0x8563, 0x702, 0x5, 0xe994, 0x2, 0x75, 0x5, 0x5, 0x1, 0x4, 0x6, 0x7, 0xd, 0x7, 0x5, 0x6, 0xfffffff7, 0x9, 0x4, 0x0, 0x650494c2, 0x3b, 0xed3, 0x31c, 0xffffffa0, 0x0, 0x7, 0x8, 0x3, 0x97, 0x4d620174, 0x1, 0x6, 0x1b0, 0x468, 0x50af, 0x9]}]}]}}]}, 0xb10}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0), 0x0, 0x42040103, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c0019800800018004"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 75.472231][ T5852] cgroup: Unknown subsys name 'net' [ 75.590513][ T5852] cgroup: Unknown subsys name 'cpuset' [ 75.599304][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.051431][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.771799][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.779966][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.786935][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.787743][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.804579][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.808902][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.814180][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.819511][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.826905][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.834616][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.847157][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.849350][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.856325][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.862400][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.872753][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.876141][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.883113][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.891525][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.899767][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.905863][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.923883][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.944172][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.955395][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.962761][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.974236][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.621272][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 80.648949][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 80.820435][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 80.876373][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 80.967544][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 80.996392][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.003629][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.012623][ T5863] bridge_slave_0: entered allmulticast mode [ 81.020453][ T5863] bridge_slave_0: entered promiscuous mode [ 81.089772][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.097208][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.104481][ T5863] bridge_slave_1: entered allmulticast mode [ 81.111448][ T5863] bridge_slave_1: entered promiscuous mode [ 81.129958][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.137294][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.146869][ T5867] bridge_slave_0: entered allmulticast mode [ 81.153885][ T5867] bridge_slave_0: entered promiscuous mode [ 81.168447][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.175636][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.182775][ T5865] bridge_slave_0: entered allmulticast mode [ 81.191316][ T5865] bridge_slave_0: entered promiscuous mode [ 81.222692][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.230341][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.237616][ T5867] bridge_slave_1: entered allmulticast mode [ 81.245255][ T5867] bridge_slave_1: entered promiscuous mode [ 81.257226][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.264591][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.271753][ T5865] bridge_slave_1: entered allmulticast mode [ 81.278986][ T5865] bridge_slave_1: entered promiscuous mode [ 81.361456][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.419287][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.431015][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.470256][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.480910][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.488196][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.495765][ T5864] bridge_slave_0: entered allmulticast mode [ 81.502780][ T5864] bridge_slave_0: entered promiscuous mode [ 81.513667][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.566663][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.600450][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.607917][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.615971][ T5864] bridge_slave_1: entered allmulticast mode [ 81.622900][ T5864] bridge_slave_1: entered promiscuous mode [ 81.644196][ T5863] team0: Port device team_slave_0 added [ 81.650396][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.657635][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.664953][ T5862] bridge_slave_0: entered allmulticast mode [ 81.671974][ T5862] bridge_slave_0: entered promiscuous mode [ 81.681093][ T5867] team0: Port device team_slave_0 added [ 81.702750][ T5865] team0: Port device team_slave_0 added [ 81.710734][ T5863] team0: Port device team_slave_1 added [ 81.731184][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.740712][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.748092][ T5862] bridge_slave_1: entered allmulticast mode [ 81.756344][ T5862] bridge_slave_1: entered promiscuous mode [ 81.765085][ T5867] team0: Port device team_slave_1 added [ 81.787267][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.799483][ T5865] team0: Port device team_slave_1 added [ 81.862702][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.898935][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.905978][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.932577][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.945016][ T5186] Bluetooth: hci4: command tx timeout [ 81.974767][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.022727][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.029925][ T50] Bluetooth: hci0: command tx timeout [ 82.029965][ T5866] Bluetooth: hci1: command tx timeout [ 82.036010][ T5186] Bluetooth: hci2: command tx timeout [ 82.041667][ T5877] Bluetooth: hci3: command tx timeout [ 82.048269][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.079197][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.092286][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.101220][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.131318][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.146335][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.180445][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.187835][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.218640][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.232023][ T5864] team0: Port device team_slave_0 added [ 82.245299][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.252261][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.282801][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.324540][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.331514][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.357859][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.375489][ T5864] team0: Port device team_slave_1 added [ 82.410258][ T5862] team0: Port device team_slave_0 added [ 82.419165][ T5862] team0: Port device team_slave_1 added [ 82.517180][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.524513][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.551507][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.589131][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.596340][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.622918][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.636449][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.643437][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.669799][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.693706][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.700911][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.727094][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.744233][ T5863] hsr_slave_0: entered promiscuous mode [ 82.750634][ T5863] hsr_slave_1: entered promiscuous mode [ 82.768541][ T5865] hsr_slave_0: entered promiscuous mode [ 82.775507][ T5865] hsr_slave_1: entered promiscuous mode [ 82.781603][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 82.787560][ T5865] Cannot create hsr debugfs directory [ 82.857901][ T5867] hsr_slave_0: entered promiscuous mode [ 82.865121][ T5867] hsr_slave_1: entered promiscuous mode [ 82.871379][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 82.877252][ T5867] Cannot create hsr debugfs directory [ 83.019278][ T5864] hsr_slave_0: entered promiscuous mode [ 83.026263][ T5864] hsr_slave_1: entered promiscuous mode [ 83.033613][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 83.039715][ T5864] Cannot create hsr debugfs directory [ 83.062181][ T5862] hsr_slave_0: entered promiscuous mode [ 83.069674][ T5862] hsr_slave_1: entered promiscuous mode [ 83.076243][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 83.081987][ T5862] Cannot create hsr debugfs directory [ 83.645513][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.681282][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.699691][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.716816][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.750033][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.761162][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.790599][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.810536][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.883322][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.900592][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.917055][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.928551][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.023567][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.030397][ T5877] Bluetooth: hci4: command tx timeout [ 84.042792][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.060531][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.072062][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.104690][ T5877] Bluetooth: hci2: command tx timeout [ 84.104779][ T5186] Bluetooth: hci3: command tx timeout [ 84.110133][ T5877] Bluetooth: hci0: command tx timeout [ 84.115970][ T5866] Bluetooth: hci1: command tx timeout [ 84.243239][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.258452][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.279610][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.312881][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.343150][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.394737][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.409242][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.416561][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.449261][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.456450][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.480618][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.539208][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.562825][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.570001][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.611026][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.623015][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.631348][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.725331][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.752747][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.787619][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.794849][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.826523][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.833726][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.939396][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.980946][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.061274][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.132222][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.147051][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.154255][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.201293][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.208536][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.231380][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.238688][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.266860][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.274074][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.310504][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.401996][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.490307][ T5863] veth0_vlan: entered promiscuous mode [ 85.561172][ T5863] veth1_vlan: entered promiscuous mode [ 85.632772][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.689138][ T5867] veth0_vlan: entered promiscuous mode [ 85.725304][ T5863] veth0_macvtap: entered promiscuous mode [ 85.762178][ T5867] veth1_vlan: entered promiscuous mode [ 85.783654][ T5863] veth1_macvtap: entered promiscuous mode [ 85.890911][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.947946][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.982254][ T5867] veth0_macvtap: entered promiscuous mode [ 85.995538][ T5864] veth0_vlan: entered promiscuous mode [ 86.006266][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.013269][ T2973] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.027382][ T2973] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.049449][ T5867] veth1_macvtap: entered promiscuous mode [ 86.075556][ T2973] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.091708][ T2973] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.111987][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.118944][ T5186] Bluetooth: hci4: command tx timeout [ 86.180880][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.184348][ T5866] Bluetooth: hci1: command tx timeout [ 86.193713][ T50] Bluetooth: hci0: command tx timeout [ 86.193722][ T5877] Bluetooth: hci2: command tx timeout [ 86.196612][ T5864] veth1_vlan: entered promiscuous mode [ 86.201329][ T5186] Bluetooth: hci3: command tx timeout [ 86.239350][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.272840][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.282291][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.331042][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.352453][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.453525][ T5864] veth0_macvtap: entered promiscuous mode [ 86.463459][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.474892][ T5864] veth1_macvtap: entered promiscuous mode [ 86.480742][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.567746][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.588718][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.601326][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.605058][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.637680][ T5865] veth0_vlan: entered promiscuous mode [ 86.661277][ T5865] veth1_vlan: entered promiscuous mode [ 86.676762][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.697962][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.709830][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.721021][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.761051][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.772818][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.796877][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.833518][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.844942][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.928706][ T5865] veth0_macvtap: entered promiscuous mode [ 86.954041][ T5862] veth0_vlan: entered promiscuous mode [ 86.977726][ T5865] veth1_macvtap: entered promiscuous mode [ 87.048313][ T5862] veth1_vlan: entered promiscuous mode [ 87.070314][ T9] cfg80211: failed to load regulatory.db [ 87.177695][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.199231][ T5993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.221591][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.244664][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.270391][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.329289][ T5862] veth0_macvtap: entered promiscuous mode [ 87.342773][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.357153][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.370237][ T5862] veth1_macvtap: entered promiscuous mode [ 87.382808][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.390776][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.396985][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.405853][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.499888][ T5995] syz.2.7 (5995) used greatest stack depth: 16920 bytes left [ 87.543273][ T5999] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 87.646174][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.700417][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.791623][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.817857][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.839264][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.849919][ T6008] tipc: Started in network mode [ 87.855107][ T6008] tipc: Node identity 5e4f9f3dab91, cluster identity 4711 [ 87.862924][ T6008] tipc: Enabled bearer , priority 0 [ 87.880247][ T6009] syzkaller0: entered promiscuous mode [ 87.888766][ T6009] syzkaller0: entered allmulticast mode [ 87.928240][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.957913][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.977297][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.016991][ T6009] tipc: Resetting bearer [ 88.053723][ T6009] tipc: Disabling bearer [ 88.169098][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.191899][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.192216][ T5186] Bluetooth: hci4: command tx timeout [ 88.259158][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.264459][ T5186] Bluetooth: hci3: command tx timeout [ 88.273783][ T50] Bluetooth: hci0: command tx timeout [ 88.280074][ T50] Bluetooth: hci1: command tx timeout [ 88.295183][ T5866] Bluetooth: hci2: command tx timeout [ 88.318753][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.420663][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.446774][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.793796][ T6043] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'. [ 88.812660][ T6043] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 88.858834][ T6040] syzkaller1: entered promiscuous mode [ 88.865724][ T6040] syzkaller1: entered allmulticast mode [ 89.263104][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 90.211391][ T6084] veth3: entered promiscuous mode [ 90.746118][ T6108] netlink: 'syz.4.32': attribute type 2 has an invalid length. [ 90.800019][ T6108] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.858710][ T6107] netlink: 236 bytes leftover after parsing attributes in process `syz.1.31'. [ 90.920976][ T6107] netlink: 1 bytes leftover after parsing attributes in process `syz.1.31'. [ 91.037511][ T6108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.32'. [ 91.066402][ T6119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.32'. [ 91.080619][ T6119] Zero length message leads to an empty skb [ 91.271905][ T6130] can: request_module (can-proto-5) failed. [ 92.108760][ T6156] tipc: Started in network mode [ 92.113665][ T6156] tipc: Node identity , cluster identity 4711 [ 92.142005][ T6156] tipc: Failed to obtain node identity [ 92.161921][ T6156] tipc: Enabling of bearer rejected, failed to enable media [ 92.176735][ T6161] syzkaller0: entered promiscuous mode [ 92.182375][ T6161] syzkaller0: entered allmulticast mode [ 92.208769][ T6148] netlink: 'syz.0.41': attribute type 6 has an invalid length. [ 92.226256][ T6156] netlink: 'syz.4.43': attribute type 39 has an invalid length. [ 92.320038][ T6166] netlink: 844 bytes leftover after parsing attributes in process `syz.2.46'. [ 92.335494][ T6167] netlink: 844 bytes leftover after parsing attributes in process `syz.2.46'. [ 92.569449][ T6175] netlink: 'syz.4.49': attribute type 21 has an invalid length. [ 92.771340][ T6178] tipc: Started in network mode [ 92.781820][ T6178] tipc: Node identity 16b9515b8557, cluster identity 4711 [ 92.814260][ T6178] tipc: Enabled bearer , priority 0 [ 92.855313][ T6178] syzkaller0: entered promiscuous mode [ 92.857235][ T6185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.860838][ T6178] syzkaller0: entered allmulticast mode [ 92.938786][ T6178] tipc: Resetting bearer [ 92.989279][ T6177] tipc: Resetting bearer [ 93.036134][ T6177] tipc: Disabling bearer [ 93.392202][ T6209] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 93.471472][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 93.513405][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 93.567791][ T6220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.60'. [ 93.606143][ T6222] pim6reg1: entered promiscuous mode [ 93.670079][ T6222] pim6reg1: entered allmulticast mode [ 93.993587][ T6235] warning: `syz.0.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.170132][ T6244] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.312668][ T6244] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 94.377514][ T6250] netlink: 'syz.1.70': attribute type 83 has an invalid length. [ 94.426030][ T6256] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.69'. [ 94.897205][ T6269] netlink: 'syz.3.73': attribute type 12 has an invalid length. [ 95.244711][ T6280] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 95.423572][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 95.460399][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 95.643698][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 96.284078][ T6324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 96.346308][ T6332] IPv6: addrconf: prefix option has invalid lifetime [ 96.750490][ T6342] Bluetooth: MGMT ver 1.23 [ 97.349657][ T6364] netlink: 'syz.4.95': attribute type 4 has an invalid length. [ 98.535389][ T6404] __nla_validate_parse: 1 callbacks suppressed [ 98.535406][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.107'. [ 98.773690][ T6413] bond1: entered promiscuous mode [ 98.804051][ T6413] bond1: entered allmulticast mode [ 98.809670][ T6413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.898327][ T6421] pimreg3: entered allmulticast mode [ 99.038257][ T6431] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.118540][ T6431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.158623][ T6425] af_packet: tpacket_rcv: packet too big, clamped from 212 to 4294967272. macoff=96 [ 99.434703][ T6445] openvswitch: netlink: IP tunnel TTL not specified. [ 99.541124][ T6448] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.039289][ T6457] netlink: 'syz.2.117': attribute type 3 has an invalid length. [ 101.546970][ T6484] : entered promiscuous mode [ 101.570167][ T6495] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 101.594728][ T6484] trusted_key: syz.3.124 sent an empty control message without MSG_MORE. [ 101.620366][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.629368][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.632303][ T6498] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 101.648150][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.655427][ T6495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.663586][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.670841][ T6495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.684926][ T6495] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.725912][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.733217][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.098778][ T6509] netlink: 'syz.2.129': attribute type 10 has an invalid length. [ 102.161410][ T6509] macvlan1: entered allmulticast mode [ 102.166205][ T6513] netlink: 'syz.2.129': attribute type 10 has an invalid length. [ 102.212391][ T6509] veth1_vlan: entered allmulticast mode [ 102.231699][ T6509] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 102.241647][ T6513] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 102.561680][ T6529] veth1_macvtap: left promiscuous mode [ 102.591879][ T6532] netlink: 196 bytes leftover after parsing attributes in process `syz.4.135'. [ 102.664970][ T6529] veth0_virt_wifi: renamed from macsec0 [ 103.290538][ T6550] netlink: 'syz.1.140': attribute type 1 has an invalid length. [ 103.465754][ T6560] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 103.480042][ T6560] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 103.497704][ T6560] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 103.739571][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 103.798333][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 103.866546][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 103.886098][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 104.079752][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 104.328818][ T5531] veth1_macvtap: entered promiscuous mode [ 104.437592][ T6607] FAULT_INJECTION: forcing a failure. [ 104.437592][ T6607] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.498353][ T6607] CPU: 0 UID: 0 PID: 6607 Comm: syz.1.153 Not tainted syzkaller #0 PREEMPT(full) [ 104.498381][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.498400][ T6607] Call Trace: [ 104.498408][ T6607] [ 104.498416][ T6607] dump_stack_lvl+0x189/0x250 [ 104.498444][ T6607] ? __pfx____ratelimit+0x10/0x10 [ 104.498464][ T6607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.498484][ T6607] ? __pfx__printk+0x10/0x10 [ 104.498521][ T6607] should_fail_ex+0x414/0x560 [ 104.498551][ T6607] _copy_to_user+0x31/0xb0 [ 104.498586][ T6607] sk_getsockopt+0x19dd/0x2530 [ 104.498614][ T6607] ? __pfx_sk_getsockopt+0x10/0x10 [ 104.498630][ T6607] ? do_user_addr_fault+0xbc1/0x1390 [ 104.498655][ T6607] ? write_ibpb+0x30/0x40 [ 104.498679][ T6607] ? do_user_addr_fault+0xc8a/0x1390 [ 104.498712][ T6607] ? irqentry_exit+0x74/0x90 [ 104.498730][ T6607] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.498750][ T6607] ? irqentry_exit+0x74/0x90 [ 104.498765][ T6607] ? exc_page_fault+0x9f/0xf0 [ 104.498800][ T6607] ? rep_movs_alternative+0xf/0x90 [ 104.498827][ T6607] do_sock_getsockopt+0x237/0x450 [ 104.498846][ T6607] ? write_ibpb+0x30/0x40 [ 104.498868][ T6607] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 104.498887][ T6607] ? write_ibpb+0x30/0x40 [ 104.498904][ T6607] ? __fget_files+0x3a0/0x420 [ 104.498921][ T6607] ? __fget_files+0x2a/0x420 [ 104.498946][ T6607] __x64_sys_getsockopt+0x1a5/0x250 [ 104.498965][ T6607] ? write_ibpb+0x30/0x40 [ 104.498985][ T6607] ? write_ibpb+0x30/0x40 [ 104.499007][ T6607] do_syscall_64+0xfa/0x3b0 [ 104.499025][ T6607] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.499043][ T6607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.499062][ T6607] ? clear_bhb_loop+0x60/0xb0 [ 104.499084][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.499101][ T6607] RIP: 0033:0x7fef8d58ebe9 [ 104.499120][ T6607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.499134][ T6607] RSP: 002b:00007fef8e47c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 104.499158][ T6607] RAX: ffffffffffffffda RBX: 00007fef8d7c5fa0 RCX: 00007fef8d58ebe9 [ 104.499172][ T6607] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000003 [ 104.499183][ T6607] RBP: 00007fef8e47c090 R08: 0000200000000040 R09: 0000000000000000 [ 104.499194][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.499205][ T6607] R13: 00007fef8d7c6038 R14: 00007fef8d7c5fa0 R15: 00007fffa0be0a18 [ 104.499240][ T6607] [ 105.578410][ T6638] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 106.177965][ T6668] netlink: 'syz.3.164': attribute type 74 has an invalid length. [ 106.228994][ T6672] FAULT_INJECTION: forcing a failure. [ 106.228994][ T6672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.256624][ T6675] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.167'. [ 106.278245][ T6672] CPU: 1 UID: 0 PID: 6672 Comm: syz.0.166 Not tainted syzkaller #0 PREEMPT(full) [ 106.278272][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.278281][ T6672] Call Trace: [ 106.278288][ T6672] [ 106.278295][ T6672] dump_stack_lvl+0x189/0x250 [ 106.278321][ T6672] ? __pfx____ratelimit+0x10/0x10 [ 106.278339][ T6672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.278440][ T6672] ? __pfx__printk+0x10/0x10 [ 106.278487][ T6672] should_fail_ex+0x414/0x560 [ 106.278512][ T6672] _copy_to_user+0x31/0xb0 [ 106.278533][ T6672] simple_read_from_buffer+0xe1/0x170 [ 106.278560][ T6672] proc_fail_nth_read+0x1b3/0x220 [ 106.278580][ T6672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.278600][ T6672] ? rw_verify_area+0x2a6/0x4d0 [ 106.278617][ T6672] ? __lock_acquire+0xab9/0xd20 [ 106.278635][ T6672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.278653][ T6672] vfs_read+0x200/0xa30 [ 106.278670][ T6672] ? fdget_pos+0x247/0x320 [ 106.278688][ T6672] ? __pfx___mutex_lock+0x10/0x10 [ 106.278708][ T6672] ? __pfx_vfs_read+0x10/0x10 [ 106.278726][ T6672] ? __fget_files+0x2a/0x420 [ 106.278742][ T6672] ? __fget_files+0x3a0/0x420 [ 106.278753][ T6672] ? __fget_files+0x2a/0x420 [ 106.278772][ T6672] ksys_read+0x145/0x250 [ 106.278791][ T6672] ? __pfx_ksys_read+0x10/0x10 [ 106.278806][ T6672] ? fput+0xa0/0xd0 [ 106.278827][ T6672] ? do_syscall_64+0xbe/0x3b0 [ 106.278850][ T6672] do_syscall_64+0xfa/0x3b0 [ 106.278864][ T6672] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.278881][ T6672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.278895][ T6672] ? clear_bhb_loop+0x60/0xb0 [ 106.278913][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.278926][ T6672] RIP: 0033:0x7f3b4a98d5fc [ 106.278944][ T6672] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.278960][ T6672] RSP: 002b:00007f3b48bee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.278977][ T6672] RAX: ffffffffffffffda RBX: 00007f3b4abc5fa0 RCX: 00007f3b4a98d5fc [ 106.278988][ T6672] RDX: 000000000000000f RSI: 00007f3b48bee0a0 RDI: 0000000000000005 [ 106.278997][ T6672] RBP: 00007f3b48bee090 R08: 0000000000000000 R09: 0000000000000000 [ 106.279007][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.279016][ T6672] R13: 00007f3b4abc6038 R14: 00007f3b4abc5fa0 R15: 00007fffd54b9568 [ 106.279039][ T6672] [ 106.294690][ T6677] netlink: 'syz.2.165': attribute type 10 has an invalid length. [ 106.380508][ T6671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.545994][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 106.564491][ T6671] team0: Port device bond1 added [ 106.583081][ T6679] bond_slave_0: entered promiscuous mode [ 106.589061][ T6679] bond_slave_1: entered promiscuous mode [ 106.612358][ T6679] vlan2: entered promiscuous mode [ 106.622296][ T6679] bond0: entered promiscuous mode [ 106.739219][ T6677] team0: Device ipvlan1 failed to register rx_handler [ 106.782478][ T6689] netlink: 'syz.4.171': attribute type 15 has an invalid length. [ 106.861206][ T6689] macvlan2: entered allmulticast mode [ 106.904488][ T6689] syz_tun: entered promiscuous mode [ 106.936445][ T6689] syz_tun: entered allmulticast mode [ 106.968519][ T6689] team0: Port device macvlan2 added [ 107.197237][ T6711] netlink: 60 bytes leftover after parsing attributes in process `syz.3.174'. [ 107.249428][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.174'. [ 107.351323][ T6717] netlink: 9 bytes leftover after parsing attributes in process `syz.2.175'. [ 107.984235][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.012917][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.144962][ T5186] Bluetooth: hci4: command 0x0405 tx timeout [ 109.456243][ T6768] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 109.653196][ T6765] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 109.704448][ T6765] team0: Failed to send options change via netlink (err -105) [ 109.729188][ T6765] team0: Port device batadv1 added [ 109.778822][ T6756] netlink: 'syz.3.184': attribute type 3 has an invalid length. [ 109.846791][ T6760] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.099541][ T6760] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.271670][ T6781] netlink: 'syz.2.187': attribute type 13 has an invalid length. [ 110.390234][ T6784] netlink: 'syz.3.188': attribute type 4 has an invalid length. [ 110.406706][ T6760] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.607125][ T6760] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.695505][ T6789] syz_tun: entered allmulticast mode [ 110.723556][ T6792] dvmrp8: entered allmulticast mode [ 110.786449][ T6792] syz_tun: left allmulticast mode [ 110.819803][ T6789] netlink: 'syz.3.190': attribute type 23 has an invalid length. [ 110.864359][ T6792] dvmrp8: left allmulticast mode [ 110.944622][ T6801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.192'. [ 111.480842][ T3556] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.511318][ T6810] : entered promiscuous mode [ 111.678215][ T6817] netlink: 56 bytes leftover after parsing attributes in process `syz.1.195'. [ 111.717485][ T3556] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.764490][ T2925] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.818430][ T6822] openvswitch: netlink: Flow key attribute not present in set flow. [ 111.826490][ T2925] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.977877][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 112.056259][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 112.101806][ T6835] Illegal XDP return value 6835 on prog (id 70) dev N/A, expect packet loss! [ 112.132413][ T6837] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.198'. [ 112.148298][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 112.246756][ T6840] bridge1: entered allmulticast mode [ 112.554512][ T6855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.205'. [ 112.590943][ T6855] tipc: Invalid UDP bearer configuration [ 112.591013][ T6855] tipc: Enabling of bearer rejected, failed to enable media [ 112.687901][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 113.355230][ T6889] netlink: 19 bytes leftover after parsing attributes in process `syz.1.213'. [ 113.364498][ T6889] netlink: 'syz.1.213': attribute type 3 has an invalid length. [ 113.397504][ T6889] ip6tnl1: entered promiscuous mode [ 113.402872][ T6889] ip6tnl1: entered allmulticast mode [ 113.677539][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 113.741978][ T6913] netlink: 'syz.4.216': attribute type 10 has an invalid length. [ 113.982401][ T6913] bond0: (slave wlan1): Opening slave failed [ 114.268831][ T6941] netlink: 'syz.2.223': attribute type 30 has an invalid length. [ 114.477699][ T6943] block nbd0: server does not support multiple connections per device. [ 114.517286][ T6943] block nbd0: shutting down sockets [ 114.772269][ T6980] netlink: 'syz.4.229': attribute type 10 has an invalid length. [ 114.795217][ T6965] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 114.997742][ T6975] bridge_slave_0: left allmulticast mode [ 115.054291][ T6975] bridge_slave_0: left promiscuous mode [ 115.094219][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.152839][ T6975] bridge_slave_1: left allmulticast mode [ 115.172286][ T6975] bridge_slave_1: left promiscuous mode [ 115.199479][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.220945][ T6975] bond0: (slave bond_slave_0): Releasing backup interface [ 115.245412][ T6975] bond0: (slave bond_slave_1): Releasing backup interface [ 115.280151][ T6975] team0: Port device team_slave_0 removed [ 115.302369][ T6975] team0: Port device team_slave_1 removed [ 115.323360][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.337587][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.367174][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.417331][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.490432][ T6975] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.546631][ T6980] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 115.599010][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.616979][ T6980] bond0: (slave wlan1): Opening slave failed [ 115.686367][ T6965] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 115.698581][ T6965] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 115.712921][ T6965] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 115.735131][ T7003] tipc: Enabled bearer , priority 0 [ 115.766950][ T7006] syzkaller0: entered promiscuous mode [ 115.773440][ T7006] syzkaller0: entered allmulticast mode [ 115.792106][ T7009] syzkaller0: entered promiscuous mode [ 115.801663][ T7009] syzkaller0: entered allmulticast mode [ 115.845710][ T7000] tipc: Resetting bearer [ 116.030220][ T7033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.065161][ T6994] tipc: Resetting bearer [ 116.119971][ T7038] netlink: 'syz.2.236': attribute type 1 has an invalid length. [ 116.128757][ T6994] tipc: Disabling bearer [ 116.144568][ T7038] __nla_validate_parse: 12 callbacks suppressed [ 116.144587][ T7038] netlink: 224 bytes leftover after parsing attributes in process `syz.2.236'. [ 116.192144][ T7028] vlan2: entered promiscuous mode [ 116.220642][ T7028] bridge0: entered promiscuous mode [ 116.259004][ T7050] netlink: 344 bytes leftover after parsing attributes in process `syz.1.237'. [ 116.453967][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 116.503087][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 116.541880][ T7058] openvswitch: netlink: Missing key (keys=40, expected=100) [ 116.631400][ T7058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.240'. [ 117.253648][ T7089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.247'. [ 117.400966][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 117.487363][ T7095] batadv0: entered promiscuous mode [ 117.517856][ T7095] macsec1: entered promiscuous mode [ 117.543489][ T7095] batadv0: left promiscuous mode [ 118.089105][ T7133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.254'. [ 118.157417][ T7131] tipc: Enabled bearer , priority 0 [ 118.165853][ T7102] netlink: 'syz.2.251': attribute type 2 has an invalid length. [ 118.201545][ T7133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.254'. [ 118.234055][ T7133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.254'. [ 118.279703][ T7136] netlink: 'syz.3.254': attribute type 12 has an invalid length. [ 118.331155][ T7102] : entered promiscuous mode [ 118.344467][ T5186] Bluetooth: hci4: command 0x0405 tx timeout [ 118.377853][ T7126] syzkaller0: entered promiscuous mode [ 118.383551][ T7126] syzkaller0: entered allmulticast mode [ 118.522191][ T7126] tipc: Resetting bearer [ 118.559279][ T7125] tipc: Resetting bearer [ 118.705287][ T7125] tipc: Disabling bearer [ 119.265565][ T7191] bridge_slave_0: left allmulticast mode [ 119.282023][ T7191] bridge_slave_0: left promiscuous mode [ 119.312605][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.390210][ T7191] bridge_slave_1: left allmulticast mode [ 119.441595][ T7191] bridge_slave_1: left promiscuous mode [ 119.490900][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.762564][ T7191] bond0: (slave bond_slave_0): Releasing backup interface [ 119.839316][ T7191] bond0: (slave bond_slave_1): Releasing backup interface [ 119.959584][ T7191] team0: Port device team_slave_0 removed [ 119.991237][ T7191] team0: Port device team_slave_1 removed [ 120.012848][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.033920][ T7191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.062179][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.100205][ T7191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.129864][ T7191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.424124][ T5186] Bluetooth: hci4: command 0x0405 tx timeout [ 120.994636][ T7253] 0ªX¹¦À: renamed from caif0 [ 121.023607][ T7253] 0ªX¹¦À: entered allmulticast mode [ 121.050507][ T7253] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 121.067137][ T7218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.110720][ T7257] netlink: 'syz.1.275': attribute type 74 has an invalid length. [ 121.349916][ T7234] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.359649][ T7234] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 121.455933][ T7234] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.492819][ T7234] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 121.633761][ T7234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.652525][ T7234] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 121.680716][ T7234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.686850][ T7234] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 121.785356][ T7234] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 121.794833][ T7234] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 121.939058][ T7286] tipc: Can't bind to reserved service type 2 [ 122.873010][ T7327] __nla_validate_parse: 3 callbacks suppressed [ 122.873126][ T7327] netlink: 64 bytes leftover after parsing attributes in process `syz.4.284'. [ 123.061030][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 123.583581][ T7352] team0: No ports can be present during mode change [ 123.728418][ T7361] netlink: 96 bytes leftover after parsing attributes in process `syz.1.290'. [ 124.217782][ T7377] netlink: 'syz.2.296': attribute type 4 has an invalid length. [ 124.320175][ T7382] netlink: 'syz.4.298': attribute type 1 has an invalid length. [ 124.454153][ T7392] netlink: 'syz.4.301': attribute type 9 has an invalid length. [ 124.460153][ T7395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.481646][ T7392] netlink: 'syz.4.301': attribute type 7 has an invalid length. [ 124.490683][ T7392] netlink: 'syz.4.301': attribute type 8 has an invalid length. [ 124.610881][ T7403] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 124.852271][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.859843][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.940027][ T7406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.953088][ T7406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.063189][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.077612][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.088010][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.104011][ T3556] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.160864][ T7413] netlink: 224 bytes leftover after parsing attributes in process `syz.4.306'. [ 125.309938][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 125.505821][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'. [ 126.142693][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 133.146936][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.588060][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.027595][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.344653][ T31] INFO: task syz-executor:5864 blocked for more than 143 seconds. [ 280.352503][ T31] Not tainted syzkaller #0 [ 280.357656][ T31] Blocked by coredump. [ 280.362262][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.371104][ T31] task:syz-executor state:D stack:21416 pid:5864 tgid:5864 ppid:1 task_flags:0x40054c flags:0x00004006 [ 280.383201][ T31] Call Trace: [ 280.386610][ T31] [ 280.389563][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 280.394141][ T31] ? __lock_acquire+0xab9/0xd20 [ 280.399152][ T31] ? __lock_acquire+0xab9/0xd20 [ 280.404131][ T31] ? __pfx___schedule+0x10/0x10 [ 280.409438][ T31] ? schedule+0x91/0x360 [ 280.413756][ T31] schedule+0x165/0x360 [ 280.419706][ T31] schedule_preempt_disabled+0x13/0x30 [ 280.425654][ T31] __mutex_lock+0x7e6/0x1350 [ 280.444388][ T31] ? __mutex_lock+0x5bb/0x1350 [ 280.449217][ T31] ? rfkill_unregister+0xc8/0x220 [ 280.459806][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 280.474137][ T31] ? __pfx_device_del+0x10/0x10 [ 280.479037][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 280.499566][ T31] rfkill_unregister+0xc8/0x220 [ 280.511417][ T31] hci_unregister_dev+0x374/0x510 [ 280.522036][ T31] vhci_release+0x152/0x1a0 [ 280.526953][ T31] ? __pfx_vhci_release+0x10/0x10 [ 280.532037][ T31] __fput+0x44c/0xa70 [ 280.536314][ T31] task_work_run+0x1d1/0x260 [ 280.541041][ T31] ? __pfx_task_work_run+0x10/0x10 [ 280.546347][ T31] ? kmem_cache_free+0x18f/0x400 [ 280.551307][ T31] do_exit+0x6b5/0x2300 [ 280.555546][ T31] ? do_raw_spin_lock+0x121/0x290 [ 280.560581][ T31] ? __pfx_do_exit+0x10/0x10 [ 280.565283][ T31] do_group_exit+0x21c/0x2d0 [ 280.569892][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.575148][ T31] get_signal+0x1286/0x1340 [ 280.579671][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 280.585373][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 280.590682][ T31] ? fput_close_sync+0x119/0x200 [ 280.595694][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 280.601891][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 280.607476][ T31] exit_to_user_mode_loop+0x75/0x110 [ 280.612810][ T31] do_syscall_64+0x2bd/0x3b0 [ 280.617502][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.622736][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.628936][ T31] ? clear_bhb_loop+0x60/0xb0 [ 280.633635][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.639610][ T31] RIP: 0033:0x7f3b4a984e57 [ 280.644167][ T31] RSP: 002b:00007fffd54b98c0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 280.652610][ T31] RAX: fffffffffffffe00 RBX: 00000000000000c8 RCX: 00007f3b4a984e57 [ 280.660627][ T31] RDX: 0000000040000000 RSI: 00007fffd54b992c RDI: 00000000ffffffff [ 280.669024][ T31] RBP: 00007fffd54b992c R08: 0000000000000000 R09: 0000000000000000 [ 280.677107][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000003a [ 280.685135][ T31] R13: 0000555571a54590 R14: 000000000001d8bf R15: 00007fffd54b9980 [ 280.693133][ T31] [ 280.696258][ T31] INFO: task kworker/0:5:5959 blocked for more than 143 seconds. [ 280.704073][ T31] Not tainted syzkaller #0 [ 280.709259][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.717979][ T31] task:kworker/0:5 state:D stack:22104 pid:5959 tgid:5959 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 280.730203][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 280.736989][ T31] Call Trace: [ 280.740459][ T31] [ 280.743414][ T31] __schedule+0x1798/0x4cc0 [ 280.748104][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 280.753512][ T31] ? __pfx___schedule+0x10/0x10 [ 280.758519][ T31] ? schedule+0x91/0x360 [ 280.762779][ T31] schedule+0x165/0x360 [ 280.766985][ T31] schedule_preempt_disabled+0x13/0x30 [ 280.772462][ T31] __mutex_lock+0x7e6/0x1350 [ 280.777140][ T31] ? __mutex_lock+0x5bb/0x1350 [ 280.781930][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 280.788410][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 280.793480][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 280.799266][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 280.805055][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 280.811174][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 280.816988][ T31] process_scheduled_works+0xae1/0x17b0 [ 280.822640][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.828760][ T31] worker_thread+0x8a0/0xda0 [ 280.833414][ T31] kthread+0x70e/0x8a0 [ 280.837576][ T31] ? __pfx_worker_thread+0x10/0x10 [ 280.842707][ T31] ? __pfx_kthread+0x10/0x10 [ 280.847360][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.852569][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.857824][ T31] ? __pfx_kthread+0x10/0x10 [ 280.862426][ T31] ret_from_fork+0x3fc/0x770 [ 280.867071][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 280.872199][ T31] ? __switch_to_asm+0x39/0x70 [ 280.877010][ T31] ? __switch_to_asm+0x33/0x70 [ 280.881781][ T31] ? __pfx_kthread+0x10/0x10 [ 280.886411][ T31] ret_from_fork_asm+0x1a/0x30 [ 280.891174][ T31] [ 280.894252][ T31] INFO: task syz.0.270:7223 blocked for more than 143 seconds. [ 280.901833][ T31] Not tainted syzkaller #0 [ 280.906804][ T31] Blocked by coredump. [ 280.911387][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.920071][ T31] task:syz.0.270 state:D stack:25896 pid:7223 tgid:7217 ppid:5864 task_flags:0x40054c flags:0x00004002 [ 280.932027][ T31] Call Trace: [ 280.935349][ T31] [ 280.938353][ T31] __schedule+0x1798/0x4cc0 [ 280.942850][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 280.948959][ T31] ? __lock_acquire+0xab9/0xd20 [ 280.953870][ T31] ? __pfx___schedule+0x10/0x10 [ 280.958755][ T31] ? schedule+0x91/0x360 [ 280.963001][ T31] schedule+0x165/0x360 [ 280.967219][ T31] schedule_preempt_disabled+0x13/0x30 [ 280.972784][ T31] __mutex_lock+0x7e6/0x1350 [ 280.977580][ T31] ? __mutex_lock+0x5bb/0x1350 [ 280.982397][ T31] ? rfkill_unregister+0xc8/0x220 [ 280.987590][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 280.992650][ T31] ? __pfx_device_del+0x10/0x10 [ 280.997614][ T31] rfkill_unregister+0xc8/0x220 [ 281.002488][ T31] nfc_unregister_device+0x96/0x2a0 [ 281.007750][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 281.013484][ T31] virtual_ncidev_close+0x56/0x90 [ 281.018556][ T31] __fput+0x44c/0xa70 [ 281.022580][ T31] task_work_run+0x1d1/0x260 [ 281.027295][ T31] ? __pfx_task_work_run+0x10/0x10 [ 281.032441][ T31] ? kmem_cache_free+0x18f/0x400 [ 281.037438][ T31] do_exit+0x6b5/0x2300 [ 281.041653][ T31] ? do_raw_spin_lock+0x121/0x290 [ 281.046737][ T31] ? __pfx_do_exit+0x10/0x10 [ 281.051344][ T31] do_group_exit+0x21c/0x2d0 [ 281.056036][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.061258][ T31] get_signal+0x1286/0x1340 [ 281.065858][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 281.071446][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 281.077731][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 281.083215][ T31] exit_to_user_mode_loop+0x75/0x110 [ 281.088555][ T31] do_syscall_64+0x2bd/0x3b0 [ 281.093169][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.098473][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.104591][ T31] ? clear_bhb_loop+0x60/0xb0 [ 281.109287][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.115255][ T31] RIP: 0033:0x7f3b4a98ebe9 [ 281.119725][ T31] RSP: 002b:00007f3b48bcd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.128715][ T31] RAX: fffffffffffffe00 RBX: 00007f3b4abc6098 RCX: 00007f3b4a98ebe9 [ 281.136756][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b4abc6098 [ 281.144799][ T31] RBP: 00007f3b4abc6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.152801][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.160840][ T31] R13: 00007f3b4abc6128 R14: 00007fffd54b9480 R15: 00007fffd54b9568 [ 281.169106][ T31] [ 281.172186][ T31] INFO: task syz.3.271:7234 blocked for more than 144 seconds. [ 281.187366][ T31] Not tainted syzkaller #0 [ 281.192343][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.201530][ T31] task:syz.3.271 state:D stack:25896 pid:7234 tgid:7224 ppid:5867 task_flags:0x400140 flags:0x00004006 [ 281.213527][ T31] Call Trace: [ 281.217195][ T31] [ 281.220189][ T31] __schedule+0x1798/0x4cc0 [ 281.224868][ T31] ? __lock_acquire+0xab9/0xd20 [ 281.229734][ T31] ? __lock_acquire+0xab9/0xd20 [ 281.234636][ T31] ? __pfx___schedule+0x10/0x10 [ 281.239512][ T31] ? schedule+0x91/0x360 [ 281.243759][ T31] schedule+0x165/0x360 [ 281.247964][ T31] schedule_preempt_disabled+0x13/0x30 [ 281.253444][ T31] __mutex_lock+0x7e6/0x1350 [ 281.258080][ T31] ? __mutex_lock+0x5bb/0x1350 [ 281.263168][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 281.268628][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 281.273719][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.279400][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 281.285571][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.291932][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 281.297741][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 281.302886][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 281.308948][ T31] rfkill_set_block+0x1d2/0x440 [ 281.313903][ T31] rfkill_fop_write+0x44b/0x570 [ 281.318793][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 281.324225][ T31] ? security_kernfs_init_security+0x240/0x290 [ 281.330401][ T31] ? rw_verify_area+0x255/0x4d0 [ 281.335295][ T31] ? __lock_acquire+0xab9/0xd20 [ 281.340162][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 281.345629][ T31] vfs_write+0x27b/0xb30 [ 281.349902][ T31] ? __pfx_vfs_write+0x10/0x10 [ 281.354713][ T31] ? __fget_files+0x2a/0x420 [ 281.359357][ T31] ? __fget_files+0x2a/0x420 [ 281.364036][ T31] ? __fget_files+0x3a0/0x420 [ 281.368748][ T31] ? __fget_files+0x2a/0x420 [ 281.373362][ T31] ksys_write+0x145/0x250 [ 281.377754][ T31] ? __pfx_ksys_write+0x10/0x10 [ 281.382607][ T31] ? rcu_is_watching+0x15/0xb0 [ 281.387428][ T31] ? do_syscall_64+0xbe/0x3b0 [ 281.392125][ T31] do_syscall_64+0xfa/0x3b0 [ 281.396658][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.401877][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.408058][ T31] ? clear_bhb_loop+0x60/0xb0 [ 281.412767][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.418831][ T31] RIP: 0033:0x7f86b358ebe9 [ 281.423399][ T31] RSP: 002b:00007f86b4421038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.431933][ T31] RAX: ffffffffffffffda RBX: 00007f86b37c6090 RCX: 00007f86b358ebe9 [ 281.439959][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 281.447990][ T31] RBP: 00007f86b3611e19 R08: 0000000000000000 R09: 0000000000000000 [ 281.456017][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.464028][ T31] R13: 00007f86b37c6128 R14: 00007f86b37c6090 R15: 00007fff0a974428 [ 281.472038][ T31] [ 281.475124][ T31] INFO: task syz.2.296:7377 blocked for more than 144 seconds. [ 281.482683][ T31] Not tainted syzkaller #0 [ 281.487792][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.496687][ T31] task:syz.2.296 state:D stack:21688 pid:7377 tgid:7376 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 281.508707][ T31] Call Trace: [ 281.512027][ T31] [ 281.515014][ T31] __schedule+0x1798/0x4cc0 [ 281.519554][ T31] ? __lock_acquire+0xab9/0xd20 [ 281.524493][ T31] ? __lock_acquire+0xab9/0xd20 [ 281.529605][ T31] ? __pfx___schedule+0x10/0x10 [ 281.534553][ T31] ? schedule+0x91/0x360 [ 281.538993][ T31] schedule+0x165/0x360 [ 281.543423][ T31] schedule_preempt_disabled+0x13/0x30 [ 281.549036][ T31] __mutex_lock+0x7e6/0x1350 [ 281.553659][ T31] ? __mutex_lock+0x5bb/0x1350 [ 281.558497][ T31] ? rfkill_fop_open+0x12d/0x820 [ 281.563443][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 281.568520][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 281.573853][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 281.579334][ T31] rfkill_fop_open+0x12d/0x820 [ 281.584251][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 281.589588][ T31] misc_open+0x2bc/0x330 [ 281.593879][ T31] chrdev_open+0x4c9/0x5e0 [ 281.598331][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 281.603315][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 281.609838][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 281.614854][ T31] do_dentry_open+0x950/0x13f0 [ 281.619732][ T31] vfs_open+0x3b/0x340 [ 281.623899][ T31] ? path_openat+0x2ecd/0x3830 [ 281.628683][ T31] path_openat+0x2ee5/0x3830 [ 281.633299][ T31] ? arch_stack_walk+0xfc/0x150 [ 281.638239][ T31] ? stack_depot_save_flags+0x40/0x860 [ 281.643735][ T31] ? __pfx_path_openat+0x10/0x10 [ 281.648786][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.654913][ T31] ? look_up_lock_class+0x74/0x170 [ 281.660025][ T31] do_filp_open+0x1fa/0x410 [ 281.664567][ T31] ? __lock_acquire+0xab9/0xd20 [ 281.669441][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 281.674550][ T31] ? _raw_spin_unlock+0x28/0x50 [ 281.679415][ T31] ? alloc_fd+0x64c/0x6c0 [ 281.683756][ T31] do_sys_openat2+0x121/0x1c0 [ 281.688512][ T31] ? __se_sys_futex+0x36f/0x400 [ 281.693380][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 281.698700][ T31] ? rcu_is_watching+0x15/0xb0 [ 281.703492][ T31] __x64_sys_openat+0x138/0x170 [ 281.708581][ T31] do_syscall_64+0xfa/0x3b0 [ 281.713109][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.718555][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.724692][ T31] ? clear_bhb_loop+0x60/0xb0 [ 281.729408][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.735364][ T31] RIP: 0033:0x7f2bb518ebe9 [ 281.739790][ T31] RSP: 002b:00007f2bb6078038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 281.748270][ T31] RAX: ffffffffffffffda RBX: 00007f2bb53c5fa0 RCX: 00007f2bb518ebe9 [ 281.756304][ T31] RDX: 0000000000004000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 281.764495][ T31] RBP: 00007f2bb5211e19 R08: 0000000000000000 R09: 0000000000000000 [ 281.772487][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.780498][ T31] R13: 00007f2bb53c6038 R14: 00007f2bb53c5fa0 R15: 00007ffe0f09f608 [ 281.788550][ T31] [ 281.791585][ T31] INFO: task syz.1.313:7432 blocked for more than 144 seconds. [ 281.799279][ T31] Not tainted syzkaller #0 [ 281.804283][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.812949][ T31] task:syz.1.313 state:D stack:27752 pid:7432 tgid:7431 ppid:5865 task_flags:0x400140 flags:0x00004004 [ 281.824934][ T31] Call Trace: [ 281.828234][ T31] [ 281.831191][ T31] __schedule+0x1798/0x4cc0 [ 281.835796][ T31] ? __lock_acquire+0xab9/0xd20 [ 281.840678][ T31] ? __lock_acquire+0xab9/0xd20 [ 281.845585][ T31] ? __pfx___schedule+0x10/0x10 [ 281.850474][ T31] ? schedule+0x91/0x360 [ 281.854748][ T31] schedule+0x165/0x360 [ 281.858931][ T31] schedule_preempt_disabled+0x13/0x30 [ 281.864509][ T31] __mutex_lock+0x7e6/0x1350 [ 281.869132][ T31] ? __mutex_lock+0x5bb/0x1350 [ 281.874054][ T31] ? misc_open+0x51/0x330 [ 281.878397][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 281.883436][ T31] misc_open+0x51/0x330 [ 281.887665][ T31] chrdev_open+0x4c9/0x5e0 [ 281.892093][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 281.897068][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 281.903407][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 281.908383][ T31] do_dentry_open+0x950/0x13f0 [ 281.913157][ T31] vfs_open+0x3b/0x340 [ 281.917440][ T31] ? path_openat+0x2ecd/0x3830 [ 281.922252][ T31] path_openat+0x2ee5/0x3830 [ 281.926913][ T31] ? arch_stack_walk+0xfc/0x150 [ 281.931788][ T31] ? stack_depot_save_flags+0x40/0x860 [ 281.937306][ T31] ? __pfx_path_openat+0x10/0x10 [ 281.942253][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.948416][ T31] do_filp_open+0x1fa/0x410 [ 281.952929][ T31] ? __lock_acquire+0xab9/0xd20 [ 281.957835][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 281.962878][ T31] ? _raw_spin_unlock+0x28/0x50 [ 281.967787][ T31] ? alloc_fd+0x64c/0x6c0 [ 281.972194][ T31] do_sys_openat2+0x121/0x1c0 [ 281.976943][ T31] ? __se_sys_futex+0x36f/0x400 [ 281.981835][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 281.987119][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 281.992353][ T31] __x64_sys_openat+0x138/0x170 [ 281.997274][ T31] do_syscall_64+0xfa/0x3b0 [ 282.001779][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.007097][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.013256][ T31] ? clear_bhb_loop+0x60/0xb0 [ 282.017969][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.023915][ T31] RIP: 0033:0x7fef8d58ebe9 [ 282.028455][ T31] RSP: 002b:00007fef8e47c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 282.036984][ T31] RAX: ffffffffffffffda RBX: 00007fef8d7c5fa0 RCX: 00007fef8d58ebe9 [ 282.045009][ T31] RDX: 0000000000040a01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 282.053075][ T31] RBP: 00007fef8d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 282.061102][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.069117][ T31] R13: 00007fef8d7c6038 R14: 00007fef8d7c5fa0 R15: 00007fffa0be0a18 [ 282.077186][ T31] [ 282.080230][ T31] INFO: task syz.4.317:7445 blocked for more than 145 seconds. [ 282.088129][ T31] Not tainted syzkaller #0 [ 282.093079][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.101901][ T31] task:syz.4.317 state:D stack:25896 pid:7445 tgid:7444 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 282.113942][ T31] Call Trace: [ 282.117229][ T31] [ 282.120174][ T31] __schedule+0x1798/0x4cc0 [ 282.124735][ T31] ? kasan_save_free_info+0x46/0x50 [ 282.130117][ T31] ? __lock_acquire+0xab9/0xd20 [ 282.135352][ T31] ? __lock_acquire+0xab9/0xd20 [ 282.140239][ T31] ? __pfx___schedule+0x10/0x10 [ 282.145151][ T31] ? schedule+0x91/0x360 [ 282.149576][ T31] schedule+0x165/0x360 [ 282.153719][ T31] schedule_preempt_disabled+0x13/0x30 [ 282.159231][ T31] __mutex_lock+0x7e6/0x1350 [ 282.164036][ T31] ? __mutex_lock+0x5bb/0x1350 [ 282.168804][ T31] ? misc_open+0x51/0x330 [ 282.173131][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 282.178218][ T31] misc_open+0x51/0x330 [ 282.182388][ T31] chrdev_open+0x4c9/0x5e0 [ 282.187028][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 282.192006][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 282.198428][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 282.203380][ T31] do_dentry_open+0x950/0x13f0 [ 282.208300][ T31] vfs_open+0x3b/0x340 [ 282.212535][ T31] ? path_openat+0x2ecd/0x3830 [ 282.217456][ T31] path_openat+0x2ee5/0x3830 [ 282.222082][ T31] ? arch_stack_walk+0xfc/0x150 [ 282.227040][ T31] ? stack_depot_save_flags+0x40/0x860 [ 282.232543][ T31] ? __pfx_path_openat+0x10/0x10 [ 282.237578][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.243690][ T31] do_filp_open+0x1fa/0x410 [ 282.248261][ T31] ? __lock_acquire+0xab9/0xd20 [ 282.253128][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 282.258357][ T31] ? _raw_spin_unlock+0x28/0x50 [ 282.263243][ T31] ? alloc_fd+0x64c/0x6c0 [ 282.267655][ T31] do_sys_openat2+0x121/0x1c0 [ 282.272342][ T31] ? __se_sys_futex+0x36f/0x400 [ 282.277288][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.282544][ T31] ? rcu_is_watching+0x15/0xb0 [ 282.287406][ T31] __x64_sys_openat+0x138/0x170 [ 282.292394][ T31] do_syscall_64+0xfa/0x3b0 [ 282.297011][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.302273][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.308473][ T31] ? clear_bhb_loop+0x60/0xb0 [ 282.313166][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.319916][ T31] RIP: 0033:0x7f43ef38ebe9 [ 282.324489][ T31] RSP: 002b:00007f43ed5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 282.332990][ T31] RAX: ffffffffffffffda RBX: 00007f43ef5c5fa0 RCX: 00007f43ef38ebe9 [ 282.341011][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 282.349309][ T31] RBP: 00007f43ef411e19 R08: 0000000000000000 R09: 0000000000000000 [ 282.357339][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.365476][ T31] R13: 00007f43ef5c6038 R14: 00007f43ef5c5fa0 R15: 00007ffe4fe45268 [ 282.373506][ T31] [ 282.376655][ T31] INFO: task syz.4.317:7447 blocked for more than 145 seconds. [ 282.384241][ T31] Not tainted syzkaller #0 [ 282.389165][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.397897][ T31] task:syz.4.317 state:D stack:28328 pid:7447 tgid:7444 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 282.409933][ T31] Call Trace: [ 282.413208][ T31] [ 282.416190][ T31] __schedule+0x1798/0x4cc0 [ 282.420710][ T31] ? kasan_save_free_info+0x46/0x50 [ 282.426047][ T31] ? __lock_acquire+0xab9/0xd20 [ 282.430928][ T31] ? __lock_acquire+0xab9/0xd20 [ 282.435833][ T31] ? __pfx___schedule+0x10/0x10 [ 282.440695][ T31] ? schedule+0x91/0x360 [ 282.444970][ T31] schedule+0x165/0x360 [ 282.449135][ T31] schedule_preempt_disabled+0x13/0x30 [ 282.454662][ T31] __mutex_lock+0x7e6/0x1350 [ 282.459275][ T31] ? __mutex_lock+0x5bb/0x1350 [ 282.464084][ T31] ? misc_open+0x51/0x330 [ 282.468429][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 282.473452][ T31] misc_open+0x51/0x330 [ 282.477658][ T31] chrdev_open+0x4c9/0x5e0 [ 282.482084][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 282.487153][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 282.493528][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 282.498603][ T31] do_dentry_open+0x950/0x13f0 [ 282.503409][ T31] vfs_open+0x3b/0x340 [ 282.507571][ T31] ? path_openat+0x2ecd/0x3830 [ 282.512372][ T31] path_openat+0x2ee5/0x3830 [ 282.517097][ T31] ? arch_stack_walk+0xfc/0x150 [ 282.521991][ T31] ? stack_depot_save_flags+0x40/0x860 [ 282.527576][ T31] ? __pfx_path_openat+0x10/0x10 [ 282.532531][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.538726][ T31] do_filp_open+0x1fa/0x410 [ 282.543250][ T31] ? __lock_acquire+0xab9/0xd20 [ 282.548197][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 282.553237][ T31] ? _raw_spin_unlock+0x28/0x50 [ 282.558121][ T31] ? alloc_fd+0x64c/0x6c0 [ 282.562468][ T31] do_sys_openat2+0x121/0x1c0 [ 282.567170][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.572375][ T31] ? exc_page_fault+0x76/0xf0 [ 282.577122][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 282.582430][ T31] __x64_sys_openat+0x138/0x170 [ 282.587358][ T31] do_syscall_64+0xfa/0x3b0 [ 282.591868][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.597118][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.603186][ T31] ? clear_bhb_loop+0x60/0xb0 [ 282.607922][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.613861][ T31] RIP: 0033:0x7f43ef38ebe9 [ 282.618293][ T31] RSP: 002b:00007f43ed5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 282.626797][ T31] RAX: ffffffffffffffda RBX: 00007f43ef5c6180 RCX: 00007f43ef38ebe9 [ 282.635359][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 282.643442][ T31] RBP: 00007f43ef411e19 R08: 0000000000000000 R09: 0000000000000000 [ 282.651479][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.660367][ T31] R13: 00007f43ef5c6218 R14: 00007f43ef5c6180 R15: 00007ffe4fe45268 [ 282.668479][ T31] [ 282.671516][ T31] INFO: task syz-executor:7480 blocked for more than 145 seconds. [ 282.679440][ T31] Not tainted syzkaller #0 [ 282.684404][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.693100][ T31] task:syz-executor state:D stack:27240 pid:7480 tgid:7480 ppid:1 task_flags:0x400040 flags:0x00004000 [ 282.705169][ T31] Call Trace: [ 282.708489][ T31] [ 282.711414][ T31] __schedule+0x1798/0x4cc0 [ 282.716065][ T31] ? kasan_save_free_info+0x46/0x50 [ 282.721273][ T31] ? __lock_acquire+0xab9/0xd20 [ 282.726162][ T31] ? __lock_acquire+0xab9/0xd20 [ 282.731023][ T31] ? __pfx___schedule+0x10/0x10 [ 282.735937][ T31] ? schedule+0x91/0x360 [ 282.740190][ T31] schedule+0x165/0x360 [ 282.744640][ T31] schedule_preempt_disabled+0x13/0x30 [ 282.750142][ T31] __mutex_lock+0x7e6/0x1350 [ 282.755668][ T31] ? __mutex_lock+0x5bb/0x1350 [ 282.761265][ T31] ? misc_open+0x51/0x330 [ 282.765677][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 282.770738][ T31] misc_open+0x51/0x330 [ 282.774947][ T31] chrdev_open+0x4c9/0x5e0 [ 282.779371][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 282.784356][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 282.790700][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 282.795667][ T31] do_dentry_open+0x950/0x13f0 [ 282.800438][ T31] vfs_open+0x3b/0x340 [ 282.804590][ T31] ? path_openat+0x2ecd/0x3830 [ 282.809356][ T31] path_openat+0x2ee5/0x3830 [ 282.813998][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 282.819462][ T31] ? count_memcg_event_mm+0x21/0x260 [ 282.824859][ T31] ? __pfx_path_openat+0x10/0x10 [ 282.829830][ T31] ? __pfx___up_read+0x10/0x10 [ 282.834746][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 282.840081][ T31] do_filp_open+0x1fa/0x410 [ 282.844649][ T31] ? __lock_acquire+0xab9/0xd20 [ 282.849515][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 282.854605][ T31] ? _raw_spin_unlock+0x28/0x50 [ 282.859462][ T31] ? alloc_fd+0x64c/0x6c0 [ 282.863787][ T31] do_sys_openat2+0x121/0x1c0 [ 282.868513][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.873718][ T31] ? fd_install+0x97/0x540 [ 282.878197][ T31] ? fd_install+0x30d/0x540 [ 282.882754][ T31] __x64_sys_openat+0x138/0x170 [ 282.887642][ T31] do_syscall_64+0xfa/0x3b0 [ 282.892148][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.897415][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.903497][ T31] ? clear_bhb_loop+0x60/0xb0 [ 282.908279][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.914225][ T31] RIP: 0033:0x7fe42ef8d4d1 [ 282.918650][ T31] RSP: 002b:00007ffec73d2240 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 282.927108][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe42ef8d4d1 [ 282.935124][ T31] RDX: 0000000000000002 RSI: 00007fe42f012822 RDI: 00000000ffffff9c [ 282.943105][ T31] RBP: 00007fe42f012822 R08: 0000000000000000 R09: 00007fe42fcfd6c0 [ 282.951133][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 282.959157][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 282.967211][ T31] [ 282.970239][ T31] INFO: task syz-executor:7482 blocked for more than 145 seconds. [ 282.978083][ T31] Not tainted syzkaller #0 [ 282.983028][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.991789][ T31] task:syz-executor state:D stack:28040 pid:7482 tgid:7482 ppid:1 task_flags:0x400040 flags:0x00004000 [ 283.003776][ T31] Call Trace: [ 283.007139][ T31] [ 283.010122][ T31] __schedule+0x1798/0x4cc0 [ 283.014712][ T31] ? kasan_save_free_info+0x46/0x50 [ 283.019933][ T31] ? __lock_acquire+0xab9/0xd20 [ 283.024935][ T31] ? __lock_acquire+0xab9/0xd20 [ 283.029930][ T31] ? __pfx___schedule+0x10/0x10 [ 283.034881][ T31] ? schedule+0x91/0x360 [ 283.039145][ T31] schedule+0x165/0x360 [ 283.043323][ T31] schedule_preempt_disabled+0x13/0x30 [ 283.048855][ T31] __mutex_lock+0x7e6/0x1350 [ 283.053467][ T31] ? __mutex_lock+0x5bb/0x1350 [ 283.058516][ T31] ? misc_open+0x51/0x330 [ 283.062952][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 283.068123][ T31] misc_open+0x51/0x330 [ 283.072495][ T31] chrdev_open+0x4c9/0x5e0 [ 283.077017][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 283.081988][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 283.088377][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 283.093330][ T31] do_dentry_open+0x950/0x13f0 [ 283.098212][ T31] vfs_open+0x3b/0x340 [ 283.102295][ T31] ? path_openat+0x2ecd/0x3830 [ 283.107155][ T31] path_openat+0x2ee5/0x3830 [ 283.111785][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 283.117324][ T31] ? count_memcg_event_mm+0x21/0x260 [ 283.122631][ T31] ? __pfx_path_openat+0x10/0x10 [ 283.127811][ T31] ? __pfx___up_read+0x10/0x10 [ 283.132591][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 283.137947][ T31] do_filp_open+0x1fa/0x410 [ 283.142457][ T31] ? __lock_acquire+0xab9/0xd20 [ 283.147382][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 283.152429][ T31] ? _raw_spin_unlock+0x28/0x50 [ 283.157335][ T31] ? alloc_fd+0x64c/0x6c0 [ 283.161684][ T31] do_sys_openat2+0x121/0x1c0 [ 283.166404][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 283.171632][ T31] ? fd_install+0x97/0x540 [ 283.176109][ T31] ? fd_install+0x30d/0x540 [ 283.180654][ T31] __x64_sys_openat+0x138/0x170 [ 283.185531][ T31] do_syscall_64+0xfa/0x3b0 [ 283.190019][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.195265][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.201326][ T31] ? clear_bhb_loop+0x60/0xb0 [ 283.206151][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.212045][ T31] RIP: 0033:0x7f2431f8d4d1 [ 283.216487][ T31] RSP: 002b:00007ffe941bf770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 283.225268][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2431f8d4d1 [ 283.233246][ T31] RDX: 0000000000000002 RSI: 00007f2432012822 RDI: 00000000ffffff9c [ 283.241248][ T31] RBP: 00007f2432012822 R08: 0000000000000000 R09: 00007f2432cfd6c0 [ 283.249247][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 283.257316][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 283.265332][ T31] [ 283.268342][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 283.277482][ T31] [ 283.277482][ T31] Showing all locks held in the system: [ 283.285255][ T31] 1 lock held by khungtaskd/31: [ 283.290104][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 283.300050][ T31] 3 locks held by kworker/u8:6/2925: [ 283.305437][ T31] 5 locks held by kworker/u8:11/3556: [ 283.310809][ T31] 2 locks held by getty/5625: [ 283.315632][ T31] #0: ffff888032e200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 283.325457][ T31] #1: ffffc900036b62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 283.335652][ T31] 1 lock held by syz-executor/5864: [ 283.340859][ T31] #0: ffffffff8f8128a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 283.351023][ T31] 3 locks held by kworker/0:5/5959: [ 283.356275][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 283.367304][ T31] #1: ffffc9000b217bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 283.380850][ T31] #2: ffffffff8f8128a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 283.392304][ T31] 2 locks held by syz.0.270/7223: [ 283.397397][ T31] #0: ffff88805ab26100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 283.407448][ T31] #1: ffffffff8f8128a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 283.417740][ T31] 2 locks held by syz.3.271/7234: [ 283.422766][ T31] #0: ffffffff8f8128a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 283.433009][ T31] #1: ffff88805ab26100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 283.442751][ T31] 2 locks held by syz.2.296/7377: [ 283.447888][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.456450][ T31] #1: ffffffff8f8128a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 283.466569][ T31] 1 lock held by syz.1.313/7432: [ 283.471520][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.480045][ T31] 1 lock held by syz.4.317/7445: [ 283.485109][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.493546][ T31] 1 lock held by syz.4.317/7447: [ 283.498510][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.507017][ T31] 1 lock held by syz-executor/7480: [ 283.512200][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.520679][ T31] 1 lock held by syz-executor/7482: [ 283.525900][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.534445][ T31] 1 lock held by syz-executor/7484: [ 283.539641][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.548493][ T31] 1 lock held by syz-executor/7486: [ 283.553704][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.562182][ T31] 1 lock held by syz-executor/7488: [ 283.567556][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.576181][ T31] 1 lock held by syz-executor/7496: [ 283.581409][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.589976][ T31] 1 lock held by syz-executor/7498: [ 283.595223][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.603701][ T31] 1 lock held by syz-executor/7500: [ 283.608987][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.617867][ T31] 1 lock held by syz-executor/7502: [ 283.623076][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.631727][ T31] 1 lock held by syz-executor/7504: [ 283.636973][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.645501][ T31] 1 lock held by syz-executor/7511: [ 283.650697][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.659246][ T31] 1 lock held by syz-executor/7513: [ 283.664512][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.673003][ T31] 1 lock held by syz-executor/7515: [ 283.678265][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.686809][ T31] 1 lock held by syz-executor/7517: [ 283.692808][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.701322][ T31] 1 lock held by syz-executor/7519: [ 283.706566][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 283.715100][ T31] [ 283.717427][ T31] ============================================= [ 283.717427][ T31] [ 283.726001][ T31] NMI backtrace for cpu 0 [ 283.726038][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 283.726058][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.726069][ T31] Call Trace: [ 283.726079][ T31] [ 283.726091][ T31] dump_stack_lvl+0x189/0x250 [ 283.726122][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.726135][ T31] ? __pfx__printk+0x10/0x10 [ 283.726160][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 283.726186][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 283.726199][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.726218][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 283.726241][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 283.726258][ T31] watchdog+0xf93/0xfe0 [ 283.726281][ T31] ? watchdog+0x1de/0xfe0 [ 283.726305][ T31] kthread+0x70e/0x8a0 [ 283.726325][ T31] ? __pfx_watchdog+0x10/0x10 [ 283.726338][ T31] ? __pfx_kthread+0x10/0x10 [ 283.726351][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.726365][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.726373][ T31] ? __pfx_kthread+0x10/0x10 [ 283.726386][ T31] ret_from_fork+0x3fc/0x770 [ 283.726403][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 283.726417][ T31] ? __switch_to_asm+0x39/0x70 [ 283.726433][ T31] ? __switch_to_asm+0x33/0x70 [ 283.726445][ T31] ? __pfx_kthread+0x10/0x10 [ 283.726457][ T31] ret_from_fork_asm+0x1a/0x30 [ 283.726480][ T31] [ 283.726485][ T31] Sending NMI from CPU 0 to CPUs 1: [ 283.872155][ C1] NMI backtrace for cpu 1 [ 283.872171][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 283.872187][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.872197][ C1] Workqueue: events_unbound toggle_allocation_gate [ 283.872220][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x18/0x90 [ 283.872242][ C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 a0 a0 92 65 8b 0d 88 ed e0 10 <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 3c 16 00 00 [ 283.872254][ C1] RSP: 0018:ffffc90000127558 EFLAGS: 00000246 [ 283.872266][ C1] RAX: ffffffff8b79e383 RBX: dffffc0000000000 RCX: 0000000080000000 [ 283.872278][ C1] RDX: ffff88801ce98000 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.872287][ C1] RBP: ffffc9000012782c R08: ffff88801ce98000 R09: 0000000000000002 [ 283.872298][ C1] R10: 0000000000000010 R11: 0000000000000000 R12: 1ffff92000024f05 [ 283.872307][ C1] R13: 0000000000816000 R14: ffffc900001277e0 R15: ffffc90000127840 [ 283.872318][ C1] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 283.872330][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.872341][ C1] CR2: 00005623898d4000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 283.872354][ C1] Call Trace: [ 283.872361][ C1] [ 283.872367][ C1] insn_get_opcode+0xa23/0xf30 [ 283.872394][ C1] insn_get_modrm+0x64/0x750 [ 283.872410][ C1] ? __mutex_trylock_common+0x153/0x260 [ 283.872428][ C1] insn_get_displacement+0x155/0x9f0 [ 283.872447][ C1] insn_get_immediate+0x64/0x1280 [ 283.872461][ C1] ? trace_contention_end+0x39/0x120 [ 283.872480][ C1] ? __kmalloc_node_noprof+0xfb/0x4e0 [ 283.872497][ C1] insn_decode+0x30e/0x4f0 [ 283.872512][ C1] ? __kmalloc_node_noprof+0xec/0x4e0 [ 283.872530][ C1] __jump_label_patch+0xe5/0x450 [ 283.872551][ C1] ? __pfx___jump_label_patch+0x10/0x10 [ 283.872574][ C1] ? __kmalloc_node_noprof+0xec/0x4e0 [ 283.872590][ C1] ? __kmalloc_node_noprof+0xfb/0x4e0 [ 283.872606][ C1] ? __kmalloc_node_noprof+0xed/0x4e0 [ 283.872629][ C1] arch_jump_label_transform_queue+0x69/0x110 [ 283.872650][ C1] __jump_label_update+0x185/0x3a0 [ 283.872668][ C1] static_key_disable_cpuslocked+0xc5/0x1b0 [ 283.872689][ C1] static_key_disable+0x1a/0x20 [ 283.872706][ C1] toggle_allocation_gate+0x1a1/0x240 [ 283.872725][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 283.872743][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 283.872761][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 283.872775][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 283.872790][ C1] process_scheduled_works+0xae1/0x17b0 [ 283.872818][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.872841][ C1] worker_thread+0x8a0/0xda0 [ 283.872868][ C1] kthread+0x70e/0x8a0 [ 283.872886][ C1] ? __pfx_worker_thread+0x10/0x10 [ 283.872900][ C1] ? __pfx_kthread+0x10/0x10 [ 283.872917][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.872931][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.872944][ C1] ? __pfx_kthread+0x10/0x10 [ 283.872961][ C1] ret_from_fork+0x3fc/0x770 [ 283.872977][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 283.872995][ C1] ? __switch_to_asm+0x39/0x70 [ 283.873012][ C1] ? __switch_to_asm+0x33/0x70 [ 283.873033][ C1] ? __pfx_kthread+0x10/0x10 [ 283.873050][ C1] ret_from_fork_asm+0x1a/0x30 [ 283.873075][ C1] [ 283.873267][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 284.210696][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 284.219794][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.229837][ T31] Call Trace: [ 284.233623][ T31] [ 284.236542][ T31] dump_stack_lvl+0x99/0x250 [ 284.241124][ T31] ? __asan_memcpy+0x40/0x70 [ 284.247452][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.252659][ T31] ? __pfx__printk+0x10/0x10 [ 284.257265][ T31] vpanic+0x281/0x750 [ 284.261433][ T31] ? __pfx_vpanic+0x10/0x10 [ 284.266026][ T31] ? preempt_schedule+0xae/0xc0 [ 284.270958][ T31] ? preempt_schedule_common+0x83/0xd0 [ 284.276437][ T31] panic+0xb9/0xc0 [ 284.280274][ T31] ? __pfx_panic+0x10/0x10 [ 284.284682][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 284.290044][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 284.296209][ T31] watchdog+0xfd2/0xfe0 [ 284.300366][ T31] ? watchdog+0x1de/0xfe0 [ 284.304699][ T31] kthread+0x70e/0x8a0 [ 284.308764][ T31] ? __pfx_watchdog+0x10/0x10 [ 284.313426][ T31] ? __pfx_kthread+0x10/0x10 [ 284.318075][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 284.323261][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.328452][ T31] ? __pfx_kthread+0x10/0x10 [ 284.333033][ T31] ret_from_fork+0x3fc/0x770 [ 284.337614][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 284.342718][ T31] ? __switch_to_asm+0x39/0x70 [ 284.347487][ T31] ? __switch_to_asm+0x33/0x70 [ 284.352239][ T31] ? __pfx_kthread+0x10/0x10 [ 284.356829][ T31] ret_from_fork_asm+0x1a/0x30 [ 284.361594][ T31] [ 284.364883][ T31] Kernel Offset: disabled [ 284.369217][ T31] Rebooting in 86400 seconds..